last executing test programs: 1m43.902646502s ago: executing program 2 (id=104): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) listen(r0, 0x81) syz_open_dev$video4linux(&(0x7f0000002f40), 0x303, 0x2000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x80000000000005, 0x2, 0x7}, 0x0, 0x0) 1m41.740790748s ago: executing program 2 (id=108): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24040040) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x80000000, 0xd7c7}, &(0x7f0000000140)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="a243e6e0", 0x4}], 0x1, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0xfff, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x8}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) connect$unix(r1, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) sendfile(r2, r3, 0x0, 0x80000001) 1m31.317395485s ago: executing program 2 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000fc7f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000500000000000000000000000000000000000000000000dc6caf9d732779bb78a200fad91f8d7e7d4e6c4f7653bd6d811cc46b4b639e65a50a94fd569d14fb8bf4cfb94335fefdd960eeed4ac6324e3ba0176b12"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_emit_ethernet(0x52, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000008000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)='>', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) unshare(0x26020480) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 1m15.327283589s ago: executing program 32 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000fc7f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000500000000000000000000000000000000000000000000dc6caf9d732779bb78a200fad91f8d7e7d4e6c4f7653bd6d811cc46b4b639e65a50a94fd569d14fb8bf4cfb94335fefdd960eeed4ac6324e3ba0176b12"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_emit_ethernet(0x52, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000008000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)='>', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) unshare(0x26020480) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 25.238571562s ago: executing program 3 (id=286): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x80001) read$FUSE(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000ac91b2e9000000c800000000004b64ffec850000007d000020850000002a"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e060d0211000100000000000000030609085ffe7baaaaaaaaaa11bc5dac738c6762412e9dda93f9653e5d32503a7676ee76929ee9eda3beb7fea3dbd640604adcca7b9628176bb7a9fad8a28ba0a4a4c54cb47fa45c9cdab6941c06fd030abbdb8bf4b6e4b618712f6d7b5837d5834e68cf675b08bf667ab1cf26e6a2f8d0e91d8d05d78adf152c5d1550da06453e63ee"], 0x109) mkdir(0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) lseek(0xffffffffffffffff, 0xcbe, 0x0) 22.982848591s ago: executing program 3 (id=290): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x81) syz_open_dev$video4linux(&(0x7f0000002f40), 0x303, 0x2000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x80000000000005, 0x2, 0x7}, 0x0, 0x0) 21.461894178s ago: executing program 3 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 10.456691479s ago: executing program 0 (id=308): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7fff, 0x82) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100003ace440844100d805c57010203410902120001000000000904000000ef0101"], 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b090d, 0x0, '\x00', @value64}}) 9.794481288s ago: executing program 4 (id=309): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x20000005) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x182) 9.651535743s ago: executing program 3 (id=310): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00002c6000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) ioperm(0x0, 0x2, 0x7e) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x0, 0x0, 0x9}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001600010027bd700000dcdf250a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\v'], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14, r3, 0xa4dcf1b8799abf33, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 8.559037564s ago: executing program 4 (id=311): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0xa9ee, 0x1, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff0000000040100000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000000ffe7000300000000003a138fad000000000000d47fb14a5bde4914e63db2d04dc6ee3b7f1f47e7f5f90237c1deac62b239a3d06fdd0209c38dfc73c599986c9721c5c4ca4ddbbe83984a6a778b4e95bbe18fc2c84d9aa54b65c3e2d8"], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') mq_open(&(0x7f00000000c0)='oom_adj\x00', 0x40, 0x40, &(0x7f0000000100)={0x5, 0x0, 0xcb, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040), 0x140000c4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xf7, 0x0) 7.052527003s ago: executing program 4 (id=312): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 6.942392876s ago: executing program 3 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x8003, 0x1, 0x1, {0xa, 0x4e21, 0xfffffb57, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}}, 0x32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) bpf$OBJ_GET_MAP(0x23, 0x0, 0xffffffffffffffc9) 6.664674691s ago: executing program 0 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000240)=@x86={0x88, 0x1c, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x8, 0x84, 0x3, 0x0, 0x9, 0x10, 0x8, 0xac, 0xd, 0x6, '\x00', 0x4, 0xffff}) r6 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) syslog(0x2, &(0x7f0000001100)=""/4086, 0xff6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)}, 0x800) close(r6) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff000008009e0084"], 0x12c}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) 6.568967352s ago: executing program 4 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000308010800000000002000000a000000060002408808000005000300060000002c0004800800094000008001080003400000008008000840fffff31a0800074000000005040006"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40851}, 0x40000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x128, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x95a7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040840) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) bind$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r1], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2e, &(0x7f0000000340)=""/207, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) 5.92255907s ago: executing program 5 (id=318): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x24020400) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x1, 0x0, 0x2, 0xfe, 0x2, 0x1000}}, 0x1c}}, 0x20004000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0xe, 0x6, 0x7, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x8, 0x3, 0x6, 0x5, 0x10, '\x00', 0x28, 0x80000001}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100), 0xfdef) 5.857754534s ago: executing program 1 (id=319): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) inotify_init() connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000000400), 0x0, 0x0) 5.186472661s ago: executing program 4 (id=320): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x171c00) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) setgid(0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751478af9c62f", 0x40, 0xfffffffffffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x22020400) syz_open_dev$media(0x0, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x2000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f000100000008002c0007000000050010000500000076f38a304d2b80aca65edc98954e3c3b8e31a546a9d28ed3998e47ef705312c427e67ad8509905001b817a90f257d00d6fadf1b59137285dadbde23ddd9c1e1f0a387ee7719d6bfce59e85ae1ce6d2a32094e3713fd64f7a31a8d405003e474de52f3460824eedfca150e6ef51508ca84a"], 0x4c}, 0x1, 0x2}, 0x0) 4.699512696s ago: executing program 0 (id=321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x194e, &(0x7f0000000340)={0x0, 0xd3d5, 0x40, 0x101, 0xf1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r1) read$FUSE(r3, &(0x7f0000000f80)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r6, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r6, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 4.698867052s ago: executing program 1 (id=322): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x88}, {0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xc44f}, {0x1000000000000000, 0x0, 0x2}}, [@etimer_thresh={0x8, 0xc, 0xf}]}, 0xc0}}, 0x4004000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x1, 0x0, r1, 0x3}) 4.611579619s ago: executing program 5 (id=323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) 4.554721355s ago: executing program 1 (id=324): syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0xf7c06) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000540)="caef302112cae88a9b7d4d1fedd23306db6cc863b4656a1f4155f373d70b5a479e02fafd3bb5ff760a51538a98583d620961bdb1b95c4cb7fa206996617ff3263183cddf0bdbc83dd9d895c7219f80d3268a2511221197979238332f0ebd3605af85a1e7ce35f6b2928cb302e0ddc058e84b46f61330b1bd96a2eb5bfe1665b8674f550b70c9a559f019c821c3b94b29bee087e2707895874b38532ac5a8b315858d48318e9a20d769c11b453ea2e1cc7cdbfe06aab193", 0xb7) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb5d25a98010fc3c7e8e6eb254451832f7b5944de95d2b2608b9c4ba8fd75f6c9d98007df452e472f9b1e9d30b90779ee42fcd88e8b4175066b73858f4164bd1bb22ebd829dc8d90fd8516187e40417efc5c759ada70450be2efd08b40ed4e77ea41920c381dcf69fd6a", 0xdd}, {&(0x7f00000001c0)="53812f25b1e42e134f4e75a76aad6ce9d6e1727644d2179fdb23bdb4a90dedb3ddcde79706ee102d63e1589cb57c5d038803359f1e3a928b0a61189782f3b37c9680813d0ab217665df4b2d515c27f4e8df80a0dfee70129ebab9d4779a5ad4260a674b13a1b364ec09325f6a7e51e6a732d376442cba82eed6473ef3c162e12dff86e8ec888be76181667ca6b360f1ae6160f821780abbb17c558d25a1ae439710b5f", 0xa3}, {&(0x7f00000012c0)="f588bd9f2abdd7d8dd7a06f14e413244d7b6097391319685aa96fca605b7a47808c790b144f745abe9c6f5f72b22c861ae5ef2f02482a3421af130b69aeb04e3b0bded0e4bcefeaf3d0d5dfe4f78ba7b91763da04708d65737c06b32e47a3bfcd00a773bba8a7781ec9e96b6e92618ada819f5bed6cc264111c90ceb0bf508b91eddd6371d022ed45857d592bb8c86294c6db801b113ebbb2ce00674a13fb8ba550bd192035b6fded86a62a789b87281520131477a57445ac0b6b613456d2526c345da572dde3268cd88a873a8774733a2415f72c74cec4f9944938cbbbfecce9c9de6051e2667c97447294726d24f8390895e306bd1115ac0f4f09cb6da57472cb57239ab53638fe4b0335cfca04ff5231788036e53e093f9b571f27b5108e5f48019087d3422dfcca76c5c75bf59cdc4bedd5c8da21def2cf9c23176b9917ab6f37725e8d917f12b771d56bf54afbf72881d59ace3cf7ba48ff1d0f800628e8721eddb8477d55e40ebd7bb989bb394f1e65548f7dc764faac92b26b46e3d302be95b74ba3241c01b810f18cdfbc593f90b2c4e225e943b0c75273e9026fd5ae5a0eee82662f819cf7b2e7b1b0ced24a32ced4308472e867db38e205b33c65f3430cf18df8146558723980fb0faea832a4b4810f74c18c4f3d8e9c00b2a6bfaaf38c1e0afd2ff03b5f7384662d0816b1d2a96f1131c0e69f360f3c68ea077fdc6f030d3e2a5ed47a8808716935dc075b19fe2a99eee1e0bbdd115a64b38b77e080210f69236dc9f0911cbd9bde6881800db97288a94b5ce9be36dc42ecfda3d0736ca3dc9ac2564e459a9a970fe8e4cb653ae62e8e4afd094d7cbf67d2f44a4472f28471783bcacf6aa8140112a45394490957f0d1afc80f53c92dc723d14bc5b81989a403d875f16a0c056497cd0eb8f1ed97ff65e745cb24c38aa03d2de7650e71a771d200dd2486a7477b74ba28ed0224035f0fdba2fda3aae13f65709bd2f1b67a7ce80c91a251469774773e16f7829eea5e505c3571f930ea304b8b30860008365122620711cc96aa54d9153b767683973f49b8d2be4bc6bda861b8ad777eebc994c82fbe6d455077c7f0021cafff738ab2a26ffadfe5f94cd83b88483ba8cf71088d056ec946644bd1e926b59bf6775d7437e8675e49d9e8698a9b524b5e6e1b54ff25e2915c42b94967e526ac66566350edb06e658d5f56084c746ba01288c59b64b749381c833c797cc2568bcd033969bf817b662689dfd911a0f3aba5e9913b330fac8276199079ccc0ad97a39de253d5d2db359d9d13710dbf787de0644c1580d4fa0d4cfa3f7feb29151ff6d41c65bec9cb1613a3a6c7819d929b0befec5acc55cfb1bb1f546afa9ebfaa485645f8344d073e3503b1ee684a40d58d39da9d826c6dfd92eabdc9fca4bad148c4ea5c3a7622de74408facb4bec3958555060d5ecb55da7123887e774402e036532c5e17a097999627563b0466055face10172c717b86d1966e45c86e3caecf029dee5ca0954ac47d264fe7898c1b92814825aa42823b6c1de401571a15d24e4bd7f5d25d5b5189088bb9340e7b185af73849dbfb23af66e0eb88be443df859e4d22b48d5573164966e7e004e4b2d6bccc7c5cd779721c82d415ae41a320f15518623a768fe96ac9526c7d6760912104576a8d163c1120d038241359f27adda8c692ca608dde4789fc620264257d88028b5584a1799935ce37b4c97bd531eba463d0cdfa9465137ad8e6883c366477c3c20a49c0ba3e613a4a6859ab76f332b315394074d83782b11d8aeae7d419c952e036bc6d179aa975cbbbf456ddabc5b988b415e901b8f9755262edff1326f4a6b0c0046aa942e8e03d9bdd692b5d87fe974f51defc99b19e03a73fe7c779caf5268af157c12b1132f2273e13b41f484ccf43cc0376e66f8d8f86a1de1f18dc00be52477ce432fa791850bba55d87a1092a2636fdaa9210efbae6f4142c8f78451f45afb9ec1eb97a8538d116ba80a95e0a40a4453ed7bbe66b4da04993ee8f6f706d6150692145bd829bd4529e1d078767b8584d8491ae7036307097c5929d667e61f781a9b5eadab675eed4bab14a9b4be505062cdfbfbf9e00d66a7f80d7c535af13cda726eb3d1b52a348e9de0815a625d02c9bffdc0e5dbb760923e4e3a70f3aca157ed5748cf08d66140cf400ad6f55f586382dae5d1c934d91f978b7b5a5e3707ba8b36418d9cd5d8cbebd6f5aeca9044161e787fc921c0417b9f0dac1d924c1ce3cea2c9c5bdd93d492a8b29fdf82b5677a9faf51b2aedbecd749a4ad52cca28769515793060dfde5d10f5f2f2d0c79e8147dd921df436511aabd34821aaced4eb617bb87d4077dd7df197fa214050fb90e88669bef83b179d873a8cdd064e4dc78e5a99a2680bf41a6c8d34ceecd93371571c1ce6915ecbc1413cc7b1c05680a787b0fbd28c214b4674b30da8922ef4d04cfff51b2a67ad387916e1707a8bc8e88395293c53c52799b70e5e0377015a3b711f03d9988ca13ea1ad26f70334c0c4dbcc0043271156883f18daa39c99b47f3c65f70fef2f19b9195068bf2e4076f1f6dfbe601e60f22c3d51d1b9663ee14d0cc3e4cff620993e1267131553679be8fd321c264ebc77b0afcb3fffb19a99a05cfab3a1746c577fe6bfba2d69bffccf224156b1db705b998ad033d5168b5a44052c6b9f5e40d110cc5a60fef3167133b0d5e16cdacbc807f32bbcbd16c7be9e867b5bf3f13ef3541aa0ea63d155cd0e41fcb68b32da7758920b06811ac786bb2d8632910d85ede6a72c9819f264a777a1feada2f14cb3a43b52cf6a142f312ac996aba941cd64143ef90401038eccb6bce4a849a93bd355430ff7857abfdfb56441fcde17585e6581ae0565d98d07ec4fccf72d96deb5830f1924a17c870d0adfc2d0634a308db0b11580c1c315b44fdde9115e6ddd7bc4cdc20427107fa244edf2d89f6d8508ea3ab9a52caaa21853bbbf9499fa2baf361f93c2767255315ae5bd18f8ddaf4eb5ffe93b33ab53f287f7a5c9bc78d5ac26c0f095b08cc1237faa081320e5b48ff224052a910d1d45e67b47b90875370bbce7c2082b8f372d90ac2f9f032c1b4667159f494e0a33ab8d404f4018cc2f881ee0439ee38e28cd76083717e079f1a8ecf3dce0334c433d1bd1a7b79371ece3fedc991f69e091e6ee55331ca2d843675f7784737938e91b93a58114ec201e4b56ab391b4452ff1eb53d25a2a185c0d95b90d0edfdd4c7866d10fde465ea0c72caf3b67cf13e0dfe5f096cb2898b629ff7bfd7cae4f8fd2e94bada955c8595770263bfbe13efb8e6004fd3053bc61a16f5dbae327fb3d96825da172f2c64951ec0f899bc1c2e05de8a72be992d259b6950e3458bc5ab331a0c27e5003f0a34388dced98dd8cd5fd22eedeeb4b9ec918ec67729b0c4f003b31a5e69693181d7e1cc44f6bf90cfee6a52a96016af280e761d24fad75c932b1f2ac3c955eebfa3ccf533559ffbe8a4d30787f4f1b58424ae6fde9b7007a38bf8efb85fe9f350d58a32bc26b1f7bea68743483c4716d342fdaf583c98138052c596c4369ff66da04a5a8a33418a40f787a20e0074052b147366f6969cec9a1f0d60b2f3b1d47cfc186b66965207c45b82b4f4438ef2ebd7f219f78ccf6f56e585a05eb70ea4d53e06db498e41df132928f82b6684d62aeaa9b5fb68c1c2a1bc6ea3e4f71cae76996f5a04d234ad3e928ecc67d6f54684c2faa06efdfe96aa36f22d566aec2f0bdb1f796a07e7084cb83dfacff7484a7098e4e9a34f9b50ee81afb018fe4d219767565c887b50c0449347a00c3708d7b689c21c85e9226933e84126123dfa10dbd84495b1e7714ab2c48605e8dbc2339e0d59cbdf6e884b4edb2bcbac51b0698a314b6e5f734bfdc9c60ba2f7cb7fcfa8dfc7ae38e6b7be15048d038a0245bc4ddffee4726168284aade372c66439cb12b40860fad3824bbeeb84c8f24f194134b43353a995792a1567961698cad32bc524e80c4847ca9e4a0176545cacd6ffdeced5ceb317f5b0013cd4dad37a59e6e83d9e7e5fbd0779c92fbccd7a3f53a5f5764055ee16ad13c1c072acc98799a16e50f4ff2af1cf0974c5009fc94c3cdf52f68ded56ebef3ca4a895fb9a09f37791abd2de5035ebdf067b4cf8d46454cee0e89a47a962628a08d482fe831d3a133bad5c310abbfb0499acb821b83b636d6cd549bab54206506e1172b4e4ab6b20ac442927db3dac1c7eccd1adeae91bcc67d69b28a56c4655ab200919ba600a9dfb19f7c29810383c007ce06a0c60fc00a789ab0ca4f77786ac80563663a0b26ecbc3fd23df49bdfb536ad8a63b1c52f96fdea93bb59acf6bf091f30bbce3049e66e32411ee1a9c1db60d564e7681bd23014f56a532f93f8845d245bf91a3c2aa42dc7e2e0b4c2a7603c7d399107371c786339828b1a147487150d1cbceef447eba69dc37ec8a034733cf20249f7a5b159e87bb5b967cf99464f77af5e2583e27b74510847a265a45212949f3b2a8aec9b698861b6d9115ff082e74785e593b7eb88a9d96b06a250447777766f6a0ccb1adab0761033f683a96287820f8ae81e7306675b8b8b3d9b086613fc81ed0da77fbccbd932fc245f9d4bbc6a0a533348c654bc03f7740bc35d75ad121180782a10451757f3ee9d07ccf481deda11537b38a69a631f5c661aa6eeea668745db18d461059ae0a51946fc0d96fc182fd4ff106c9aa89a93de51d461b5da05d6d4d8fcfb25183853a1766e3c1b04e19f6516503c8fd8f8ce9b8548dd2d5cfc1d6600f8941c1f08f74747524e63999fd4a3f837b8e9393fc34ed0534f518c31be7317833edbc85cc65b518aecae6b9ee72a62139879304a3601b4495db4cd6a1b8581df58d14c49c6fd75b82f6031c6e0c8e96065416e6d8750bde2ec5fbeeb7b1fe31f4f9e08cad5d7de6c5b92340ed90423a01a2ab3253d348dd0097c7426d348ed4ddbd54cca3a8ef7d591b5cd9d111486c22cdaa0dc91aa14b7521b39b05f9011474009369a2dacbc5095a59553f521bbd4f6183803a3aed6a288869d5280482a488d4245b73fc16d0bce0a28b13df7d5ed16f3734ecb76d123c91875aaa9ecab6c7a2f150f5f093903e4f351701680a48a9c675ea93bd7618e2c42bbcaf16f6f8efaed5a287037065d4e309387073442bd38764a13a4d70", 0xe61}], 0x3) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@x25={0x805, {0x0, 0x1, 0x1, "4ca06b1470128cc3179ba01d7dae6ae882a30ca3503752dffc6e85849272a52c58893c22cc9a"}}}}, &(0x7f0000000080)={0x1, 0x3, [0x5da, 0x981, 0x2ff, 0xdc2]}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x981, 0x3}) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x4, @multicast, 'wg0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="17", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') pread64(r10, &(0x7f0000000000)=""/12, 0xa8, 0x6d5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) sendfile(r11, r5, 0x0, 0x7) 4.135279002s ago: executing program 5 (id=325): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000300)="aa1d484e24310300000c5b00f7c08bfcd111fbdf23ea32db0e0321d5bc27bd8063fc7a0689fff2a41cfbf0e90dcaf022b8491bd3fdca1743", 0x38}], 0x2) 3.613140838s ago: executing program 0 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x5, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='rcu_utilization\x00', r3, 0x0, 0xff}, 0x18) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@nullb, 0x0, &(0x7f0000000400)={0x9, 0xfff, 0x3, 0xba50, 0x3, 0x5, 0x2, 0xd, 0x2d4923de}) connect$inet6(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.581081335s ago: executing program 4 (id=327): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB="d047a719b6426c16ce2c02835ca2e365754a9f8966d8e42a1fb345c7e23dc39ac2bc73eb059b31f6b31eba09063b21f9ec0f708c9578da96c203525e2531bc38a3b86dd47ea1836d8a8a1291be6562e665f626b57d92daa934d1259b24a3f41ca9d5435b69627008a730f7e26c928bb84abf8a68e89828243a8079cf804d144f1d3a7a8def1de61506783ea2b33c2f931dfd969cdc38f1e854414e599bc6a22dc312", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r7, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0xfdef) 3.496877949s ago: executing program 5 (id=328): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000380)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x2000000000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 2.805372631s ago: executing program 1 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000802000000050000000000001200000000000000000000000d0000000000000000006f6100"], &(0x7f0000000340)=""/181, 0x44, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 2.464622696s ago: executing program 0 (id=330): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) gettid() ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x0, 0x0) 1.848767333s ago: executing program 5 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000240)=@x86={0x88, 0x1c, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x8, 0x84, 0x3, 0x0, 0x9, 0x10, 0x8, 0xac, 0xd, 0x6, '\x00', 0x4, 0xffff}) r6 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) syslog(0x2, &(0x7f0000001100)=""/4086, 0xff6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)}, 0x800) close(r6) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff000008009e0084"], 0x12c}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) 1.016019002s ago: executing program 1 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 270.338346ms ago: executing program 0 (id=333): pipe(0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x20) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) syz_open_dev$loop(0x0, 0x8000000000000000, 0x501840) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)}, 0x0, 0x80840, 0x1}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) timer_settime(r4, 0x7909497448d5a97d, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000140)={[], [{@smackfsdef={'smackfsdef', 0x3d, '}\'@.&+'}}, {@smackfsdef={'smackfsdef', 0x3d, '}\'@.&+'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x63, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x62) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) 260.589097ms ago: executing program 5 (id=334): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x88}, {0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xc44f}, {0x1000000000000000, 0x0, 0x2}}, [@etimer_thresh={0x8, 0xc, 0xf}]}, 0xc0}}, 0x4004000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x1, 0x0, r1, 0x3}) 581.869µs ago: executing program 1 (id=335): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) r2 = dup(r1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) 0s ago: executing program 3 (id=336): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x80000001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 81.045070][ T5806] cgroup: Unknown subsys name 'net' [ 81.174098][ T5806] cgroup: Unknown subsys name 'cpuset' [ 81.184031][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.834194][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.571331][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.580625][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.588069][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.596341][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.603961][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.619686][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.619981][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.635161][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.649021][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.657201][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.671676][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.679790][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.680393][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.687688][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.696135][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.709319][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.716877][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.722614][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.725171][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.739720][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.739856][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.746993][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.762110][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.769864][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.770633][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.472858][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 86.615304][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 86.648564][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 86.670990][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.712245][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.944970][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.957750][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.966142][ T5817] bridge_slave_0: entered allmulticast mode [ 86.979917][ T5817] bridge_slave_0: entered promiscuous mode [ 86.993756][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.000933][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.008124][ T5817] bridge_slave_1: entered allmulticast mode [ 87.016637][ T5817] bridge_slave_1: entered promiscuous mode [ 87.154359][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.161623][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.168836][ T5822] bridge_slave_0: entered allmulticast mode [ 87.176071][ T5822] bridge_slave_0: entered promiscuous mode [ 87.212538][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.222551][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.230564][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.237888][ T5822] bridge_slave_1: entered allmulticast mode [ 87.246114][ T5822] bridge_slave_1: entered promiscuous mode [ 87.297195][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.334707][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.342165][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.350590][ T5816] bridge_slave_0: entered allmulticast mode [ 87.358317][ T5816] bridge_slave_0: entered promiscuous mode [ 87.366572][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.374193][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.381522][ T5816] bridge_slave_1: entered allmulticast mode [ 87.389066][ T5816] bridge_slave_1: entered promiscuous mode [ 87.463667][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.473353][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.481183][ T5827] bridge_slave_0: entered allmulticast mode [ 87.488391][ T5827] bridge_slave_0: entered promiscuous mode [ 87.496393][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.503657][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.510932][ T5824] bridge_slave_0: entered allmulticast mode [ 87.518172][ T5824] bridge_slave_0: entered promiscuous mode [ 87.528485][ T5817] team0: Port device team_slave_0 added [ 87.538198][ T5817] team0: Port device team_slave_1 added [ 87.546923][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.573073][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.582554][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.590058][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.597287][ T5827] bridge_slave_1: entered allmulticast mode [ 87.605309][ T5827] bridge_slave_1: entered promiscuous mode [ 87.613040][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.620471][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.627689][ T5824] bridge_slave_1: entered allmulticast mode [ 87.635396][ T5824] bridge_slave_1: entered promiscuous mode [ 87.690897][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.716188][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.750440][ T5129] Bluetooth: hci3: command tx timeout [ 87.758684][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.766028][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.792379][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.828972][ T5825] Bluetooth: hci0: command tx timeout [ 87.834877][ T5129] Bluetooth: hci2: command tx timeout [ 87.841164][ T5825] Bluetooth: hci1: command tx timeout [ 87.841172][ T55] Bluetooth: hci4: command tx timeout [ 87.863630][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.878641][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.889338][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.896786][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.923409][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.937619][ T5822] team0: Port device team_slave_0 added [ 87.960169][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.972197][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.004073][ T5822] team0: Port device team_slave_1 added [ 88.028056][ T5816] team0: Port device team_slave_0 added [ 88.078084][ T5824] team0: Port device team_slave_0 added [ 88.100603][ T5816] team0: Port device team_slave_1 added [ 88.107085][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.114701][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.141035][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.156783][ T5827] team0: Port device team_slave_0 added [ 88.165098][ T5824] team0: Port device team_slave_1 added [ 88.201742][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.210163][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.236494][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.250725][ T5827] team0: Port device team_slave_1 added [ 88.336226][ T5817] hsr_slave_0: entered promiscuous mode [ 88.343757][ T5817] hsr_slave_1: entered promiscuous mode [ 88.351714][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.358676][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.385580][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.399504][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.406478][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.432729][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.445470][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.452503][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.478509][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.505942][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.513000][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.539025][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.552542][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.559690][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.586128][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.625148][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.632309][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.658834][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.702203][ T5822] hsr_slave_0: entered promiscuous mode [ 88.714438][ T5822] hsr_slave_1: entered promiscuous mode [ 88.720691][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.728399][ T5822] Cannot create hsr debugfs directory [ 88.886423][ T5824] hsr_slave_0: entered promiscuous mode [ 88.895903][ T5824] hsr_slave_1: entered promiscuous mode [ 88.902423][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.912675][ T5824] Cannot create hsr debugfs directory [ 88.937431][ T5816] hsr_slave_0: entered promiscuous mode [ 88.955057][ T5816] hsr_slave_1: entered promiscuous mode [ 88.964418][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.973103][ T5816] Cannot create hsr debugfs directory [ 89.022532][ T5827] hsr_slave_0: entered promiscuous mode [ 89.029798][ T5827] hsr_slave_1: entered promiscuous mode [ 89.035926][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.044315][ T5827] Cannot create hsr debugfs directory [ 89.563913][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.600639][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.613961][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.636693][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.703953][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.726283][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.738564][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.770470][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.842299][ T5825] Bluetooth: hci3: command tx timeout [ 89.879695][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.894499][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.907285][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.914617][ T5825] Bluetooth: hci4: command tx timeout [ 89.921564][ T5129] Bluetooth: hci1: command tx timeout [ 89.921581][ T55] Bluetooth: hci2: command tx timeout [ 89.926986][ T5129] Bluetooth: hci0: command tx timeout [ 89.959943][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.040866][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.064225][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.126628][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.143087][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.150509][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.160841][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.168067][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.197132][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.211231][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.243912][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.316316][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.326531][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.340411][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.366662][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.413831][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.459907][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.563759][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.590965][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.616851][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.624050][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.661996][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.669227][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.741128][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.775843][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.783027][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.827925][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.835125][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.882229][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.958511][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.974023][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.055531][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.117470][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.136128][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.143430][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.164990][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.172174][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.236423][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.243643][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.301811][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.309106][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.485436][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.729329][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.805321][ T5822] veth0_vlan: entered promiscuous mode [ 91.833565][ T120] cfg80211: failed to load regulatory.db [ 91.836997][ T5817] veth0_vlan: entered promiscuous mode [ 91.910274][ T5129] Bluetooth: hci3: command tx timeout [ 91.941987][ T5822] veth1_vlan: entered promiscuous mode [ 91.968601][ T5817] veth1_vlan: entered promiscuous mode [ 91.989777][ T5129] Bluetooth: hci2: command tx timeout [ 91.995271][ T5129] Bluetooth: hci1: command tx timeout [ 92.000969][ T5825] Bluetooth: hci0: command tx timeout [ 92.006415][ T5825] Bluetooth: hci4: command tx timeout [ 92.065520][ T5827] veth0_vlan: entered promiscuous mode [ 92.118066][ T5822] veth0_macvtap: entered promiscuous mode [ 92.131872][ T5822] veth1_macvtap: entered promiscuous mode [ 92.142862][ T5827] veth1_vlan: entered promiscuous mode [ 92.157999][ T5817] veth0_macvtap: entered promiscuous mode [ 92.167750][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.205922][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.216896][ T5817] veth1_macvtap: entered promiscuous mode [ 92.236301][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.250962][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.262951][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.274148][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283548][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.292991][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.375755][ T5816] veth0_vlan: entered promiscuous mode [ 92.392779][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.417932][ T5827] veth0_macvtap: entered promiscuous mode [ 92.433521][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.451512][ T5816] veth1_vlan: entered promiscuous mode [ 92.463626][ T5827] veth1_macvtap: entered promiscuous mode [ 92.484763][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.493685][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.502759][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.512169][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.596645][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.646928][ T5824] veth0_vlan: entered promiscuous mode [ 92.655991][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.682209][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.690961][ T5816] veth0_macvtap: entered promiscuous mode [ 92.701621][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.731168][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740054][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.749514][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.758248][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.802755][ T5816] veth1_macvtap: entered promiscuous mode [ 92.812880][ T5824] veth1_vlan: entered promiscuous mode [ 92.850012][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.857860][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.866539][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.880287][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.950881][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.953017][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.969728][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.015326][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.032472][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.087807][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.097771][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.102502][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118113][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.130185][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.139039][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.214945][ T5824] veth0_macvtap: entered promiscuous mode [ 93.247764][ T5824] veth1_macvtap: entered promiscuous mode [ 93.707537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.893905][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.903413][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.918491][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.951109][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.996881][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.001180][ T5129] Bluetooth: hci3: command tx timeout [ 94.039046][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.058780][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.067545][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.089066][ T5129] Bluetooth: hci1: command tx timeout [ 94.094531][ T5129] Bluetooth: hci4: command tx timeout [ 94.099100][ T5825] Bluetooth: hci0: command tx timeout [ 94.100000][ T5129] Bluetooth: hci2: command tx timeout [ 94.321842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.457580][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.472003][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.665134][ T5921] Zero length message leads to an empty skb [ 94.887438][ T30] audit: type=1804 audit(1748117669.007:2): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.6" name="/newroot/1/file0/file0" dev="ramfs" ino=6826 res=1 errno=0 [ 94.999027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.448433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.653176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.669990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.749007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.087123][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.116513][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.149626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.660660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.669637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 97.352016][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.364656][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.647700][ T5950] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13'. [ 97.984397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.030356][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.084169][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.479685][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14'. [ 98.878344][ T5962] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.904163][ T5977] capability: warning: `syz.2.17' uses 32-bit capabilities (legacy support in use) [ 101.172683][ T30] audit: type=1804 audit(1748117675.287:3): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/2/file0/file0" dev="ramfs" ino=7154 res=1 errno=0 [ 101.445529][ T5992] FAULT_INJECTION: forcing a failure. [ 101.445529][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.472586][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.21 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 101.472616][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.472637][ T5992] Call Trace: [ 101.472645][ T5992] [ 101.472658][ T5992] dump_stack_lvl+0x189/0x250 [ 101.472708][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.472736][ T5992] ? __pfx__printk+0x10/0x10 [ 101.472781][ T5992] should_fail_ex+0x414/0x560 [ 101.472809][ T5992] _copy_to_user+0x31/0xb0 [ 101.472840][ T5992] simple_read_from_buffer+0xe1/0x170 [ 101.472877][ T5992] proc_fail_nth_read+0x1df/0x250 [ 101.472902][ T5992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.472927][ T5992] ? rw_verify_area+0x258/0x650 [ 101.472954][ T5992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.472976][ T5992] vfs_read+0x200/0x980 [ 101.473010][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 101.473037][ T5992] ? __pfx_vfs_read+0x10/0x10 [ 101.473066][ T5992] ? __fget_files+0x2a/0x420 [ 101.473090][ T5992] ? __fget_files+0x3a0/0x420 [ 101.473108][ T5992] ? __fget_files+0x2a/0x420 [ 101.473136][ T5992] ksys_read+0x145/0x250 [ 101.473162][ T5992] ? rcu_is_watching+0x15/0xb0 [ 101.473194][ T5992] ? __pfx_ksys_read+0x10/0x10 [ 101.473226][ T5992] ? do_syscall_64+0xba/0x210 [ 101.473256][ T5992] do_syscall_64+0xf6/0x210 [ 101.473283][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 101.473308][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.473327][ T5992] RIP: 0033:0x7f45e6b8d37c [ 101.473353][ T5992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.473370][ T5992] RSP: 002b:00007f45e7912030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.473391][ T5992] RAX: ffffffffffffffda RBX: 00007f45e6db5fa0 RCX: 00007f45e6b8d37c [ 101.473406][ T5992] RDX: 000000000000000f RSI: 00007f45e79120a0 RDI: 0000000000000006 [ 101.473418][ T5992] RBP: 00007f45e7912090 R08: 0000000000000000 R09: 0000000000000000 [ 101.473429][ T5992] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 101.473441][ T5992] R13: 0000000000000000 R14: 00007f45e6db5fa0 R15: 00007ffc284a0828 [ 101.473473][ T5992] [ 102.071151][ T5993] overlayfs: missing 'lowerdir' [ 103.032537][ T6007] usb usb8: usbfs: process 6007 (syz.3.24) did not claim interface 0 before use [ 103.750764][ T6018] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.957015][ T6023] sctp: [Deprecated]: syz.3.28 (pid 6023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.957015][ T6023] Use struct sctp_sack_info instead [ 104.039754][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.218874][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 104.283183][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.510004][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.521562][ T5819] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 104.533235][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.546533][ T5819] usb 3-1: config 0 descriptor?? [ 107.067255][ T5819] usbhid 3-1:0.0: can't add hid device: -71 [ 107.082123][ T5819] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 107.253423][ T5819] usb 3-1: USB disconnect, device number 2 [ 108.885341][ T6069] netlink: 44 bytes leftover after parsing attributes in process `syz.1.41'. [ 108.987069][ T30] audit: type=1804 audit(1748117683.107:4): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.40" name="/newroot/10/file0/file0" dev="ramfs" ino=8332 res=1 errno=0 [ 112.796970][ T6094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.638118][ T6104] ======================================================= [ 113.638118][ T6104] WARNING: The mand mount option has been deprecated and [ 113.638118][ T6104] and is ignored by this kernel. Remove the mand [ 113.638118][ T6104] option from the mount to silence this warning. [ 113.638118][ T6104] ======================================================= [ 113.891789][ T30] audit: type=1804 audit(1748117688.007:5): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.42" name="/newroot/12/file0/file0" dev="ramfs" ino=8379 res=1 errno=0 [ 115.037538][ T6114] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.53'. [ 115.062222][ T6117] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.121957][ T6114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.931596][ T6148] openvswitch: netlink: Message has 8 unknown bytes. [ 120.292256][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 120.319849][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 121.132576][ T6156] ceph: No mds server is up or the cluster is laggy [ 121.246305][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 121.279971][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 121.823824][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 122.394681][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 124.064048][ T6192] mmap: syz.1.74 (6192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.489158][ T6191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.74'. [ 124.498436][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 124.582959][ T6186] netlink: 252 bytes leftover after parsing attributes in process `syz.2.73'. [ 129.760974][ T6246] openvswitch: netlink: Message has 8 unknown bytes. [ 130.423821][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.908414][ T6250] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.908434][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 131.051566][ T5878] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.072720][ T5878] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.129593][ T6254] 9pnet_fd: Insufficient options for proto=fd [ 131.138299][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.154639][ T5878] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 131.169104][ T5878] usb 3-1: Product: syz [ 131.180548][ T5878] usb 3-1: Manufacturer: syz [ 131.240642][ T5878] hub 3-1:4.0: USB hub found [ 131.458979][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.373431][ T5872] usb 2-1: config 118 interface 0 has no altsetting 0 [ 132.470285][ T5872] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 132.479602][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.487660][ T5872] usb 2-1: Product: syz [ 132.518076][ T5872] usb 2-1: Manufacturer: syz [ 132.526506][ T5878] hub 3-1:4.0: 4 ports detected [ 132.531561][ T5872] usb 2-1: SerialNumber: syz [ 132.537508][ T5878] hub 3-1:4.0: insufficient power available to use all downstream ports [ 132.793928][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800590][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.736714][ T5878] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 133.758807][ T5878] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 133.822673][ T6272] capability: warning: `syz.4.94' uses deprecated v2 capabilities in a way that may be insecure [ 134.001295][ T5872] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 134.030958][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.065967][ T5872] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 134.098500][ T5872] usb 2-1: media controller created [ 134.165633][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.981504][ T5872] DVB: Unable to find symbol mt352_attach() [ 135.013361][ T5872] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 135.079127][ T5881] usb 3-1: USB disconnect, device number 3 [ 135.152778][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 135.210756][ T5872] dvb-usb: schedule remote query interval to 100 msecs. [ 135.217781][ T5872] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 135.250614][ T5872] dvb_usb_m920x 2-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 135.423637][ T5878] m920x_read = error: -71 [ 135.428166][ T5878] dvb-usb: error while querying for an remote control event. [ 135.448109][ T5872] usb 2-1: USB disconnect, device number 2 [ 135.677464][ T6299] openvswitch: netlink: Message has 8 unknown bytes. [ 136.275867][ T6295] netlink: 224 bytes leftover after parsing attributes in process `syz.1.98'. [ 136.469332][ T5875] m920x_read = error: -19 [ 136.473747][ T5875] dvb-usb: error while querying for an remote control event. [ 137.279879][ T5875] m920x_read = error: -19 [ 137.284366][ T5875] dvb-usb: error while querying for an remote control event. [ 137.488148][ T5875] m920x_read = error: -19 [ 137.498641][ T5875] dvb-usb: error while querying for an remote control event. [ 138.008956][ T5875] m920x_read = error: -19 [ 138.048816][ T5875] dvb-usb: error while querying for an remote control event. [ 138.209000][ T5872] m920x_read = error: -19 [ 138.244760][ T5872] dvb-usb: error while querying for an remote control event. [ 138.747096][ T5872] m920x_read = error: -19 [ 138.777706][ T5872] dvb-usb: error while querying for an remote control event. [ 138.966956][ T5878] m920x_read = error: -19 [ 139.009674][ T5878] dvb-usb: error while querying for an remote control event. [ 139.196828][ T5878] m920x_read = error: -19 [ 139.213382][ T5878] dvb-usb: error while querying for an remote control event. [ 139.238383][ T5819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.353687][ T30] audit: type=1804 audit(1748117713.467:6): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.106" name="/newroot/14/file0/file0" dev="ramfs" ino=9479 res=1 errno=0 [ 139.359054][ T5878] m920x_read = error: -19 [ 139.611662][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 140.209151][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.244969][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.262192][ T5878] dvb-usb: error while querying for an remote control event. [ 140.362040][ T5819] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 140.388940][ T5878] m920x_read = error: -19 [ 140.393416][ T5878] dvb-usb: error while querying for an remote control event. [ 140.473754][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.529643][ T5878] m920x_read = error: -19 [ 140.532063][ T5819] usb 4-1: config 0 descriptor?? [ 140.537823][ T5878] dvb-usb: error while querying for an remote control event. [ 140.617538][ T6324] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.626747][ T6324] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.635678][ T6324] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.644463][ T6324] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.704931][ T5878] m920x_read = error: -19 [ 140.718468][ T5878] dvb-usb: error while querying for an remote control event. [ 140.849054][ T977] m920x_read = error: -19 [ 140.853532][ T977] dvb-usb: error while querying for an remote control event. [ 141.062973][ T977] m920x_read = error: -19 [ 141.067709][ T977] dvb-usb: error while querying for an remote control event. [ 141.949792][ T6324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.108'. [ 141.979189][ T5872] m920x_read = error: -19 [ 141.983882][ T5872] dvb-usb: error while querying for an remote control event. [ 142.108942][ T977] m920x_read = error: -19 [ 142.587744][ T977] dvb-usb: error while querying for an remote control event. [ 142.588017][ T5819] usbhid 4-1:0.0: can't add hid device: -71 [ 142.829216][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.260268][ T5819] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 143.310266][ T977] m920x_read = error: -19 [ 143.338120][ T977] dvb-usb: error while querying for an remote control event. [ 143.359288][ T5819] usb 4-1: USB disconnect, device number 2 [ 143.433358][ T5129] Bluetooth: hci4: link tx timeout [ 143.439008][ T5129] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.447833][ T55] Bluetooth: hci4: link tx timeout [ 143.456013][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.469633][ T977] m920x_read = error: -19 [ 143.476370][ T977] dvb-usb: error while querying for an remote control event. [ 143.489383][ T5872] usb 3-1: device descriptor read/all, error -71 [ 143.556850][ T6349] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.114'. [ 143.566364][ T6349] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.114'. [ 143.589064][ T6349] netlink: 584 bytes leftover after parsing attributes in process `syz.1.114'. [ 143.616811][ T977] m920x_read = error: -19 [ 143.633533][ T977] dvb-usb: error while querying for an remote control event. [ 143.772257][ T30] audit: type=1804 audit(1748117717.897:7): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.111" name="/newroot/19/file0/file0" dev="ramfs" ino=9567 res=1 errno=0 [ 143.848999][ T5878] m920x_read = error: -19 [ 143.864384][ T5878] dvb-usb: error while querying for an remote control event. [ 144.050901][ T5878] m920x_read = error: -19 [ 144.056230][ T977] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.096696][ T5878] dvb-usb: error while querying for an remote control event. [ 144.259797][ T5878] m920x_read = error: -19 [ 144.264175][ T5878] dvb-usb: error while querying for an remote control event. [ 144.512595][ T6356] netlink: 224 bytes leftover after parsing attributes in process `syz.2.116'. [ 144.746586][ T977] usb 2-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 144.779527][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.799367][ T977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.835175][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.858050][ T5875] m920x_read = error: -19 [ 144.867732][ T5875] dvb-usb: error while querying for an remote control event. [ 144.891226][ T977] usb 2-1: SerialNumber: syz [ 145.056753][ T5872] m920x_read = error: -19 [ 145.116070][ T5872] dvb-usb: error while querying for an remote control event. [ 145.363427][ T5872] m920x_read = error: -19 [ 145.408149][ T5872] dvb-usb: error while querying for an remote control event. [ 145.509716][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 145.516013][ T6368] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.117'. [ 145.608972][ T5875] m920x_read = error: -19 [ 145.617902][ T5875] dvb-usb: error while querying for an remote control event. [ 145.744056][ T977] usb 2-1: 0:2 : does not exist [ 145.792623][ T977] usb 2-1: unit 5 not found! [ 145.798049][ T6368] netlink: get zone limit has 8 unknown bytes [ 145.840445][ T5875] m920x_read = error: -19 [ 145.844862][ T5875] dvb-usb: error while querying for an remote control event. [ 146.040715][ T977] usb 2-1: USB disconnect, device number 3 [ 146.161869][ T5872] m920x_read = error: -19 [ 146.167275][ T5872] dvb-usb: error while querying for an remote control event. [ 146.290980][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.318851][ T5872] m920x_read = error: -19 [ 146.323744][ T5872] dvb-usb: error while querying for an remote control event. [ 146.599122][ T30] audit: type=1804 audit(1748117720.697:8): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.119" name="/newroot/21/file0/file0" dev="ramfs" ino=9703 res=1 errno=0 [ 146.599539][ T5872] m920x_read = error: -19 [ 147.397454][ T5872] dvb-usb: error while querying for an remote control event. [ 147.533363][ T5872] m920x_read = error: -19 [ 147.537815][ T5872] dvb-usb: error while querying for an remote control event. [ 147.669476][ T5872] m920x_read = error: -19 [ 147.764542][ T5872] dvb-usb: error while querying for an remote control event. [ 148.832769][ T5872] m920x_read = error: -19 [ 148.847195][ T5872] dvb-usb: error while querying for an remote control event. [ 148.969044][ T5872] m920x_read = error: -19 [ 148.988283][ T5872] dvb-usb: error while querying for an remote control event. [ 149.139768][ T5872] m920x_read = error: -19 [ 149.144182][ T5872] dvb-usb: error while querying for an remote control event. [ 149.279070][ T5872] m920x_read = error: -19 [ 149.291396][ T5872] dvb-usb: error while querying for an remote control event. [ 149.299019][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.459447][ T5872] m920x_read = error: -19 [ 149.478834][ T5872] dvb-usb: error while querying for an remote control event. [ 149.628817][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 149.639601][ T5872] m920x_read = error: -19 [ 150.018421][ T5129] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 150.020545][ T5129] Bluetooth: hci2: unexpected subevent 0x0d length: 261 > 260 [ 150.035677][ T5872] dvb-usb: error while querying for an remote control event. [ 150.037200][ T5129] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 150.074544][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.187060][ T6407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.198399][ T6407] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 150.574095][ T5872] m920x_read = error: -19 [ 150.578516][ T5872] dvb-usb: error while querying for an remote control event. [ 150.758764][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.768585][ T5819] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 150.779113][ T5872] m920x_read = error: -19 [ 150.783494][ T5872] dvb-usb: error while querying for an remote control event. [ 150.814517][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.030725][ T5819] usb 1-1: config 0 descriptor?? [ 152.087649][ T5872] m920x_read = error: -19 [ 152.092970][ T5872] dvb-usb: error while querying for an remote control event. [ 152.209353][ T5872] m920x_read = error: -19 [ 152.213766][ T5872] dvb-usb: error while querying for an remote control event. [ 152.228567][ T5819] usbhid 1-1:0.0: can't add hid device: -71 [ 152.247575][ T5819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.337410][ T5819] usb 1-1: USB disconnect, device number 2 [ 152.436012][ T5872] m920x_read = error: -19 [ 152.441016][ T5872] dvb-usb: error while querying for an remote control event. [ 152.449643][ T120] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.539746][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 152.546142][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 152.555576][ T5875] m920x_read = error: -19 [ 152.561729][ T5875] dvb-usb: error while querying for an remote control event. [ 152.619059][ T120] usb 4-1: Using ep0 maxpacket: 16 [ 152.628124][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.653192][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.688055][ T120] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 152.711552][ T977] m920x_read = error: -19 [ 152.716364][ T977] dvb-usb: error while querying for an remote control event. [ 152.733766][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.784920][ T120] usb 4-1: config 0 descriptor?? [ 152.840314][ T977] libceph: connect (1)[c::]:6789 error -101 [ 152.875189][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 153.022714][ T6423] ceph: No mds server is up or the cluster is laggy [ 153.062815][ T5875] m920x_read = error: -19 [ 153.067225][ T5875] dvb-usb: error while querying for an remote control event. [ 153.781316][ T5875] m920x_read = error: -19 [ 153.843123][ T5875] dvb-usb: error while querying for an remote control event. [ 153.999421][ T977] m920x_read = error: -19 [ 154.016744][ T977] dvb-usb: error while querying for an remote control event. [ 154.162531][ T6448] netlink: 252 bytes leftover after parsing attributes in process `syz.1.136'. [ 154.172012][ T977] m920x_read = error: -19 [ 154.176608][ T977] dvb-usb: error while querying for an remote control event. [ 154.180093][ T6449] netlink: 252 bytes leftover after parsing attributes in process `syz.4.137'. [ 154.222489][ T6447] netlink: 252 bytes leftover after parsing attributes in process `syz.0.138'. [ 154.320253][ T977] m920x_read = error: -19 [ 154.335349][ T977] dvb-usb: error while querying for an remote control event. [ 154.469404][ T977] m920x_read = error: -19 [ 154.558476][ T120] usbhid 4-1:0.0: can't add hid device: -71 [ 154.579388][ T977] dvb-usb: error while querying for an remote control event. [ 154.606030][ T120] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.646390][ T120] usb 4-1: USB disconnect, device number 3 [ 154.731950][ T977] m920x_read = error: -19 [ 154.752131][ T977] dvb-usb: error while querying for an remote control event. [ 154.888846][ T977] m920x_read = error: -19 [ 154.909896][ T977] dvb-usb: error while querying for an remote control event. [ 155.241207][ T977] m920x_read = error: -19 [ 155.245739][ T977] dvb-usb: error while querying for an remote control event. [ 155.916041][ T6453] overlayfs: missing 'workdir' [ 156.011374][ T977] m920x_read = error: -19 [ 156.026081][ T977] dvb-usb: error while querying for an remote control event. [ 156.184291][ T977] m920x_read = error: -19 [ 156.209822][ T977] dvb-usb: error while querying for an remote control event. [ 156.339518][ T5872] m920x_read = error: -19 [ 156.348289][ T5872] dvb-usb: error while querying for an remote control event. [ 156.479971][ T977] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.736636][ T5872] m920x_read = error: -19 [ 156.778341][ T5872] dvb-usb: error while querying for an remote control event. [ 156.790213][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 156.795461][ T6464] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 156.811425][ T977] usb 2-1: too many configurations: 24, using maximum allowed: 8 [ 156.834193][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.858874][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.938902][ T5872] m920x_read = error: -19 [ 156.943553][ T5872] dvb-usb: error while querying for an remote control event. [ 157.041327][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.069049][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.724943][ T5872] m920x_read = error: -19 [ 157.820785][ T5872] dvb-usb: error while querying for an remote control event. [ 157.843314][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.858474][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.878759][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.908753][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.949287][ T5872] m920x_read = error: -19 [ 157.963750][ T5872] dvb-usb: error while querying for an remote control event. [ 157.979187][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.027966][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.061552][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.098758][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.132530][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.143346][ T5875] m920x_read = error: -19 [ 158.147734][ T5875] dvb-usb: error while querying for an remote control event. [ 158.179445][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.209417][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.299019][ T5875] m920x_read = error: -19 [ 158.378765][ T5875] dvb-usb: error while querying for an remote control event. [ 158.393807][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.419033][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.501225][ T120] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.047192][ T5872] m920x_read = error: -19 [ 159.051646][ T5872] dvb-usb: error while querying for an remote control event. [ 159.149263][ T977] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.158357][ T977] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.181944][ T977] usb 2-1: Manufacturer: syz [ 159.191112][ T977] usb 2-1: config 0 descriptor?? [ 159.249020][ T5875] m920x_read = error: -19 [ 159.253612][ T5875] dvb-usb: error while querying for an remote control event. [ 159.292598][ T977] usb 2-1: USB disconnect, device number 4 [ 159.339934][ T120] usb 4-1: Using ep0 maxpacket: 8 [ 159.348867][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 159.376713][ T120] usb 4-1: config 1 has an invalid interface number: 133 but max is 0 [ 159.392034][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.419267][ T120] usb 4-1: config 1 has no interface number 0 [ 159.421707][ T5875] m920x_read = error: -19 [ 159.425390][ T120] usb 4-1: config 1 interface 133 has no altsetting 0 [ 159.427489][ T24] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 159.455876][ T5875] dvb-usb: error while querying for an remote control event. [ 159.463365][ T120] usb 4-1: language id specifier not provided by device, defaulting to English [ 159.485725][ T120] usb 4-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 159.503914][ T24] usb 5-1: config 0 has no interface number 0 [ 159.511374][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.539795][ T24] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 159.551982][ T120] usb 4-1: Product: syz [ 159.556186][ T120] usb 4-1: SerialNumber: syz [ 159.580279][ T24] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 159.591258][ T6492] usb usb8: usbfs: process 6492 (syz.1.153) did not claim interface 0 before use [ 159.628852][ T24] usb 5-1: config 0 interface 88 has no altsetting 0 [ 159.653606][ T24] usb 5-1: string descriptor 0 read error: -22 [ 159.662740][ T24] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 159.668827][ T5875] m920x_read = error: -19 [ 159.698484][ T5875] dvb-usb: error while querying for an remote control event. [ 160.230570][ T24] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 160.246044][ T24] usb 5-1: config 0 descriptor?? [ 160.250506][ T977] m920x_read = error: -19 [ 160.258901][ T977] dvb-usb: error while querying for an remote control event. [ 160.328368][ T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input6 [ 160.409219][ T977] m920x_read = error: -19 [ 160.420462][ T120] sierra 4-1:1.133: Sierra USB modem converter detected [ 160.436449][ T977] dvb-usb: error while querying for an remote control event. [ 160.500835][ T5875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.550183][ T24] usb 5-1: USB disconnect, device number 2 [ 160.589356][ T977] m920x_read = error: -19 [ 160.593799][ T977] dvb-usb: error while querying for an remote control event. [ 160.646168][ T120] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 160.698834][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 160.718167][ T5945] udevd[5945]: Error opening device "/dev/input/event5": No such file or directory [ 160.731306][ T120] usb 4-1: USB disconnect, device number 4 [ 160.743347][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.746221][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event5" [ 160.754588][ T977] m920x_read = error: -19 [ 160.771461][ T120] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 160.807928][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event5" [ 160.817113][ T977] dvb-usb: error while querying for an remote control event. [ 160.825431][ T120] sierra 4-1:1.133: device disconnected [ 160.831199][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.831247][ T5875] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 160.831271][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.836447][ T5875] usb 1-1: config 0 descriptor?? [ 160.999121][ T5872] m920x_read = error: -19 [ 161.004157][ T5872] dvb-usb: error while querying for an remote control event. [ 161.159239][ T5872] m920x_read = error: -19 [ 161.205671][ T5872] dvb-usb: error while querying for an remote control event. [ 162.086657][ T5872] m920x_read = error: -19 [ 162.149310][ T5872] dvb-usb: error while querying for an remote control event. [ 162.269138][ T977] m920x_read = error: -19 [ 162.273721][ T977] dvb-usb: error while querying for an remote control event. [ 162.638324][ T5872] m920x_read = error: -19 [ 162.651086][ T5872] dvb-usb: error while querying for an remote control event. [ 163.178819][ T5875] usbhid 1-1:0.0: can't add hid device: -71 [ 163.184885][ T5875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.228868][ T5875] usb 1-1: USB disconnect, device number 3 [ 163.328880][ T5872] m920x_read = error: -19 [ 163.333315][ T5872] dvb-usb: error while querying for an remote control event. [ 163.515198][ T5872] m920x_read = error: -19 [ 163.520568][ T5872] dvb-usb: error while querying for an remote control event. [ 164.178145][ T5872] m920x_read = error: -19 [ 164.338403][ T30] audit: type=1804 audit(1748117738.457:9): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.157" name="/newroot/36/file0/file0" dev="ramfs" ino=10062 res=1 errno=0 [ 164.696531][ T5872] dvb-usb: error while querying for an remote control event. [ 164.818912][ T977] m920x_read = error: -19 [ 164.823413][ T977] dvb-usb: error while querying for an remote control event. [ 165.612928][ T977] m920x_read = error: -19 [ 165.617330][ T977] dvb-usb: error while querying for an remote control event. [ 165.864112][ T977] m920x_read = error: -19 [ 165.868512][ T977] dvb-usb: error while querying for an remote control event. [ 166.600848][ T5875] m920x_read = error: -19 [ 166.605268][ T5875] dvb-usb: error while querying for an remote control event. [ 166.798966][ T5875] m920x_read = error: -19 [ 166.803466][ T5875] dvb-usb: error while querying for an remote control event. [ 166.930666][ T5875] m920x_read = error: -19 [ 166.935156][ T5875] dvb-usb: error while querying for an remote control event. [ 167.078882][ T5875] m920x_read = error: -19 [ 167.083292][ T5875] dvb-usb: error while querying for an remote control event. [ 167.211892][ T5875] m920x_read = error: -19 [ 167.238840][ T5875] dvb-usb: error while querying for an remote control event. [ 167.369597][ T5875] m920x_read = error: -19 [ 168.069156][ T5875] dvb-usb: error while querying for an remote control event. [ 168.203403][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.215578][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.226858][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 168.236286][ T6546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.169'. [ 168.248163][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.279003][ T977] m920x_read = error: -19 [ 168.283427][ T977] dvb-usb: error while querying for an remote control event. [ 168.299792][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.330726][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.379511][ T6546] gretap1: entered promiscuous mode [ 168.410127][ T977] m920x_read = error: -19 [ 168.414529][ T977] dvb-usb: error while querying for an remote control event. [ 168.633773][ T977] m920x_read = error: -19 [ 168.650160][ T977] dvb-usb: error while querying for an remote control event. [ 169.349114][ T5878] m920x_read = error: -19 [ 169.358784][ T5878] dvb-usb: error while querying for an remote control event. [ 169.930498][ T977] m920x_read = error: -19 [ 169.934911][ T977] dvb-usb: error while querying for an remote control event. [ 170.550854][ T5875] m920x_read = error: -19 [ 170.555256][ T5875] dvb-usb: error while querying for an remote control event. [ 170.618834][ T55] Bluetooth: hci5: command tx timeout [ 171.747325][ T977] m920x_read = error: -19 [ 171.751798][ T977] dvb-usb: error while querying for an remote control event. [ 172.178074][ T6570] 9pnet_fd: Insufficient options for proto=fd [ 172.362835][ T6572] nftables ruleset with unbound set [ 172.605228][ T977] m920x_read = error: -19 [ 172.659133][ T55] Bluetooth: hci5: command tx timeout [ 172.685676][ T977] dvb-usb: error while querying for an remote control event. [ 172.932246][ T5875] m920x_read = error: -19 [ 172.936648][ T5875] dvb-usb: error while querying for an remote control event. [ 173.218240][ T6575] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 173.239151][ T977] m920x_read = error: -19 [ 173.244336][ T977] dvb-usb: error while querying for an remote control event. [ 174.265331][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 174.304088][ T977] m920x_read = error: -19 [ 174.308501][ T977] dvb-usb: error while querying for an remote control event. [ 174.419045][ T977] m920x_read = error: -19 [ 174.423449][ T977] dvb-usb: error while querying for an remote control event. [ 174.548998][ T977] m920x_read = error: -19 [ 174.553395][ T977] dvb-usb: error while querying for an remote control event. [ 175.561970][ T55] Bluetooth: hci5: command tx timeout [ 175.674424][ T3551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.854845][ T5875] m920x_read = error: -19 [ 175.859750][ T5875] dvb-usb: error while querying for an remote control event. [ 175.867233][ T3551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.991233][ T6607] netlink: 68 bytes leftover after parsing attributes in process `syz.4.185'. [ 176.524838][ T5875] m920x_read = error: -19 [ 176.529316][ T5875] dvb-usb: error while querying for an remote control event. [ 176.639457][ T5875] m920x_read = error: -19 [ 176.643910][ T5875] dvb-usb: error while querying for an remote control event. [ 176.993189][ T5875] m920x_read = error: -19 [ 177.143927][ T5875] dvb-usb: error while querying for an remote control event. [ 177.279104][ T5875] m920x_read = error: -19 [ 177.283641][ T5875] dvb-usb: error while querying for an remote control event. [ 177.487254][ T5875] m920x_read = error: -19 [ 177.629427][ T55] Bluetooth: hci5: command tx timeout [ 177.635099][ T5875] dvb-usb: error while querying for an remote control event. [ 177.851257][ T5872] m920x_read = error: -19 [ 177.855669][ T5872] dvb-usb: error while querying for an remote control event. [ 177.906958][ T3551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.946285][ T3551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.012360][ T5872] m920x_read = error: -19 [ 178.012390][ T5872] dvb-usb: error while querying for an remote control event. [ 178.127168][ T5872] m920x_read = error: -19 [ 178.150204][ T5872] dvb-usb: error while querying for an remote control event. [ 178.390750][ T6626] netlink: 56 bytes leftover after parsing attributes in process `syz.4.190'. [ 178.406441][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 178.685561][ T5872] m920x_read = error: -19 [ 178.752042][ T5872] dvb-usb: error while querying for an remote control event. [ 178.792763][ T3551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.818244][ T3551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.841008][ T6618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 178.899376][ T5872] m920x_read = error: -19 [ 178.910515][ T5872] dvb-usb: error while querying for an remote control event. [ 179.055712][ T5872] m920x_read = error: -19 [ 179.060457][ T5872] dvb-usb: error while querying for an remote control event. [ 179.169063][ T5872] m920x_read = error: -19 [ 179.173483][ T5872] dvb-usb: error while querying for an remote control event. [ 179.220929][ T3551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.628121][ T6631] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 179.768113][ T5872] m920x_read = error: -19 [ 180.077773][ T5872] dvb-usb: error while querying for an remote control event. [ 180.093997][ T3551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.189077][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.208807][ T5872] m920x_read = error: -19 [ 180.213216][ T5872] dvb-usb: error while querying for an remote control event. [ 180.240991][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.287689][ T6543] bridge_slave_0: entered allmulticast mode [ 180.316450][ T6543] bridge_slave_0: entered promiscuous mode [ 180.328213][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.339089][ T5872] m920x_read = error: -19 [ 180.343281][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.343465][ T5872] dvb-usb: error while querying for an remote control event. [ 180.352586][ T6543] bridge_slave_1: entered allmulticast mode [ 180.411259][ T6543] bridge_slave_1: entered promiscuous mode [ 180.492124][ T5872] m920x_read = error: -19 [ 180.507024][ T5872] dvb-usb: error while querying for an remote control event. [ 180.581595][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.629345][ T5872] m920x_read = error: -19 [ 180.641288][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.665327][ T5872] dvb-usb: error while querying for an remote control event. [ 181.714872][ T977] m920x_read = error: -19 [ 181.733370][ T977] dvb-usb: error while querying for an remote control event. [ 181.845548][ T6543] team0: Port device team_slave_0 added [ 182.007849][ T6543] team0: Port device team_slave_1 added [ 182.016729][ T977] m920x_read = error: -19 [ 182.022482][ T977] dvb-usb: error while querying for an remote control event. [ 182.145215][ T977] m920x_read = error: -19 [ 182.145252][ T977] dvb-usb: error while querying for an remote control event. [ 182.183797][ T5872] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.248915][ T5875] m920x_read = error: -19 [ 182.248944][ T5875] dvb-usb: error while querying for an remote control event. [ 182.328809][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 182.331369][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.331403][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.331443][ T5872] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 182.331467][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.334464][ T5872] usb 2-1: config 0 descriptor?? [ 182.368934][ T5875] m920x_read = error: -19 [ 182.417186][ T5875] dvb-usb: error while querying for an remote control event. [ 182.469212][ T977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.528829][ T5875] m920x_read = error: -19 [ 182.528885][ T5875] dvb-usb: error while querying for an remote control event. [ 182.602632][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.612371][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.649239][ T5875] m920x_read = error: -19 [ 182.653740][ T5875] dvb-usb: error while querying for an remote control event. [ 182.669685][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.685350][ T977] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 182.697413][ T977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.740529][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.747767][ T977] usb 5-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 182.766018][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.793644][ T977] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 182.803869][ T5875] m920x_read = error: -19 [ 182.810859][ T5875] dvb-usb: error while querying for an remote control event. [ 182.818353][ T977] usb 5-1: Product: syz [ 182.830800][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.843911][ T977] usb 5-1: config 0 descriptor?? [ 182.929005][ T5875] m920x_read = error: -19 [ 182.933518][ T5875] dvb-usb: error while querying for an remote control event. [ 183.040335][ T3551] bridge_slave_1: left allmulticast mode [ 183.085010][ T5875] m920x_read = error: -19 [ 183.972507][ T3551] bridge_slave_1: left promiscuous mode [ 183.978940][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.988279][ T5875] dvb-usb: error while querying for an remote control event. [ 184.052228][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 184.058294][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.091197][ T5872] usb 2-1: USB disconnect, device number 5 [ 184.129505][ T55] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 184.129583][ T55] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 184.137615][ T55] Bluetooth: hci1: Dropping invalid advertising data [ 184.152857][ T55] Bluetooth: hci1: Malformed LE Event: 0x02 [ 184.172368][ T55] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 184.247947][ T3551] bridge_slave_0: left allmulticast mode [ 184.268873][ T3551] bridge_slave_0: left promiscuous mode [ 184.274685][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.284272][ T977] m920x_read = error: -19 [ 184.289012][ T977] dvb-usb: error while querying for an remote control event. [ 184.429088][ T977] m920x_read = error: -19 [ 184.435332][ T977] dvb-usb: error while querying for an remote control event. [ 184.443957][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.622091][ T5872] m920x_read = error: -19 [ 184.663763][ T5872] dvb-usb: error while querying for an remote control event. [ 184.889471][ T5872] m920x_read = error: -19 [ 184.950341][ T5872] dvb-usb: error while querying for an remote control event. [ 185.654716][ T24] usb 5-1: USB disconnect, device number 3 [ 185.826071][ T5872] m920x_read = error: -19 [ 185.830626][ T5872] dvb-usb: error while querying for an remote control event. [ 185.952309][ T5872] m920x_read = error: -19 [ 185.956721][ T5872] dvb-usb: error while querying for an remote control event. [ 186.636369][ T5872] m920x_read = error: -19 [ 186.645749][ T5872] dvb-usb: error while querying for an remote control event. [ 186.710500][ T6694] netlink: 'syz.3.211': attribute type 11 has an invalid length. [ 186.785286][ T5872] m920x_read = error: -19 [ 186.826258][ T5872] dvb-usb: error while querying for an remote control event. [ 186.984009][ T5872] m920x_read = error: -19 [ 187.008758][ T5872] dvb-usb: error while querying for an remote control event. [ 187.158988][ T5872] m920x_read = error: -19 [ 187.163462][ T5872] dvb-usb: error while querying for an remote control event. [ 187.741952][ T6721] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 188.797904][ T55] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 188.868908][ T5872] m920x_read = error: -19 [ 188.873324][ T5872] dvb-usb: error while querying for an remote control event. [ 189.167178][ T5878] m920x_read = error: -19 [ 189.171641][ T5878] dvb-usb: error while querying for an remote control event. [ 189.358770][ T5872] m920x_read = error: -19 [ 189.647577][ T5872] dvb-usb: error while querying for an remote control event. [ 189.999102][ T5872] m920x_read = error: -19 [ 190.003523][ T5872] dvb-usb: error while querying for an remote control event. [ 190.085829][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 190.128830][ T5872] m920x_read = error: -19 [ 190.133233][ T5872] dvb-usb: error while querying for an remote control event. [ 190.324076][ T5872] m920x_read = error: -19 [ 190.343561][ T5872] dvb-usb: error while querying for an remote control event. [ 190.490179][ T5872] m920x_read = error: -19 [ 190.503882][ T6742] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 190.523544][ T5872] dvb-usb: error while querying for an remote control event. [ 190.689481][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.708823][ T5872] m920x_read = error: -19 [ 190.713222][ T5872] dvb-usb: error while querying for an remote control event. [ 190.754427][ T5870] udevd[5870]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.809774][ T6753] netlink: 'syz.0.226': attribute type 11 has an invalid length. [ 190.849434][ T5872] m920x_read = error: -19 [ 190.854326][ T5872] dvb-usb: error while querying for an remote control event. [ 190.938301][ T3551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.969736][ T3551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.030934][ T977] m920x_read = error: -19 [ 191.161888][ T6763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.228'. [ 191.176355][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 191.210008][ T977] dvb-usb: error while querying for an remote control event. [ 191.502223][ T3551] bond0 (unregistering): Released all slaves [ 191.560884][ T6761] syz.4.229 uses obsolete (PF_INET,SOCK_PACKET) [ 191.580486][ T977] m920x_read = error: -19 [ 191.584888][ T977] dvb-usb: error while querying for an remote control event. [ 191.618246][ T6766] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.719268][ T5875] m920x_read = error: -19 [ 191.723981][ T5875] dvb-usb: error while querying for an remote control event. [ 191.744255][ T6543] hsr_slave_0: entered promiscuous mode [ 191.856879][ T6543] hsr_slave_1: entered promiscuous mode [ 191.915205][ T6543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.998653][ T6543] Cannot create hsr debugfs directory [ 192.337907][ T5875] m920x_read = error: -19 [ 192.617077][ T5875] dvb-usb: error while querying for an remote control event. [ 192.769505][ T977] m920x_read = error: -19 [ 192.820798][ T977] dvb-usb: error while querying for an remote control event. [ 193.056992][ T977] m920x_read = error: -19 [ 193.228747][ T977] dvb-usb: error while querying for an remote control event. [ 193.276648][ T30] audit: type=1804 audit(1748117767.397:10): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.231" name="/newroot/51/file0/file0" dev="ramfs" ino=11744 res=1 errno=0 [ 193.569618][ T977] m920x_read = error: -19 [ 193.574029][ T977] dvb-usb: error while querying for an remote control event. [ 194.297303][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.925003][ T977] m920x_read = error: -19 [ 194.929478][ T977] dvb-usb: error while querying for an remote control event. [ 195.048900][ T977] m920x_read = error: -19 [ 195.053303][ T977] dvb-usb: error while querying for an remote control event. [ 195.637201][ T977] m920x_read = error: -19 [ 195.666031][ T977] dvb-usb: error while querying for an remote control event. [ 195.809975][ T977] m920x_read = error: -19 [ 195.814514][ T977] dvb-usb: error while querying for an remote control event. [ 195.948823][ T977] m920x_read = error: -19 [ 195.953237][ T977] dvb-usb: error while querying for an remote control event. [ 196.064181][ T6796] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 196.099155][ T977] m920x_read = error: -19 [ 196.103565][ T977] dvb-usb: error while querying for an remote control event. [ 196.264319][ T977] m920x_read = error: -19 [ 196.277133][ T977] dvb-usb: error while querying for an remote control event. [ 196.398830][ T977] m920x_read = error: -19 [ 196.403273][ T977] dvb-usb: error while querying for an remote control event. [ 196.583028][ T977] m920x_read = error: -19 [ 196.710325][ T6824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.241'. [ 196.779352][ T977] dvb-usb: error while querying for an remote control event. [ 197.152013][ T5875] m920x_read = error: -19 [ 197.156513][ T5875] dvb-usb: error while querying for an remote control event. [ 197.311968][ T5875] m920x_read = error: -19 [ 197.316396][ T5875] dvb-usb: error while querying for an remote control event. [ 197.366936][ T3551] hsr_slave_0: left promiscuous mode [ 197.388142][ T3551] hsr_slave_1: left promiscuous mode [ 197.409885][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.429987][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.458861][ T5878] m920x_read = error: -19 [ 197.463264][ T5878] dvb-usb: error while querying for an remote control event. [ 197.472390][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.489990][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.566367][ T3551] veth1_macvtap: left promiscuous mode [ 197.588999][ T5875] m920x_read = error: -19 [ 197.607581][ T3551] veth0_macvtap: left promiscuous mode [ 197.619607][ T5875] dvb-usb: error while querying for an remote control event. [ 197.738962][ T5878] m920x_read = error: -19 [ 197.761195][ T5878] dvb-usb: error while querying for an remote control event. [ 197.832373][ T3551] veth1_vlan: left promiscuous mode [ 197.838849][ T3551] veth0_vlan: left promiscuous mode [ 197.899845][ T5875] m920x_read = error: -19 [ 197.904392][ T5875] dvb-usb: error while querying for an remote control event. [ 198.071370][ T5875] m920x_read = error: -19 [ 198.132151][ T5875] dvb-usb: error while querying for an remote control event. [ 198.479161][ T5878] m920x_read = error: -19 [ 198.483550][ T5878] dvb-usb: error while querying for an remote control event. [ 198.638942][ T5875] m920x_read = error: -19 [ 198.643414][ T5875] dvb-usb: error while querying for an remote control event. [ 198.812578][ T5875] m920x_read = error: -19 [ 198.844626][ T5875] dvb-usb: error while querying for an remote control event. [ 199.259747][ T5875] m920x_read = error: -19 [ 199.276766][ T5875] dvb-usb: error while querying for an remote control event. [ 199.404479][ T5878] m920x_read = error: -19 [ 199.414548][ T5878] dvb-usb: error while querying for an remote control event. [ 199.539405][ T5878] m920x_read = error: -19 [ 199.543893][ T5878] dvb-usb: error while querying for an remote control event. [ 199.684877][ T5875] m920x_read = error: -19 [ 199.743431][ T5875] dvb-usb: error while querying for an remote control event. [ 199.903603][ T5875] m920x_read = error: -19 [ 199.973557][ T5875] dvb-usb: error while querying for an remote control event. [ 200.105282][ T977] m920x_read = error: -19 [ 200.138741][ T977] dvb-usb: error while querying for an remote control event. [ 200.248944][ T977] m920x_read = error: -19 [ 200.253355][ T977] dvb-usb: error while querying for an remote control event. [ 200.368884][ T977] m920x_read = error: -19 [ 200.373320][ T977] dvb-usb: error while querying for an remote control event. [ 200.458136][ T3551] team0 (unregistering): Port device team_slave_1 removed [ 200.498839][ T977] m920x_read = error: -19 [ 200.503247][ T977] dvb-usb: error while querying for an remote control event. [ 200.523861][ T3551] team0 (unregistering): Port device team_slave_0 removed [ 200.608819][ T120] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.636134][ T977] m920x_read = error: -19 [ 200.644612][ T977] dvb-usb: error while querying for an remote control event. [ 200.773634][ T977] m920x_read = error: -19 [ 200.778048][ T977] dvb-usb: error while querying for an remote control event. [ 200.789428][ T120] usb 5-1: Using ep0 maxpacket: 16 [ 200.806145][ T120] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.823370][ T120] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 200.834243][ T120] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.843690][ T120] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.875527][ T120] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.892338][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.901089][ T120] usb 5-1: Product: syz [ 200.914548][ T120] usb 5-1: Manufacturer: syz [ 200.914761][ T977] m920x_read = error: -19 [ 200.922955][ T120] usb 5-1: SerialNumber: syz [ 200.924997][ T977] dvb-usb: error while querying for an remote control event. [ 201.058945][ T5875] m920x_read = error: -19 [ 201.063355][ T5875] dvb-usb: error while querying for an remote control event. [ 201.188874][ T5875] m920x_read = error: -19 [ 201.192311][ T120] usb 5-1: cannot find UAC_HEADER [ 201.196833][ T5875] dvb-usb: error while querying for an remote control event. [ 201.329234][ T5875] m920x_read = error: -19 [ 201.338561][ T5875] dvb-usb: error while querying for an remote control event. [ 201.363946][ T120] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.402228][ T120] usb 5-1: USB disconnect, device number 4 [ 201.499268][ T5875] m920x_read = error: -19 [ 201.510778][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.539179][ T5875] dvb-usb: error while querying for an remote control event. [ 201.683790][ T5875] m920x_read = error: -19 [ 201.688190][ T5875] dvb-usb: error while querying for an remote control event. [ 202.025773][ T5875] m920x_read = error: -19 [ 202.030866][ T5875] dvb-usb: error while querying for an remote control event. [ 202.292658][ T977] m920x_read = error: -19 [ 202.533304][ T977] dvb-usb: error while querying for an remote control event. [ 202.594023][ T6543] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.856521][ T977] m920x_read = error: -19 [ 202.861027][ T977] dvb-usb: error while querying for an remote control event. [ 202.897809][ T6543] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.979382][ T977] m920x_read = error: -19 [ 202.983958][ T977] dvb-usb: error while querying for an remote control event. [ 203.228627][ T977] m920x_read = error: -19 [ 203.316788][ T977] dvb-usb: error while querying for an remote control event. [ 203.704304][ T6543] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.778901][ T6875] 9pnet_fd: Insufficient options for proto=fd [ 203.937764][ T6543] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.622335][ T977] m920x_read = error: -19 [ 204.628464][ T977] dvb-usb: error while querying for an remote control event. [ 204.773462][ T977] m920x_read = error: -19 [ 204.810631][ T977] dvb-usb: error while querying for an remote control event. [ 204.931094][ T6882] fuse: Bad value for 'fd' [ 205.125162][ T5875] m920x_read = error: -19 [ 205.135264][ T5875] dvb-usb: error while querying for an remote control event. [ 205.258925][ T5875] m920x_read = error: -19 [ 205.294800][ T5875] dvb-usb: error while querying for an remote control event. [ 205.358411][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.449493][ T5875] m920x_read = error: -19 [ 205.466991][ T5875] dvb-usb: error while querying for an remote control event. [ 205.531955][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.640542][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.647832][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.969105][ T5875] m920x_read = error: -19 [ 205.973515][ T5875] dvb-usb: error while querying for an remote control event. [ 206.388507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.395764][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.509171][ T5872] m920x_read = error: -19 [ 206.517792][ T5872] dvb-usb: error while querying for an remote control event. [ 206.681804][ T6543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.697360][ T5875] m920x_read = error: -19 [ 206.718503][ T6920] netlink: 252 bytes leftover after parsing attributes in process `syz.1.261'. [ 206.736661][ T6543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.738846][ T5875] dvb-usb: error while querying for an remote control event. [ 206.869932][ T6926] usb usb8: usbfs: process 6926 (syz.4.263) did not claim interface 0 before use [ 206.929865][ T5875] m920x_read = error: -19 [ 206.934392][ T5875] dvb-usb: error while querying for an remote control event. [ 207.068784][ T5875] m920x_read = error: -19 [ 207.073190][ T5875] dvb-usb: error while querying for an remote control event. [ 207.376358][ T5875] m920x_read = error: -19 [ 207.380838][ T5875] dvb-usb: error while querying for an remote control event. [ 207.498843][ T5878] m920x_read = error: -19 [ 207.503421][ T5878] dvb-usb: error while querying for an remote control event. [ 207.565598][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.619690][ T5878] m920x_read = error: -19 [ 207.643712][ T5878] dvb-usb: error while querying for an remote control event. [ 208.418988][ T5875] m920x_read = error: -19 [ 208.423411][ T5875] dvb-usb: error while querying for an remote control event. [ 208.568831][ T5875] m920x_read = error: -19 [ 208.740650][ T5875] dvb-usb: error while querying for an remote control event. [ 208.868903][ T5875] m920x_read = error: -19 [ 208.873310][ T5875] dvb-usb: error while querying for an remote control event. [ 209.085716][ T5878] m920x_read = error: -19 [ 209.096049][ T5878] dvb-usb: error while querying for an remote control event. [ 209.412277][ T5878] m920x_read = error: -19 [ 209.416684][ T5878] dvb-usb: error while querying for an remote control event. [ 209.703242][ T5875] m920x_read = error: -19 [ 209.708104][ T5875] dvb-usb: error while querying for an remote control event. [ 209.854167][ T5875] m920x_read = error: -19 [ 210.395076][ T5875] dvb-usb: error while querying for an remote control event. [ 210.648893][ T5875] m920x_read = error: -19 [ 210.828721][ T5875] dvb-usb: error while querying for an remote control event. [ 211.067824][ T6967] fuse: Bad value for 'fd' [ 211.078810][ T5875] m920x_read = error: -19 [ 211.109221][ T5875] dvb-usb: error while querying for an remote control event. [ 211.408241][ T6984] fuse: Bad value for 'fd' [ 211.570071][ T5875] m920x_read = error: -19 [ 211.742290][ T5875] dvb-usb: error while querying for an remote control event. [ 211.759303][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 211.761083][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 211.765523][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 212.347505][ T5875] m920x_read = error: -19 [ 212.352069][ T5875] dvb-usb: error while querying for an remote control event. [ 212.489061][ T5875] m920x_read = error: -19 [ 212.494766][ T5875] dvb-usb: error while querying for an remote control event. [ 212.859142][ T5875] m920x_read = error: -19 [ 212.863768][ T5875] dvb-usb: error while querying for an remote control event. [ 213.079407][ T5875] m920x_read = error: -19 [ 213.128777][ T5875] dvb-usb: error while querying for an remote control event. [ 213.223261][ T6994] warning: `syz.3.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 213.296557][ T5875] m920x_read = error: -19 [ 213.322162][ T5875] dvb-usb: error while querying for an remote control event. [ 213.435836][ T6543] veth0_vlan: entered promiscuous mode [ 213.481115][ T5875] m920x_read = error: -19 [ 213.680008][ T5825] Bluetooth: hci5: link tx timeout [ 213.686197][ T5825] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.701972][ T6543] veth1_vlan: entered promiscuous mode [ 213.702504][ T5875] dvb-usb: error while querying for an remote control event. [ 213.967985][ T120] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 214.348212][ T5875] m920x_read = error: -19 [ 214.356182][ T5875] dvb-usb: error while querying for an remote control event. [ 214.472917][ T6543] veth0_macvtap: entered promiscuous mode [ 214.527972][ T6543] veth1_macvtap: entered promiscuous mode [ 214.548250][ T5875] m920x_read = error: -19 [ 214.552840][ T5875] dvb-usb: error while querying for an remote control event. [ 214.611638][ T120] usb 1-1: Using ep0 maxpacket: 8 [ 214.650083][ T120] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.660593][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.693757][ T120] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 214.702901][ T5875] m920x_read = error: -19 [ 214.707288][ T5875] dvb-usb: error while querying for an remote control event. [ 214.730321][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.737633][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.796493][ T120] usb 1-1: Product: syz [ 214.879276][ T120] usb 1-1: Manufacturer: syz [ 214.912137][ T120] usb 1-1: SerialNumber: syz [ 214.952908][ T5878] m920x_read = error: -19 [ 215.040366][ T5878] dvb-usb: error while querying for an remote control event. [ 215.050626][ T120] usb 1-1: config 0 descriptor?? [ 215.095680][ T7018] tmpfs: Bad value for 'mpol' [ 215.351097][ T120] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 215.381349][ T6543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.427128][ T120] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 215.436349][ T6543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.446035][ T5878] m920x_read = error: -19 [ 215.452642][ T120] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 215.463576][ T6543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.482653][ T6543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.753824][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 215.897370][ T5878] dvb-usb: error while querying for an remote control event. [ 216.018456][ T977] usb 1-1: USB disconnect, device number 4 [ 216.349485][ T5875] m920x_read = error: -19 [ 216.506602][ T5875] dvb-usb: error while querying for an remote control event. [ 216.645252][ T30] audit: type=1804 audit(1748117790.767:11): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.284" name="/newroot/67/file0/file0" dev="ramfs" ino=13553 res=1 errno=0 [ 216.658884][ T5872] m920x_read = error: -19 [ 216.701556][ T5872] dvb-usb: error while querying for an remote control event. [ 216.767535][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.808800][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.839389][ T5872] m920x_read = error: -19 [ 216.843800][ T5872] dvb-usb: error while querying for an remote control event. [ 216.931124][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.959013][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.988846][ T5872] m920x_read = error: -19 [ 216.993247][ T5872] dvb-usb: error while querying for an remote control event. [ 217.223085][ T5872] m920x_read = error: -19 [ 217.240266][ T5872] dvb-usb: error while querying for an remote control event. [ 217.928299][ T5129] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 217.928338][ T5129] Bluetooth: hci2: unexpected subevent 0x0d length: 261 > 260 [ 217.943217][ T5129] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 218.206584][ T977] m920x_read = error: -19 [ 218.218082][ T977] dvb-usb: error while querying for an remote control event. [ 219.032400][ T5872] m920x_read = error: -19 [ 219.036814][ T5872] dvb-usb: error while querying for an remote control event. [ 219.158851][ T5872] m920x_read = error: -19 [ 219.163266][ T5872] dvb-usb: error while querying for an remote control event. [ 219.288812][ T5878] m920x_read = error: -19 [ 219.293219][ T5878] dvb-usb: error while querying for an remote control event. [ 219.438832][ T5878] m920x_read = error: -19 [ 220.498245][ T5878] dvb-usb: error while querying for an remote control event. [ 220.643928][ T5872] m920x_read = error: -19 [ 220.648344][ T5872] dvb-usb: error while querying for an remote control event. [ 220.999671][ T5872] m920x_read = error: -19 [ 221.004072][ T5872] dvb-usb: error while querying for an remote control event. [ 221.679619][ T7069] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 221.727772][ T5872] m920x_read = error: -19 [ 221.732271][ T5872] dvb-usb: error while querying for an remote control event. [ 221.854231][ T5872] m920x_read = error: -19 [ 221.952177][ T5872] dvb-usb: error while querying for an remote control event. [ 221.995331][ T7063] syz.5.294: attempt to access beyond end of device [ 221.995331][ T7063] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 222.009470][ T7063] syz.5.294: attempt to access beyond end of device [ 222.009470][ T7063] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 222.023659][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 222.033626][ T7063] syz.5.294: attempt to access beyond end of device [ 222.033626][ T7063] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 222.046629][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 222.056263][ T7063] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 222.064282][ T7063] UDF-fs: Scanning with blocksize 512 failed [ 222.071404][ T7063] syz.5.294: attempt to access beyond end of device [ 222.071404][ T7063] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 222.084521][ T7063] syz.5.294: attempt to access beyond end of device [ 222.084521][ T7063] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 222.097548][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 222.107346][ T7063] syz.5.294: attempt to access beyond end of device [ 222.107346][ T7063] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 222.121625][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 222.131306][ T7063] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 222.139023][ T7063] UDF-fs: Scanning with blocksize 1024 failed [ 222.145905][ T7063] syz.5.294: attempt to access beyond end of device [ 222.145905][ T7063] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 222.159124][ T7063] syz.5.294: attempt to access beyond end of device [ 222.159124][ T7063] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 222.172180][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 222.181907][ T7063] syz.5.294: attempt to access beyond end of device [ 222.181907][ T7063] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 222.194925][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 222.204596][ T7063] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 222.212250][ T7063] UDF-fs: Scanning with blocksize 2048 failed [ 222.218841][ T7063] syz.5.294: attempt to access beyond end of device [ 222.218841][ T7063] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 222.234812][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 222.244575][ T7063] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 222.254179][ T7063] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 222.261919][ T7063] UDF-fs: Scanning with blocksize 4096 failed [ 222.267976][ T7063] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 222.303545][ T5872] m920x_read = error: -19 [ 222.307948][ T5872] dvb-usb: error while querying for an remote control event. [ 223.348433][ T5872] m920x_read = error: -19 [ 223.353195][ T5872] dvb-usb: error while querying for an remote control event. [ 224.009911][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.035266][ T5878] m920x_read = error: -19 [ 224.039797][ T5878] dvb-usb: error while querying for an remote control event. [ 224.219110][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 224.240828][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.278174][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.327749][ T24] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 224.343640][ T5878] m920x_read = error: -19 [ 224.348859][ T5878] dvb-usb: error while querying for an remote control event. [ 224.401684][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.746304][ T5872] m920x_read = error: -19 [ 224.767268][ T24] usb 5-1: config 0 descriptor?? [ 224.784708][ T5872] dvb-usb: error while querying for an remote control event. [ 225.044665][ T5872] m920x_read = error: -19 [ 225.056333][ T5872] dvb-usb: error while querying for an remote control event. [ 225.179311][ T5872] m920x_read = error: -19 [ 225.287953][ T5872] dvb-usb: error while querying for an remote control event. [ 225.643125][ T5872] m920x_read = error: -19 [ 225.835930][ T5872] dvb-usb: error while querying for an remote control event. [ 225.965418][ T7107] random: crng reseeded on system resumption [ 226.765987][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 227.051999][ T977] m920x_read = error: -19 [ 227.146526][ T977] dvb-usb: error while querying for an remote control event. [ 227.431541][ T977] m920x_read = error: -19 [ 227.552362][ T977] dvb-usb: error while querying for an remote control event. [ 227.865666][ T977] m920x_read = error: -19 [ 227.956554][ T977] dvb-usb: error while querying for an remote control event. [ 228.341374][ T977] m920x_read = error: -19 [ 228.354696][ T977] dvb-usb: error while querying for an remote control event. [ 228.620325][ T977] m920x_read = error: -19 [ 228.696433][ T977] dvb-usb: error while querying for an remote control event. [ 228.959045][ T977] m920x_read = error: -19 [ 228.967445][ T977] dvb-usb: error while querying for an remote control event. [ 229.433503][ T5899] m920x_read = error: -19 [ 229.486240][ T5899] dvb-usb: error while querying for an remote control event. [ 229.817091][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.895591][ T977] m920x_read = error: -19 [ 229.984541][ T977] dvb-usb: error while querying for an remote control event. [ 230.286610][ T5872] m920x_read = error: -19 [ 230.378041][ T5872] dvb-usb: error while querying for an remote control event. [ 230.619279][ T5872] m920x_read = error: -19 [ 230.706064][ T5872] dvb-usb: error while querying for an remote control event. [ 230.928770][ T24] usb 5-1: USB disconnect, device number 5 [ 231.019326][ T5899] m920x_read = error: -19 [ 231.023734][ T5899] dvb-usb: error while querying for an remote control event. [ 231.041636][ T5129] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 231.185120][ T5899] m920x_read = error: -19 [ 231.207166][ T5899] dvb-usb: error while querying for an remote control event. [ 231.507291][ T5899] m920x_read = error: -19 [ 231.518729][ T5899] dvb-usb: error while querying for an remote control event. [ 232.024268][ T5899] m920x_read = error: -19 [ 232.044916][ T5899] dvb-usb: error while querying for an remote control event. [ 232.269321][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.307422][ T7136] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 232.323841][ T5899] m920x_read = error: -19 [ 232.328233][ T5899] dvb-usb: error while querying for an remote control event. [ 232.372849][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.381608][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.502409][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 232.552387][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.583464][ T5899] m920x_read = error: -19 [ 232.639603][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.775131][ T47] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 232.784516][ T5899] dvb-usb: error while querying for an remote control event. [ 232.784586][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.147853][ T47] usb 6-1: config 0 descriptor?? [ 233.462711][ T977] m920x_read = error: -19 [ 233.473736][ T977] dvb-usb: error while querying for an remote control event. [ 233.486715][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.494025][ T7136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.502466][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.509844][ T7136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.583718][ T7136] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 233.629066][ T5875] m920x_read = error: -19 [ 233.645156][ T5875] dvb-usb: error while querying for an remote control event. [ 233.784012][ T120] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 233.868073][ T7147] netlink: 'syz.3.310': attribute type 11 has an invalid length. [ 234.305061][ T5875] m920x_read = error: -19 [ 234.926063][ T47] usbhid 6-1:0.0: can't add hid device: -71 [ 234.941866][ T5875] dvb-usb: error while querying for an remote control event. [ 234.951065][ T47] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.992150][ T120] usb 1-1: Using ep0 maxpacket: 8 [ 235.009341][ T47] usb 6-1: USB disconnect, device number 2 [ 235.038008][ T120] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 235.118813][ T5875] m920x_read = error: -19 [ 235.131393][ T5875] dvb-usb: error while querying for an remote control event. [ 235.146674][ T120] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 235.177043][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.209033][ T120] usb 1-1: Product: syz [ 235.216540][ T120] usb 1-1: Manufacturer: syz [ 235.243275][ T120] usb 1-1: SerialNumber: syz [ 235.286767][ T120] usb 1-1: config 0 descriptor?? [ 235.344354][ T120] usb 1-1: can't set config #0, error -71 [ 235.438752][ T120] usb 1-1: USB disconnect, device number 5 [ 236.092803][ T5875] m920x_read = error: -19 [ 236.097220][ T5875] dvb-usb: error while querying for an remote control event. [ 236.182966][ T7169] netlink: 'syz.4.317': attribute type 6 has an invalid length. [ 236.218814][ T5875] m920x_read = error: -19 [ 236.223213][ T5875] dvb-usb: error while querying for an remote control event. [ 236.349002][ T7179] netlink: 252 bytes leftover after parsing attributes in process `syz.0.315'. [ 236.371324][ T5875] m920x_read = error: -19 [ 236.583072][ T5875] dvb-usb: error while querying for an remote control event. [ 237.311732][ T5875] m920x_read = error: -19 [ 237.316138][ T5875] dvb-usb: error while querying for an remote control event. [ 237.460436][ T5875] m920x_read = error: -19 [ 237.464836][ T5875] dvb-usb: error while querying for an remote control event. [ 237.597721][ T5875] m920x_read = error: -19 [ 237.611406][ T7194] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 237.619186][ T7194] netlink: 224 bytes leftover after parsing attributes in process `syz.0.321'. [ 237.674827][ T5875] dvb-usb: error while querying for an remote control event. [ 237.799595][ T5189] udevd[5189]: worker [5945] terminated by signal 33 (Unknown signal 33) [ 237.837426][ T5189] udevd[5189]: worker [5945] failed while handling '/devices/virtual/block/loop1' [ 237.999771][ T5875] m920x_read = error: -19 [ 238.004255][ T5875] dvb-usb: error while querying for an remote control event. [ 238.148943][ T5875] m920x_read = error: -19 [ 238.244968][ T5875] dvb-usb: error while querying for an remote control event. [ 238.269959][ T5872] kernel write not supported for file /sg0 (pid: 5872 comm: kworker/0:3) [ 238.359048][ T7208] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 238.359048][ T7208] program syz.5.325 not setting count and/or reply_len properly [ 238.390362][ T5872] m920x_read = error: -19 [ 238.405163][ T5872] dvb-usb: error while querying for an remote control event. [ 238.539019][ T5872] m920x_read = error: -19 [ 238.543425][ T5872] dvb-usb: error while querying for an remote control event. [ 239.042447][ T5872] m920x_read = error: -19 [ 239.046855][ T5872] dvb-usb: error while querying for an remote control event. [ 239.174162][ T5872] m920x_read = error: -19 [ 239.192458][ T5872] dvb-usb: error while querying for an remote control event. [ 239.318991][ T5872] m920x_read = error: -19 [ 239.380635][ T5872] dvb-usb: error while querying for an remote control event. [ 239.892107][ T5872] m920x_read = error: -19 [ 240.006586][ T5872] dvb-usb: error while querying for an remote control event. [ 240.219009][ T5875] m920x_read = error: -19 [ 240.317768][ T5875] dvb-usb: error while querying for an remote control event. [ 240.416844][ T7225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.428697][ T7225] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 241.415467][ T5875] m920x_read = error: -19 [ 241.549804][ T5875] dvb-usb: error while querying for an remote control event. [ 241.614703][ T7229] netlink: 252 bytes leftover after parsing attributes in process `syz.5.331'. [ 241.669312][ T977] m920x_read = error: -19 [ 241.673692][ T977] dvb-usb: error while querying for an remote control event. [ 241.736778][ T7231] syz.1.332 (7231): /proc/7231/oom_adj is deprecated, please use /proc/7231/oom_score_adj instead. [ 241.829387][ T977] m920x_read = error: -19 [ 241.835383][ T977] dvb-usb: error while querying for an remote control event. [ 241.978848][ T977] m920x_read = error: -19 [ 241.991832][ T977] dvb-usb: error while querying for an remote control event. [ 242.059274][ T7243] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI [ 242.071219][ T7243] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 242.079657][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.1.335 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 242.091568][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.101644][ T7243] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 242.106807][ T7243] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 48 d5 f9 49 8b 1f 31 ff 48 89 [ 242.126437][ T7243] RSP: 0018:ffffc9000b34fc00 EFLAGS: 00010206 [ 242.132539][ T7243] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 242.140530][ T7243] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 242.148514][ T7243] RBP: ffffc9000b34fd60 R08: ffff8880627bc41f R09: 1ffff1100c4f7883 [ 242.156495][ T7243] R10: dffffc0000000000 R11: ffffffff884a7d00 R12: 0000000000000001 [ 242.164467][ T7243] R13: ffffc9000b34fe00 R14: dffffc0000000000 R15: 0000000000000108 [ 242.172439][ T7243] FS: 00007f00e2eb26c0(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 242.181394][ T7243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.187985][ T7243] CR2: 00007f00e2eb1f98 CR3: 000000007d476000 CR4: 00000000003526f0 [ 242.195970][ T7243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.203950][ T7243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.211927][ T7243] Call Trace: [ 242.215207][ T7243] [ 242.218146][ T7243] ? __pfx_bcsp_recv+0x10/0x10 [ 242.222924][ T7243] ? rcu_read_lock_any_held+0xb3/0x120 [ 242.228414][ T7243] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 242.234412][ T7243] ? tty_audit_push+0x7c/0x250 [ 242.239199][ T7243] hci_uart_tty_receive+0x191/0x220 [ 242.244422][ T7243] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 242.250159][ T7243] tiocsti+0x239/0x2c0 [ 242.254238][ T7243] ? __pfx_tiocsti+0x10/0x10 [ 242.258839][ T7243] ? __rcu_read_unlock+0x84/0xe0 [ 242.263800][ T7243] ? __fget_files+0x3a0/0x420 [ 242.268484][ T7243] ? __fget_files+0x2a/0x420 [ 242.273082][ T7243] tty_ioctl+0x626/0xde0 [ 242.277331][ T7243] ? __pfx_tty_ioctl+0x10/0x10 [ 242.282097][ T7243] __se_sys_ioctl+0xf9/0x170 [ 242.286698][ T7243] do_syscall_64+0xf6/0x210 [ 242.291209][ T7243] ? clear_bhb_loop+0x60/0xb0 [ 242.295892][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.301795][ T7243] RIP: 0033:0x7f00e1f8e969 [ 242.306229][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.325844][ T7243] RSP: 002b:00007f00e2eb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.334300][ T7243] RAX: ffffffffffffffda RBX: 00007f00e21b6080 RCX: 00007f00e1f8e969 [ 242.342277][ T7243] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 242.350260][ T7243] RBP: 00007f00e2010ab1 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 242.358228][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.366199][ T7243] R13: 0000000000000001 R14: 00007f00e21b6080 R15: 00007fff6fe98918 [ 242.374181][ T7243] [ 242.377203][ T7243] Modules linked in: [ 242.381998][ T7243] ---[ end trace 0000000000000000 ]--- [ 242.388288][ T977] m920x_read = error: -19 [ 242.393181][ T977] dvb-usb: error while querying for an remote control event. [ 242.518779][ T5875] m920x_read = error: -19 [ 242.530528][ T7243] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 242.567438][ T5875] dvb-usb: error while querying for an remote control event. [ 242.612604][ T7243] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 48 d5 f9 49 8b 1f 31 ff 48 89 [ 242.710694][ T7243] RSP: 0018:ffffc9000b34fc00 EFLAGS: 00010206 [ 242.716859][ T7243] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 242.724914][ T7243] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 242.732962][ T7243] RBP: ffffc9000b34fd60 R08: ffff8880627bc41f R09: 1ffff1100c4f7883 [ 242.740991][ T7243] R10: dffffc0000000000 R11: ffffffff884a7d00 R12: 0000000000000001 [ 242.749018][ T7243] R13: ffffc9000b34fe00 R14: dffffc0000000000 R15: 0000000000000108 [ 242.757019][ T7243] FS: 00007f00e2eb26c0(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 242.766052][ T7243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.766131][ T5875] m920x_read = error: -19 [ 242.772690][ T7243] CR2: 00007f3e57ee7d60 CR3: 000000007d476000 CR4: 00000000003526f0 [ 242.772710][ T7243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.772723][ T7243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.772738][ T7243] Kernel panic - not syncing: Fatal exception [ 242.773028][ T7243] Kernel Offset: disabled