last executing test programs: 24m18.327484826s ago: executing program 32 (id=1278): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x7, 0x0, 0x4}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000402100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 19m8.261114085s ago: executing program 33 (id=2187): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x98, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/231, 0xe7, 0x0, 0x8}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fda={0x66646185, 0x5, 0x1, 0x2f}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x0, 0xf}}, 0x0}, 0x400}], 0xb5, 0x0, &(0x7f0000000640)="cf01aa5953d06b781f0946501e48fd8be5e16e4e8f7d37425ec1fcb7ddd3c18473947cfdca51a4108ceb318b49915f1ff1f2665708664e3fd401eca62b6359873971561822eac5adc45cf2a4ed5a6fa0b0c4001a862445b3f1d7ab40e34db18b60ffe0098a17a02c1510c61688f9d91797d6ebc21efacc9a749438655a4914ff068dc20817f7579ce3d0409ebedce1d0792994591d7e64c3ff57b2344678eb24491140a901742b6201a12c88dcf3c198a4687c3722"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x12d, &(0x7f0000000140)={0x0, 0x5885, 0x1}, &(0x7f0000000340), &(0x7f0000000280)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) 18m15.923908543s ago: executing program 34 (id=2317): syz_init_net_socket$ax25(0x3, 0x2, 0x0) getpriority(0x3, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bind(0x0, 0x0, 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8ecd0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x41, 0x4}}}}]}, 0x44}}, 0x44080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, r7], 0x3}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) accept$nfc_llcp(r2, &(0x7f0000000200), &(0x7f0000000280)=0x60) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17m37.868908275s ago: executing program 7 (id=2467): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 17m36.168234617s ago: executing program 7 (id=2474): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) unshare(0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r5, r5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 17m35.038280085s ago: executing program 7 (id=2476): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffff, 0x9, &(0x7f0000000200)=0x8) sysinfo(&(0x7f0000000000)=""/109) sysinfo(&(0x7f00000000c0)=""/199) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f00000001c0)) socket(0x2b, 0x80801, 0x1) socket(0x2b, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4000000000000000, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000209030000000000008000000000000018000200040001"], 0x2c}}, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x40100, 0x0) name_to_handle_at(r6, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x0) 17m34.099779304s ago: executing program 6 (id=2481): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb}) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 17m32.535643825s ago: executing program 5 (id=2482): syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x2e0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x248, 0x1f0, 0x1f0, 0x248, 0x1f0, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xff000000, 'macvtap0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x32, 0x1, 0x30}, 0x0, 0xb8, 0x100, 0x3000000, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1000, 0x4, 0xf, '\x00', {0x67eb}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@multiport={{0x50}, {0x1, 0x3, [0x4e21, 0x4e24, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x4e21, 0x4e22, 0x4e21, 0x4e22, 0x4e23], [0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x0, 0x6, 0x0, 0x0, 0x3]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) 17m32.327661783s ago: executing program 7 (id=2484): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 17m31.106257171s ago: executing program 6 (id=2485): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x0, 0xa87b1ca1aba2f6e5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 17m31.048943389s ago: executing program 5 (id=2486): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x60480) r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) write$cgroup_int(r1, &(0x7f0000000200), 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xffffffffffffff63, &(0x7f0000000300)=ANY=[]) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r5, {0xfff1, 0x6}, {}, {0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x40) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) 17m28.669630182s ago: executing program 5 (id=2490): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000280), 0x4) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/73, 0x49}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000000000, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x4}], 0x1, 0x0, &(0x7f0000000380)={[0x8000000000000001]}, 0x8) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x34, 0x0, &(0x7f0000000000)) 17m28.407514239s ago: executing program 7 (id=2491): syz_usb_connect$cdc_ecm(0x2, 0x5a, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x5, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x8, 0x4, @thr={0x0, &(0x7f00000000c0)}}, &(0x7f0000000400)) getpid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x20b00, 0x0) write$char_usb(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) mq_notify(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100003e0000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x327fa1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 17m25.041431271s ago: executing program 5 (id=2494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000018000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000"], 0x48) 17m23.687311489s ago: executing program 7 (id=2495): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r1, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 17m23.684338392s ago: executing program 6 (id=2496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000010000000000ff020000000000000000000000000001000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) signalfd4(r4, &(0x7f0000000180), 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000001a40)=[{{&(0x7f0000000580)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000001e00)=""/4096, 0x1000}}], 0x1, 0x40002121, &(0x7f0000001ac0)={r7, r8+10000000}) write$tcp_congestion(r6, &(0x7f0000000500)='bic\x00', 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r6) 17m21.391877277s ago: executing program 6 (id=2497): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) ioperm(0x0, 0x7fff, 0xd) ioperm(0x3, 0x7fffffffffffffff, 0x100) 17m20.445208954s ago: executing program 6 (id=2499): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c4", 0x63) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1adc51, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000300), 0x20000000}, 0x20) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x5d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(0x0, 0x4880) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 17m14.12592418s ago: executing program 6 (id=2501): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x6000001f}) socket$inet(0x2, 0xa, 0xe0) read$char_usb(r7, &(0x7f00000004c0)=""/185, 0xb9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) rename(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) getdents(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x17e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1004}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b8b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x336}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000000) 17m13.819802683s ago: executing program 5 (id=2502): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 17m12.55926582s ago: executing program 5 (id=2504): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x44) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6000001f}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x8000) fanotify_mark(r5, 0x8, 0x5000003a, r4, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$sequencer(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481"], 0x21) 17m12.206727037s ago: executing program 35 (id=2493): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() process_vm_readv(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="000000001c"], 0x60}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x5c5803, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRESOCT=r7], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 17m8.371381644s ago: executing program 36 (id=2495): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r1, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 16m57.279377175s ago: executing program 37 (id=2501): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x6000001f}) socket$inet(0x2, 0xa, 0xe0) read$char_usb(r7, &(0x7f00000004c0)=""/185, 0xb9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) rename(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) getdents(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x140, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x17e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1004}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b8b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x336}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000000) 16m57.074043534s ago: executing program 38 (id=2504): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x44) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6000001f}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x8000) fanotify_mark(r5, 0x8, 0x5000003a, r4, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$sequencer(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481"], 0x21) 7m8.931663356s ago: executing program 2 (id=4529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x3ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xc403}, 0x1c) 7m8.695875274s ago: executing program 2 (id=4535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1d, 0x5, 0xe044) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000006c0)={0x2, 0x0, @ioapic={0xdddd1000, 0x0, 0xffff4822, 0x8, 0x0, [{0x1, 0x0, 0x3a, '\x00', 0x7}, {0x4, 0x4, 0x7f}, {0x0, 0x6, 0x0, '\x00', 0x21}, {0x9, 0x5, 0x7, '\x00', 0x1}, {0x1, 0xff, 0x81, '\x00', 0x1}, {0x3e, 0x10, 0x8, '\x00', 0x1}, {0xfc, 0x7, 0x0, '\x00', 0x8}, {0x4, 0x0, 0x80, '\x00', 0x7}, {0xf8, 0x2, 0x6, '\x00', 0xd7}, {0x1, 0xb, 0xfb, '\x00', 0x2}, {0x9, 0x73, 0x7, '\x00', 0x4}, {0x8, 0x40, 0x5a, '\x00', 0x1}, {0xb, 0x0, 0x2, '\x00', 0x80}, {0x5, 0xf, 0xc}, {0x8, 0x5, 0x1, '\x00', 0x8}, {0x6, 0xb3, 0x7, '\x00', 0x1}, {0x0, 0x7, 0x0, '\x00', 0xe6}, {0x0, 0x6, 0x3, '\x00', 0xa}, {0xf4, 0x7, 0xb, '\x00', 0x35}, {0x7, 0xd5, 0x3, '\x00', 0x2}, {0xeb, 0x78, 0x0, '\x00', 0x7b}, {0xf, 0x5, 0xf8, '\x00', 0x8}, {0xfc, 0x70, 0x8, '\x00', 0x6}, {0xf7, 0x1, 0x8, '\x00', 0x81}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000900000000000000000002"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r9 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r9, r10, r9}, &(0x7f0000000480)=""/199, 0xc7, &(0x7f0000000580)={&(0x7f0000000340)={'blake2b-256\x00'}}) fcntl$lock(r8, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0x7ffffffffffd, 0x3}) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r11, &(0x7f0000001400)=""/4076, 0xfffffeea) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000009c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24084}, 0x40) 7m7.647068064s ago: executing program 2 (id=4536): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000002c0)={0x4, "75378525924915113e4122ad263ff47d3b97a8a45d6b94a88abab4c98100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r1}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x8201, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000140)) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) 7m5.738440375s ago: executing program 2 (id=4543): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) socket(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0x2, {0x8000, 0x200, 0x87, 0x8}}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x100, 0x0, {0x1, 0x0, 0x8, 0xfffffff9}}) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 7m4.139600354s ago: executing program 2 (id=4549): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000340)={0x90, 0x0, r1, {0x2, 0x3000000, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x5, 0x51b5, 0x4, 0x1, 0x7fffffff, 0xf5, 0x6000, 0x9, r2, r3, 0x6, 0x3e}}}, 0x90) mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2200c3a, 0x0) dup3(r4, r0, 0x0) 7m3.981403196s ago: executing program 2 (id=4550): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000190c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000019240), 0x0, 0x6008000, &(0x7f0000019080)={0xa, 0x0, 0x0, @private0, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = syz_open_dev$loop(0x0, 0x2, 0xa6040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x8) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0xc4e9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 6m47.4676337s ago: executing program 39 (id=4550): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000190c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000019240), 0x0, 0x6008000, &(0x7f0000019080)={0xa, 0x0, 0x0, @private0, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = syz_open_dev$loop(0x0, 0x2, 0xa6040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x8) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0xc4e9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4m36.270463452s ago: executing program 4 (id=5093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r1, 0x303, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0xc00e0000) 4m36.179126629s ago: executing program 4 (id=5096): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000a40)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x20000010000}}]}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {0x1}, {}, @ext={0x0, 0x0}}], 0x38) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m32.662184487s ago: executing program 4 (id=5107): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3ac1, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='Y\x00', @ANYBLOB="00002bbd7000fcdbdf250b0000003400018008000300ac1e010108000600080000000500020005000000080006001800000008000300ac1e010106"], 0x58}, 0x1, 0x0, 0x0, 0x400c095}, 0x20040041) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2db7fffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYBLOB='c', @ANYRESDEC=r1, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000700020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r7, &(0x7f0000002980), 0x400000000000239, 0x0) r8 = semget(0x3, 0x3, 0x200) semop(r8, &(0x7f0000000000)=[{0x4, 0x8, 0x800}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m31.467469871s ago: executing program 4 (id=5112): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000bc0), 0x15, 0x40) syz_open_dev$video4linux(0x0, 0x6, 0x391040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x6) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) write$UHID_INPUT(r2, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0x30000) dup(0xffffffffffffffff) 4m30.086173673s ago: executing program 4 (id=5114): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r1, &(0x7f00000004c0)=""/185, 0xb9) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) sendmsg$netlink(r2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000002c0)=0x8001100) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 4m28.411585922s ago: executing program 4 (id=5118): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000009881162c165d6d3b1be9926776c0084dba0cc1e0e8f242df8f4968c7f56bbae55c92bad5dc0aafee81c63d97896e", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2802, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000140)=[0x6b], &(0x7f0000000180), &(0x7f00000001c0), 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e6, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000002c0)={0x1f0f045, 0x5}) poll(&(0x7f0000000140)=[{r8, 0x19f23}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x0) 4m27.766707955s ago: executing program 40 (id=5118): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000009881162c165d6d3b1be9926776c0084dba0cc1e0e8f242df8f4968c7f56bbae55c92bad5dc0aafee81c63d97896e", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2802, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000140)=[0x6b], &(0x7f0000000180), &(0x7f00000001c0), 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e6, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000002c0)={0x1f0f045, 0x5}) poll(&(0x7f0000000140)=[{r8, 0x19f23}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x0) 21.833727824s ago: executing program 3 (id=5947): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x6c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc010}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000a00), 0x80, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f", @ANYRES32=r1], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 17.120537932s ago: executing program 3 (id=5963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f00000004c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2a4}, @random="710dc01dafa5", @device_b, @device_b, {0x2, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000300)={0x8, 0x20000008f}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x7) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f000000010003", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0x8, 0x1}, 0x70, 0x0) memfd_create(&(0x7f00000000c0)='{%)\x00', 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x120) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100}, 0x0) 15.332664024s ago: executing program 3 (id=5971): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x14d000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f0000001800)=[{&(0x7f0000001740)="3d5baf0ad374282c46a587371ba6c1e011c87cbaef6a380da7a0a1619232850a7df21db78ac1a28502109bbe7356a1937ff0702aca5cc7d96867c783d6b9868218dbf5f3bf0d7a248acb11772f41bff4ac0f8c36ade84e94a4d368b7bb63f33f9179c9adac909861dbba1d7ddc58f270a08df571ea9f7c9e59c24fc996c0e6d84d44b3c23db2e7aca249932ce5129a2e91b0f3c66e2b0000", 0x98}, {&(0x7f0000000280)="4bfccd6a2027db00d746521cfb41a5614710b47c5f541a645acaa528ef79d77bcc977132c303114dfd9f0c3124664513d33e122006", 0x35}, {&(0x7f0000001540)="328bc4d9e204c939267dc7b42ab39c60504d30a5bb5919fe7104a298f0c65f0e3527c6ced5336289d5e8bb", 0x2b}, {&(0x7f00000015c0)="5ad488e0ed9fa5743ced0228ae1525a4e9a11a3e5fe8a27038e9e3b0ffc931bcf37d1dc47a92c6051ebc5c18c6c49083f29e313813ab2f3802db455d9a62f55f6df0566e2c052c524940b02ef7cc689a0a53758f6361007ee1518a58a373bdecdb06ad71f7c432408c0a4c9aca6e37ea06658e44fc7cd3", 0x77}, {&(0x7f0000001640)="c03b0638d78b0f6aa4f1fb85cda8dfcc079a878bdf155906a33e67379b753739ef2a110cf2619b64596dea4860228da8a42685f80610d9d0db54abce30aa722f37c3e626c5999a8f89294ccf0cbb25b0e463740d0c2b52894b22284279aa6832a2beaea85d89b5856ee80b", 0x6b}, {&(0x7f0000000540)="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", 0x1000}], 0x6) 14.528787287s ago: executing program 3 (id=5976): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltaction={0x54, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001ac0)=""/89) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[]}, 0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001, 0x1000000}}, &(0x7f0000000200)={0x30, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x40045304, &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffed, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12a35}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.098135717s ago: executing program 0 (id=5981): openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xf, &(0x7f0000000040)={0x15e6c000, 0x400000000e1}, 0x0) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xda2, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xc66e18bce26f6d7b}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0xfffffff7, 0x0, 0x2}}]}}}]}, 0x6c}}, 0x4000000) mkdir(&(0x7f0000000100)='./file1\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910140000000000610430000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x7f03) syz_io_uring_setup(0x14e2, &(0x7f0000000440)={0x0, 0xbf4d, 0x10100, 0x3, 0x288, 0x0, r8}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000), &(0x7f0000000180)) 12.155783214s ago: executing program 8 (id=5986): ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 12.103942044s ago: executing program 3 (id=5987): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ebfc86cccef74f2e", @ANYRES16=r7, @ANYBLOB="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"], 0xf5c}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 10.925878595s ago: executing program 8 (id=5989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000300), &(0x7f0000000240)}, 0x20) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) dup3(r2, r2, 0x0) r6 = socket(0x1d, 0x2, 0xffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x2}, 0x18) close(r6) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x50}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10.82838586s ago: executing program 1 (id=5990): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000188e00000020800020000000000080007"], 0xa4}}, 0x0) 10.779926383s ago: executing program 0 (id=5991): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000002b00000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"], 0xfc}}, 0x0) 9.285505748s ago: executing program 1 (id=5993): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ftruncate(r1, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x9, 0x0) r3 = fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) socket(0x2, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x34, 0x0, 0x9, 0xc, 0x0, 0x81}) accept4(r0, 0x0, 0x0, 0x0) getpid() r5 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r5, 0x40046109, &(0x7f0000000340)) 8.555739982s ago: executing program 0 (id=5994): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000af000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.596570987s ago: executing program 8 (id=5996): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x1520, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x14f4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x800, 0x7, 0xef41, 0x8]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x385, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @initial, {0x4, 0x2}, @value=@ver_80211n={0x0, 0x38, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0x2, 0x84, @void, @val={0x1, 0x5, [{0x1b, 0x1}, {0x66}, {0x3}, {0x12, 0x1}, {0x12}]}, @void, @void, @val={0x6, 0x2, 0x7ff}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x8}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x24}}, @void, [{0xdd, 0xc5, "a3f8d0c010e6c78cfcd986c1290b8c10f22983c8573a0b5309a662c43983cf32daad9d463ad62576b8823b9ade2084a4a4ec69cc14cd0dd3096886242bb452d8e33a2d37244843668c0a237c5817fa8613420a8b421dcb92508f31ef3a24b67f35667752ff6a3b3606257c780617188787edc4ddfd1d7fb0403dde29ff228f916cd4a68935306d4b26d2dae2436928bc45d3976dd93e0f0f59efdf1dee56547aa69a2a3bafd28139be1bb832c226214c9bdf21d790ee3958d1b0b1b88b39a0b0da94ebc6d4"}, {0xdd, 0xd7, "9b72c592994c7a8932e4b3beefdc987ead7da137ba1410cc98d06e106b112cc83e8dec18331b301c1ab5c27cad9430612813acdfafc042294aae6746070d2445564dc2ca9b2341d7945489a71cb9c4ca75fdd4212d978306e7e3a5a85cf930be1fd5367a4a808167b929f5c8794b2dd22c29930ab499eb3b08297ff3a149fb173f21eafc14f08e147e82412d86571654407a60f3695fdc3ce7a5889dd131e0468c106370cbea92264dfa81a054fd6109c5f89c2353f703ef3cf62d133ed8b698bd85eab923b3a6b3a9e42969eb07d960f3ef2142f937d1"}, {0xdd, 0xef, "49f083e1f1226d880146bc9e884078ff3c05b93409afaac081800edfc23605fbd6d36b147a897ad099356b99350666ceb4d59fa8addd775db5081ba60d732e63382f0f64258ef66da99c92fe1b4bb7ef40dcdce3fe846105054e4d7bcfd27aa14b3b9e59a67d413f76e2caddbf564a0c4e1f38e12cde7ea1d18578b2acf911873529cbc1c2d46634563e7fcf2599eaf58a333b33abf1aa97963314c7995c25be93790deafe27b00c23f5b9cb930a22d9e6fed1b2bcfd3233c40d8fb82a310d4f4252134de4122ec73c89fff670cf656a6ee0d8dc85e9edeed59df49a1d6dd3ea40bc777a74198b00937b44d89ba7dc"}, {0xdd, 0xad, "e14cacc00043aa166e758b89eed61b4eb12e6d656a176b7a5af3bee4469ac08b0e4f7442b29f783c6a731dbea7ef523c6ff46a0fd52739889726674924cad8d4f0ebc5bac659f99858fb2ba2da0d57ea050df4d3af513ff87243635247c6d1116d1f747e7dd68b98f2e679c2e6e12aefae5e1dbda01937c8746fc86ab29b78dc2ad7b2782df2f8021c6a8d9aeb36d322d1333cc85043346bd1f23cdedec445240564407051086c1152909bbe69"}]}}, @NL80211_ATTR_BEACON_HEAD={0x467, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0xa, 0x4}}, 0x0, @default, 0x8, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0xffff}, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x5, 0x4, 0x1bd3}}, [{0xdd, 0xe7, "104327fd996ab82890a63ad1fe2f08714b8d7f9a15a33f51dd17aca7838240b1121c4bffaed586047642f2de6de8c3d19439304346f38790b754f35f42e2077f1d47367b27f1c123e6e423b70ec77e229945a836a6ce65886ee4f0a4602d49c628639b5170f468a00b73cb7e10b425054b4f11de666b4216f454892af237defba4fe0f6edb53aea936e2d843ec5cef84e5fe451d175d565d22d89bb3ba8d66b23fb5b176533fe907aa58cf38d475b41c7a7613dccaa246babfc220cdac7e8e67416839471be84c3d3e4efe85fa453c55567de7b7d226942b42c0a405ccfdad6614c512a83b377d"}, {0xdd, 0x40, "1547d9971fa7f8cf78312d98594d8217ef8adab2761c5409cb4a069510f9af106e43d783ef28b304dd446a6d55f9e40721aeea89309bed8f661a42f2490293be"}, {0xdd, 0x6, "84c6ebc88192"}, {0xdd, 0x90, "aca25228715f43d8ff2e4cef2def278d8d481cc5a467a2f4817fbc88bb543acee1136056d98ec6e3eeb7aa306c0f80ca983e5d5ecfb65f2786425f815ec7f44b01bf8b1080c052c00565febe927531ad3113286274fda9700d699397e58830c234d899e440f5008d76264d5a6d0e88c9f9ce394caf4e2ce8805eb45b1f3f103f76bd2a7b8c0c0024b8e8874b6950bba8"}, {0xdd, 0xb5, "c526603efe86fa7893f8d4058542523283b7fa6f79dcec1ea4c1ca6ce30dce6d50fef02d08599839cbc10785f4c19da665600d5a248c1d08299f08f0b32e50ad8eef07e4ebb55f86768cc9a1b9a023c48a1909e895a65748d17bdf1b013708b3ecac6e4f2ea83be202bf7abe134de3651f9bc9444a6f06aacf7d1de294ccb044f9eff40e23a30a0426255c94b25cc5dadab33a68f50a92c3e38554bef3f771ba9a27d7bdcf5539452aca82b3c01b755509065338a0"}, {0xdd, 0xfd, "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"}, {0xdd, 0xa5, "ab450c74fdc2af34ba626ed8ff8ba11af28209aa491da2a072dd32c5a844df89cb1e2967f5015bad0c8464ab612facb36c1e4cdb5b044572964b6332ac365940d90511de742cafc682df503701b80e2a2118a1db35376b92b0b74c5dc68c29c3ca0e5b7dec11e8be55669a89a6858dc2de1132965c8cc85c7500c731cd854c1c58724ba22191797d565730a1fff26ef46d295154bd2c26e682819e593bf7c751fc6bc21211"}, {0xdd, 0xc, "382e999a0b6ecc8ac094c32d"}]}}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x132, 0xf, [@measure_req={0x26, 0x4b, {0x4, 0x2, 0x7, "1f81c595ce88c2fc2fee73d9710caf89c199ec80fa91752cf25ee48c8fddb73b68b65be3c66ea09912e592c87096ee52061f64af668e128043f2f91c9fc8254a984009294c448826"}}, @fast_bss_trans={0x37, 0xd6, {0x3, 0x8, "a6b947053671970f649d77fa629b9067", "b24905af28b2dbc3badb356046ec59b5f3f38f39c1dd3fd2ccbfdf9a6d093288", "0a5bb8d2faea82b8ccd618f0109b17b9aa2fb51c2aad39e8819e6062f0602b58", [{0x2, 0x23, "3758d4eb8b237b784985f9c4bd46e0dcf241ae6c4f39f48944a36e66d2a650a8b5bea2"}, {0x4, 0x3, '@/`'}, {0x2, 0x22, "51c6b6933667548c95bc775c6b743328cd14de8ceefc6d646f23b8714326a3cd80c7"}, {0x4, 0x4, "cfe7aae3"}, {0x2}, {0x2}, {0x3, 0xa, "a602a12c0a618496175f"}, {0x3, 0x1e, "95d5c62942ef82d83feb682fa43544e409abb0db597243c4a180c6c2961f"}]}}, @challenge={0x10, 0x1, 0x3d}, @chsw_timing={0x68, 0x4, {0x1, 0x8000}}]}, @NL80211_ATTR_BEACON_HEAD={0x51d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_a, @device_b, @random="cd4dacc5b464", {0x1, 0x1}}, 0x6, @random, 0x103, @val={0x0, 0x11, @random="cb47bf4bc466a34fc783bf9ed45e5ed3d6"}, @void, @val={0x3, 0x1, 0x9c}, @val={0x4, 0x6, {0x9f, 0x8, 0x1, 0x7}}, @val={0x6, 0x2, 0xa67}, @val={0x5, 0x7e, {0x6, 0xaf, 0x40, "1a86d78cd3edcc4ad6dc6c1bee743f4104d364f02691cd3e14031b900d909972b93cac40da1f7b2aa44feb3e1e704b185d75de2df6ded089a542508565a1a82d10a379d2871169545ecf66b388c1ae1ff7677f765a0a68f4de019c14fb1b7c0ecc776ae4c0edd720e910374dcd379297bd77efc0c1f4f61db2234d"}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0xffffffffffffff5d, 0x58f, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x8f3b, 0xf7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x96, 0x60}}, @val={0x76, 0x6, {0x3, 0x6, 0x1d, 0x6}}, [{0xdd, 0xa9, "5b2ae8441fc239c7b7c39dbbda2f5c8e6e7bcb6ddccc93631bbbffe4faaefe899c1f5a2a0d82188615c9787418fc9aee3aeff4c331089a55c39e4a2bffba260c23fbc661ac34a4caa0a6f80c9690de41d217bc3387382221a22e80094b753b81519fb616a1cdcfbab7df26016de7e8458d48f882c9311cd22b4a0021883ef8b526eece2576574bb42c6124805331df8c99d18ce84e07113c363d53747cb6a950021e6acf4791ba0c03"}, {0xdd, 0xa4, "f0eff9d70b697c2e7c1ea45bb319da2261790ef44fa91d5512ef81a003d04231403927d3e800123602d3efb3606e8bf0719827bceb7c8186ee6a02c0c4a3fcf88f262cf169f673a06beb30e568f6c89162189cf80fed9e1556094ece33062d5d4135ef85896cf03aad68ff808f5908ad3d342045798802a3f9b0ba60adf1986bffe9223dcba0f2bf1b3313e5c529cc9405268c3361f32ca1040c28158067ee366a1d2b71"}, {0xdd, 0xe0, "a48ea312755446e94892fb32866fe3ba35060f498b7600fde6bcd436e9a14806358cfcd837ae95e0c3166902655459bf6267891ef4f3155a376f56768a4ce466bde5384b42d1df85729af3832f8636396afc0012dff72612ee94a67f7877f46b4d9bbcd127a8712f817b4450938af309017c56ae24acadd8014a610b53a3380539f3af9f311079e7c037cd992b12248965e337635d1ddd74538e56852ea4363b2e8951f456fe371cca2a8009d483b7a0364e5c2210a3bf1182539301a2c69d7ccef923aec03d8e7022ab811c50c6b29a97ad5977c108875cc98be64fe39b0859"}, {0xdd, 0xd6, "393b645f1b006cd74ff4e881d8eef11f3831a200ab341fb9eb8e11fa5037ce0b9984ef8dc407faeddb869c0dc59067c86bca39f102c477ef8aa0023a5197029972654775e4f894ba5dd308fc7314b7a483ed00270af9c0b0573d54481df16a02dfe2933d4159f295629a86134513f18a02ebe9c9ec1c0378355646436ac1a21e22b40d77305d64cf28d1182d0a0d1a6a768806cf739d686489dddc8276d3329829d96eacce614042173242715d7c903f63cb9235fa3af2165a33fd9f0cd86cf4749a9a7151f10937a7874c0e0682c0445ef8cfc24e0d"}, {0xdd, 0x89, "143dffe51d54f3b8d62a7de273fb6187514ce3f38fbd7bc4b19080bfb15cd3550551d8e99c6b9c0cd72f9378cd62b2a23a601d8e4798cd0cfede6057ab2799c9b9ea5c2143da2205a1276a910e4dbcb1fb7baf10a6401ddacd8b1cea053de97265f28d4872f86648fb23419e3ff89734042904dd4b47bcf92056e0e1e4e2b7f82974fbbb8e47cb8a48"}, {0xdd, 0x83, "101f4ce4b93181e921fd93175f498174ab771d07881af6b7d4b704005631d2127f1835ffa439017870d0ecaa98b40b5eec319ab9ca1a1e639609f2a2251ee69389066bc9de379be4dd5c518c1cefc9e43db7b7cd6316a92f43b4db8134ab18a7952e7645e169370a09d87ed36bc0ad5fe59889b01e7bb85ba13e916b0669fe43ca5109"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x4, 0x1, 0x9e0, 0x6, 0x1, 0x6, 0x2, 0x400]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x50, 0xf, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1, 0x60}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0x8001, 0x3, 0x0, 0x1a7, 0x0, 0x1}, 0x708, 0x1ff, 0xc}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @challenge={0x10, 0x1, 0xeb}, @prep={0x83, 0x1f, {{}, 0x2, 0x2, @broadcast, 0xcf3, @void, 0x8, 0x1, @device_a, 0x4}}]}, @NL80211_ATTR_PROBE_RESP={0x30d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x29c, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@broadcast, {0x6, 0x1c}}, 0x5, @random=0x9e2, 0x4320, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x2}, @val={0x5, 0x4b, {0xdb, 0x9a, 0x30, "9350c736e0dd1dbd7a97bd3c4ead3f4195c81cad7cb472c34b995e00a52125f9f06497ecbd392e28aed01884f0e1da58cc80908737b95a36c9f46b6ae69f1948ecbe27358c5d03f1"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfd, 0x7c, 0x81}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x4, 0x0, {0x3fc, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x7, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x2, 0xd6, 0x8}}, @val={0x76, 0x6, {0x7f, 0x97, 0x16, 0x1}}, [{0xdd, 0xa7, "ab6038bde08590c4949817a6ae8426f5ab3688fd501701557777c22952a4b2c51d682b7c9d900ab1548cab0fe55f1e7a41a90297152b980f4f046d8e4c009301ec1c9f661a1994828c14f987f9e27b69ea360ab8f44e46a49b0e8149a70ac99f9e2f8f0b14983391a6da6e0b95dab983dc15093a0741cfb6d60d55717ab114d8410b7cc55f5c636e7ebf9fa00dbddef93eb2f6c17482248885a5b391451b499eec50b6778704ed"}, {0xdd, 0xe, "9f95d3fa9b8251e9e84a88d508eb"}, {0xdd, 0x49, "f6216117a104006aaa989e478bf7871857a990747b5d5839f21156365e63b1cea48768282200185d1ced51da19863f3265a8fada759de84e6ed99547c02feca2da982d9c6f4c610405"}, {0xdd, 0xdf, "e706549248353ec05025259387f2286668d255d3f0dc8b7903c8bffed0479ffd8531b34d10a6c0235eba76a243be0268023b709b235b8346abf3d47eef86a968ca3f26785c816d14b786f15512fa6be0cb626a32b701909fb8b797764b4dbc6af421508044954069c945c05589fb782f1f4edf0896b966f33e73bdef610688d256ed8f688b3a6f1d7fbee125c4b11d8398fadbc3900aab837d9a3636d9157e13130215e6719acac1e9e93042b1a987ec874643e513e4c2929f31ad61abe062df1870f8698c5730ec829233014448fcae008d58f48809ca6fd3f196ab043b4d"}]}}, @NL80211_ATTR_BEACON_TAIL={0x6b, 0xf, [@peer_mgmt={0x75, 0x6, {0x0, 0xe, @void, @val=0x2f, @void}}, @random={0x7f, 0x5d, "1e51834a2b682b2c4b7ade909ac65eb29a84b6cfae8b025e3abdae31c7cd6dbfc27f8efda53345b455bb59babba1fb8159757f9159daecaa3bf790c8b0a402d475609c70bf012ce74abf18beae36988a2f74637910e13b28864aef4095"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@cf={0x4, 0x6, {0x7, 0x10, 0x1, 0x5a8c}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x3, 0x5, 0x28]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7b18, 0x4]}]}]}, 0x1520}, 0x1, 0x0, 0x0, 0x8041}, 0x40845) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f00000000c0)=0x10000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_ext={0x1c, 0x9, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000005c0)=""/221, 0x40f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x5, 0x4, 0x401, 0x4}, 0x10, 0x2039b, r12, 0x5, &(0x7f0000001d00)=[r7, r7, r7, r7, r7, r7, r7, r7, r7], &(0x7f0000001d40)=[{0x0, 0x3, 0x10, 0x4}, {0x2, 0x3, 0x2, 0xda22ad3bb585aaee}, {0x2, 0x5, 0x10, 0x8}, {0x1, 0x3, 0x2, 0x2}, {0x4, 0x1, 0x7}], 0x10, 0x6, @void, @value}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) connect$inet(r11, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) 7.41544605s ago: executing program 0 (id=5997): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltaction={0x54, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001ac0)=""/89) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[]}, 0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001, 0x1000000}}, &(0x7f0000000200)={0x30, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x40045304, &(0x7f0000000500)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffed, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12a35}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.262947945s ago: executing program 1 (id=5998): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x804, 0x800000}, 0xc) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000040000000020000"], 0x24}}, 0x4044004) 6.234569253s ago: executing program 8 (id=5999): ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 5.959721106s ago: executing program 1 (id=6000): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.946750721s ago: executing program 9 (id=6001): r0 = socket$inet(0xa, 0x2, 0xfffffffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 5.262892211s ago: executing program 3 (id=6002): rseq(0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0xba1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000199c0)=""/102400, &(0x7f0000000180)=0x19000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c5}, 0x40004) listen(r5, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x60, r3, 0x1, 0xfffffffe, 0x25dfdbff, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xdc9, @dev={0xfe, 0x80, '\x00', 0x26}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) 5.059423489s ago: executing program 9 (id=6003): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0xdc0, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xd94, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x800, 0x7, 0xef41, 0x8]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x385, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @initial, {0x4, 0x2}, @value=@ver_80211n={0x0, 0x38, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0x2, 0x84, @void, @val={0x1, 0x5, [{0x1b, 0x1}, {0x66}, {0x3}, {0x12, 0x1}, {0x12}]}, @void, @void, @val={0x6, 0x2, 0x7ff}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x8}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x24}}, @void, [{0xdd, 0xc5, "a3f8d0c010e6c78cfcd986c1290b8c10f22983c8573a0b5309a662c43983cf32daad9d463ad62576b8823b9ade2084a4a4ec69cc14cd0dd3096886242bb452d8e33a2d37244843668c0a237c5817fa8613420a8b421dcb92508f31ef3a24b67f35667752ff6a3b3606257c780617188787edc4ddfd1d7fb0403dde29ff228f916cd4a68935306d4b26d2dae2436928bc45d3976dd93e0f0f59efdf1dee56547aa69a2a3bafd28139be1bb832c226214c9bdf21d790ee3958d1b0b1b88b39a0b0da94ebc6d4"}, {0xdd, 0xd7, "9b72c592994c7a8932e4b3beefdc987ead7da137ba1410cc98d06e106b112cc83e8dec18331b301c1ab5c27cad9430612813acdfafc042294aae6746070d2445564dc2ca9b2341d7945489a71cb9c4ca75fdd4212d978306e7e3a5a85cf930be1fd5367a4a808167b929f5c8794b2dd22c29930ab499eb3b08297ff3a149fb173f21eafc14f08e147e82412d86571654407a60f3695fdc3ce7a5889dd131e0468c106370cbea92264dfa81a054fd6109c5f89c2353f703ef3cf62d133ed8b698bd85eab923b3a6b3a9e42969eb07d960f3ef2142f937d1"}, {0xdd, 0xef, "49f083e1f1226d880146bc9e884078ff3c05b93409afaac081800edfc23605fbd6d36b147a897ad099356b99350666ceb4d59fa8addd775db5081ba60d732e63382f0f64258ef66da99c92fe1b4bb7ef40dcdce3fe846105054e4d7bcfd27aa14b3b9e59a67d413f76e2caddbf564a0c4e1f38e12cde7ea1d18578b2acf911873529cbc1c2d46634563e7fcf2599eaf58a333b33abf1aa97963314c7995c25be93790deafe27b00c23f5b9cb930a22d9e6fed1b2bcfd3233c40d8fb82a310d4f4252134de4122ec73c89fff670cf656a6ee0d8dc85e9edeed59df49a1d6dd3ea40bc777a74198b00937b44d89ba7dc"}, {0xdd, 0xad, "e14cacc00043aa166e758b89eed61b4eb12e6d656a176b7a5af3bee4469ac08b0e4f7442b29f783c6a731dbea7ef523c6ff46a0fd52739889726674924cad8d4f0ebc5bac659f99858fb2ba2da0d57ea050df4d3af513ff87243635247c6d1116d1f747e7dd68b98f2e679c2e6e12aefae5e1dbda01937c8746fc86ab29b78dc2ad7b2782df2f8021c6a8d9aeb36d322d1333cc85043346bd1f23cdedec445240564407051086c1152909bbe69"}]}}, @NL80211_ATTR_BEACON_HEAD={0x467, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0xa, 0x4}}, 0x0, @default, 0x8, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0xffff}, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x5, 0x4, 0x1bd3}}, [{0xdd, 0xe7, "104327fd996ab82890a63ad1fe2f08714b8d7f9a15a33f51dd17aca7838240b1121c4bffaed586047642f2de6de8c3d19439304346f38790b754f35f42e2077f1d47367b27f1c123e6e423b70ec77e229945a836a6ce65886ee4f0a4602d49c628639b5170f468a00b73cb7e10b425054b4f11de666b4216f454892af237defba4fe0f6edb53aea936e2d843ec5cef84e5fe451d175d565d22d89bb3ba8d66b23fb5b176533fe907aa58cf38d475b41c7a7613dccaa246babfc220cdac7e8e67416839471be84c3d3e4efe85fa453c55567de7b7d226942b42c0a405ccfdad6614c512a83b377d"}, {0xdd, 0x40, "1547d9971fa7f8cf78312d98594d8217ef8adab2761c5409cb4a069510f9af106e43d783ef28b304dd446a6d55f9e40721aeea89309bed8f661a42f2490293be"}, {0xdd, 0x6, "84c6ebc88192"}, {0xdd, 0x90, "aca25228715f43d8ff2e4cef2def278d8d481cc5a467a2f4817fbc88bb543acee1136056d98ec6e3eeb7aa306c0f80ca983e5d5ecfb65f2786425f815ec7f44b01bf8b1080c052c00565febe927531ad3113286274fda9700d699397e58830c234d899e440f5008d76264d5a6d0e88c9f9ce394caf4e2ce8805eb45b1f3f103f76bd2a7b8c0c0024b8e8874b6950bba8"}, {0xdd, 0xb5, "c526603efe86fa7893f8d4058542523283b7fa6f79dcec1ea4c1ca6ce30dce6d50fef02d08599839cbc10785f4c19da665600d5a248c1d08299f08f0b32e50ad8eef07e4ebb55f86768cc9a1b9a023c48a1909e895a65748d17bdf1b013708b3ecac6e4f2ea83be202bf7abe134de3651f9bc9444a6f06aacf7d1de294ccb044f9eff40e23a30a0426255c94b25cc5dadab33a68f50a92c3e38554bef3f771ba9a27d7bdcf5539452aca82b3c01b755509065338a0"}, {0xdd, 0xfd, "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"}, {0xdd, 0xa5, "ab450c74fdc2af34ba626ed8ff8ba11af28209aa491da2a072dd32c5a844df89cb1e2967f5015bad0c8464ab612facb36c1e4cdb5b044572964b6332ac365940d90511de742cafc682df503701b80e2a2118a1db35376b92b0b74c5dc68c29c3ca0e5b7dec11e8be55669a89a6858dc2de1132965c8cc85c7500c731cd854c1c58724ba22191797d565730a1fff26ef46d295154bd2c26e682819e593bf7c751fc6bc21211"}, {0xdd, 0xc, "382e999a0b6ecc8ac094c32d"}]}}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x132, 0xf, [@measure_req={0x26, 0x4b, {0x4, 0x2, 0x7, "1f81c595ce88c2fc2fee73d9710caf89c199ec80fa91752cf25ee48c8fddb73b68b65be3c66ea09912e592c87096ee52061f64af668e128043f2f91c9fc8254a984009294c448826"}}, @fast_bss_trans={0x37, 0xd6, {0x3, 0x8, "a6b947053671970f649d77fa629b9067", "b24905af28b2dbc3badb356046ec59b5f3f38f39c1dd3fd2ccbfdf9a6d093288", "0a5bb8d2faea82b8ccd618f0109b17b9aa2fb51c2aad39e8819e6062f0602b58", [{0x2, 0x23, "3758d4eb8b237b784985f9c4bd46e0dcf241ae6c4f39f48944a36e66d2a650a8b5bea2"}, {0x4, 0x3, '@/`'}, {0x2, 0x22, "51c6b6933667548c95bc775c6b743328cd14de8ceefc6d646f23b8714326a3cd80c7"}, {0x4, 0x4, "cfe7aae3"}, {0x2}, {0x2}, {0x3, 0xa, "a602a12c0a618496175f"}, {0x3, 0x1e, "95d5c62942ef82d83feb682fa43544e409abb0db597243c4a180c6c2961f"}]}}, @challenge={0x10, 0x1, 0x3d}, @chsw_timing={0x68, 0x4, {0x1, 0x8000}}]}, @NL80211_ATTR_BEACON_HEAD={0x445, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_a, @device_b, @random="cd4dacc5b464", {0x1, 0x1}}, 0x6, @random, 0x103, @val={0x0, 0x11, @random="cb47bf4bc466a34fc783bf9ed45e5ed3d6"}, @void, @val={0x3, 0x1, 0x9c}, @val={0x4, 0x6, {0x9f, 0x8, 0x1, 0x7}}, @val={0x6, 0x2, 0xa67}, @val={0x5, 0x3, {0x6, 0xaf, 0x40}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0xffffffffffffff5d, 0x58f, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x8f3b, 0xf7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x96, 0x60}}, @val={0x76, 0x6, {0x3, 0x6, 0x1d, 0x6}}, [{0xdd, 0xa9, "5b2ae8441fc239c7b7c39dbbda2f5c8e6e7bcb6ddccc93631bbbffe4faaefe899c1f5a2a0d82188615c9787418fc9aee3aeff4c331089a55c39e4a2bffba260c23fbc661ac34a4caa0a6f80c9690de41d217bc3387382221a22e80094b753b81519fb616a1cdcfbab7df26016de7e8458d48f882c9311cd22b4a0021883ef8b526eece2576574bb42c6124805331df8c99d18ce84e07113c363d53747cb6a950021e6acf4791ba0c03"}, {0xdd, 0xa4, "f0eff9d70b697c2e7c1ea45bb319da2261790ef44fa91d5512ef81a003d04231403927d3e800123602d3efb3606e8bf0719827bceb7c8186ee6a02c0c4a3fcf88f262cf169f673a06beb30e568f6c89162189cf80fed9e1556094ece33062d5d4135ef85896cf03aad68ff808f5908ad3d342045798802a3f9b0ba60adf1986bffe9223dcba0f2bf1b3313e5c529cc9405268c3361f32ca1040c28158067ee366a1d2b71"}, {0xdd, 0xe0, "a48ea312755446e94892fb32866fe3ba35060f498b7600fde6bcd436e9a14806358cfcd837ae95e0c3166902655459bf6267891ef4f3155a376f56768a4ce466bde5384b42d1df85729af3832f8636396afc0012dff72612ee94a67f7877f46b4d9bbcd127a8712f817b4450938af309017c56ae24acadd8014a610b53a3380539f3af9f311079e7c037cd992b12248965e337635d1ddd74538e56852ea4363b2e8951f456fe371cca2a8009d483b7a0364e5c2210a3bf1182539301a2c69d7ccef923aec03d8e7022ab811c50c6b29a97ad5977c108875cc98be64fe39b0859"}, {0xdd, 0xd6, "393b645f1b006cd74ff4e881d8eef11f3831a200ab341fb9eb8e11fa5037ce0b9984ef8dc407faeddb869c0dc59067c86bca39f102c477ef8aa0023a5197029972654775e4f894ba5dd308fc7314b7a483ed00270af9c0b0573d54481df16a02dfe2933d4159f295629a86134513f18a02ebe9c9ec1c0378355646436ac1a21e22b40d77305d64cf28d1182d0a0d1a6a768806cf739d686489dddc8276d3329829d96eacce614042173242715d7c903f63cb9235fa3af2165a33fd9f0cd86cf4749a9a7151f10937a7874c0e0682c0445ef8cfc24e0d"}, {0xdd, 0x89, "143dffe51d54f3b8d62a7de273fb6187514ce3f38fbd7bc4b19080bfb15cd3550551d8e99c6b9c0cd72f9378cd62b2a23a601d8e4798cd0cfede6057ab2799c9b9ea5c2143da2205a1276a910e4dbcb1fb7baf10a6401ddacd8b1cea053de97265f28d4872f86648fb23419e3ff89734042904dd4b47bcf92056e0e1e4e2b7f82974fbbb8e47cb8a48"}, {0xdd, 0x26, "101f4ce4b93181e921fd93175f498174ab771d07881af6b7d4b704005631d2127f1835ffa439"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0x9e0, 0x6, 0x6, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7b18, 0x4]}]}]}, 0xdc0}, 0x1, 0x0, 0x0, 0x8041}, 0x40845) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) connect$inet(r7, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) 4.587627348s ago: executing program 8 (id=6004): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000039c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x10, 0x28, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x300, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x516) 4.497797891s ago: executing program 8 (id=6005): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000680)={0x280, 0x960, 0x320, 0xf0, 0x1ff, 0xfffff23f, 0x20, 0x0, {0x2, 0x3}, {0xf86, 0x400, 0x1}, {0x200, 0x4}, {0x8, 0x1, 0x1}, 0x1, 0x0, 0x1358, 0x3, 0x97ce23210a8dfeb4, 0x0, 0x121b, 0x5, 0x3, 0x4, 0x3, 0x6, 0x1, 0x4, 0x2, 0x4}) syz_usb_connect(0x5, 0x3d, &(0x7f0000000740)={{0x12, 0x1, 0x140, 0xe5, 0xfa, 0x40, 0x10, 0x413c, 0x8171, 0x657c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x2, 0x10, 0x6, 0x90, 0x4, [{{0x9, 0x4, 0xb3, 0x4, 0x1, 0xc, 0x6d, 0xda, 0x5, [], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc3, 0xe5d}]}}]}}, {{0x9, 0x4, 0x4f, 0x80, 0x0, 0xff, 0xff, 0xff, 0x9, [@uac_as, @uac_as]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="8fa0f0c16a050f1c0002141004816db0b3ba70415c9dae8a75e55687a8ca03100a"]}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_uring_setup(0x901, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_usb_connect(0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) fdatasync(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000002040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6b, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xaf72, 0x3, 0x5, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x21}, [@acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x80, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3c, 0x3, 0x3e}}}}}}}]}}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f000001a100)=""/102355, 0x18fd3, 0x2000000000000c2a) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @loopback}}) 3.622482915s ago: executing program 9 (id=6006): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x1524, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x14f8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x800, 0x7, 0xef41, 0x8]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x385, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @initial, {0x4, 0x2}, @value=@ver_80211n={0x0, 0x38, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0x2, 0x84, @void, @val={0x1, 0x5, [{0x1b, 0x1}, {0x66}, {0x3}, {0x12, 0x1}, {0x12}]}, @void, @void, @val={0x6, 0x2, 0x7ff}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x8}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x24}}, @void, [{0xdd, 0xc5, "a3f8d0c010e6c78cfcd986c1290b8c10f22983c8573a0b5309a662c43983cf32daad9d463ad62576b8823b9ade2084a4a4ec69cc14cd0dd3096886242bb452d8e33a2d37244843668c0a237c5817fa8613420a8b421dcb92508f31ef3a24b67f35667752ff6a3b3606257c780617188787edc4ddfd1d7fb0403dde29ff228f916cd4a68935306d4b26d2dae2436928bc45d3976dd93e0f0f59efdf1dee56547aa69a2a3bafd28139be1bb832c226214c9bdf21d790ee3958d1b0b1b88b39a0b0da94ebc6d4"}, {0xdd, 0xd7, "9b72c592994c7a8932e4b3beefdc987ead7da137ba1410cc98d06e106b112cc83e8dec18331b301c1ab5c27cad9430612813acdfafc042294aae6746070d2445564dc2ca9b2341d7945489a71cb9c4ca75fdd4212d978306e7e3a5a85cf930be1fd5367a4a808167b929f5c8794b2dd22c29930ab499eb3b08297ff3a149fb173f21eafc14f08e147e82412d86571654407a60f3695fdc3ce7a5889dd131e0468c106370cbea92264dfa81a054fd6109c5f89c2353f703ef3cf62d133ed8b698bd85eab923b3a6b3a9e42969eb07d960f3ef2142f937d1"}, {0xdd, 0xef, "49f083e1f1226d880146bc9e884078ff3c05b93409afaac081800edfc23605fbd6d36b147a897ad099356b99350666ceb4d59fa8addd775db5081ba60d732e63382f0f64258ef66da99c92fe1b4bb7ef40dcdce3fe846105054e4d7bcfd27aa14b3b9e59a67d413f76e2caddbf564a0c4e1f38e12cde7ea1d18578b2acf911873529cbc1c2d46634563e7fcf2599eaf58a333b33abf1aa97963314c7995c25be93790deafe27b00c23f5b9cb930a22d9e6fed1b2bcfd3233c40d8fb82a310d4f4252134de4122ec73c89fff670cf656a6ee0d8dc85e9edeed59df49a1d6dd3ea40bc777a74198b00937b44d89ba7dc"}, {0xdd, 0xad, "e14cacc00043aa166e758b89eed61b4eb12e6d656a176b7a5af3bee4469ac08b0e4f7442b29f783c6a731dbea7ef523c6ff46a0fd52739889726674924cad8d4f0ebc5bac659f99858fb2ba2da0d57ea050df4d3af513ff87243635247c6d1116d1f747e7dd68b98f2e679c2e6e12aefae5e1dbda01937c8746fc86ab29b78dc2ad7b2782df2f8021c6a8d9aeb36d322d1333cc85043346bd1f23cdedec445240564407051086c1152909bbe69"}]}}, @NL80211_ATTR_BEACON_HEAD={0x467, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0xa, 0x4}}, 0x0, @default, 0x8, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0xffff}, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x5, 0x4, 0x1bd3}}, [{0xdd, 0xe7, "104327fd996ab82890a63ad1fe2f08714b8d7f9a15a33f51dd17aca7838240b1121c4bffaed586047642f2de6de8c3d19439304346f38790b754f35f42e2077f1d47367b27f1c123e6e423b70ec77e229945a836a6ce65886ee4f0a4602d49c628639b5170f468a00b73cb7e10b425054b4f11de666b4216f454892af237defba4fe0f6edb53aea936e2d843ec5cef84e5fe451d175d565d22d89bb3ba8d66b23fb5b176533fe907aa58cf38d475b41c7a7613dccaa246babfc220cdac7e8e67416839471be84c3d3e4efe85fa453c55567de7b7d226942b42c0a405ccfdad6614c512a83b377d"}, {0xdd, 0x40, "1547d9971fa7f8cf78312d98594d8217ef8adab2761c5409cb4a069510f9af106e43d783ef28b304dd446a6d55f9e40721aeea89309bed8f661a42f2490293be"}, {0xdd, 0x6, "84c6ebc88192"}, {0xdd, 0x90, "aca25228715f43d8ff2e4cef2def278d8d481cc5a467a2f4817fbc88bb543acee1136056d98ec6e3eeb7aa306c0f80ca983e5d5ecfb65f2786425f815ec7f44b01bf8b1080c052c00565febe927531ad3113286274fda9700d699397e58830c234d899e440f5008d76264d5a6d0e88c9f9ce394caf4e2ce8805eb45b1f3f103f76bd2a7b8c0c0024b8e8874b6950bba8"}, {0xdd, 0xb5, "c526603efe86fa7893f8d4058542523283b7fa6f79dcec1ea4c1ca6ce30dce6d50fef02d08599839cbc10785f4c19da665600d5a248c1d08299f08f0b32e50ad8eef07e4ebb55f86768cc9a1b9a023c48a1909e895a65748d17bdf1b013708b3ecac6e4f2ea83be202bf7abe134de3651f9bc9444a6f06aacf7d1de294ccb044f9eff40e23a30a0426255c94b25cc5dadab33a68f50a92c3e38554bef3f771ba9a27d7bdcf5539452aca82b3c01b755509065338a0"}, {0xdd, 0xfd, "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"}, {0xdd, 0xa5, "ab450c74fdc2af34ba626ed8ff8ba11af28209aa491da2a072dd32c5a844df89cb1e2967f5015bad0c8464ab612facb36c1e4cdb5b044572964b6332ac365940d90511de742cafc682df503701b80e2a2118a1db35376b92b0b74c5dc68c29c3ca0e5b7dec11e8be55669a89a6858dc2de1132965c8cc85c7500c731cd854c1c58724ba22191797d565730a1fff26ef46d295154bd2c26e682819e593bf7c751fc6bc21211"}, {0xdd, 0xc, "382e999a0b6ecc8ac094c32d"}]}}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x132, 0xf, [@measure_req={0x26, 0x4b, {0x4, 0x2, 0x7, "1f81c595ce88c2fc2fee73d9710caf89c199ec80fa91752cf25ee48c8fddb73b68b65be3c66ea09912e592c87096ee52061f64af668e128043f2f91c9fc8254a984009294c448826"}}, @fast_bss_trans={0x37, 0xd6, {0x3, 0x8, "a6b947053671970f649d77fa629b9067", "b24905af28b2dbc3badb356046ec59b5f3f38f39c1dd3fd2ccbfdf9a6d093288", "0a5bb8d2faea82b8ccd618f0109b17b9aa2fb51c2aad39e8819e6062f0602b58", [{0x2, 0x23, "3758d4eb8b237b784985f9c4bd46e0dcf241ae6c4f39f48944a36e66d2a650a8b5bea2"}, {0x4, 0x3, '@/`'}, {0x2, 0x22, "51c6b6933667548c95bc775c6b743328cd14de8ceefc6d646f23b8714326a3cd80c7"}, {0x4, 0x4, "cfe7aae3"}, {0x2}, {0x2}, {0x3, 0xa, "a602a12c0a618496175f"}, {0x3, 0x1e, "95d5c62942ef82d83feb682fa43544e409abb0db597243c4a180c6c2961f"}]}}, @challenge={0x10, 0x1, 0x3d}, @chsw_timing={0x68, 0x4, {0x1, 0x8000}}]}, @NL80211_ATTR_BEACON_HEAD={0x51d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_a, @device_b, @random="cd4dacc5b464", {0x1, 0x1}}, 0x6, @random, 0x103, @val={0x0, 0x11, @random="cb47bf4bc466a34fc783bf9ed45e5ed3d6"}, @void, @val={0x3, 0x1, 0x9c}, @val={0x4, 0x6, {0x9f, 0x8, 0x1, 0x7}}, @val={0x6, 0x2, 0xa67}, @val={0x5, 0x7e, {0x6, 0xaf, 0x40, "1a86d78cd3edcc4ad6dc6c1bee743f4104d364f02691cd3e14031b900d909972b93cac40da1f7b2aa44feb3e1e704b185d75de2df6ded089a542508565a1a82d10a379d2871169545ecf66b388c1ae1ff7677f765a0a68f4de019c14fb1b7c0ecc776ae4c0edd720e910374dcd379297bd77efc0c1f4f61db2234d"}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0xffffffffffffff5d, 0x58f, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x8f3b, 0xf7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x96, 0x60}}, @val={0x76, 0x6, {0x3, 0x6, 0x1d, 0x6}}, [{0xdd, 0xa9, "5b2ae8441fc239c7b7c39dbbda2f5c8e6e7bcb6ddccc93631bbbffe4faaefe899c1f5a2a0d82188615c9787418fc9aee3aeff4c331089a55c39e4a2bffba260c23fbc661ac34a4caa0a6f80c9690de41d217bc3387382221a22e80094b753b81519fb616a1cdcfbab7df26016de7e8458d48f882c9311cd22b4a0021883ef8b526eece2576574bb42c6124805331df8c99d18ce84e07113c363d53747cb6a950021e6acf4791ba0c03"}, {0xdd, 0xa4, "f0eff9d70b697c2e7c1ea45bb319da2261790ef44fa91d5512ef81a003d04231403927d3e800123602d3efb3606e8bf0719827bceb7c8186ee6a02c0c4a3fcf88f262cf169f673a06beb30e568f6c89162189cf80fed9e1556094ece33062d5d4135ef85896cf03aad68ff808f5908ad3d342045798802a3f9b0ba60adf1986bffe9223dcba0f2bf1b3313e5c529cc9405268c3361f32ca1040c28158067ee366a1d2b71"}, {0xdd, 0xe0, "a48ea312755446e94892fb32866fe3ba35060f498b7600fde6bcd436e9a14806358cfcd837ae95e0c3166902655459bf6267891ef4f3155a376f56768a4ce466bde5384b42d1df85729af3832f8636396afc0012dff72612ee94a67f7877f46b4d9bbcd127a8712f817b4450938af309017c56ae24acadd8014a610b53a3380539f3af9f311079e7c037cd992b12248965e337635d1ddd74538e56852ea4363b2e8951f456fe371cca2a8009d483b7a0364e5c2210a3bf1182539301a2c69d7ccef923aec03d8e7022ab811c50c6b29a97ad5977c108875cc98be64fe39b0859"}, {0xdd, 0xd6, "393b645f1b006cd74ff4e881d8eef11f3831a200ab341fb9eb8e11fa5037ce0b9984ef8dc407faeddb869c0dc59067c86bca39f102c477ef8aa0023a5197029972654775e4f894ba5dd308fc7314b7a483ed00270af9c0b0573d54481df16a02dfe2933d4159f295629a86134513f18a02ebe9c9ec1c0378355646436ac1a21e22b40d77305d64cf28d1182d0a0d1a6a768806cf739d686489dddc8276d3329829d96eacce614042173242715d7c903f63cb9235fa3af2165a33fd9f0cd86cf4749a9a7151f10937a7874c0e0682c0445ef8cfc24e0d"}, {0xdd, 0x89, "143dffe51d54f3b8d62a7de273fb6187514ce3f38fbd7bc4b19080bfb15cd3550551d8e99c6b9c0cd72f9378cd62b2a23a601d8e4798cd0cfede6057ab2799c9b9ea5c2143da2205a1276a910e4dbcb1fb7baf10a6401ddacd8b1cea053de97265f28d4872f86648fb23419e3ff89734042904dd4b47bcf92056e0e1e4e2b7f82974fbbb8e47cb8a48"}, {0xdd, 0x83, "101f4ce4b93181e921fd93175f498174ab771d07881af6b7d4b704005631d2127f1835ffa439017870d0ecaa98b40b5eec319ab9ca1a1e639609f2a2251ee69389066bc9de379be4dd5c518c1cefc9e43db7b7cd6316a92f43b4db8134ab18a7952e7645e169370a09d87ed36bc0ad5fe59889b01e7bb85ba13e916b0669fe43ca5109"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x4, 0x1, 0x9e0, 0x6, 0x1, 0x6, 0x2, 0x400]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x50, 0xf, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1, 0x60}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0x8001, 0x3, 0x0, 0x1a7, 0x0, 0x1}, 0x708, 0x1ff, 0xc}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @challenge={0x10, 0x1, 0xeb}, @prep={0x83, 0x1f, {{}, 0x2, 0x2, @broadcast, 0xcf3, @void, 0x8, 0x1, @device_a, 0x4}}]}, @NL80211_ATTR_PROBE_RESP={0x30d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x29d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@broadcast, {0x6, 0x1c}}, 0x5, @random=0x9e2, 0x4320, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x2}, @val={0x5, 0x4c, {0xdb, 0x9a, 0x30, "9350c736e0dd1dbd7a97bd3c4ead3f4195c81cad7cb472c34b995e00a52125f9f06497ecbd392e28aed01884f0e1da58cc80908737b95a36c9f46b6ae69f1948ecbe27358c5d03f16a"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xfd, 0x7c, 0x81}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x4, 0x0, {0x3fc, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x7, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x2, 0xd6, 0x8}}, @val={0x76, 0x6, {0x7f, 0x97, 0x16, 0x1}}, [{0xdd, 0xa7, "ab6038bde08590c4949817a6ae8426f5ab3688fd501701557777c22952a4b2c51d682b7c9d900ab1548cab0fe55f1e7a41a90297152b980f4f046d8e4c009301ec1c9f661a1994828c14f987f9e27b69ea360ab8f44e46a49b0e8149a70ac99f9e2f8f0b14983391a6da6e0b95dab983dc15093a0741cfb6d60d55717ab114d8410b7cc55f5c636e7ebf9fa00dbddef93eb2f6c17482248885a5b391451b499eec50b6778704ed"}, {0xdd, 0xe, "9f95d3fa9b8251e9e84a88d508eb"}, {0xdd, 0x49, "f6216117a104006aaa989e478bf7871857a990747b5d5839f21156365e63b1cea48768282200185d1ced51da19863f3265a8fada759de84e6ed99547c02feca2da982d9c6f4c610405"}, {0xdd, 0xdf, "e706549248353ec05025259387f2286668d255d3f0dc8b7903c8bffed0479ffd8531b34d10a6c0235eba76a243be0268023b709b235b8346abf3d47eef86a968ca3f26785c816d14b786f15512fa6be0cb626a32b701909fb8b797764b4dbc6af421508044954069c945c05589fb782f1f4edf0896b966f33e73bdef610688d256ed8f688b3a6f1d7fbee125c4b11d8398fadbc3900aab837d9a3636d9157e13130215e6719acac1e9e93042b1a987ec874643e513e4c2929f31ad61abe062df1870f8698c5730ec829233014448fcae008d58f48809ca6fd3f196ab043b4d"}]}}, @NL80211_ATTR_BEACON_TAIL={0x6b, 0xf, [@peer_mgmt={0x75, 0x6, {0x0, 0xe, @void, @val=0x2f, @void}}, @random={0x7f, 0x5d, "1e51834a2b682b2c4b7ade909ac65eb29a84b6cfae8b025e3abdae31c7cd6dbfc27f8efda53345b455bb59babba1fb8159757f9159daecaa3bf790c8b0a402d475609c70bf012ce74abf18beae36988a2f74637910e13b28864aef4095"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@cf={0x4, 0x6, {0x7, 0x10, 0x1, 0x5a8c}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x3, 0x5, 0x28]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7b18, 0x4]}]}]}, 0x1524}, 0x1, 0x0, 0x0, 0x8041}, 0x40845) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f00000000c0)=0x10000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_ext={0x1c, 0x9, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000005c0)=""/221, 0x40f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x5, 0x4, 0x401, 0x4}, 0x10, 0x2039b, r12, 0x5, &(0x7f0000001d00)=[r7, r7, r7, r7, r7, r7, r7, r7, r7], &(0x7f0000001d40)=[{0x0, 0x3, 0x10, 0x4}, {0x2, 0x3, 0x2, 0xda22ad3bb585aaee}, {0x2, 0x5, 0x10, 0x8}, {0x1, 0x3, 0x2, 0x2}, {0x4, 0x1, 0x7}], 0x10, 0x6, @void, @value}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) connect$inet(r11, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) 3.286495171s ago: executing program 0 (id=6007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000200000000000000001d0000f894000000000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000270001"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000110) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) r8 = socket$unix(0x1, 0x5, 0x0) r9 = dup2(r8, r4) close_range(r9, 0xffffffffffffffff, 0x0) 2.903793709s ago: executing program 1 (id=6008): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xab000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x51}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.824855352s ago: executing program 9 (id=6009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000032c0), 0x800) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getresuid(&(0x7f0000005440), 0x0, &(0x7f00000054c0)) ptrace(0x10, r4) ptrace(0x8, r4) r6 = syz_pidfd_open(r4, 0x0) process_mrelease(r6, 0x700000000000000) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad30fd48ebd3dacb2c5dd27268aaadd8cf1ecdea4bb09588b8c1790fa8b94b37bd2b7213b4f7703a9ddf5"], 0x70}}, 0x200000000000000) 2.80929305s ago: executing program 1 (id=6010): getpid() syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r2, 0x0, 0x0, 0x80800) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r4, 0x0, 0x0, 0x2000}, {}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 451.687227ms ago: executing program 9 (id=6011): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYBLOB="7d9d790a7cc2a607f7df1d933557825aee1039ce940c78dc0bbb9890ca08d5888633a0c00adc274b0e61674c27fc4d6a850a605b86e926c0f4da94a0a80b032dd371c5ee0c8ac51a4a7ed6e60dc56355f2b2a46804381465955867dc4c5a8ef467b48c3c401caa3f1a336f5bf076265586155f048fa0f341aac5e9b594ea8dd8b71f774b198209f6cf20742b30ff110ac2426fd71898d95efa44e1f5054144dd64f33c5692eb1d5d7605d9d29e", @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x800, 0x4, 0xffff]}, &(0x7f0000000040)=0x44) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$getflags(r6, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r10], 0x20}}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffff9, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x4c, 0x28, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_RSHIFT={0x0, 0x4, 0x7}, @TCA_FLOW_DIVISOR={0x0, 0x8, 0x7}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x5}, @TCA_FLOW_DIVISOR={0x0, 0x8, 0xa}, @TCA_FLOW_KEYS={0x0, 0x1, 0x16bfc}, @TCA_FLOW_KEYS={0x0, 0x1, 0xce6b}, @TCA_FLOW_MODE={0x0, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) 127.480076ms ago: executing program 0 (id=6012): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ebfc86cccef74f2e", @ANYRES16=r7, @ANYBLOB="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"], 0xf5c}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 0s ago: executing program 9 (id=6013): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r6 = accept4(r5, 0x0, 0x0, 0x0) unshare(0x62040200) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="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", 0x2d1}, {&(0x7f0000001440)}], 0x2}, 0x40000c0) unshare(0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, r8, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) kernel console output (not intermixed with test programs): 22][T21646] dvb-usb: error while querying for an remote control event. [ 1837.812254][T21646] m920x_read = error: -19 [ 1837.822667][T21646] dvb-usb: error while querying for an remote control event. [ 1837.925097][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1837.957736][T21646] m920x_read = error: -19 [ 1837.962118][T21646] dvb-usb: error while querying for an remote control event. [ 1838.096761][ T25] m920x_read = error: -19 [ 1838.101143][ T25] dvb-usb: error while querying for an remote control event. [ 1838.245902][T21646] m920x_read = error: -19 [ 1838.251177][T21646] dvb-usb: error while querying for an remote control event. [ 1838.448943][T18299] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1838.478221][T21646] m920x_read = error: -19 [ 1838.483293][ T25] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1838.491676][T21646] dvb-usb: error while querying for an remote control event. [ 1838.664080][T21646] m920x_read = error: -19 [ 1838.668807][T21646] dvb-usb: error while querying for an remote control event. [ 1838.816304][T21646] m920x_read = error: -19 [ 1838.826966][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1838.857265][T21646] dvb-usb: error while querying for an remote control event. [ 1838.898123][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.036928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1839.045815][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1839.051889][T18299] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1839.071228][T18299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.089575][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1839.132340][T18299] usb 10-1: Product: syz [ 1839.136717][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1839.146646][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1839.167543][T18299] usb 10-1: Manufacturer: syz [ 1839.173556][T18299] usb 10-1: SerialNumber: syz [ 1839.301045][T18299] usb 10-1: config 0 descriptor?? [ 1839.309721][T21646] m920x_read = error: -19 [ 1839.314397][T21646] dvb-usb: error while querying for an remote control event. [ 1839.335717][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1839.346060][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1839.354395][ T25] usb 1-1: Manufacturer: syz [ 1839.550642][ T25] usb 1-1: config 0 descriptor?? [ 1839.560117][T21646] m920x_read = error: -19 [ 1839.564934][T21646] dvb-usb: error while querying for an remote control event. [ 1839.568828][T28950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.582406][T28950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.668167][T21646] usb 4-1: USB disconnect, device number 100 [ 1839.697687][ T5896] m920x_read = error: -19 [ 1839.702216][ T5896] dvb-usb: error while querying for an remote control event. [ 1839.702481][T28950] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1839.828244][ T5896] m920x_read = error: -19 [ 1839.829123][ T29] audit: type=1400 audit(1737225515.001:2859): avc: denied { map } for pid=28960 comm="syz.8.5709" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1839.832698][ T5896] dvb-usb: error while querying for an remote control event. [ 1839.861619][T28966] tipc: Enabling of bearer rejected, already enabled [ 1840.148827][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1840.242392][T28963] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1840.280967][ T5896] m920x_read = error: -19 [ 1840.286667][ T5896] dvb-usb: error while querying for an remote control event. [ 1840.341085][ T25] rc_core: IR keymap rc-hauppauge not found [ 1840.347036][ T25] Registered IR keymap rc-empty [ 1840.352129][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.364498][T28967] smc: net device bond0 applied user defined pnetid SYZ0 [ 1840.374023][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.397072][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1840.431621][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input70 [ 1840.444373][T21646] m920x_read = error: -19 [ 1840.449254][T21646] dvb-usb: error while querying for an remote control event. [ 1840.507265][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.531877][T18299] usb 10-1: Firmware version (0.0) predates our first public release. [ 1840.536824][T28961] netlink: 'syz.8.5709': attribute type 5 has an invalid length. [ 1840.540702][T18299] usb 10-1: Please update to version 0.2 or newer [ 1840.548993][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.577039][ T5896] m920x_read = error: -19 [ 1840.581706][ T5896] dvb-usb: error while querying for an remote control event. [ 1840.609195][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.641197][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.662520][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.694645][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.704827][ T5896] m920x_read = error: -19 [ 1840.709548][ T5896] dvb-usb: error while querying for an remote control event. [ 1840.709893][T18299] usb 10-1: USB disconnect, device number 55 [ 1840.726495][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.766058][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.833521][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1840.842688][ T5896] m920x_read = error: -19 [ 1840.856703][ T5896] dvb-usb: error while querying for an remote control event. [ 1840.982972][ T5896] m920x_read = error: -19 [ 1841.069784][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1841.102665][ T5896] dvb-usb: error while querying for an remote control event. [ 1841.143374][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1841.195174][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1841.225533][ T25] usb 1-1: USB disconnect, device number 73 [ 1841.261039][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1841.331141][ T5896] m920x_read = error: -19 [ 1841.349241][ T5896] dvb-usb: error while querying for an remote control event. [ 1841.532524][ T5896] m920x_read = error: -19 [ 1841.600560][ T5896] dvb-usb: error while querying for an remote control event. [ 1841.720248][ T5896] m920x_read = error: -19 [ 1841.724625][ T5896] dvb-usb: error while querying for an remote control event. [ 1841.857041][T28991] netlink: 216 bytes leftover after parsing attributes in process `syz.8.5715'. [ 1841.866553][T28991] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5715'. [ 1841.875845][T28991] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5715'. [ 1841.942355][ T5896] m920x_read = error: -19 [ 1841.947401][ T5896] dvb-usb: error while querying for an remote control event. [ 1842.165245][ T25] m920x_read = error: -19 [ 1842.169779][ T25] dvb-usb: error while querying for an remote control event. [ 1842.287017][ T5896] m920x_read = error: -19 [ 1842.291410][ T5896] dvb-usb: error while querying for an remote control event. [ 1842.372374][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1842.517020][ T5896] m920x_read = error: -19 [ 1842.522424][ T5896] dvb-usb: error while querying for an remote control event. [ 1843.104178][ T5896] m920x_read = error: -19 [ 1843.108733][ T5896] dvb-usb: error while querying for an remote control event. [ 1843.131588][T29002] netlink: 277 bytes leftover after parsing attributes in process `syz.9.5717'. [ 1843.239617][ T25] m920x_read = error: -19 [ 1843.246607][ T25] dvb-usb: error while querying for an remote control event. [ 1843.484265][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1843.580928][T21646] m920x_read = error: -19 [ 1843.585424][T21646] dvb-usb: error while querying for an remote control event. [ 1843.719433][T21646] m920x_read = error: -19 [ 1843.724421][T21646] dvb-usb: error while querying for an remote control event. [ 1843.826732][ T29] audit: type=1400 audit(1737225518.743:2860): avc: denied { connect } for pid=28988 comm="syz.9.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1843.911948][ T25] m920x_read = error: -19 [ 1843.916433][ T25] dvb-usb: error while querying for an remote control event. [ 1844.050813][T21646] m920x_read = error: -19 [ 1844.055639][T21646] dvb-usb: error while querying for an remote control event. [ 1844.189845][T21646] m920x_read = error: -19 [ 1844.194338][T21646] dvb-usb: error while querying for an remote control event. [ 1844.342876][T29014] can0: slcan on ttyS3. [ 1844.363338][ T25] m920x_read = error: -19 [ 1844.368175][ T25] dvb-usb: error while querying for an remote control event. [ 1844.457620][T29013] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5723'. [ 1844.490004][ T25] m920x_read = error: -19 [ 1844.495980][ T25] dvb-usb: error while querying for an remote control event. [ 1844.596046][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1844.639094][T21646] m920x_read = error: -19 [ 1844.648561][T21646] dvb-usb: error while querying for an remote control event. [ 1844.788821][T21646] m920x_read = error: -19 [ 1844.793437][T21646] dvb-usb: error while querying for an remote control event. [ 1844.840157][T19866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.852661][ T5866] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1844.865650][T19866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.984009][T21646] m920x_read = error: -19 [ 1844.995758][T21646] dvb-usb: error while querying for an remote control event. [ 1845.202655][T29021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1845.245850][ T25] m920x_read = error: -19 [ 1845.289341][ T25] dvb-usb: error while querying for an remote control event. [ 1845.604639][T29008] can0 (unregistered): slcan off ttyS3. [ 1845.689951][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.702936][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1845.714716][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1845.745748][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1845.794090][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 123, setting to 64 [ 1845.814660][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1845.903921][T21646] m920x_read = error: -19 [ 1845.947699][T21646] dvb-usb: error while querying for an remote control event. [ 1845.956417][ T5866] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1846.042090][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1846.054630][ T5866] usb 1-1: Product: syz [ 1846.058838][ T5866] usb 1-1: Manufacturer: syz [ 1846.065858][ T5866] usb 1-1: SerialNumber: syz [ 1846.111097][ T5866] usb 1-1: config 0 descriptor?? [ 1846.121471][T29006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1846.130001][ T25] m920x_read = error: -19 [ 1846.136564][ T25] dvb-usb: error while querying for an remote control event. [ 1846.253004][ T25] m920x_read = error: -19 [ 1846.257406][ T25] dvb-usb: error while querying for an remote control event. [ 1846.331818][T21646] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1846.350917][ T5866] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1846.381334][ T25] m920x_read = error: -19 [ 1846.385732][ T25] dvb-usb: error while querying for an remote control event. [ 1846.407307][ T5866] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1846.633027][T21646] usb 9-1: Using ep0 maxpacket: 16 [ 1846.638799][ T25] m920x_read = error: -19 [ 1846.643222][ T25] dvb-usb: error while querying for an remote control event. [ 1846.659266][T21646] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.665839][ T5866] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1846.669451][T21646] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1846.691464][ T5866] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1846.819638][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1846.820309][ T5896] m920x_read = error: -19 [ 1846.842340][ T5896] dvb-usb: error while querying for an remote control event. [ 1846.999167][ T25] m920x_read = error: -19 [ 1847.004035][ T25] dvb-usb: error while querying for an remote control event. [ 1847.107245][T21646] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1847.164282][ T5866] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1847.172750][ T25] m920x_read = error: -19 [ 1847.182844][ T25] dvb-usb: error while querying for an remote control event. [ 1847.223388][T21646] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.563292][ T5866] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1847.563601][ T25] m920x_read = error: -19 [ 1847.571979][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.578746][T21646] usb 9-1: config 0 descriptor?? [ 1847.583318][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.587591][ T25] dvb-usb: error while querying for an remote control event. [ 1847.594483][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.608927][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.615822][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.622434][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.629037][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.633012][T21646] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1847.635724][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.650100][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.656938][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.663584][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.670528][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.677556][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.684399][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.691197][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.697882][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.704567][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.711438][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.718262][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.724907][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.731599][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.738240][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.741398][T21646] m920x_read = error: -19 [ 1847.744906][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.755716][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.756189][T21646] dvb-usb: error while querying for an remote control event. [ 1847.762368][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.762906][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.783157][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.789851][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.796576][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.803182][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.809773][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.816379][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.823325][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.829979][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.836618][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.843219][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.850099][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.856787][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.863391][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.870019][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.876634][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.883708][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.890827][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.897428][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.904041][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.910713][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.917325][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.923944][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.930783][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.937563][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1847.944796][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.947093][T21646] m920x_read = error: -19 [ 1847.951334][ T5866] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1847.951385][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 1847.951715][ T5866] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1847.984870][T21646] dvb-usb: error while querying for an remote control event. [ 1848.005834][ T5866] usb 1-1: USB disconnect, device number 74 [ 1848.125019][T21646] m920x_read = error: -19 [ 1848.130249][T21646] dvb-usb: error while querying for an remote control event. [ 1848.295773][T21646] m920x_read = error: -19 [ 1848.300243][T21646] dvb-usb: error while querying for an remote control event. [ 1848.515806][T21646] m920x_read = error: -19 [ 1848.540963][ T29] audit: type=1400 audit(1737225523.148:2861): avc: denied { setopt } for pid=29051 comm="syz.1.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1848.811259][T21646] dvb-usb: error while querying for an remote control event. [ 1848.854492][ T29] audit: type=1400 audit(1737225523.167:2862): avc: denied { setopt } for pid=29051 comm="syz.1.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1848.947039][T21646] m920x_read = error: -19 [ 1848.952358][T21646] dvb-usb: error while querying for an remote control event. [ 1849.043326][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1849.076362][ T25] m920x_read = error: -19 [ 1849.080866][ T25] dvb-usb: error while querying for an remote control event. [ 1849.111140][T13971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1849.122007][T13971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1849.132923][T13971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1849.140741][T13971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1849.149097][T13971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1849.156394][T13971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1849.218722][ T25] m920x_read = error: -19 [ 1849.223130][ T25] dvb-usb: error while querying for an remote control event. [ 1849.354771][T21646] m920x_read = error: -19 [ 1849.359353][T21646] dvb-usb: error while querying for an remote control event. [ 1849.507425][ T25] m920x_read = error: -19 [ 1849.512598][ T25] dvb-usb: error while querying for an remote control event. [ 1849.642004][ T25] m920x_read = error: -19 [ 1849.657339][ T25] dvb-usb: error while querying for an remote control event. [ 1849.734001][T29063] wlan0 speed is unknown, defaulting to 1000 [ 1849.741169][T29063] vxcan1 speed is unknown, defaulting to 1000 [ 1849.791796][ T25] m920x_read = error: -19 [ 1849.796174][ T25] dvb-usb: error while querying for an remote control event. [ 1850.010511][ T5896] m920x_read = error: -19 [ 1850.015271][ T5896] dvb-usb: error while querying for an remote control event. [ 1850.155149][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1850.241425][T29077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5739'. [ 1850.679262][ T5896] m920x_read = error: -19 [ 1850.684286][ T5896] dvb-usb: error while querying for an remote control event. [ 1850.873762][ T5896] m920x_read = error: -19 [ 1850.878477][ T5896] dvb-usb: error while querying for an remote control event. [ 1851.031129][ T997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.120995][ T5896] m920x_read = error: -19 [ 1851.125380][ T5896] dvb-usb: error while querying for an remote control event. [ 1851.195830][T29080] tipc: Enabling of bearer rejected, already enabled [ 1851.214082][T29082] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5740'. [ 1851.249534][ T25] m920x_read = error: -19 [ 1851.253927][ T25] dvb-usb: error while querying for an remote control event. [ 1851.266926][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1851.275154][T27069] usb 9-1: USB disconnect, device number 53 [ 1851.302695][T29058] [U] vÔ3 [ 1851.327805][ T997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.384644][ T5896] m920x_read = error: -19 [ 1851.396061][ T5896] dvb-usb: error while querying for an remote control event. [ 1851.405135][ T997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.438446][T13971] Bluetooth: hci4: command tx timeout [ 1851.504039][ T997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.514466][ T25] m920x_read = error: -19 [ 1851.518838][ T25] dvb-usb: error while querying for an remote control event. [ 1851.652150][ T25] m920x_read = error: -19 [ 1851.656610][ T25] dvb-usb: error while querying for an remote control event. [ 1851.843292][ T25] m920x_read = error: -19 [ 1851.890938][ T25] dvb-usb: error while querying for an remote control event. [ 1852.020764][T29088] delete_channel: no stack [ 1852.039104][T29063] chnl_net:caif_netlink_parms(): no params data found [ 1852.174768][ T25] m920x_read = error: -19 [ 1852.218296][ T25] dvb-usb: error while querying for an remote control event. [ 1852.378756][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1852.400876][ T25] m920x_read = error: -19 [ 1852.405377][ T25] dvb-usb: error while querying for an remote control event. [ 1852.907196][T29063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.914617][ T5896] m920x_read = error: -19 [ 1852.919250][ T5896] dvb-usb: error while querying for an remote control event. [ 1852.937838][T29063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.960906][T29063] bridge_slave_0: entered allmulticast mode [ 1852.971820][T29063] bridge_slave_0: entered promiscuous mode [ 1852.986418][T29063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.994571][T29063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.008832][T29063] bridge_slave_1: entered allmulticast mode [ 1853.016153][T29063] bridge_slave_1: entered promiscuous mode [ 1853.070101][ T997] bridge_slave_1: left allmulticast mode [ 1853.076315][ T997] bridge_slave_1: left promiscuous mode [ 1853.092960][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.100848][ T5896] m920x_read = error: -19 [ 1853.105215][ T5896] dvb-usb: error while querying for an remote control event. [ 1853.212685][ T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1853.235523][T25789] m920x_read = error: -19 [ 1853.240035][T25789] dvb-usb: error while querying for an remote control event. [ 1853.474624][T25789] m920x_read = error: -19 [ 1853.490556][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1853.490798][T25789] dvb-usb: error while querying for an remote control event. [ 1853.520590][ T997] bridge_slave_0: left allmulticast mode [ 1853.553893][ T997] bridge_slave_0: left promiscuous mode [ 1853.571120][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.608555][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1853.647489][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.664596][T13971] Bluetooth: hci4: command tx timeout [ 1853.691852][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1853.703693][ T5896] m920x_read = error: -19 [ 1853.708278][ T5896] dvb-usb: error while querying for an remote control event. [ 1853.757079][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1853.802043][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1853.828328][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1853.847354][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1853.857096][T15936] m920x_read = error: -19 [ 1853.861409][T15936] dvb-usb: error while querying for an remote control event. [ 1853.869033][ T25] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1853.878800][ T25] usb 2-1: Manufacturer: syz [ 1853.890986][ T25] usb 2-1: config 0 descriptor?? [ 1853.993262][T15936] m920x_read = error: -19 [ 1853.997689][T15936] dvb-usb: error while querying for an remote control event. [ 1854.132756][T15936] m920x_read = error: -19 [ 1854.137281][T15936] dvb-usb: error while querying for an remote control event. [ 1854.261011][T25789] m920x_read = error: -19 [ 1854.265698][T25789] dvb-usb: error while querying for an remote control event. [ 1854.389773][T25789] m920x_read = error: -19 [ 1854.394721][T25789] dvb-usb: error while querying for an remote control event. [ 1854.506730][ T25] rc_core: IR keymap rc-hauppauge not found [ 1854.512692][ T25] Registered IR keymap rc-empty [ 1854.530249][T25789] m920x_read = error: -19 [ 1854.540636][T25789] dvb-usb: error while querying for an remote control event. [ 1854.548974][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.591835][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.602497][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1854.613576][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1854.635320][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input71 [ 1854.647780][T25789] m920x_read = error: -19 [ 1854.652142][T25789] dvb-usb: error while querying for an remote control event. [ 1854.666123][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.690855][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.720147][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.729528][T29137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29137 comm=syz.9.5753 [ 1854.752393][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.785940][T25789] m920x_read = error: -19 [ 1854.794424][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.801900][T25789] dvb-usb: error while querying for an remote control event. [ 1854.831681][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.859332][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.902562][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.923139][T25789] m920x_read = error: -19 [ 1854.927583][T25789] dvb-usb: error while querying for an remote control event. [ 1854.936802][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.965943][ T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.999477][ T25] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1855.008743][ T25] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1855.022900][ T25] usb 2-1: USB disconnect, device number 64 [ 1855.070074][T25789] m920x_read = error: -19 [ 1855.075614][T25789] dvb-usb: error while querying for an remote control event. [ 1855.201184][T25789] m920x_read = error: -19 [ 1855.207907][T25789] dvb-usb: error while querying for an remote control event. [ 1855.338654][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.350894][ T25] m920x_read = error: -19 [ 1855.356042][ T25] dvb-usb: error while querying for an remote control event. [ 1855.366168][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.379376][ T997] bond0 (unregistering): Released all slaves [ 1855.479112][ T25] m920x_read = error: -19 [ 1855.483921][ T25] dvb-usb: error while querying for an remote control event. [ 1855.597395][ T25] m920x_read = error: -19 [ 1855.601765][ T25] dvb-usb: error while querying for an remote control event. [ 1855.714227][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1855.724902][ T25] m920x_read = error: -19 [ 1855.729258][ T25] dvb-usb: error while querying for an remote control event. [ 1855.796169][ T29] audit: type=1400 audit(1737225529.930:2863): avc: denied { read } for pid=29142 comm="syz.1.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1855.797669][ T997] bond1 (unregistering): Released all slaves [ 1855.842847][T13971] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1855.875248][ T25] m920x_read = error: -19 [ 1855.879702][ T25] dvb-usb: error while querying for an remote control event. [ 1855.885391][T13971] Bluetooth: hci4: command tx timeout [ 1856.003022][ T25] m920x_read = error: -19 [ 1856.007401][ T25] dvb-usb: error while querying for an remote control event. [ 1856.105025][ T997] bond2 (unregistering): Released all slaves [ 1856.136281][ T25] m920x_read = error: -19 [ 1856.140953][ T25] dvb-usb: error while querying for an remote control event. [ 1856.249999][ T25] m920x_read = error: -19 [ 1856.254671][ T25] dvb-usb: error while querying for an remote control event. [ 1856.256158][ T997] bond3 (unregistering): Released all slaves [ 1856.307869][T27069] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1856.389455][ T25] m920x_read = error: -19 [ 1856.393890][ T25] dvb-usb: error while querying for an remote control event. [ 1856.438734][ T997] bond4 (unregistering): Released all slaves [ 1856.473213][T27069] usb 2-1: Using ep0 maxpacket: 32 [ 1856.479967][T27069] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 1856.497768][T27069] usb 2-1: config 0 has no interface number 0 [ 1856.526760][ T25] m920x_read = error: -19 [ 1856.531493][T27069] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=da.65 [ 1856.531607][ T25] dvb-usb: error while querying for an remote control event. [ 1856.552206][T27069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.560421][T27069] usb 2-1: Product: syz [ 1856.564680][T27069] usb 2-1: Manufacturer: syz [ 1856.569480][T27069] usb 2-1: SerialNumber: syz [ 1856.576223][T27069] usb 2-1: config 0 descriptor?? [ 1856.639965][ T997] bond5 (unregistering): Released all slaves [ 1856.655025][T21646] m920x_read = error: -19 [ 1856.659379][T21646] dvb-usb: error while querying for an remote control event. [ 1856.671945][T29120] tipc: Enabling of bearer rejected, already enabled [ 1856.680547][T29124] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.5748'. [ 1856.753941][T29152] fuse: Bad value for 'fd' [ 1856.826147][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1856.898529][T21646] m920x_read = error: -19 [ 1856.903430][T21646] dvb-usb: error while querying for an remote control event. [ 1856.947821][T29063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.964368][T29063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.254355][ T997] tipc: Disabling bearer [ 1857.260075][ T997] tipc: Left network mode [ 1857.337856][T21646] m920x_read = error: -19 [ 1857.425908][T21646] dvb-usb: error while querying for an remote control event. [ 1857.571282][T27069] peak_usb 2-1:0.19 can0: unable to request usb[type=0 value=1] err=-71 [ 1857.579772][T27069] peak_usb 2-1:0.19: unable to read PCAN-USB Pro firmware info (err -71) [ 1857.666639][T29063] team0: Port device team_slave_0 added [ 1857.684688][T29063] team0: Port device team_slave_1 added [ 1857.713440][T21646] m920x_read = error: -19 [ 1857.717833][T21646] dvb-usb: error while querying for an remote control event. [ 1857.846863][T25789] m920x_read = error: -19 [ 1857.851256][T25789] dvb-usb: error while querying for an remote control event. [ 1857.853296][T27069] peak_usb 2-1:0.19: probe with driver peak_usb failed with error -71 [ 1857.871270][T27069] usb 2-1: USB disconnect, device number 65 [ 1857.892255][T29159] netlink: 'syz.8.5760': attribute type 3 has an invalid length. [ 1857.937931][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1858.109011][T13971] Bluetooth: hci4: command tx timeout [ 1858.244099][T21646] m920x_read = error: -19 [ 1858.248538][T21646] dvb-usb: error while querying for an remote control event. [ 1858.377121][T29063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.384323][T29063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1858.410353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1858.426946][T25789] m920x_read = error: -19 [ 1858.431845][T25789] dvb-usb: error while querying for an remote control event. [ 1858.482187][T29063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.050764][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1859.060976][T25789] m920x_read = error: -19 [ 1859.063340][T29063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.072515][T25789] dvb-usb: error while querying for an remote control event. [ 1859.106391][T29063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.188983][T21646] m920x_read = error: -19 [ 1859.189358][T29063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.193742][T21646] dvb-usb: error while querying for an remote control event. [ 1859.340134][T21646] m920x_read = error: -19 [ 1859.344798][T21646] dvb-usb: error while querying for an remote control event. [ 1859.466917][T21646] m920x_read = error: -19 [ 1859.471422][T21646] dvb-usb: error while querying for an remote control event. [ 1859.616917][T25789] m920x_read = error: -19 [ 1859.669849][T25789] dvb-usb: error while querying for an remote control event. [ 1859.808200][ T25] m920x_read = error: -19 [ 1859.813259][ T25] dvb-usb: error while querying for an remote control event. [ 1859.902592][T25789] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1859.959290][T21646] wlan0 speed is unknown, defaulting to 1000 [ 1859.971703][T29063] hsr_slave_0: entered promiscuous mode [ 1859.981844][T21646] infiniband syz0: ib_query_port failed (-19) [ 1859.993192][T29063] hsr_slave_1: entered promiscuous mode [ 1860.014224][T29063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1860.021816][T29063] Cannot create hsr debugfs directory [ 1860.044343][T21646] m920x_read = error: -19 [ 1860.048687][T21646] dvb-usb: error while querying for an remote control event. [ 1860.161543][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1860.286898][T21646] m920x_read = error: -19 [ 1860.291463][T21646] dvb-usb: error while querying for an remote control event. [ 1860.311135][T25789] usb 10-1: Using ep0 maxpacket: 16 [ 1860.319334][T25789] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.329713][T25789] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1860.340953][T25789] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1860.351205][T25789] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1860.997781][ T25] m920x_read = error: -19 [ 1861.003059][ T25] dvb-usb: error while querying for an remote control event. [ 1861.017057][T25789] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1861.036786][T25789] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1861.047815][T25789] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1861.058061][T25789] usb 10-1: Manufacturer: syz [ 1861.065123][T29186] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1861.073968][T29186] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1861.082788][T29186] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1861.091661][T29186] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1861.110699][T29187] tipc: Enabling of bearer rejected, already enabled [ 1861.132453][T25789] usb 10-1: config 0 descriptor?? [ 1861.137656][ T25] m920x_read = error: -19 [ 1861.141988][ T25] dvb-usb: error while querying for an remote control event. [ 1861.273607][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1861.294392][ T25] m920x_read = error: -19 [ 1861.299699][ T25] dvb-usb: error while querying for an remote control event. [ 1861.317444][T29189] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.5766'. [ 1861.477115][ T25] m920x_read = error: -19 [ 1861.520822][ T25] dvb-usb: error while querying for an remote control event. [ 1861.594180][T25789] rc_core: IR keymap rc-hauppauge not found [ 1861.615399][T25789] Registered IR keymap rc-empty [ 1861.620850][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1861.659751][ T25] m920x_read = error: -19 [ 1861.664192][ T25] dvb-usb: error while querying for an remote control event. [ 1861.672171][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1861.711448][ T997] hsr_slave_0: left promiscuous mode [ 1861.729849][T25789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1861.748051][ T997] hsr_slave_1: left promiscuous mode [ 1861.751929][T25789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input72 [ 1861.808279][ T25] m920x_read = error: -19 [ 1861.812759][ T25] dvb-usb: error while querying for an remote control event. [ 1861.890758][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.900125][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1861.917129][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.925489][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.947430][ T25] m920x_read = error: -19 [ 1861.948536][ T997] veth1_macvtap: left promiscuous mode [ 1861.951921][ T25] dvb-usb: error while querying for an remote control event. [ 1861.957285][ T997] veth0_macvtap: left promiscuous mode [ 1861.968208][ T997] veth1_vlan: left promiscuous mode [ 1861.971132][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1861.983067][ T997] veth0_vlan: left promiscuous mode [ 1862.027772][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.303221][ T5896] m920x_read = error: -19 [ 1862.310735][ T5896] dvb-usb: error while querying for an remote control event. [ 1862.366914][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.385268][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1862.400081][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.427891][ T25] m920x_read = error: -19 [ 1862.433550][ T25] dvb-usb: error while querying for an remote control event. [ 1862.462539][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.545670][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.596710][ T25] m920x_read = error: -19 [ 1862.608468][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.619303][ T25] dvb-usb: error while querying for an remote control event. [ 1862.876995][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.909035][T25789] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1862.943416][T25789] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1862.962885][T25789] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1862.979720][T25789] usb 10-1: USB disconnect, device number 56 [ 1862.999957][ T25] m920x_read = error: -19 [ 1863.004397][ T25] dvb-usb: error while querying for an remote control event. [ 1863.133495][ T5896] m920x_read = error: -19 [ 1863.138008][ T5896] dvb-usb: error while querying for an remote control event. [ 1863.262661][T25789] m920x_read = error: -19 [ 1863.267497][T25789] dvb-usb: error while querying for an remote control event. [ 1863.395826][T25789] m920x_read = error: -19 [ 1863.400232][T25789] dvb-usb: error while querying for an remote control event. [ 1863.497102][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1863.518635][ T5896] m920x_read = error: -19 [ 1863.523023][ T5896] dvb-usb: error while querying for an remote control event. [ 1863.754359][ T5896] m920x_read = error: -19 [ 1863.759286][ T5896] dvb-usb: error while querying for an remote control event. [ 1863.882059][ T25] m920x_read = error: -19 [ 1863.886494][ T25] dvb-usb: error while querying for an remote control event. [ 1864.042378][ T25] m920x_read = error: -19 [ 1864.047021][ T25] dvb-usb: error while querying for an remote control event. [ 1864.259736][T25789] m920x_read = error: -19 [ 1864.312653][T25789] dvb-usb: error while querying for an remote control event. [ 1864.468464][T25789] m920x_read = error: -19 [ 1864.472974][T25789] dvb-usb: error while querying for an remote control event. [ 1864.598153][ T5896] m920x_read = error: -19 [ 1864.602538][ T5896] dvb-usb: error while querying for an remote control event. [ 1864.608791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1864.773010][ T25] m920x_read = error: -19 [ 1864.777353][ T25] dvb-usb: error while querying for an remote control event. [ 1864.908141][ T25] m920x_read = error: -19 [ 1864.912639][ T25] dvb-usb: error while querying for an remote control event. [ 1865.063493][ T25] m920x_read = error: -19 [ 1865.076955][ T25] dvb-usb: error while querying for an remote control event. [ 1865.142275][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1865.211992][ T25] m920x_read = error: -19 [ 1865.217039][T29227] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1865.226450][T29227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1865.235733][T29227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1865.258095][ T25] dvb-usb: error while querying for an remote control event. [ 1865.338124][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1865.390083][T25789] m920x_read = error: -19 [ 1865.394511][T25789] dvb-usb: error while querying for an remote control event. [ 1865.517655][T25789] m920x_read = error: -19 [ 1865.522093][T25789] dvb-usb: error while querying for an remote control event. [ 1865.646628][T25789] m920x_read = error: -19 [ 1865.651064][T25789] dvb-usb: error while querying for an remote control event. [ 1865.720629][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1865.774153][T25789] m920x_read = error: -19 [ 1865.778543][T25789] dvb-usb: error while querying for an remote control event. [ 1866.129846][T25789] m920x_read = error: -19 [ 1866.156873][T25789] dvb-usb: error while querying for an remote control event. [ 1866.343070][T25789] m920x_read = error: -19 [ 1866.364280][T25789] dvb-usb: error while querying for an remote control event. [ 1866.526257][T25789] m920x_read = error: -19 [ 1866.530736][T25789] dvb-usb: error while querying for an remote control event. [ 1866.657483][T25789] m920x_read = error: -19 [ 1866.662050][T25789] dvb-usb: error while querying for an remote control event. [ 1866.797413][T25789] m920x_read = error: -19 [ 1866.801885][T25789] dvb-usb: error while querying for an remote control event. [ 1866.819581][T29224] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1866.832454][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1866.864482][T29224] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1866.875617][T29224] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1866.884535][T29224] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1867.022539][ T5896] m920x_read = error: -19 [ 1867.027533][ T5896] dvb-usb: error while querying for an remote control event. [ 1867.079511][T29237] binder: BINDER_SET_CONTEXT_MGR already set [ 1867.085878][T29237] binder: 29236:29237 ioctl 4018620d 200002c0 returned -16 [ 1867.797623][T25789] m920x_read = error: -19 [ 1867.802012][T25789] dvb-usb: error while querying for an remote control event. [ 1867.944346][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1867.989256][ T5896] m920x_read = error: -19 [ 1867.994242][ T5896] dvb-usb: error while querying for an remote control event. [ 1868.695009][ T5896] m920x_read = error: -19 [ 1868.699657][ T5896] dvb-usb: error while querying for an remote control event. [ 1868.893818][T25789] m920x_read = error: -19 [ 1868.901882][T25789] dvb-usb: error while querying for an remote control event. [ 1869.052514][T29255] siw: device registration error -23 [ 1869.058151][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1869.106363][T13971] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1869.131345][ T5896] m920x_read = error: -19 [ 1869.136003][ T5896] dvb-usb: error while querying for an remote control event. [ 1869.152315][ T29] audit: type=1326 audit(1737225542.427:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.365733][T25789] m920x_read = error: -19 [ 1869.411263][T25789] dvb-usb: error while querying for an remote control event. [ 1869.419586][ T29] audit: type=1326 audit(1737225542.436:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.443090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.650796][ T29] audit: type=1326 audit(1737225542.848:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.674310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.677764][ T5896] m920x_read = error: -19 [ 1869.686213][ T5896] dvb-usb: error while querying for an remote control event. [ 1869.744301][ T29] audit: type=1326 audit(1737225542.848:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.794976][ T29] audit: type=1326 audit(1737225542.848:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.838544][ T29] audit: type=1326 audit(1737225542.848:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.873595][T29063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1869.890012][ T5896] m920x_read = error: -19 [ 1869.894409][ T5896] dvb-usb: error while querying for an remote control event. [ 1869.905821][ T29] audit: type=1326 audit(1737225542.848:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1869.909256][T29063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1869.963130][ T29] audit: type=1326 audit(1737225542.848:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1870.013279][ T29] audit: type=1326 audit(1737225542.848:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29247 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b1c985d29 code=0x7ffc0000 [ 1870.015819][T29063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1870.039637][ T5896] m920x_read = error: -19 [ 1870.048599][ T5896] dvb-usb: error while querying for an remote control event. [ 1870.069157][ T29] audit: type=1400 audit(1737225542.848:2873): avc: denied { ioctl } for pid=29247 comm="syz.1.5783" path="socket:[116007]" dev="sockfs" ino=116007 ioctlcmd=0x4945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1870.167937][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1870.168262][ T5896] m920x_read = error: -19 [ 1870.201000][ T5896] dvb-usb: error while querying for an remote control event. [ 1870.319763][ T5896] m920x_read = error: -19 [ 1870.325419][ T5896] dvb-usb: error while querying for an remote control event. [ 1870.429310][T29063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1870.481475][ T5896] m920x_read = error: -19 [ 1870.486776][ T5896] dvb-usb: error while querying for an remote control event. [ 1870.600412][T29063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1870.645453][ T997] IPVS: stop unused estimator thread 0... [ 1870.645533][T29063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.662003][T25789] m920x_read = error: -19 [ 1870.666443][T25789] dvb-usb: error while querying for an remote control event. [ 1870.678771][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.686359][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.731545][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.738706][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.799719][ T25] m920x_read = error: -19 [ 1870.804094][ T25] dvb-usb: error while querying for an remote control event. [ 1870.829387][T29063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1870.961089][T21646] m920x_read = error: -19 [ 1871.034582][T25789] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1871.045115][T21646] dvb-usb: error while querying for an remote control event. [ 1871.185269][T29063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.279732][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1871.369073][ T25] m920x_read = error: -19 [ 1871.373509][ T25] dvb-usb: error while querying for an remote control event. [ 1871.572042][ T25] m920x_read = error: -19 [ 1871.609921][ T25] dvb-usb: error while querying for an remote control event. [ 1871.657424][T25789] usb 2-1: Using ep0 maxpacket: 16 [ 1871.754135][T25789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1871.827859][ T25] m920x_read = error: -19 [ 1871.931570][ T25] dvb-usb: error while querying for an remote control event. [ 1871.945993][T25789] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1871.958276][T25789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.970667][T25789] usb 2-1: config 0 descriptor?? [ 1871.995797][T29063] veth0_vlan: entered promiscuous mode [ 1872.046965][T29063] veth1_vlan: entered promiscuous mode [ 1872.084970][T29288] tipc: Enabling of bearer rejected, already enabled [ 1872.085088][T21646] m920x_read = error: -19 [ 1872.099578][T21646] dvb-usb: error while querying for an remote control event. [ 1872.232118][T21646] m920x_read = error: -19 [ 1872.236624][T21646] dvb-usb: error while querying for an remote control event. [ 1872.292429][T29288] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.5794'. [ 1872.371374][T21646] m920x_read = error: -19 [ 1872.375961][T21646] dvb-usb: error while querying for an remote control event. [ 1872.391748][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1872.531355][T21646] m920x_read = error: -19 [ 1872.531970][T29063] veth0_macvtap: entered promiscuous mode [ 1872.535766][T21646] dvb-usb: error while querying for an remote control event. [ 1872.570648][T25789] wacom 0003:056A:0084.0024: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.1-1/input0 [ 1872.598172][T29063] veth1_macvtap: entered promiscuous mode [ 1872.670220][T21646] m920x_read = error: -19 [ 1872.676246][T21646] dvb-usb: error while querying for an remote control event. [ 1872.822006][T21646] m920x_read = error: -19 [ 1872.826613][T21646] dvb-usb: error while querying for an remote control event. [ 1873.037806][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.094009][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.151773][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.161370][T21646] m920x_read = error: -19 [ 1873.166838][T21646] dvb-usb: error while querying for an remote control event. [ 1873.167598][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.185293][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.195876][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.206018][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.220721][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.234266][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.244809][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.254943][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.265654][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.275806][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.286808][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.300697][T25789] m920x_read = error: -19 [ 1873.301666][T29063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.310943][T25789] dvb-usb: error while querying for an remote control event. [ 1873.322143][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.362786][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.373192][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.385361][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.395718][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.406499][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.439010][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.449645][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.459578][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.470103][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.480041][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.490612][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.501082][T29063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.511733][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1873.519045][T29063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.530197][T29063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.559861][T21646] m920x_read = error: -19 [ 1873.564623][T21646] dvb-usb: error while querying for an remote control event. [ 1873.665689][T12455] usb 2-1: USB disconnect, device number 66 [ 1873.685419][T21646] m920x_read = error: -19 [ 1873.715258][T21646] dvb-usb: error while querying for an remote control event. [ 1873.758541][T29063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.768762][T29063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.797487][T29063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.807626][T29063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.846234][T21646] m920x_read = error: -19 [ 1873.850588][T21646] dvb-usb: error while querying for an remote control event. [ 1873.863325][T29297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.995185][T21646] m920x_read = error: -19 [ 1873.999667][T21646] dvb-usb: error while querying for an remote control event. [ 1874.134889][T25789] m920x_read = error: -19 [ 1874.162965][T25789] dvb-usb: error while querying for an remote control event. [ 1874.615347][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1874.630905][T21646] m920x_read = error: -19 [ 1874.635352][T21646] dvb-usb: error while querying for an remote control event. [ 1874.668827][T13971] Bluetooth: hci1: unexpected event for opcode 0x080d [ 1874.746513][T12318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.758244][T25789] m920x_read = error: -19 [ 1874.781871][T12318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.826976][T25789] dvb-usb: error while querying for an remote control event. [ 1874.981631][T19862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.013671][T25789] m920x_read = error: -19 [ 1875.018687][T25789] dvb-usb: error while querying for an remote control event. [ 1875.041791][T19862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.140796][T25789] m920x_read = error: -19 [ 1875.173411][T25789] dvb-usb: error while querying for an remote control event. [ 1875.308480][T29320] tipc: Enabling of bearer rejected, already enabled [ 1875.353364][T25789] m920x_read = error: -19 [ 1875.378786][T25789] dvb-usb: error while querying for an remote control event. [ 1875.525807][T25789] m920x_read = error: -19 [ 1875.530463][T25789] dvb-usb: error while querying for an remote control event. [ 1875.557843][T29320] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5803'. [ 1875.727092][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1875.807155][T25789] m920x_read = error: -19 [ 1875.811546][T25789] dvb-usb: error while querying for an remote control event. [ 1875.930374][T15936] m920x_read = error: -19 [ 1875.934856][T15936] dvb-usb: error while querying for an remote control event. [ 1876.176371][T18299] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1876.216534][T15936] m920x_read = error: -19 [ 1876.220967][T15936] dvb-usb: error while querying for an remote control event. [ 1876.336580][T15936] m920x_read = error: -19 [ 1876.562591][T15936] dvb-usb: error while querying for an remote control event. [ 1876.593876][T18299] usb 2-1: Using ep0 maxpacket: 16 [ 1876.606830][T18299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.659319][T18299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1876.679136][T25789] m920x_read = error: -19 [ 1876.683965][T25789] dvb-usb: error while querying for an remote control event. [ 1876.683978][T18299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1876.838940][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1876.999174][T18299] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1877.010062][T18299] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1877.038139][T25789] m920x_read = error: -19 [ 1877.038182][T18299] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1877.047146][T25789] dvb-usb: error while querying for an remote control event. [ 1877.084728][T18299] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1877.114402][T18299] usb 2-1: Manufacturer: syz [ 1877.139952][T18299] usb 2-1: config 0 descriptor?? [ 1877.224081][T21646] m920x_read = error: -19 [ 1877.228471][T21646] dvb-usb: error while querying for an remote control event. [ 1877.416726][T21646] m920x_read = error: -19 [ 1877.421118][T21646] dvb-usb: error while querying for an remote control event. [ 1877.490983][T25789] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1877.544655][T15936] m920x_read = error: -19 [ 1877.549975][T15936] dvb-usb: error while querying for an remote control event. [ 1877.790363][T25789] usb 9-1: Using ep0 maxpacket: 16 [ 1877.812011][T15936] m920x_read = error: -19 [ 1877.820965][T25789] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1877.848175][T15936] dvb-usb: error while querying for an remote control event. [ 1877.930561][T25789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1877.950687][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1877.965900][T18299] rc_core: IR keymap rc-hauppauge not found [ 1877.971884][T18299] Registered IR keymap rc-empty [ 1877.978356][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.004164][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.007090][T25789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1878.025517][T21646] m920x_read = error: -19 [ 1878.025938][T18299] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1878.029949][T21646] dvb-usb: error while querying for an remote control event. [ 1878.049682][T25789] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1878.064262][T18299] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 1878.068395][T25789] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1878.105285][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.107392][T25789] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1878.133318][T25789] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1878.141593][T25789] usb 9-1: Manufacturer: syz [ 1878.185844][T21646] m920x_read = error: -19 [ 1878.185888][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.190195][T21646] dvb-usb: error while querying for an remote control event. [ 1878.191424][T25789] usb 9-1: config 0 descriptor?? [ 1878.231376][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.250189][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.282106][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.327982][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.337399][T21646] m920x_read = error: -19 [ 1878.341786][T21646] dvb-usb: error while querying for an remote control event. [ 1878.410588][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.431827][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.460667][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.478546][T21646] m920x_read = error: -19 [ 1878.491008][T21646] dvb-usb: error while querying for an remote control event. [ 1878.498607][T18299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1878.530506][T18299] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1878.567968][T18299] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1878.602228][T18299] usb 2-1: USB disconnect, device number 67 [ 1878.602892][T25789] rc_core: IR keymap rc-hauppauge not found [ 1878.614349][T25789] Registered IR keymap rc-empty [ 1878.619224][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.658020][T21646] m920x_read = error: -19 [ 1878.662393][T21646] dvb-usb: error while querying for an remote control event. [ 1878.671639][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.711193][T25789] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1 [ 1878.724667][T25789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1/input77 [ 1878.744396][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.784616][T15936] m920x_read = error: -19 [ 1878.789223][T15936] dvb-usb: error while querying for an remote control event. [ 1878.801843][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.830231][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.859636][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.885603][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.912991][T15936] m920x_read = error: -19 [ 1878.918265][T15936] dvb-usb: error while querying for an remote control event. [ 1878.925782][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.958632][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1878.977097][T13971] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1878.988281][T13971] Bluetooth: hci1: Injecting HCI hardware error event [ 1878.998430][T13971] Bluetooth: hci1: hardware error 0x00 [ 1879.017505][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1879.041337][T15936] m920x_read = error: -19 [ 1879.045697][T15936] dvb-usb: error while querying for an remote control event. [ 1879.058089][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1879.062525][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1879.174651][T25789] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1879.203963][T15936] m920x_read = error: -19 [ 1879.208356][T15936] dvb-usb: error while querying for an remote control event. [ 1879.216265][T25789] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1879.232868][T25789] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1879.357723][T15936] m920x_read = error: -19 [ 1879.362181][T15936] dvb-usb: error while querying for an remote control event. [ 1879.394737][T25789] usb 9-1: USB disconnect, device number 54 [ 1879.928095][T29370] tipc: Started in network mode [ 1879.933532][T29370] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1879.941852][T29370] tipc: Enabled bearer , priority 0 [ 1880.079729][T29370] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1880.174620][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1880.324792][T21646] m920x_read = error: -19 [ 1880.329376][T21646] dvb-usb: error while querying for an remote control event. [ 1880.463278][T15936] m920x_read = error: -19 [ 1880.467717][T15936] dvb-usb: error while querying for an remote control event. [ 1880.646862][T25789] m920x_read = error: -19 [ 1880.651314][T25789] dvb-usb: error while querying for an remote control event. [ 1881.136650][T18299] tipc: Node number set to 11578026 [ 1881.137530][T25789] m920x_read = error: -19 [ 1881.146357][T25789] dvb-usb: error while querying for an remote control event. [ 1881.200633][T13971] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1881.286536][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1881.312957][T15936] m920x_read = error: -19 [ 1881.317657][T15936] dvb-usb: error while querying for an remote control event. [ 1881.447016][T15936] m920x_read = error: -19 [ 1881.451426][T15936] dvb-usb: error while querying for an remote control event. [ 1881.574774][T25789] m920x_read = error: -19 [ 1881.579146][T25789] dvb-usb: error while querying for an remote control event. [ 1881.970569][T25789] m920x_read = error: -19 [ 1881.975305][T25789] dvb-usb: error while querying for an remote control event. [ 1882.157145][ T25] m920x_read = error: -19 [ 1882.161541][ T25] dvb-usb: error while querying for an remote control event. [ 1882.353356][T25789] m920x_read = error: -19 [ 1882.369966][T25789] dvb-usb: error while querying for an remote control event. [ 1882.398007][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1882.722895][ T25] m920x_read = error: -19 [ 1882.727320][ T25] dvb-usb: error while querying for an remote control event. [ 1882.893295][ T25] m920x_read = error: -19 [ 1882.897682][ T25] dvb-usb: error while querying for an remote control event. [ 1883.028649][T25789] m920x_read = error: -19 [ 1883.036716][T25789] dvb-usb: error while querying for an remote control event. [ 1883.172070][T25789] m920x_read = error: -19 [ 1883.176505][T25789] dvb-usb: error while querying for an remote control event. [ 1883.338763][T25789] m920x_read = error: -19 [ 1883.343153][T25789] dvb-usb: error while querying for an remote control event. [ 1883.467566][T25789] m920x_read = error: -19 [ 1883.471950][T25789] dvb-usb: error while querying for an remote control event. [ 1883.509806][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1883.648729][ T25] m920x_read = error: -19 [ 1883.653114][ T25] dvb-usb: error while querying for an remote control event. [ 1883.790241][ T25] m920x_read = error: -19 [ 1883.800420][ T25] dvb-usb: error while querying for an remote control event. [ 1883.916088][ T25] m920x_read = error: -19 [ 1883.936124][ T25] dvb-usb: error while querying for an remote control event. [ 1884.076522][ T25] m920x_read = error: -19 [ 1884.080954][ T25] dvb-usb: error while querying for an remote control event. [ 1884.240392][T29420] tipc: Enabling of bearer rejected, already enabled [ 1884.419002][ T25] m920x_read = error: -19 [ 1884.423578][ T25] dvb-usb: error while querying for an remote control event. [ 1884.470643][T29420] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5830'. [ 1884.569854][T21646] m920x_read = error: -19 [ 1884.574472][T21646] dvb-usb: error while querying for an remote control event. [ 1884.621769][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1884.710693][ T25] m920x_read = error: -19 [ 1884.720986][ T25] dvb-usb: error while querying for an remote control event. [ 1884.978478][T21646] m920x_read = error: -19 [ 1884.983049][T21646] dvb-usb: error while querying for an remote control event. [ 1885.165478][ T25] m920x_read = error: -19 [ 1885.182482][ T25] dvb-usb: error while querying for an remote control event. [ 1885.734232][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1886.219784][T25789] m920x_read = error: -19 [ 1886.224173][T25789] dvb-usb: error while querying for an remote control event. [ 1886.425717][ T25] m920x_read = error: -19 [ 1886.430665][ T25] dvb-usb: error while querying for an remote control event. [ 1886.845256][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1887.258821][ T25] m920x_read = error: -19 [ 1887.263313][ T25] dvb-usb: error while querying for an remote control event. [ 1887.281636][T29447] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5837'. [ 1887.584491][ T25] m920x_read = error: -19 [ 1887.591959][ T25] dvb-usb: error while querying for an remote control event. [ 1887.722183][ T25] m920x_read = error: -19 [ 1887.726740][ T25] dvb-usb: error while querying for an remote control event. [ 1887.861082][ T25] m920x_read = error: -19 [ 1887.865541][ T25] dvb-usb: error while querying for an remote control event. [ 1887.957082][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1887.999799][ T25] m920x_read = error: -19 [ 1888.004171][ T25] dvb-usb: error while querying for an remote control event. [ 1888.138874][ T25] m920x_read = error: -19 [ 1888.143252][ T25] dvb-usb: error while querying for an remote control event. [ 1888.204237][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1888.267085][ T25] m920x_read = error: -19 [ 1888.271483][ T25] dvb-usb: error while querying for an remote control event. [ 1888.400209][T29454] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5841'. [ 1888.436128][ T25] m920x_read = error: -19 [ 1888.441106][ T25] dvb-usb: error while querying for an remote control event. [ 1888.614717][ T25] m920x_read = error: -19 [ 1888.619477][ T25] dvb-usb: error while querying for an remote control event. [ 1888.873135][ T25] m920x_read = error: -19 [ 1888.877554][ T25] dvb-usb: error while querying for an remote control event. [ 1889.001997][T25789] m920x_read = error: -19 [ 1889.006615][T25789] dvb-usb: error while querying for an remote control event. [ 1889.068893][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1889.627675][T29470] tipc: Enabling of bearer rejected, already enabled [ 1889.679969][T25789] m920x_read = error: -19 [ 1889.684445][T25789] dvb-usb: error while querying for an remote control event. [ 1889.949468][ T25] m920x_read = error: -19 [ 1889.953843][ T25] dvb-usb: error while querying for an remote control event. [ 1889.995543][T29469] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1890.036496][T29462] tipc: Enabling of bearer rejected, already enabled [ 1890.084568][T25789] m920x_read = error: -19 [ 1890.089005][T25789] dvb-usb: error while querying for an remote control event. [ 1890.180808][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1890.200558][T29462] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5838'. [ 1890.212752][T25789] m920x_read = error: -19 [ 1890.217096][T25789] dvb-usb: error while querying for an remote control event. [ 1890.672662][ T25] m920x_read = error: -19 [ 1890.677411][ T25] dvb-usb: error while querying for an remote control event. [ 1890.855483][T25789] m920x_read = error: -19 [ 1890.859904][T25789] dvb-usb: error while querying for an remote control event. [ 1891.256877][T25789] m920x_read = error: -19 [ 1891.261450][T25789] dvb-usb: error while querying for an remote control event. [ 1891.292546][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1891.330917][T29489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1891.389326][T25789] m920x_read = error: -19 [ 1891.393746][T25789] dvb-usb: error while querying for an remote control event. [ 1891.410228][ T5866] IPVS: starting estimator thread 0... [ 1891.498116][T29498] netlink: 'syz.8.5852': attribute type 2 has an invalid length. [ 1891.521909][T25789] m920x_read = error: -19 [ 1891.521929][T25789] dvb-usb: error while querying for an remote control event. [ 1891.557014][T29494] IPVS: using max 42 ests per chain, 100800 per kthread [ 1891.734246][T25789] m920x_read = error: -19 [ 1891.739182][T25789] dvb-usb: error while querying for an remote control event. [ 1891.782294][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1891.782312][ T29] audit: type=1400 audit(1737225563.595:2883): avc: denied { map } for pid=29502 comm="syz.9.5856" path="socket:[117360]" dev="sockfs" ino=117360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1892.338648][T25789] m920x_read = error: -19 [ 1892.343297][T25789] dvb-usb: error while querying for an remote control event. [ 1892.404454][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1892.700739][ T25] m920x_read = error: -19 [ 1892.705287][ T25] dvb-usb: error while querying for an remote control event. [ 1892.874805][T25789] m920x_read = error: -19 [ 1892.880658][T25789] dvb-usb: error while querying for an remote control event. [ 1893.516277][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1894.190704][ T25] m920x_read = error: -19 [ 1894.195096][ T25] dvb-usb: error while querying for an remote control event. [ 1894.393400][T25789] m920x_read = error: -19 [ 1894.397857][T25789] dvb-usb: error while querying for an remote control event. [ 1894.628023][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1894.944434][T25789] m920x_read = error: -19 [ 1895.100831][T25789] dvb-usb: error while querying for an remote control event. [ 1895.227760][T21646] m920x_read = error: -19 [ 1895.232560][T21646] dvb-usb: error while querying for an remote control event. [ 1895.419344][ T5896] m920x_read = error: -19 [ 1895.448429][ T5896] dvb-usb: error while querying for an remote control event. [ 1895.612179][ T5896] m920x_read = error: -19 [ 1895.619884][ T5896] dvb-usb: error while querying for an remote control event. [ 1895.739880][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1896.851700][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1897.366503][ T5896] m920x_read = error: -19 [ 1897.371237][ T5896] dvb-usb: error while querying for an remote control event. [ 1897.493282][ T25] m920x_read = error: -19 [ 1897.497662][ T25] dvb-usb: error while querying for an remote control event. [ 1897.632122][ T29] audit: type=1804 audit(1737225569.067:2884): pid=29542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.5867" name="/newroot/21/bus/bus" dev="overlay" ino=135 res=1 errno=0 [ 1897.667113][ T25] m920x_read = error: -19 [ 1897.671485][ T25] dvb-usb: error while querying for an remote control event. [ 1897.814100][ T5896] m920x_read = error: -19 [ 1897.818559][ T5896] dvb-usb: error while querying for an remote control event. [ 1897.963512][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1898.051499][ T5896] m920x_read = error: -19 [ 1898.055883][ T5896] dvb-usb: error while querying for an remote control event. [ 1899.075435][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1899.141693][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5869'. [ 1899.185536][T21646] m920x_read = error: -19 [ 1899.189922][T21646] dvb-usb: error while querying for an remote control event. [ 1899.198405][ T25] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1899.380204][T21646] m920x_read = error: -19 [ 1899.393842][T21646] dvb-usb: error while querying for an remote control event. [ 1899.471200][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 1899.793246][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.804607][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1899.824483][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5873'. [ 1899.839465][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1899.866089][ T25] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1899.878647][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1899.892838][T21646] m920x_read = error: -19 [ 1899.897298][T21646] dvb-usb: error while querying for an remote control event. [ 1899.921508][T29567] tipc: Enabling of bearer rejected, already enabled [ 1899.982758][ T25] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1899.998663][T29567] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5872'. [ 1900.003697][ T25] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1900.083669][T21646] m920x_read = error: -19 [ 1900.128051][T21646] dvb-usb: error while querying for an remote control event. [ 1900.187131][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1900.305116][T21646] m920x_read = error: -19 [ 1900.310058][T21646] dvb-usb: error while querying for an remote control event. [ 1900.322695][ T25] usb 9-1: Manufacturer: syz [ 1900.377898][ T25] usb 9-1: config 0 descriptor?? [ 1900.497559][T21646] m920x_read = error: -19 [ 1900.502005][T21646] dvb-usb: error while querying for an remote control event. [ 1901.298988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1901.318713][T21646] m920x_read = error: -19 [ 1901.323240][T21646] dvb-usb: error while querying for an remote control event. [ 1901.987265][ T5896] m920x_read = error: -19 [ 1901.991902][ T5896] dvb-usb: error while querying for an remote control event. [ 1902.015194][ T25] rc_core: IR keymap rc-hauppauge not found [ 1902.021537][ T25] Registered IR keymap rc-empty [ 1902.026603][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.047280][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.081696][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1902.111773][T21646] m920x_read = error: -19 [ 1902.117870][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input78 [ 1902.164902][T21646] dvb-usb: error while querying for an remote control event. [ 1902.282481][ T5896] m920x_read = error: -19 [ 1902.286950][ T5896] dvb-usb: error while querying for an remote control event. [ 1902.314282][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.319963][T29597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1902.410781][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1902.482092][T21646] m920x_read = error: -19 [ 1902.486608][T21646] dvb-usb: error while querying for an remote control event. [ 1902.494936][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.511244][T29595] tipc: Enabling of bearer rejected, already enabled [ 1902.519341][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.549822][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.573167][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.609780][ T5896] m920x_read = error: -19 [ 1902.638677][T21646] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1902.706788][ T5896] dvb-usb: error while querying for an remote control event. [ 1902.741864][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1902.884160][T21646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.897088][ T5896] m920x_read = error: -19 [ 1902.901570][ T5896] dvb-usb: error while querying for an remote control event. [ 1902.994367][T21646] usb 2-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 1903.004080][T21646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.023449][T29595] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1903.053028][T21646] usb 2-1: config 0 descriptor?? [ 1903.063210][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1903.093684][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1903.117096][ T5896] m920x_read = error: -19 [ 1903.121462][ T5896] dvb-usb: error while querying for an remote control event. [ 1903.128993][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1903.159265][ T25] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1903.264110][ T5896] m920x_read = error: -19 [ 1903.277793][ T25] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1903.285870][ T25] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1903.298116][ T5896] dvb-usb: error while querying for an remote control event. [ 1903.427012][ T25] usb 9-1: USB disconnect, device number 55 [ 1903.477586][T29610] tipc: Enabling of bearer rejected, already enabled [ 1903.503757][T29610] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.5887'. [ 1903.523125][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1903.801844][ T5896] m920x_read = error: -19 [ 1903.859902][ T5896] dvb-usb: error while querying for an remote control event. [ 1904.004352][ T5896] m920x_read = error: -19 [ 1904.009284][ T5896] dvb-usb: error while querying for an remote control event. [ 1904.143451][ T5896] m920x_read = error: -19 [ 1904.148056][ T5896] dvb-usb: error while querying for an remote control event. [ 1904.292455][T29617] m920x_read = error: -19 [ 1904.297406][T29617] dvb-usb: error while querying for an remote control event. [ 1904.420710][T29617] m920x_read = error: -19 [ 1904.425335][T29617] dvb-usb: error while querying for an remote control event. [ 1904.559658][T29617] m920x_read = error: -19 [ 1904.564050][T29617] dvb-usb: error while querying for an remote control event. [ 1904.592978][T21646] usbhid 2-1:0.0: can't add hid device: -71 [ 1904.598988][T21646] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1904.623934][T21646] usb 2-1: USB disconnect, device number 68 [ 1904.634434][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1904.772469][ T25] m920x_read = error: -19 [ 1904.809785][ T25] dvb-usb: error while querying for an remote control event. [ 1905.073553][ T25] m920x_read = error: -19 [ 1905.078983][ T25] dvb-usb: error while querying for an remote control event. [ 1905.286529][T29617] m920x_read = error: -19 [ 1905.291655][T29617] dvb-usb: error while querying for an remote control event. [ 1905.504225][T29617] m920x_read = error: -19 [ 1905.509105][T29617] dvb-usb: error while querying for an remote control event. [ 1905.746284][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1906.159955][T29633] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5892'. [ 1906.397609][ T25] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1906.405592][T21646] m920x_read = error: -19 [ 1906.410163][T21646] dvb-usb: error while querying for an remote control event. [ 1906.677111][T29617] m920x_read = error: -19 [ 1906.689394][T29617] dvb-usb: error while querying for an remote control event. [ 1906.848163][T21646] m920x_read = error: -19 [ 1906.852590][T21646] dvb-usb: error while querying for an remote control event. [ 1906.858076][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1906.954643][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1906.973646][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.064345][T21646] m920x_read = error: -19 [ 1907.068734][T21646] dvb-usb: error while querying for an remote control event. [ 1907.098274][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1907.143178][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1907.200305][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1907.210387][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1907.399992][T29644] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5894'. [ 1907.767228][T21646] m920x_read = error: -19 [ 1907.771610][T21646] dvb-usb: error while querying for an remote control event. [ 1907.781143][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1907.790471][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1907.798615][ T25] usb 1-1: Manufacturer: syz [ 1907.805571][ T25] usb 1-1: config 0 descriptor?? [ 1907.969924][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1908.050876][T29617] m920x_read = error: -19 [ 1908.055975][T29617] dvb-usb: error while querying for an remote control event. [ 1908.087695][ T8] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1908.151789][ T25] rc_core: IR keymap rc-hauppauge not found [ 1908.172102][ T25] Registered IR keymap rc-empty [ 1908.177520][T29617] m920x_read = error: -19 [ 1908.182087][T29617] dvb-usb: error while querying for an remote control event. [ 1908.231828][T29662] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1908.321812][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.419330][ T5896] m920x_read = error: -19 [ 1908.426752][ T5896] dvb-usb: error while querying for an remote control event. [ 1908.495290][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.547512][ T5896] m920x_read = error: -19 [ 1908.552612][ T5896] dvb-usb: error while querying for an remote control event. [ 1908.625162][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1908.637773][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input79 [ 1908.645320][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1908.653265][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.671858][ T8] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1908.686711][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.707692][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.714428][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1908.727681][ T8] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1908.728989][ T5896] m920x_read = error: -19 [ 1908.738351][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.741617][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.758975][ T8] usb 2-1: config 0 descriptor?? [ 1908.866030][ T5896] dvb-usb: error while querying for an remote control event. [ 1908.889341][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.911313][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.945055][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1908.956758][T29670] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5901'. [ 1908.996524][T21646] m920x_read = error: -19 [ 1909.000937][T21646] dvb-usb: error while querying for an remote control event. [ 1909.009590][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1909.052052][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1909.076921][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1909.081836][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1909.246231][T21646] m920x_read = error: -19 [ 1909.251095][T21646] dvb-usb: error while querying for an remote control event. [ 1909.261964][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1909.271189][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1909.283868][ T25] usb 1-1: USB disconnect, device number 75 [ 1909.370992][T21646] m920x_read = error: -19 [ 1909.376438][T21646] dvb-usb: error while querying for an remote control event. [ 1909.503704][T29676] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5902'. [ 1909.612109][T21646] m920x_read = error: -19 [ 1909.699295][T21646] dvb-usb: error while querying for an remote control event. [ 1909.839436][ T8] uclogic 0003:5543:0004.0025: item fetching failed at offset 5/7 [ 1909.848258][ T8] uclogic 0003:5543:0004.0025: parse failed [ 1909.854424][ T8] uclogic 0003:5543:0004.0025: probe with driver uclogic failed with error -22 [ 1909.948459][T21646] m920x_read = error: -19 [ 1909.952927][T21646] dvb-usb: error while querying for an remote control event. [ 1910.052333][T12455] usb 2-1: USB disconnect, device number 69 [ 1910.075938][ T25] m920x_read = error: -19 [ 1910.080323][ T25] dvb-usb: error while querying for an remote control event. [ 1910.193679][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1910.212712][ T25] m920x_read = error: -19 [ 1910.236917][ T25] dvb-usb: error while querying for an remote control event. [ 1910.367463][ T25] m920x_read = error: -19 [ 1910.376971][ T25] dvb-usb: error while querying for an remote control event. [ 1910.586850][ T25] m920x_read = error: -19 [ 1910.659131][ T25] dvb-usb: error while querying for an remote control event. [ 1910.939430][ T25] m920x_read = error: -19 [ 1910.944430][ T25] dvb-usb: error while querying for an remote control event. [ 1911.305372][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1911.550349][ T25] m920x_read = error: -19 [ 1911.555450][ T25] dvb-usb: error while querying for an remote control event. [ 1912.124210][ T25] m920x_read = error: -19 [ 1912.129005][ T25] dvb-usb: error while querying for an remote control event. [ 1912.286250][ T25] m920x_read = error: -19 [ 1912.291194][ T25] dvb-usb: error while querying for an remote control event. [ 1912.407047][ T25] m920x_read = error: -19 [ 1912.411741][ T25] dvb-usb: error while querying for an remote control event. [ 1912.417313][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1912.696082][ T25] m920x_read = error: -19 [ 1912.700877][ T25] dvb-usb: error while querying for an remote control event. [ 1912.839371][ T25] m920x_read = error: -19 [ 1912.856269][ T25] dvb-usb: error while querying for an remote control event. [ 1913.009045][ T25] m920x_read = error: -19 [ 1913.015165][ T25] dvb-usb: error while querying for an remote control event. [ 1913.331648][ T25] m920x_read = error: -19 [ 1913.336033][ T25] dvb-usb: error while querying for an remote control event. [ 1913.486534][ T25] m920x_read = error: -19 [ 1913.499352][ T25] dvb-usb: error while querying for an remote control event. [ 1913.518728][T29725] IPVS: length: 202 != 8 [ 1913.529453][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1913.670344][ T25] m920x_read = error: -19 [ 1913.827744][ T25] dvb-usb: error while querying for an remote control event. [ 1913.935273][ T8] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1913.978193][ T25] m920x_read = error: -19 [ 1913.982600][ T25] dvb-usb: error while querying for an remote control event. [ 1914.142597][T29735] tipc: Enabling of bearer rejected, already enabled [ 1914.181326][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1914.231744][T29735] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1914.292089][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.352464][ T25] m920x_read = error: -19 [ 1914.356930][ T25] dvb-usb: error while querying for an remote control event. [ 1914.373817][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1914.412024][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1914.463098][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1914.533885][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1914.555369][ T25] m920x_read = error: -19 [ 1914.559883][ T25] dvb-usb: error while querying for an remote control event. [ 1914.562991][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1914.595953][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1914.617552][ T8] usb 2-1: Manufacturer: syz [ 1914.629117][ T8] usb 2-1: config 0 descriptor?? [ 1914.640918][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1914.721532][ T25] m920x_read = error: -19 [ 1914.725953][ T25] dvb-usb: error while querying for an remote control event. [ 1914.905159][ T5896] m920x_read = error: -19 [ 1914.910948][ T5896] dvb-usb: error while querying for an remote control event. [ 1915.031577][ T5896] m920x_read = error: -19 [ 1915.039684][ T5896] dvb-usb: error while querying for an remote control event. [ 1915.411518][ T8] rc_core: IR keymap rc-hauppauge not found [ 1915.417825][ T8] Registered IR keymap rc-empty [ 1915.423211][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1915.443251][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1915.464601][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1915.486063][T29724] block nbd8: shutting down sockets [ 1915.491495][ T5896] m920x_read = error: -19 [ 1915.495842][ T5896] dvb-usb: error while querying for an remote control event. [ 1915.546971][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input80 [ 1915.629410][ T5896] m920x_read = error: -19 [ 1915.633793][ T5896] dvb-usb: error while querying for an remote control event. [ 1915.753049][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1915.828132][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1915.857321][ T5896] m920x_read = error: -19 [ 1915.867988][ T5896] dvb-usb: error while querying for an remote control event. [ 1915.894245][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1915.957676][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1915.993672][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.001562][ T5896] m920x_read = error: -19 [ 1916.005702][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5923'. [ 1916.036858][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.056678][ T5896] dvb-usb: error while querying for an remote control event. [ 1916.062750][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.084134][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.116573][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.137498][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.158869][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1916.188793][ T8] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1916.218572][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1916.243281][ T8] usb 2-1: USB disconnect, device number 70 [ 1916.277330][ T5896] m920x_read = error: -19 [ 1916.281760][ T5896] dvb-usb: error while querying for an remote control event. [ 1916.405187][ T5896] m920x_read = error: -19 [ 1916.409629][ T5896] dvb-usb: error while querying for an remote control event. [ 1916.534017][ T5896] m920x_read = error: -19 [ 1916.538457][ T5896] dvb-usb: error while querying for an remote control event. [ 1916.545793][T29763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1916.609974][T29763] erspan0: entered promiscuous mode [ 1916.617136][T29763] macvtap1: entered promiscuous mode [ 1916.634963][T29763] macvtap1: entered allmulticast mode [ 1916.662033][ T5896] m920x_read = error: -19 [ 1916.666416][ T5896] dvb-usb: error while querying for an remote control event. [ 1916.681754][T29763] erspan0: entered allmulticast mode [ 1916.730750][T29764] erspan0: left allmulticast mode [ 1916.736805][T29764] erspan0: left promiscuous mode [ 1916.789731][ T5896] m920x_read = error: -19 [ 1916.794185][ T5896] dvb-usb: error while querying for an remote control event. [ 1916.864673][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1916.910694][T29775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1916.950781][ T5896] m920x_read = error: -19 [ 1916.955618][ T5896] dvb-usb: error while querying for an remote control event. [ 1917.271477][ T5896] m920x_read = error: -19 [ 1917.276272][ T5896] dvb-usb: error while querying for an remote control event. [ 1917.305028][T29778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.314968][T29778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.431211][ T5896] m920x_read = error: -19 [ 1917.435626][ T5896] dvb-usb: error while querying for an remote control event. [ 1917.527666][ T8] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1917.580753][ T5896] m920x_read = error: -19 [ 1917.585261][ T5896] dvb-usb: error while querying for an remote control event. [ 1917.642041][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5939'. [ 1917.691928][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1917.699054][ T8] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1917.764856][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.794698][ T5896] m920x_read = error: -19 [ 1917.799626][ T5896] dvb-usb: error while querying for an remote control event. [ 1917.816780][ T8] usb 2-1: config 0 descriptor?? [ 1917.976331][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1917.985269][T21646] m920x_read = error: -19 [ 1918.522453][T21646] dvb-usb: error while querying for an remote control event. [ 1918.557366][T29802] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1918.778067][ T5896] m920x_read = error: -19 [ 1918.810297][ T5896] dvb-usb: error while querying for an remote control event. [ 1918.901362][T29798] loop9: detected capacity change from 0 to 7 [ 1918.927764][ T5896] m920x_read = error: -19 [ 1918.932492][ T5896] dvb-usb: error while querying for an remote control event. [ 1919.088163][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1919.102896][ T5896] m920x_read = error: -19 [ 1919.105223][ T29] audit: type=1400 audit(1737225589.150:2885): avc: denied { read } for pid=29797 comm="syz.8.5940" path="socket:[119189]" dev="sockfs" ino=119189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1919.107265][ T5896] dvb-usb: error while querying for an remote control event. [ 1919.131138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1919.344421][T21646] m920x_read = error: -19 [ 1919.349657][T21646] dvb-usb: error while querying for an remote control event. [ 1919.796970][T29798] Dev loop9: unable to read RDB block 7 [ 1919.804560][T29798] loop9: unable to read partition table [ 1919.816710][ T5896] m920x_read = error: -19 [ 1919.828807][ T5896] dvb-usb: error while querying for an remote control event. [ 1919.831516][T29812] vxcan1 speed is unknown, defaulting to 1000 [ 1919.868327][T29798] loop9: partition table beyond EOD, truncated [ 1919.875637][T29798] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1919.887215][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 1919.894046][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1919.903499][ T8] usb 2-1: USB disconnect, device number 71 [ 1919.964330][T21646] m920x_read = error: -19 [ 1919.975400][T21646] dvb-usb: error while querying for an remote control event. [ 1919.993343][T29825] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5945'. [ 1920.103700][ T5896] m920x_read = error: -19 [ 1920.108094][ T5896] dvb-usb: error while querying for an remote control event. [ 1920.199996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1920.296972][ T5896] m920x_read = error: -19 [ 1920.301470][ T5896] dvb-usb: error while querying for an remote control event. [ 1920.424741][ T5896] m920x_read = error: -19 [ 1920.432206][ T5896] dvb-usb: error while querying for an remote control event. [ 1920.617991][ T5896] m920x_read = error: -19 [ 1920.622491][ T5896] dvb-usb: error while querying for an remote control event. [ 1920.622581][T29833] tipc: Enabling of bearer rejected, already enabled [ 1920.702849][T29833] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5948'. [ 1920.799135][ T5896] m920x_read = error: -19 [ 1920.803590][ T5896] dvb-usb: error while querying for an remote control event. [ 1920.961038][ T5896] m920x_read = error: -19 [ 1920.966002][ T5896] dvb-usb: error while querying for an remote control event. [ 1920.982199][ T8] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1921.092499][T21646] m920x_read = error: -19 [ 1921.109756][T21646] dvb-usb: error while querying for an remote control event. [ 1921.311840][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1921.337301][T21646] m920x_read = error: -19 [ 1921.342223][T21646] dvb-usb: error while querying for an remote control event. [ 1921.379047][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1922.082989][T29851] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5952'. [ 1922.095819][T21646] m920x_read = error: -19 [ 1922.100222][T21646] dvb-usb: error while querying for an remote control event. [ 1922.214587][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.237946][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1922.250278][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1922.261401][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1922.273319][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1922.277854][T29617] m920x_read = error: -19 [ 1922.294895][T29617] dvb-usb: error while querying for an remote control event. [ 1922.423753][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1922.486152][T21646] m920x_read = error: -19 [ 1922.490646][T21646] dvb-usb: error while querying for an remote control event. [ 1922.616265][T21646] m920x_read = error: -19 [ 1922.621747][T21646] dvb-usb: error while querying for an remote control event. [ 1922.691594][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1922.701929][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1922.710481][ T8] usb 4-1: Manufacturer: syz [ 1922.716819][ T8] usb 4-1: config 0 descriptor?? [ 1922.744706][T21646] m920x_read = error: -19 [ 1922.749095][T21646] dvb-usb: error while querying for an remote control event. [ 1922.894207][T21646] m920x_read = error: -19 [ 1922.898772][T21646] dvb-usb: error while querying for an remote control event. [ 1923.043947][T21646] m920x_read = error: -19 [ 1923.043997][ T8] rc_core: IR keymap rc-hauppauge not found [ 1923.048309][T21646] dvb-usb: error while querying for an remote control event. [ 1923.075648][ T8] Registered IR keymap rc-empty [ 1923.080620][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1923.139872][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1923.178376][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1923.204128][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81 [ 1923.272898][T29617] m920x_read = error: -19 [ 1923.277829][T29617] dvb-usb: error while querying for an remote control event. [ 1923.306346][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1923.343069][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1923.411300][T29617] m920x_read = error: -19 [ 1923.434233][T29617] dvb-usb: error while querying for an remote control event. [ 1923.505063][T29874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1923.535494][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1923.582961][T29617] m920x_read = error: -19 [ 1923.587381][T29617] dvb-usb: error while querying for an remote control event. [ 1923.909966][T29617] m920x_read = error: -19 [ 1923.921840][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1923.950672][T29617] dvb-usb: error while querying for an remote control event. [ 1923.998154][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.027230][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.048575][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.075806][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.108237][T29617] m920x_read = error: -19 [ 1924.112703][T29617] dvb-usb: error while querying for an remote control event. [ 1924.134262][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.154958][T29878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5960'. [ 1924.326706][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.348542][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1924.370133][ T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1924.379228][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1924.421802][ T8] usb 4-1: USB disconnect, device number 101 [ 1924.647303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1924.692269][T29883] tipc: Enabling of bearer rejected, already enabled [ 1925.019934][T29888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.181764][ T5896] m920x_read = error: -19 [ 1925.186148][ T5896] dvb-usb: error while querying for an remote control event. [ 1925.201170][T29881] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5962'. [ 1925.225541][T29882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.342067][T29617] m920x_read = error: -19 [ 1925.346563][T29617] dvb-usb: error while querying for an remote control event. [ 1925.457590][T13971] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1925.491039][T29617] m920x_read = error: -19 [ 1925.515459][T29617] dvb-usb: error while querying for an remote control event. [ 1925.759136][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1926.136916][T21646] m920x_read = error: -19 [ 1926.141828][T21646] dvb-usb: error while querying for an remote control event. [ 1926.340362][T29617] m920x_read = error: -19 [ 1926.344798][T29617] dvb-usb: error while querying for an remote control event. [ 1926.746595][T21646] m920x_read = error: -19 [ 1926.751254][T21646] dvb-usb: error while querying for an remote control event. [ 1926.870961][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1926.921987][T29617] m920x_read = error: -19 [ 1926.926502][T29617] dvb-usb: error while querying for an remote control event. [ 1927.491759][T29617] m920x_read = error: -19 [ 1927.550085][T29617] dvb-usb: error while querying for an remote control event. [ 1927.590416][T29922] binder: BINDER_SET_CONTEXT_MGR already set [ 1927.596532][T29922] binder: 29921:29922 ioctl 4018620d 200002c0 returned -16 [ 1927.822940][T29617] m920x_read = error: -19 [ 1927.827418][T29617] dvb-usb: error while querying for an remote control event. [ 1927.961899][ T5896] m920x_read = error: -19 [ 1927.967903][ T5896] dvb-usb: error while querying for an remote control event. [ 1927.982797][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1928.025525][T12455] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1928.034361][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'. [ 1928.120963][ T5896] m920x_read = error: -19 [ 1928.125510][ T5896] dvb-usb: error while querying for an remote control event. [ 1928.196904][T12455] usb 2-1: Using ep0 maxpacket: 16 [ 1928.270895][ T5896] m920x_read = error: -19 [ 1928.275615][T12455] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.286210][ T5896] dvb-usb: error while querying for an remote control event. [ 1928.286537][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1928.304741][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1928.317731][T12455] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1928.328485][T12455] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1928.351703][T12455] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1928.367078][T29933] tipc: Enabling of bearer rejected, already enabled [ 1928.379008][T12455] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1928.387175][T12455] usb 2-1: Manufacturer: syz [ 1928.442763][ T5896] m920x_read = error: -19 [ 1928.444267][T12455] usb 2-1: config 0 descriptor?? [ 1928.453005][ T5896] dvb-usb: error while querying for an remote control event. [ 1928.455759][T29933] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1928.656590][ T5896] m920x_read = error: -19 [ 1928.661217][ T5896] dvb-usb: error while querying for an remote control event. [ 1928.826454][ T5896] m920x_read = error: -19 [ 1928.831172][ T5896] dvb-usb: error while querying for an remote control event. [ 1928.838053][T12455] rc_core: IR keymap rc-hauppauge not found [ 1928.853372][T12455] Registered IR keymap rc-empty [ 1928.892193][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1928.955937][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1928.966321][ T5896] m920x_read = error: -19 [ 1928.982354][ T5896] dvb-usb: error while querying for an remote control event. [ 1928.993643][T12455] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1929.020649][T12455] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input82 [ 1929.095147][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1929.102680][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.116137][ T5896] m920x_read = error: -19 [ 1929.125030][ T5896] dvb-usb: error while querying for an remote control event. [ 1929.148257][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.158100][ T29] audit: type=1400 audit(1737225598.542:2886): avc: denied { read } for pid=29935 comm="syz.8.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1929.177619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.233587][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.254974][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.276477][ T5896] m920x_read = error: -19 [ 1929.283893][ T5896] dvb-usb: error while querying for an remote control event. [ 1929.286997][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.351429][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.372812][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.416278][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.431666][ T5896] m920x_read = error: -19 [ 1929.436044][ T5896] dvb-usb: error while querying for an remote control event. [ 1929.443614][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.469280][T12455] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1929.527658][T12455] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1929.543565][T12455] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1929.576995][T12455] usb 2-1: USB disconnect, device number 72 [ 1929.680137][ T5896] m920x_read = error: -19 [ 1929.693466][ T5896] dvb-usb: error while querying for an remote control event. [ 1929.832552][ T5896] m920x_read = error: -19 [ 1929.844721][ T5896] dvb-usb: error while querying for an remote control event. [ 1929.982857][ T5896] m920x_read = error: -19 [ 1929.991727][ T5896] dvb-usb: error while querying for an remote control event. [ 1930.132262][ T5896] m920x_read = error: -19 [ 1930.136741][ T5896] dvb-usb: error while querying for an remote control event. [ 1930.207781][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1930.273848][T29964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1930.294733][ T5896] m920x_read = error: -19 [ 1930.299463][ T5896] dvb-usb: error while querying for an remote control event. [ 1930.921277][ T5896] m920x_read = error: -19 [ 1930.946970][ T5896] dvb-usb: error while querying for an remote control event. [ 1931.170537][T29617] m920x_read = error: -19 [ 1931.175180][T29617] dvb-usb: error while querying for an remote control event. [ 1931.212629][T29959] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5985'. [ 1931.318218][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1931.368308][ T5896] m920x_read = error: -19 [ 1931.373167][ T5896] dvb-usb: error while querying for an remote control event. [ 1931.615624][T29617] m920x_read = error: -19 [ 1931.620469][T29617] dvb-usb: error while querying for an remote control event. [ 1932.430070][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1932.453510][T29617] m920x_read = error: -19 [ 1932.457908][T29617] dvb-usb: error while querying for an remote control event. [ 1932.507191][T29977] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5990'. [ 1932.914895][ T5896] m920x_read = error: -19 [ 1933.037370][ T5896] dvb-usb: error while querying for an remote control event. [ 1933.251854][ T5896] m920x_read = error: -19 [ 1933.257490][ T5896] dvb-usb: error while querying for an remote control event. [ 1933.413918][ T5896] m920x_read = error: -19 [ 1933.418485][ T5896] dvb-usb: error while querying for an remote control event. [ 1933.552512][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1933.553008][ T5896] m920x_read = error: -19 [ 1933.778026][ T5896] dvb-usb: error while querying for an remote control event. [ 1934.268946][T29617] m920x_read = error: -19 [ 1934.273326][T29617] dvb-usb: error while querying for an remote control event. [ 1934.397234][ T25] m920x_read = error: -19 [ 1934.402345][ T25] dvb-usb: error while querying for an remote control event. [ 1934.429977][ T29] audit: type=1400 audit(1737225603.490:2887): avc: denied { ioctl } for pid=29992 comm="syz.9.5995" path="socket:[120930]" dev="sockfs" ino=120930 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1934.525515][ T25] m920x_read = error: -19 [ 1934.529902][ T25] dvb-usb: error while querying for an remote control event. [ 1934.654102][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1934.817688][ T25] m920x_read = error: -19 [ 1934.822057][ T25] dvb-usb: error while querying for an remote control event. [ 1934.883014][T29999] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.5996'. [ 1934.943034][ T5896] m920x_read = error: -19 [ 1934.947544][ T5896] dvb-usb: error while querying for an remote control event. [ 1935.070901][ T5896] m920x_read = error: -19 [ 1935.150018][ T5896] dvb-usb: error while querying for an remote control event. [ 1935.573204][ T5896] m920x_read = error: -19 [ 1935.577660][ T5896] dvb-usb: error while querying for an remote control event. [ 1935.678651][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1935.765535][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1936.075772][ T5896] m920x_read = error: -19 [ 1936.080162][ T5896] dvb-usb: error while querying for an remote control event. [ 1936.263834][T29617] m920x_read = error: -19 [ 1936.268654][T29617] dvb-usb: error while querying for an remote control event. [ 1936.454214][T29617] m920x_read = error: -19 [ 1936.458643][T29617] dvb-usb: error while querying for an remote control event. [ 1936.610662][ T5896] m920x_read = error: -19 [ 1936.633421][ T5896] dvb-usb: error while querying for an remote control event. [ 1936.877361][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1936.997500][ T5896] m920x_read = error: -19 [ 1937.002413][ T5896] dvb-usb: error while querying for an remote control event. [ 1937.183229][ T5896] m920x_read = error: -19 [ 1937.560611][ T5896] dvb-usb: error while querying for an remote control event. [ 1937.679985][ T25] m920x_read = error: -19 [ 1937.684474][ T25] dvb-usb: error while querying for an remote control event. [ 1937.807846][ T5896] m920x_read = error: -19 [ 1937.813143][ T5896] dvb-usb: error while querying for an remote control event. [ 1937.860190][T30031] tipc: Enabling of bearer rejected, already enabled [ 1937.877915][T12452] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1937.947174][ T5896] m920x_read = error: -19 [ 1937.951650][ T5896] dvb-usb: error while querying for an remote control event. [ 1937.980063][ T25] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1937.989942][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1938.091016][T30031] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.6003'. [ 1938.117624][ T5896] m920x_read = error: -19 [ 1938.122889][ T5896] dvb-usb: error while querying for an remote control event. [ 1938.151061][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 1938.188652][ T25] usb 9-1: config 16 has an invalid interface number: 179 but max is 1 [ 1938.201283][ T25] usb 9-1: config 16 has an invalid interface number: 79 but max is 1 [ 1938.205361][T12452] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1938.229151][ T25] usb 9-1: config 16 has no interface number 0 [ 1938.246568][ T25] usb 9-1: config 16 has no interface number 1 [ 1938.274165][ T25] usb 9-1: config 16 interface 179 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1938.285672][T12452] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1938.293295][ T25] usb 9-1: config 16 interface 179 has no altsetting 0 [ 1938.301759][ T5896] m920x_read = error: -19 [ 1938.306226][ T5896] dvb-usb: error while querying for an remote control event. [ 1938.327210][ T25] usb 9-1: config 16 interface 79 has no altsetting 0 [ 1938.374146][ T25] usb 9-1: New USB device found, idVendor=413c, idProduct=8171, bcdDevice=65.7c [ 1938.389889][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.399583][ T25] usb 9-1: Product: syz [ 1938.413625][ T25] usb 9-1: Manufacturer: syz [ 1938.428517][T21646] m920x_read = error: -19 [ 1938.433029][T21646] dvb-usb: error while querying for an remote control event. [ 1938.459219][T12452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.465156][ T25] usb 9-1: SerialNumber: syz [ 1938.493025][T12452] usb 4-1: config 0 descriptor?? [ 1938.588894][T21646] m920x_read = error: -19 [ 1938.593565][T21646] dvb-usb: error while querying for an remote control event. [ 1938.626382][T30034] tipc: Enabling of bearer rejected, already enabled [ 1938.729737][T30034] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.6006'. [ 1938.731109][T21646] m920x_read = error: -19 [ 1938.801337][T21646] dvb-usb: error while querying for an remote control event. [ 1939.102262][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1939.123962][ T5896] m920x_read = error: -19 [ 1939.128440][ T5896] dvb-usb: error while querying for an remote control event. [ 1939.250577][T21646] m920x_read = error: -19 [ 1939.254998][T21646] dvb-usb: error while querying for an remote control event. [ 1939.379036][T21646] m920x_read = error: -19 [ 1939.383513][T21646] dvb-usb: error while querying for an remote control event. [ 1939.398240][T30039] ksmbd: Unknown IPC event: 0, ignore. [ 1940.212920][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1940.374196][T21646] m920x_read = error: -19 [ 1940.378714][T21646] dvb-usb: error while querying for an remote control event. [ 1941.291280][ T5896] m920x_read = error: -19 [ 1941.295779][ T5896] dvb-usb: error while querying for an remote control event. [ 1941.324697][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1941.325944][T30055] tipc: Enabling of bearer rejected, failed to enable media [ 1941.361507][ T29] audit: type=1400 audit(1737225609.944:2888): avc: denied { setopt } for pid=30021 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1941.435110][T21646] m920x_read = error: -19 [ 1941.439499][T21646] dvb-usb: error while querying for an remote control event. [ 1941.582327][T21646] m920x_read = error: -19 [ 1941.590057][T21646] dvb-usb: error while querying for an remote control event. [ 1941.602731][T12452] video4linux radio48: keene_cmd_set failed (-110) [ 1941.610062][T12452] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1941.746456][T21646] m920x_read = error: -19 [ 1941.750896][T21646] dvb-usb: error while querying for an remote control event. [ 1941.881566][T29617] m920x_read = error: -19 [ 1941.885978][T29617] dvb-usb: error while querying for an remote control event. [ 1942.056538][T30058] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6011'. [ 1942.073428][T21646] m920x_read = error: -19 [ 1942.081973][T21646] dvb-usb: error while querying for an remote control event. [ 1942.270240][T21646] m920x_read = error: -19 [ 1942.274878][T21646] dvb-usb: error while querying for an remote control event. [ 1942.413876][T30063] vxcan1 speed is unknown, defaulting to 1000 [ 1942.436571][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1942.595986][T30060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1943.034509][T13971] ================================================================== [ 1943.042619][T13971] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22a/0x240 [ 1943.051486][T13971] Read of size 8 at addr ffff88803a40f580 by task kworker/u9:1/13971 [ 1943.059541][T13971] [ 1943.061852][T13971] CPU: 1 UID: 0 PID: 13971 Comm: kworker/u9:1 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1943.072777][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1943.082850][T13971] Workqueue: hci5 hci_rx_work [ 1943.087551][T13971] Call Trace: [ 1943.090833][T13971] [ 1943.093769][T13971] dump_stack_lvl+0x116/0x1f0 [ 1943.098484][T13971] print_report+0xc3/0x620 [ 1943.102933][T13971] ? __virt_addr_valid+0x5e/0x590 [ 1943.107963][T13971] ? __phys_addr+0xc6/0x150 [ 1943.112462][T13971] kasan_report+0xd9/0x110 [ 1943.116871][T13971] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 1943.122942][T13971] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 1943.129010][T13971] l2cap_sock_new_connection_cb+0x22a/0x240 [ 1943.134902][T13971] l2cap_connect_cfm+0x85f/0xf10 [ 1943.139837][T13971] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1943.145286][T13971] ? hci_cb_lookup+0x319/0x4e0 [ 1943.150043][T13971] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1943.155490][T13971] le_conn_complete_evt+0x168d/0x1da0 [ 1943.160863][T13971] ? __pfx_lock_release+0x10/0x10 [ 1943.165876][T13971] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1943.171584][T13971] ? trace_contention_end+0xee/0x140 [ 1943.176862][T13971] hci_le_conn_complete_evt+0x23c/0x370 [ 1943.182491][T13971] hci_le_meta_evt+0x2e2/0x5d0 [ 1943.187680][T13971] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1943.193743][T13971] hci_event_packet+0x666/0x1180 [ 1943.198762][T13971] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1943.204037][T13971] ? __pfx_hci_event_packet+0x10/0x10 [ 1943.209406][T13971] ? mark_held_locks+0x9f/0xe0 [ 1943.214171][T13971] ? kcov_remote_start+0x3cf/0x6e0 [ 1943.219277][T13971] ? lockdep_hardirqs_on+0x7c/0x110 [ 1943.224483][T13971] hci_rx_work+0x2c5/0x16b0 [ 1943.228977][T13971] ? process_one_work+0x921/0x1ba0 [ 1943.234082][T13971] process_one_work+0x9c5/0x1ba0 [ 1943.239007][T13971] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1943.244627][T13971] ? __pfx_process_one_work+0x10/0x10 [ 1943.249982][T13971] ? rcu_is_watching+0x12/0xc0 [ 1943.254737][T13971] ? assign_work+0x1a0/0x250 [ 1943.259311][T13971] worker_thread+0x6c8/0xf00 [ 1943.263889][T13971] ? __pfx_worker_thread+0x10/0x10 [ 1943.268983][T13971] kthread+0x2c1/0x3a0 [ 1943.273038][T13971] ? _raw_spin_unlock_irq+0x23/0x50 [ 1943.278226][T13971] ? __pfx_kthread+0x10/0x10 [ 1943.282817][T13971] ret_from_fork+0x45/0x80 [ 1943.287218][T13971] ? __pfx_kthread+0x10/0x10 [ 1943.291804][T13971] ret_from_fork_asm+0x1a/0x30 [ 1943.296573][T13971] [ 1943.299578][T13971] [ 1943.301882][T13971] Allocated by task 13971: [ 1943.306281][T13971] kasan_save_stack+0x33/0x60 [ 1943.310942][T13971] kasan_save_track+0x14/0x30 [ 1943.315604][T13971] __kasan_kmalloc+0xaa/0xb0 [ 1943.320177][T13971] __kmalloc_noprof+0x21c/0x510 [ 1943.325028][T13971] sk_prot_alloc+0x1a8/0x2a0 [ 1943.329610][T13971] sk_alloc+0x36/0xb90 [ 1943.333672][T13971] bt_sock_alloc+0x3b/0x3a0 [ 1943.338165][T13971] l2cap_sock_alloc.constprop.0+0x33/0x1c0 [ 1943.343974][T13971] l2cap_sock_new_connection_cb+0x101/0x240 [ 1943.349893][T13971] l2cap_connect_cfm+0x85f/0xf10 [ 1943.354840][T13971] le_conn_complete_evt+0x168d/0x1da0 [ 1943.360209][T13971] hci_le_conn_complete_evt+0x23c/0x370 [ 1943.365752][T13971] hci_le_meta_evt+0x2e2/0x5d0 [ 1943.370547][T13971] hci_event_packet+0x666/0x1180 [ 1943.375491][T13971] hci_rx_work+0x2c5/0x16b0 [ 1943.379983][T13971] process_one_work+0x9c5/0x1ba0 [ 1943.384909][T13971] worker_thread+0x6c8/0xf00 [ 1943.389492][T13971] kthread+0x2c1/0x3a0 [ 1943.393560][T13971] ret_from_fork+0x45/0x80 [ 1943.397974][T13971] ret_from_fork_asm+0x1a/0x30 [ 1943.402729][T13971] [ 1943.405036][T13971] Freed by task 30062: [ 1943.409086][T13971] kasan_save_stack+0x33/0x60 [ 1943.413771][T13971] kasan_save_track+0x14/0x30 [ 1943.418430][T13971] kasan_save_free_info+0x3b/0x60 [ 1943.423443][T13971] __kasan_slab_free+0x51/0x70 [ 1943.428188][T13971] kfree+0x14f/0x4b0 [ 1943.432063][T13971] __sk_destruct+0x5eb/0x720 [ 1943.436640][T13971] sk_destruct+0xc2/0xf0 [ 1943.440871][T13971] __sk_free+0xf4/0x3e0 [ 1943.445005][T13971] sk_free+0x6a/0x90 [ 1943.448879][T13971] l2cap_sock_kill+0x171/0x2d0 [ 1943.453633][T13971] l2cap_sock_cleanup_listen+0x3d/0x2a0 [ 1943.459167][T13971] l2cap_sock_release+0x5c/0x210 [ 1943.464091][T13971] __sock_release+0xb0/0x270 [ 1943.468662][T13971] sock_close+0x1c/0x30 [ 1943.472800][T13971] __fput+0x3f8/0xb60 [ 1943.476781][T13971] task_work_run+0x14e/0x250 [ 1943.481354][T13971] get_signal+0x1d3/0x26c0 [ 1943.485761][T13971] arch_do_signal_or_restart+0x90/0x7e0 [ 1943.491293][T13971] syscall_exit_to_user_mode+0x150/0x2a0 [ 1943.496922][T13971] do_syscall_64+0xda/0x250 [ 1943.501415][T13971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.507296][T13971] [ 1943.509602][T13971] The buggy address belongs to the object at ffff88803a40f000 [ 1943.509602][T13971] which belongs to the cache kmalloc-2k of size 2048 [ 1943.523634][T13971] The buggy address is located 1408 bytes inside of [ 1943.523634][T13971] freed 2048-byte region [ffff88803a40f000, ffff88803a40f800) [ 1943.537582][T13971] [ 1943.539885][T13971] The buggy address belongs to the physical page: [ 1943.546270][T13971] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a408 [ 1943.548280][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1943.555003][T13971] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1943.555022][T13971] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1943.577927][T13971] page_type: f5(slab) [ 1943.581892][T13971] raw: 00fff00000000040 ffff88801b042000 ffffea00006fc200 dead000000000002 [ 1943.590456][T13971] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 1943.599020][T13971] head: 00fff00000000040 ffff88801b042000 ffffea00006fc200 dead000000000002 [ 1943.607672][T13971] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 1943.616324][T13971] head: 00fff00000000003 ffffea0000e90201 ffffffffffffffff 0000000000000000 [ 1943.624972][T13971] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1943.633621][T13971] page dumped because: kasan: bad access detected [ 1943.640014][T13971] page_owner tracks the page as allocated [ 1943.645706][T13971] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27877, tgid 27876 (syz.1.5390), ts 1751985711872, free_ts 1751500820566 [ 1943.667397][T13971] post_alloc_hook+0x2d1/0x350 [ 1943.672160][T13971] get_page_from_freelist+0xfce/0x2f80 [ 1943.677603][T13971] __alloc_pages_noprof+0x223/0x25b0 [ 1943.682874][T13971] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1943.688323][T13971] new_slab+0x2c9/0x410 [ 1943.692476][T13971] ___slab_alloc+0xd7d/0x17a0 [ 1943.697135][T13971] __slab_alloc.constprop.0+0x56/0xb0 [ 1943.702496][T13971] __kmalloc_cache_noprof+0xfa/0x410 [ 1943.707767][T13971] device_create_groups_vargs+0x8a/0x270 [ 1943.713392][T13971] device_create+0xe9/0x130 [ 1943.717880][T13971] bdi_register_va+0x116/0x820 [ 1943.722631][T13971] super_setup_bdi_name+0x100/0x250 [ 1943.727816][T13971] fuse_fill_super_common+0x5eb/0x1040 [ 1943.733264][T13971] fuse_fill_super+0x1f2/0x2d0 [ 1943.738016][T13971] get_tree_nodev+0xda/0x190 [ 1943.742584][T13971] fuse_get_tree+0x26d/0x600 [ 1943.747160][T13971] page last free pid 27545 tgid 27545 stack trace: [ 1943.753636][T13971] free_unref_page+0x661/0x1080 [ 1943.758471][T13971] __put_partials+0x14c/0x170 [ 1943.763130][T13971] qlist_free_all+0x4e/0x120 [ 1943.767702][T13971] kasan_quarantine_reduce+0x195/0x1e0 [ 1943.773142][T13971] __kasan_slab_alloc+0x69/0x90 [ 1943.777978][T13971] kmem_cache_alloc_noprof+0x226/0x3d0 [ 1943.783427][T13971] getname_flags.part.0+0x4c/0x550 [ 1943.788544][T13971] getname_flags+0x93/0xf0 [ 1943.792938][T13971] user_path_at+0x24/0x60 [ 1943.797246][T13971] __x64_sys_umount+0x10b/0x1a0 [ 1943.802077][T13971] do_syscall_64+0xcd/0x250 [ 1943.806567][T13971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.812449][T13971] [ 1943.814758][T13971] Memory state around the buggy address: [ 1943.820371][T13971] ffff88803a40f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1943.828411][T13971] ffff88803a40f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1943.836463][T13971] >ffff88803a40f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1943.844501][T13971] ^ [ 1943.848545][T13971] ffff88803a40f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1943.856587][T13971] ffff88803a40f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1943.864624][T13971] ================================================================== [ 1943.875882][ T5896] m920x_read = error: -19 [ 1943.880305][ T5896] dvb-usb: error while querying for an remote control event. [ 1943.990179][T13971] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1943.997416][T13971] CPU: 1 UID: 0 PID: 13971 Comm: kworker/u9:1 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1944.008355][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1944.018392][T13971] Workqueue: hci5 hci_rx_work [ 1944.023054][T13971] Call Trace: [ 1944.026309][T13971] [ 1944.029226][T13971] dump_stack_lvl+0x3d/0x1f0 [ 1944.033813][T13971] panic+0x71d/0x800 [ 1944.037682][T13971] ? __pfx_panic+0x10/0x10 [ 1944.042096][T13971] ? irqentry_exit+0x3b/0x90 [ 1944.046683][T13971] ? lockdep_hardirqs_on+0x7c/0x110 [ 1944.051886][T13971] ? preempt_schedule_thunk+0x1a/0x30 [ 1944.057276][T13971] ? preempt_schedule_common+0x44/0xc0 [ 1944.062740][T13971] check_panic_on_warn+0xab/0xb0 [ 1944.067666][T13971] end_report+0x117/0x180 [ 1944.071990][T13971] kasan_report+0xe9/0x110 [ 1944.076395][T13971] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 1944.082452][T13971] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 1944.088510][T13971] l2cap_sock_new_connection_cb+0x22a/0x240 [ 1944.094481][T13971] l2cap_connect_cfm+0x85f/0xf10 [ 1944.099404][T13971] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1944.104850][T13971] ? hci_cb_lookup+0x319/0x4e0 [ 1944.109602][T13971] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1944.115048][T13971] le_conn_complete_evt+0x168d/0x1da0 [ 1944.120427][T13971] ? __pfx_lock_release+0x10/0x10 [ 1944.125464][T13971] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1944.131174][T13971] ? trace_contention_end+0xee/0x140 [ 1944.136452][T13971] hci_le_conn_complete_evt+0x23c/0x370 [ 1944.141997][T13971] hci_le_meta_evt+0x2e2/0x5d0 [ 1944.146766][T13971] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1944.153176][T13971] hci_event_packet+0x666/0x1180 [ 1944.158105][T13971] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1944.163392][T13971] ? __pfx_hci_event_packet+0x10/0x10 [ 1944.168748][T13971] ? mark_held_locks+0x9f/0xe0 [ 1944.173504][T13971] ? kcov_remote_start+0x3cf/0x6e0 [ 1944.178600][T13971] ? lockdep_hardirqs_on+0x7c/0x110 [ 1944.183791][T13971] hci_rx_work+0x2c5/0x16b0 [ 1944.188283][T13971] ? process_one_work+0x921/0x1ba0 [ 1944.193379][T13971] process_one_work+0x9c5/0x1ba0 [ 1944.198301][T13971] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1944.203916][T13971] ? __pfx_process_one_work+0x10/0x10 [ 1944.209268][T13971] ? rcu_is_watching+0x12/0xc0 [ 1944.214025][T13971] ? assign_work+0x1a0/0x250 [ 1944.218599][T13971] worker_thread+0x6c8/0xf00 [ 1944.223177][T13971] ? __pfx_worker_thread+0x10/0x10 [ 1944.228294][T13971] kthread+0x2c1/0x3a0 [ 1944.232440][T13971] ? _raw_spin_unlock_irq+0x23/0x50 [ 1944.237626][T13971] ? __pfx_kthread+0x10/0x10 [ 1944.242203][T13971] ret_from_fork+0x45/0x80 [ 1944.246605][T13971] ? __pfx_kthread+0x10/0x10 [ 1944.251181][T13971] ret_from_fork_asm+0x1a/0x30 [ 1944.255941][T13971] [ 1944.259149][T13971] Kernel Offset: disabled [ 1944.263449][T13971] Rebooting in 86400 seconds..