last executing test programs: 21m47.811120814s ago: executing program 32 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x80002, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000003c0)={0x2, 0x0, @start}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000100)='./cgroup\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 20m19.70358357s ago: executing program 33 (id=166): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) capset(&(0x7f0000000000)={0x20080522}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x180, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x75e7f000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 17m49.819203565s ago: executing program 3 (id=354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0xd, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17m48.693079432s ago: executing program 6 (id=167): socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(0x0, 0x80080) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udplite6\x00') read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2025) pread64(r1, &(0x7f0000000080)=""/110, 0x6e, 0x400) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x802) semget(0x3, 0x1, 0x0) 17m47.671296933s ago: executing program 3 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) 17m46.466907523s ago: executing program 6 (id=359): creat(&(0x7f0000000000)='./file0\x00', 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0xd78, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ae8000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r4, 0xe66ee000) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="38000000031401002cbd7000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000053ba7e51e01af97d5cf8b865c0eeeedba39fe89294dc1087a6701be6233abdae943d6a386d40a690daff344e94ebff093cd615e1acec107c8c5744a545f809acf6bccb2e6765a5b00a920bd6"], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@gettaction={0x24, 0x32, 0x1, 0x70bd26, 0x8000, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x15) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x508, 0x508, 0x438, 0x0, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x5}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [0x0, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x2c, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@frag={{0x30}, {[0x3, 0x8], 0xa, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 17m45.614508957s ago: executing program 3 (id=360): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flock(0xffffffffffffffff, 0x5) mknodat$loop(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)) 17m43.915914712s ago: executing program 3 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000649000/0x4000)=nil}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000010c0)=0x40) fstat(r5, &(0x7f0000001200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x40, 0x4e21, 0x0, 0x0, 0x18c26f14119f3dc7, 0xc0}, {@in, 0x0, 0x6c}, @in=@multicast2, {}, {0x0, 0x3}}}}, 0xf8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$swradio(&(0x7f0000000900), 0x1, 0x2) 17m42.479032982s ago: executing program 6 (id=364): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) shutdown(r4, 0x1) socket$packet(0x11, 0x2, 0x300) 17m42.251171095s ago: executing program 3 (id=365): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000100000000000d89614e090df447c00", @ANYRES32=r3, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000020000000100"/27], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) r7 = syz_open_dev$mouse(0x0, 0x0, 0x2042) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f00000001c0)) write$char_usb(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x8}, 0x8) mknod$loop(0x0, 0x6000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) 17m40.370583684s ago: executing program 6 (id=367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) read(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17m40.357099008s ago: executing program 3 (id=368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x28012, 0x141101) socket$pppoe(0x18, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, r2, 0x8, &(0x7f00000000c0)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00000000008000001000000000", 0xe) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd802}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="7d7a1a1a587621820da214a80d403e29c29a46063a8b786f976de5ab6eaeaae1e53eb5b00c2eb32581e41eddfc6644ae8cb7e22d5ac07b90da0ede49", @ANYBLOB="67abd0d84af198e96825fd9bd8e05e7f8e72b0505c8b5b9086d34c182bf685442738687899f5db9925b0ed81b9a85d29120f1aed84e6c785c0a1ade0cf751b1ec5db25cfafe50fa1bc2a9f3cade6f8ba58afa411f3184f24e400bc996ef908df593ea6f879946c8ac522bf741bddf31b5ce46d9cfca07908c5f132ba7dd62328919f1d25f5fbdca159be6c85f780520b9b7c6b99c48ea6e2f8fee25513774cedd1e9a4265fe553f823dfb3fc79cf62544e1119b25e708e96485fae18c73a2c06b309035f753d5dc96a372c5bf023cf58ae28e82d9bf434d0eabe6d1b75af2b514047adbc7327e48250cd98abf6f46203829e7dc554", @ANYBLOB="b704085c2218e5ccaf589cbf9805fb9b9f5130c61fde3cacbf4894de2a7d6ff73ce6e4374c7bd081c02478d8e045b1cb5d5d03456955f3d5807aca841be6a783428d21ba68b90edab0c4d75b4932c6181d1c20355bd5af4cde2886f1b60cd795b66df8abc38f1e5d0ca94aee4756127fc9134f380af4"], 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 17m25.246299945s ago: executing program 34 (id=367): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) read(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17m24.956397691s ago: executing program 35 (id=368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x28012, 0x141101) socket$pppoe(0x18, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, r2, 0x8, &(0x7f00000000c0)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00000000008000001000000000", 0xe) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd802}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="7d7a1a1a587621820da214a80d403e29c29a46063a8b786f976de5ab6eaeaae1e53eb5b00c2eb32581e41eddfc6644ae8cb7e22d5ac07b90da0ede49", @ANYBLOB="67abd0d84af198e96825fd9bd8e05e7f8e72b0505c8b5b9086d34c182bf685442738687899f5db9925b0ed81b9a85d29120f1aed84e6c785c0a1ade0cf751b1ec5db25cfafe50fa1bc2a9f3cade6f8ba58afa411f3184f24e400bc996ef908df593ea6f879946c8ac522bf741bddf31b5ce46d9cfca07908c5f132ba7dd62328919f1d25f5fbdca159be6c85f780520b9b7c6b99c48ea6e2f8fee25513774cedd1e9a4265fe553f823dfb3fc79cf62544e1119b25e708e96485fae18c73a2c06b309035f753d5dc96a372c5bf023cf58ae28e82d9bf434d0eabe6d1b75af2b514047adbc7327e48250cd98abf6f46203829e7dc554", @ANYBLOB="b704085c2218e5ccaf589cbf9805fb9b9f5130c61fde3cacbf4894de2a7d6ff73ce6e4374c7bd081c02478d8e045b1cb5d5d03456955f3d5807aca841be6a783428d21ba68b90edab0c4d75b4932c6181d1c20355bd5af4cde2886f1b60cd795b66df8abc38f1e5d0ca94aee4756127fc9134f380af4"], 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 7m18.163093343s ago: executing program 2 (id=1158): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() restart_syscall() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfc00}, &(0x7f0000000180)=0x8) syz_open_dev$sg(0x0, 0x0, 0x8002) 7m16.519198646s ago: executing program 2 (id=1161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c020000190001000000400003000000e00000010000000000000000000000000000000000000000000000000000000000000002000000000a00000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbffffffffffffff"], 0x25c}}, 0x4004) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x4000004) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000070000006111750000000000850000001d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x20008880) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000a40)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) 7m15.238897446s ago: executing program 2 (id=1164): r0 = socket(0x1e, 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) connect$inet(r0, &(0x7f0000000000)={0x1e, 0x4e20, @remote}, 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x16, 0x0, &(0x7f0000000380)={0x0, 0x2, [0x182, 0xa42, 0x82d, 0x1ac]}) syz_io_uring_setup(0x4ad9, &(0x7f00000002c0)={0x0, 0x9774, 0x0, 0x3, 0xfffffffe}, &(0x7f0000ffc000), &(0x7f0000ffc000)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000040)=0x1ff, 0x4) 7m13.149640295s ago: executing program 2 (id=1165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) 7m11.986606456s ago: executing program 2 (id=1167): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x8, 0x3a, 0x6, 0x5e157e35, 0x80}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_open_dev$I2C(0x0, 0xfffe, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10009004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x48060}], 0x1, 0x200000d0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) ptrace$peeksig(0x4209, r1, &(0x7f0000000240)={0x8000000000000001, 0x0, 0x1}, &(0x7f0000000340)=[{}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x1, 0x1}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x9f, 0x4, 0x7c2, 0xfd, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x80000, [0x4, 0xfffffde]}}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000002c0)=@bpq0, 0x10) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="fc", 0x7}]) 7m4.76319111s ago: executing program 2 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r2, 0x0) write(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000ea4cf482dbb6f6190000000000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000181100", @ANYRES32=r6, @ANYBLOB="e0ffffffffffffffb708c583b34bf6b0d25222310000000000007b8af8ff0000c25151e2539d6fa37bb6cd8abac53ca35f2df6458d7766000008000000b7040000000000000ea294d90300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) 6m49.117547397s ago: executing program 36 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r2, 0x0) write(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000ea4cf482dbb6f6190000000000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000181100", @ANYRES32=r6, @ANYBLOB="e0ffffffffffffffb708c583b34bf6b0d25222310000000000007b8af8ff0000c25151e2539d6fa37bb6cd8abac53ca35f2df6458d7766000008000000b7040000000000000ea294d90300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) 3m26.938107413s ago: executing program 9 (id=1913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x3, 0x0, 0x4, 0xb}, {0x3, 0x8, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x3, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9, 0xfffffffffffffffd}], 0xfffffffa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], 0x0, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m25.336817999s ago: executing program 9 (id=1918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m24.783817943s ago: executing program 9 (id=1920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000b80)="648678210790aef789014d2950e053689eccf789ca22d52f003429a35ee198865ddbc79fdf08b2803880dca70ebfbb08514bb5107c999f3c3ec9cdd8bfa6d977863f4278649f9b9433d8879fd6c523b4817ff160"}) 3m24.331392401s ago: executing program 9 (id=1924): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m22.75026869s ago: executing program 9 (id=1932): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x3, 0xff}}, 0x28) 3m21.358052969s ago: executing program 9 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2404c040) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x24040000) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 3m5.818346047s ago: executing program 37 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2404c040) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x24040000) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 2m48.387991548s ago: executing program 7 (id=2027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2m42.343090319s ago: executing program 7 (id=2040): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "19c471666f07f00b641e74d8b00abb5e"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xffffffff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x46}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x800) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2m40.984378016s ago: executing program 7 (id=2042): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x5, 0x8000000000000, 0x80000000000400, 0x0, 0x9, 0x2, 0x0, 0x0, 0x6], 0x1, 0x3c4210}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100230100c0000000000000000000"]) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0xa78f86bcb5b5880f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m38.88920795s ago: executing program 7 (id=2046): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc880) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0xee00) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000080)={'L-', 0xb}, 0x16, 0x2) keyctl$setperm(0x5, r4, 0x200c0d32) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040007400000000009500000000000000301944b56263eeedfc4f79e1209fec476d823e759d878956310962f8f5e7a57223a9146e7198"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e000000080002800400120008001f0010000000a4b773bbc9e37d1f2a57473d98c9b5e61f68025d76f8ba6a3537e43ee5e0f9822ad58e3ee5"], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x14800) 2m35.267274748s ago: executing program 7 (id=2057): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x48, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "19c471666f07f00b641e74d8b00abb5e"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xffffffff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x46}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x44) 2m33.598803088s ago: executing program 7 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m17.824429088s ago: executing program 38 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 15.345970437s ago: executing program 5 (id=2372): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x520e854a, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x4, 0x5, 0x7, 0x8}, {0x5, 0x1, 0xd, 0x9}, {0x5, 0x4, 0x5, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='/\x00\x00\x002 \x00\x00', @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.00537249s ago: executing program 5 (id=2377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000c00000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x87, 0x0, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x822, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x1, 0x5, 0x3, 0x0, 0x0, 0xffffffffff7ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x3d60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3fffffe]}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x448a0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000023c0)) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r2, 0x19f23}], 0x1, 0x2000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) 13.442284855s ago: executing program 5 (id=2380): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xf) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3a}, 0x1c) chroot(0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 13.375410201s ago: executing program 1 (id=2381): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x14}, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x84) 13.162015763s ago: executing program 8 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000640)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000340)={r5, 0x1, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0x20000014}) read$FUSE(r6, &(0x7f00000015c0)={0x2020}, 0x2020) close_range(r3, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x11, 0x148, 0x148, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth0_vlan\x00', 0x0, 0x0, 0xf9e, 0x5, 0x8, 0x9, {0xb}, {0x8}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) syz_open_dev$usbfs(0x0, 0x76, 0x109301) semget$private(0x0, 0x1, 0x2a8) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0) 12.202723915s ago: executing program 4 (id=2383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() restart_syscall() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f00000001c0), 0x4003) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x32f, @tick=0xfffffffc, 0x0, {0x4}, 0x1, 0x1}) 10.594613553s ago: executing program 0 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000012600)=@l={0x92, 0x8, 0xb0, 0x1b, 0x8, 0xdb, 0x8}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0000000000000088cb378ce6d47efdec14fa7e7106772d8cb90300001038171abb3750be5dd8b7b242f15e4983c8f5dd5c6727bcd5d217822db97f9f136d068fec252e3be289d81007fd346b5940ba7fd0560bd41cb1b399d76ad8d2e0d206e4c13f729aa5bccd9019ee6e6c6f08f30eeb853535955b9e7b900566", @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a0002"], 0xbc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000005c40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, r6, 0x711, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4000084}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(r0, 0x4, &(0x7f0000000040)={0x6, 0x6}, &(0x7f0000000100)) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) 10.593364706s ago: executing program 5 (id=2385): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f5, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) fcntl$lock(r2, 0x7, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x7}) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "0ce8cbb693f1f6d90fd8749b4978747bf9b2353c9974fe6f0470380a228b64384889a01cace5b4a8a50c614bb5de1ff31345289f6fdf47b81b67f4873ca63f38", 0x20}, 0x48, r3) sendmsg$nl_route(r1, 0x0, 0x8005) shmdt(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) 8.830502508s ago: executing program 4 (id=2386): r0 = io_uring_setup(0x2204, &(0x7f0000000000)={0x0, 0xf324, 0x800, 0x2, 0xb9}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x103, 0x0) r2 = socket(0x10, 0x80002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0xbc, 0x24, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0x9}, {0x9, 0xfff4}, {0xfff3, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x67bc, 0x4, 0x4, 0x1}, 0x8, 0x0, 0x49, 0x5, 0xd5c, 0x4, 0x10, 0x14, 0x5, 0x7, {0x7f, 0x4, 0x40000004, 0xab, 0xfffffffb, 0x401}}}}, @TCA_RATE={0x6, 0x5, {0xfe}}, @TCA_RATE={0x6, 0x5, {0x91, 0x5}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "809f2d55feb2291feb741f31707cd3a7"}}}]}, 0xbc}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x11c, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000980e5b4035120e00eef0000000010902120001000000000904"], 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f00000001c0)=0x2, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f0000000240)) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) r8 = socket(0xa, 0x3, 0x3d) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x0, 0x2]}}, 0x5c) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r9, &(0x7f00000016c0)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e2027"], 0x178) dup3(r10, r9, 0x0) 8.826633508s ago: executing program 1 (id=2387): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x520e854a, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x4, 0x5, 0x7, 0x8}, {0x5, 0x1, 0xd, 0x9}, {0x5, 0x4, 0x5, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='/\x00\x00\x002 \x00\x00', @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.764970936s ago: executing program 8 (id=2388): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r6, 0x0, 0x39000, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 8.291576339s ago: executing program 0 (id=2389): socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 8.199353809s ago: executing program 5 (id=2390): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.161994038s ago: executing program 1 (id=2391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) 6.882808653s ago: executing program 0 (id=2392): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) geteuid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [{}], {0x10, 0x1}, {0x20, 0x5}}, 0x2c, 0x2) socket(0x1, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) getresgid(0x0, &(0x7f0000002d80), &(0x7f0000002dc0)) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x9, 0x0, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) 6.839344819s ago: executing program 8 (id=2393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) bind$bt_sco(r6, &(0x7f0000000200), 0x8) listen(r6, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setsig(r7, 0xa, 0xd) 6.581880153s ago: executing program 4 (id=2394): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x11, 0x80a, 0x0) 5.831320368s ago: executing program 5 (id=2395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x62200, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352177fa94) link(0x0, &(0x7f00000001c0)='./file0\x00') sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff47, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x20000800) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000200)={0x81, 0xc000000, {}, {0xffffffffffffffff}, 0x101, 0x8000}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) keyctl$get_persistent(0x16, r5, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 4.864688887s ago: executing program 8 (id=2396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 4.79598533s ago: executing program 1 (id=2397): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000e673000040"]) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r7, 0xc9f1, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/94, 0x5e}], 0x1, 0x12, 0x1}) 3.89639701s ago: executing program 0 (id=2398): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x634, 0x5, {0xffffffffffffffff}, {0xee00}, 0x660, 0x8}) prlimit64(r0, 0x0, &(0x7f0000000380)={0x200008, 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) 3.786555682s ago: executing program 8 (id=2399): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700)) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) 3.78575324s ago: executing program 4 (id=2400): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a34000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f0000000b00), 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x49be, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a30000000000800034000000001140000001100010000000000000000000700000a"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000080003400000000109"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) ioctl$TIOCSIG(r2, 0x40045436, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x8, 0x9, 0x6, 0xfff}, {0x8, 0xf9, 0x81, 0xe}, {0x606, 0x2, 0xb, 0x101}]}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) 2.95532509s ago: executing program 1 (id=2401): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x520e854a, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x4, 0x5, 0x7, 0x8}, {0x5, 0x1, 0xd, 0x9}, {0x5, 0x4, 0x5, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='/\x00\x00\x002 \x00\x00', @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.983053449s ago: executing program 8 (id=2402): socket(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = semget$private(0x0, 0x4, 0x30e) r2 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x0, 0x2c1) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x48) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in=@local, 0x4e24, 0x0, 0x4e24, 0x4, 0xa, 0x0, 0x80}, {0x10, 0x1, 0x0, 0x1ee, 0xf, 0x9, 0x100000000, 0x8000000000000001}, {0x100, 0x4, 0x3ff, 0xb089}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x3507, 0x2, 0x3, 0xd0, 0x2, 0xffff, 0x1000}}, 0xe8) semctl$GETPID(r1, 0x1, 0xb, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_hsr\x00'}}, 0x1e) 1.454907168s ago: executing program 0 (id=2403): bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 1.211348804s ago: executing program 4 (id=2404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000900)='./file0\x00', r4, &(0x7f0000000400)='./file0\x00', 0x200) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xffff, 0x5c3e}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500730d000000006967c3c17d1800bf488446131cd0323ecaf87226acd1e82e0b83520198abb3980baef9d508b9dd506c61583134d6f3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r5, 0x805c6103, &(0x7f0000000680)) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 22.905272ms ago: executing program 0 (id=2405): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0) 22.469792ms ago: executing program 4 (id=2406): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) msgrcv(r4, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r4, &(0x7f0000000000)={0x3}, 0x8, 0x800) getgid() quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 1 (id=2407): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r6, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) io_uring_setup(0xad5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) kernel console output (not intermixed with test programs): ltsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1191.596955][T11973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1191.648067][T11973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1191.727676][T11973] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1191.753261][T11973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.756447][T13231] ipvlan2: entered promiscuous mode [ 1191.808289][T13231] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1191.808515][T11973] usb 6-1: config 0 descriptor?? [ 1192.687610][T11973] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 1192.799759][T11973] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1192.916615][T11973] usb 6-1: USB disconnect, device number 29 [ 1193.466649][T13249] input: syz0 as /devices/virtual/input/input25 [ 1193.657982][T13248] fido_id[13248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1194.149446][T13268] mkiss: ax0: crc mode is auto. [ 1200.037428][T11973] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1200.272734][T11973] usb 5-1: Using ep0 maxpacket: 8 [ 1200.447339][T11973] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1200.491413][T11973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1200.548423][T13326] lo speed is unknown, defaulting to 1000 [ 1200.567268][T11973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1200.603122][T11973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1200.640863][T11973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.717001][T11973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1200.733914][T13338] netlink: 'syz.9.1797': attribute type 4 has an invalid length. [ 1200.786928][T11973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.102414][T11973] usb 5-1: usb_control_msg returned -32 [ 1201.122238][T11973] usbtmc 5-1:16.0: can't read capabilities [ 1202.661017][T13360] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1202.727004][ T5888] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1202.803358][T11973] usb 5-1: USB disconnect, device number 27 [ 1202.905323][T13367] [U] . [ 1203.532233][ T5888] usb 8-1: config 118 interface 0 has no altsetting 0 [ 1203.745441][ T5888] usb 8-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1203.833477][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.963146][ T5888] usb 8-1: Product: syz [ 1204.014869][ T5888] usb 8-1: Manufacturer: syz [ 1204.059507][ T5888] usb 8-1: SerialNumber: syz [ 1204.410131][ T5888] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 1204.537578][ T5884] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1204.612565][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1204.652600][ T5888] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 1204.686882][ T5888] usb 8-1: media controller created [ 1204.776985][ T5884] usb 9-1: Using ep0 maxpacket: 8 [ 1204.829962][ T5884] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1204.992016][ T5884] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1205.066941][T11821] Bluetooth: hci3: command 0x0406 tx timeout [ 1205.100338][ T5884] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1205.189327][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.198205][T13385] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1811'. [ 1205.207330][ T5884] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1205.207364][ T5884] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.207413][ T5884] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1205.207439][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.430170][ T5884] usb 9-1: usb_control_msg returned -32 [ 1205.435852][ T5884] usbtmc 9-1:16.0: can't read capabilities [ 1205.565564][ T5888] DVB: Unable to find symbol mt352_attach() [ 1205.585714][ T5888] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 1205.645351][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input26 [ 1205.688145][ T5888] dvb-usb: schedule remote query interval to 100 msecs. [ 1205.724332][ T5888] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 1205.765526][ T5888] dvb_usb_m920x 8-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 1205.790370][ T5888] usb 8-1: USB disconnect, device number 10 [ 1205.842404][ T5884] m920x_read = error: -19 [ 1205.852246][ T5884] dvb-usb: error while querying for an remote control event. [ 1206.011422][T11973] m920x_read = error: -19 [ 1206.015850][T11973] dvb-usb: error while querying for an remote control event. [ 1206.348126][T11973] m920x_read = error: -19 [ 1206.473600][T11973] dvb-usb: error while querying for an remote control event. [ 1206.858169][ T5888] m920x_read = error: -19 [ 1206.897960][ T5888] dvb-usb: error while querying for an remote control event. [ 1207.618237][ T5888] usb 9-1: USB disconnect, device number 10 [ 1207.911202][ T5884] m920x_read = error: -19 [ 1207.915609][ T5884] dvb-usb: error while querying for an remote control event. [ 1208.178274][ T5884] m920x_read = error: -19 [ 1208.182894][ T5884] dvb-usb: error while querying for an remote control event. [ 1208.445066][ T5884] m920x_read = error: -19 [ 1208.459779][ T5884] dvb-usb: error while querying for an remote control event. [ 1208.496914][T11577] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1209.370391][ T5888] m920x_read = error: -19 [ 1209.407189][ T5888] dvb-usb: error while querying for an remote control event. [ 1209.506852][T11577] usb 5-1: Using ep0 maxpacket: 8 [ 1209.534430][T11577] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1209.588711][ T5888] m920x_read = error: -19 [ 1209.588708][T11577] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1209.588742][T11577] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1209.593090][ T5888] dvb-usb: error while querying for an remote control event. [ 1209.626864][T11577] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.684194][T11577] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1209.734809][T11577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.846932][ T5812] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1209.865739][ T5888] m920x_read = error: -19 [ 1209.871202][ T5888] dvb-usb: error while querying for an remote control event. [ 1210.023244][ T5884] m920x_read = error: -19 [ 1210.050188][ T5812] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.055392][ T5884] dvb-usb: error while querying for an remote control event. [ 1210.069597][T11577] usb 5-1: GET_CAPABILITIES returned 0 [ 1210.087275][ T5812] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1210.101335][T11577] usbtmc 5-1:16.0: can't read capabilities [ 1210.142851][ T5812] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.185271][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.238230][T13422] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1210.254146][ T5888] m920x_read = error: -19 [ 1210.280960][ T5888] dvb-usb: error while querying for an remote control event. [ 1210.306169][ T5812] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.415651][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.425183][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.434323][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.443442][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.474391][ T5884] m920x_read = error: -19 [ 1210.514815][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.528032][ T5884] dvb-usb: error while querying for an remote control event. [ 1210.540359][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.549497][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.558651][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.567764][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.596539][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.605669][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.614797][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.624004][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.636872][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.645987][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.655064][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1210.679118][ T5884] m920x_read = error: -19 [ 1210.683555][ T5884] dvb-usb: error while querying for an remote control event. [ 1210.777251][ T5888] usb 5-1: USB disconnect, device number 28 [ 1210.944318][ T5884] m920x_read = error: -19 [ 1210.950915][T11973] usb 10-1: USB disconnect, device number 10 [ 1211.000350][ T5884] dvb-usb: error while querying for an remote control event. [ 1211.182364][ T5885] m920x_read = error: -19 [ 1211.247649][ T5885] dvb-usb: error while querying for an remote control event. [ 1212.024089][ T5888] m920x_read = error: -19 [ 1212.046949][ T5888] dvb-usb: error while querying for an remote control event. [ 1212.168197][ T5885] m920x_read = error: -19 [ 1212.179793][ T5885] dvb-usb: error while querying for an remote control event. [ 1212.357825][ T5888] m920x_read = error: -19 [ 1212.362241][ T5888] dvb-usb: error while querying for an remote control event. [ 1212.423564][T13459] lo speed is unknown, defaulting to 1000 [ 1212.528370][T11973] m920x_read = error: -19 [ 1212.532875][T11973] dvb-usb: error while querying for an remote control event. [ 1212.721729][ T5888] m920x_read = error: -19 [ 1212.747046][ T5888] dvb-usb: error while querying for an remote control event. [ 1212.895131][ T5888] m920x_read = error: -19 [ 1212.909679][ T5888] dvb-usb: error while querying for an remote control event. [ 1213.077727][T11973] m920x_read = error: -19 [ 1213.082335][T11973] dvb-usb: error while querying for an remote control event. [ 1214.119339][T11973] m920x_read = error: -19 [ 1214.123760][T11973] dvb-usb: error while querying for an remote control event. [ 1214.349947][T11973] m920x_read = error: -19 [ 1214.411760][T11973] dvb-usb: error while querying for an remote control event. [ 1214.677502][ T5885] m920x_read = error: -19 [ 1214.681911][ T5885] dvb-usb: error while querying for an remote control event. [ 1214.756923][ T5888] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1214.961446][T11973] m920x_read = error: -19 [ 1214.967375][T11973] dvb-usb: error while querying for an remote control event. [ 1215.048512][ T5888] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1215.116108][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.167728][T11973] m920x_read = error: -19 [ 1215.197339][T11973] dvb-usb: error while querying for an remote control event. [ 1215.205373][ T5888] usb 5-1: Product: syz [ 1215.239638][ T5888] usb 5-1: Manufacturer: syz [ 1215.353763][ T5888] usb 5-1: SerialNumber: syz [ 1215.411469][ T5884] m920x_read = error: -19 [ 1215.463571][ T5884] dvb-usb: error while querying for an remote control event. [ 1215.621341][ T5888] usb 5-1: config 0 descriptor?? [ 1215.681439][ T5885] m920x_read = error: -19 [ 1215.690916][ T5885] dvb-usb: error while querying for an remote control event. [ 1215.736652][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1215.865185][ T5885] m920x_read = error: -19 [ 1215.883197][ T5885] dvb-usb: error while querying for an remote control event. [ 1216.041156][ T5884] m920x_read = error: -19 [ 1216.057139][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1847'. [ 1216.065984][ T5884] dvb-usb: error while querying for an remote control event. [ 1216.142642][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1847'. [ 1216.216429][ T5885] m920x_read = error: -19 [ 1216.242007][ T5885] dvb-usb: error while querying for an remote control event. [ 1216.392790][ T5888] m920x_read = error: -19 [ 1216.413394][ T5888] dvb-usb: error while querying for an remote control event. [ 1216.446985][ T5812] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1216.454874][ T5885] usb 5-1: USB disconnect, device number 29 [ 1216.600545][ T5888] m920x_read = error: -19 [ 1216.628763][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1216.666299][ T5888] dvb-usb: error while querying for an remote control event. [ 1216.693602][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 11285, setting to 64 [ 1216.754241][ T5812] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 1216.764423][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.766066][T13511] netlink: 'syz.9.1851': attribute type 10 has an invalid length. [ 1216.780480][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1851'. [ 1216.793418][ T5812] usb 6-1: Product: syz [ 1216.799758][ T5812] usb 6-1: Manufacturer: syz [ 1216.804595][ T5812] usb 6-1: SerialNumber: syz [ 1216.822298][ T5812] usb 6-1: config 0 descriptor?? [ 1216.832748][T13502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1216.846428][ T5885] m920x_read = error: -19 [ 1216.862937][ T5885] dvb-usb: error while querying for an remote control event. [ 1216.900709][T13511] team0: Port device geneve0 added [ 1217.059209][ T5812] usb 6-1: USB disconnect, device number 30 [ 1217.081502][ T5884] m920x_read = error: -19 [ 1217.105497][ T5884] dvb-usb: error while querying for an remote control event. [ 1217.256210][ T5885] m920x_read = error: -19 [ 1217.444220][T13521] netlink: set zone limit has 4 unknown bytes [ 1217.457821][T11577] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1217.506838][ T5885] dvb-usb: error while querying for an remote control event. [ 1217.667745][ T5888] m920x_read = error: -19 [ 1217.724417][ T5888] dvb-usb: error while querying for an remote control event. [ 1217.734440][T11577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1217.756415][T11577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.778820][T11577] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1218.756905][T11577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.769821][T11577] usb 5-1: config 0 descriptor?? [ 1218.789964][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1856'. [ 1219.255355][ T5888] m920x_read = error: -19 [ 1219.259949][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 1219.325543][ T5888] dvb-usb: error while querying for an remote control event. [ 1219.489244][ T5884] m920x_read = error: -19 [ 1219.514174][ T5884] dvb-usb: error while querying for an remote control event. [ 1219.531267][T11577] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1219.704816][ T5884] m920x_read = error: -19 [ 1219.754884][ T5884] dvb-usb: error while querying for an remote control event. [ 1219.764911][T11577] usb 5-1: USB disconnect, device number 30 [ 1219.956371][ T5888] m920x_read = error: -19 [ 1219.979287][T13537] fido_id[13537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1220.009855][ T5888] dvb-usb: error while querying for an remote control event. [ 1220.161953][ T5884] m920x_read = error: -19 [ 1220.172059][ T5884] dvb-usb: error while querying for an remote control event. [ 1220.326284][ T5888] m920x_read = error: -19 [ 1220.358039][ T5888] dvb-usb: error while querying for an remote control event. [ 1220.496710][ T5888] m920x_read = error: -19 [ 1220.521349][ T5888] dvb-usb: error while querying for an remote control event. [ 1220.681781][ T5884] m920x_read = error: -19 [ 1220.686194][ T5884] dvb-usb: error while querying for an remote control event. [ 1220.763159][T13550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1220.864435][ T5888] m920x_read = error: -19 [ 1220.884137][ T5888] dvb-usb: error while querying for an remote control event. [ 1221.012490][ T5884] m920x_read = error: -19 [ 1221.036854][ T5884] dvb-usb: error while querying for an remote control event. [ 1221.095515][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'. [ 1221.167819][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ee7400: rx timeout, send abort [ 1221.180238][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033ee7400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1221.187191][ T5884] m920x_read = error: -19 [ 1221.277168][ T5884] dvb-usb: error while querying for an remote control event. [ 1221.525211][ T5884] m920x_read = error: -19 [ 1221.557088][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1221.578635][ T5884] dvb-usb: error while querying for an remote control event. [ 1221.829735][ T5888] m920x_read = error: -19 [ 1221.884807][ T5888] dvb-usb: error while querying for an remote control event. [ 1222.102066][ T5885] m920x_read = error: -19 [ 1222.106498][ T5885] dvb-usb: error while querying for an remote control event. [ 1222.303806][ T5888] m920x_read = error: -19 [ 1222.321676][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1876'. [ 1222.340841][ T5888] dvb-usb: error while querying for an remote control event. [ 1222.491571][ T5885] m920x_read = error: -19 [ 1222.496059][ T5885] dvb-usb: error while querying for an remote control event. [ 1222.622553][ T5884] m920x_read = error: -19 [ 1222.641266][ T5884] dvb-usb: error while querying for an remote control event. [ 1222.797553][ T5885] m920x_read = error: -19 [ 1222.833317][ T5885] dvb-usb: error while querying for an remote control event. [ 1223.029611][ T5884] m920x_read = error: -19 [ 1223.048753][ T5884] dvb-usb: error while querying for an remote control event. [ 1223.239532][ T5884] m920x_read = error: -19 [ 1223.287050][ T5884] dvb-usb: error while querying for an remote control event. [ 1223.432355][ T5884] m920x_read = error: -19 [ 1223.462373][ T5884] dvb-usb: error while querying for an remote control event. [ 1223.631499][ T5885] m920x_read = error: -19 [ 1223.635895][ T5885] dvb-usb: error while querying for an remote control event. [ 1223.808146][ T5884] m920x_read = error: -19 [ 1223.831221][ T5884] dvb-usb: error while querying for an remote control event. [ 1223.996105][ T5885] m920x_read = error: -19 [ 1224.034767][ T5885] dvb-usb: error while querying for an remote control event. [ 1224.272788][ T5884] m920x_read = error: -19 [ 1224.284080][ T5884] dvb-usb: error while querying for an remote control event. [ 1224.511337][ T5884] m920x_read = error: -19 [ 1224.516233][ T5884] dvb-usb: error while querying for an remote control event. [ 1224.644180][T13627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1888'. [ 1224.991847][ T5884] m920x_read = error: -19 [ 1225.050196][T13626] binder: 13625:13626 ioctl c0306201 200000000240 returned -11 [ 1225.060811][ T5884] dvb-usb: error while querying for an remote control event. [ 1225.215287][ T5888] m920x_read = error: -19 [ 1225.226795][ T5888] dvb-usb: error while querying for an remote control event. [ 1225.312268][T11577] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1225.380065][ T5888] m920x_read = error: -19 [ 1225.384481][ T5888] dvb-usb: error while querying for an remote control event. [ 1225.489387][T11577] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.524188][T11577] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.539048][ T5884] m920x_read = error: -19 [ 1225.545949][T11577] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1225.559417][ T5884] dvb-usb: error while querying for an remote control event. [ 1225.577278][T11577] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.610993][T13636] kvm: MWAIT instruction emulated as NOP! [ 1225.631201][T11577] usb 10-1: config 0 descriptor?? [ 1225.718536][ T5888] m920x_read = error: -19 [ 1225.728724][ T5888] dvb-usb: error while querying for an remote control event. [ 1225.879094][ T5884] m920x_read = error: -19 [ 1225.883505][ T5884] dvb-usb: error while querying for an remote control event. [ 1226.037793][ T5885] m920x_read = error: -19 [ 1226.042362][ T5885] dvb-usb: error while querying for an remote control event. [ 1226.051846][T11577] arvo 0003:1E7D:30D4.000F: item fetching failed at offset 5/7 [ 1226.077944][T11577] arvo 0003:1E7D:30D4.000F: parse failed [ 1226.083971][T11577] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -22 [ 1226.175196][ T5885] m920x_read = error: -19 [ 1226.185245][ T5885] dvb-usb: error while querying for an remote control event. [ 1226.315601][T11577] usb 10-1: USB disconnect, device number 11 [ 1226.340210][ T5888] m920x_read = error: -19 [ 1226.344637][ T5888] dvb-usb: error while querying for an remote control event. [ 1226.507251][ T5885] m920x_read = error: -19 [ 1226.511975][ T5885] dvb-usb: error while querying for an remote control event. [ 1226.638054][ T5888] m920x_read = error: -19 [ 1226.642527][ T5888] dvb-usb: error while querying for an remote control event. [ 1226.785509][ T5885] m920x_read = error: -19 [ 1226.794784][ T5885] dvb-usb: error while querying for an remote control event. [ 1226.927556][ T5888] m920x_read = error: -19 [ 1226.932059][ T5888] dvb-usb: error while querying for an remote control event. [ 1227.057063][ T5885] m920x_read = error: -19 [ 1227.061654][ T5885] dvb-usb: error while querying for an remote control event. [ 1227.186935][ T5888] m920x_read = error: -19 [ 1227.191571][ T5888] dvb-usb: error while querying for an remote control event. [ 1227.306975][ T5885] m920x_read = error: -19 [ 1227.315255][ T5885] dvb-usb: error while querying for an remote control event. [ 1227.492650][ T5888] m920x_read = error: -19 [ 1227.508745][ T5888] dvb-usb: error while querying for an remote control event. [ 1227.655775][ T5888] m920x_read = error: -19 [ 1227.665765][ T5888] dvb-usb: error while querying for an remote control event. [ 1227.808774][ T5885] m920x_read = error: -19 [ 1227.836837][ T5885] dvb-usb: error while querying for an remote control event. [ 1227.957317][ T5885] m920x_read = error: -19 [ 1227.961824][ T5885] dvb-usb: error while querying for an remote control event. [ 1228.113354][ T5888] m920x_read = error: -19 [ 1228.127565][ T5888] dvb-usb: error while querying for an remote control event. [ 1228.253446][ T5888] m920x_read = error: -19 [ 1228.271144][ T5888] dvb-usb: error while querying for an remote control event. [ 1228.466185][ T5885] m920x_read = error: -19 [ 1228.494226][ T5885] dvb-usb: error while querying for an remote control event. [ 1228.669987][ T5885] m920x_read = error: -19 [ 1228.686714][ T5885] dvb-usb: error while querying for an remote control event. [ 1228.863890][ T5885] m920x_read = error: -19 [ 1228.882930][ T5885] dvb-usb: error while querying for an remote control event. [ 1229.060028][ T5888] m920x_read = error: -19 [ 1229.064460][ T5888] dvb-usb: error while querying for an remote control event. [ 1229.278440][ T5885] m920x_read = error: -19 [ 1229.282850][ T5885] dvb-usb: error while querying for an remote control event. [ 1229.437328][ T5888] m920x_read = error: -19 [ 1229.441741][ T5888] dvb-usb: error while querying for an remote control event. [ 1229.589895][ T5885] m920x_read = error: -19 [ 1229.614537][ T5885] dvb-usb: error while querying for an remote control event. [ 1229.768956][ T5884] m920x_read = error: -19 [ 1229.796734][ T5884] dvb-usb: error while querying for an remote control event. [ 1229.938291][ T5884] m920x_read = error: -19 [ 1229.956913][ T5884] dvb-usb: error while querying for an remote control event. [ 1230.122465][ T5884] m920x_read = error: -19 [ 1230.144714][ T5884] dvb-usb: error while querying for an remote control event. [ 1230.333773][ T5885] m920x_read = error: -19 [ 1230.353005][ T5885] dvb-usb: error while querying for an remote control event. [ 1230.487342][ T5885] m920x_read = error: -19 [ 1230.496745][ T5885] dvb-usb: error while querying for an remote control event. [ 1230.637382][ T5885] m920x_read = error: -19 [ 1230.641792][ T5885] dvb-usb: error while querying for an remote control event. [ 1230.767994][ T5885] m920x_read = error: -19 [ 1230.774132][ T5885] dvb-usb: error while querying for an remote control event. [ 1230.907310][ T5884] m920x_read = error: -19 [ 1230.911784][ T5884] dvb-usb: error while querying for an remote control event. [ 1231.057500][ T5885] m920x_read = error: -19 [ 1231.061914][ T5885] dvb-usb: error while querying for an remote control event. [ 1231.181506][ T5885] m920x_read = error: -19 [ 1231.185991][ T5885] dvb-usb: error while querying for an remote control event. [ 1231.320796][ T5884] m920x_read = error: -19 [ 1231.325380][ T5884] dvb-usb: error while querying for an remote control event. [ 1231.411240][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1896'. [ 1231.448970][ T5884] m920x_read = error: -19 [ 1231.453462][ T5884] dvb-usb: error while querying for an remote control event. [ 1231.671957][ T5885] m920x_read = error: -19 [ 1231.676415][ T5885] dvb-usb: error while querying for an remote control event. [ 1231.769503][T13685] netlink: 'syz.8.1912': attribute type 1 has an invalid length. [ 1231.848889][ T5884] m920x_read = error: -19 [ 1231.872919][ T5884] dvb-usb: error while querying for an remote control event. [ 1231.889803][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1912'. [ 1232.792077][ T5885] m920x_read = error: -19 [ 1232.796492][ T5885] dvb-usb: error while querying for an remote control event. [ 1232.871606][T13685] bond3: entered promiscuous mode [ 1232.968728][ T5884] m920x_read = error: -19 [ 1232.978473][ T5884] dvb-usb: error while querying for an remote control event. [ 1232.984708][T13685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1233.112939][ T5884] m920x_read = error: -19 [ 1233.170141][ T5884] dvb-usb: error while querying for an remote control event. [ 1233.410586][ T5885] m920x_read = error: -19 [ 1233.453575][ T5885] dvb-usb: error while querying for an remote control event. [ 1233.529960][T13705] netlink: 'syz.5.1915': attribute type 10 has an invalid length. [ 1233.540181][T13705] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1915'. [ 1233.598258][T13691] bond3: (slave bridge1): making interface the new active one [ 1233.605782][T13691] bridge1: entered promiscuous mode [ 1233.656272][ T5884] m920x_read = error: -19 [ 1233.656389][T13691] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1233.664234][T13709] binder: BINDER_SET_CONTEXT_MGR already set [ 1233.675964][ T5884] dvb-usb: error while querying for an remote control event. [ 1233.701032][T13709] binder: 13707:13709 ioctl 4018620d 200000000040 returned -16 [ 1233.724678][T13693] bond3: left promiscuous mode [ 1233.735303][T13693] bridge1: left promiscuous mode [ 1233.822374][ T5885] m920x_read = error: -19 [ 1233.856023][ T5885] dvb-usb: error while querying for an remote control event. [ 1233.982039][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 1234.000852][ T5885] m920x_read = error: -19 [ 1234.005254][ T5885] dvb-usb: error while querying for an remote control event. [ 1234.024210][T13718] binder_alloc: 13716: pid 13716 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1234.052383][T13719] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.057066][T13718] binder_alloc: 13716: pid 13716 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1234.103121][T13719] binder: 13717:13719 ioctl 4018620d 200000000040 returned -16 [ 1234.148711][ T5888] m920x_read = error: -19 [ 1234.165882][ T5888] dvb-usb: error while querying for an remote control event. [ 1234.410859][ T5884] m920x_read = error: -19 [ 1234.450581][ T5884] dvb-usb: error while querying for an remote control event. [ 1234.501678][T13722] netlink: 'syz.8.1923': attribute type 10 has an invalid length. [ 1234.510196][T13722] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1923'. [ 1234.599201][T13722] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.673509][T13722] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.682733][ T5888] m920x_read = error: -19 [ 1234.682762][ T5888] dvb-usb: error while querying for an remote control event. [ 1234.697381][T13722] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.706693][T13722] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.791029][ T5888] m920x_read = error: -19 [ 1234.825924][ T5888] dvb-usb: error while querying for an remote control event. [ 1235.000730][T13734] tipc: Started in network mode [ 1235.005277][T13732] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1235.013993][T13732] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1235.031916][T13734] tipc: Node identity 4, cluster identity 4711 [ 1235.038431][ T5884] m920x_read = error: -19 [ 1235.056824][ T5884] dvb-usb: error while querying for an remote control event. [ 1235.069018][T13734] tipc: Node number set to 4 [ 1235.215863][ T5888] m920x_read = error: -19 [ 1235.230308][ T5888] dvb-usb: error while querying for an remote control event. [ 1235.335882][T13741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1235.542439][ T5888] m920x_read = error: -19 [ 1235.557835][T13742] netlink: 'syz.4.1929': attribute type 10 has an invalid length. [ 1235.565810][T13742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1929'. [ 1235.743721][T13741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1235.817308][ T5888] dvb-usb: error while querying for an remote control event. [ 1235.940433][ T5884] m920x_read = error: -19 [ 1235.944834][ T5884] dvb-usb: error while querying for an remote control event. [ 1236.209052][ T5888] m920x_read = error: -19 [ 1236.214250][ T5888] dvb-usb: error while querying for an remote control event. [ 1236.771277][ T30] audit: type=1400 audit(2000001755.786:486): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13753 comm="syz.4.1933" daddr=::ffff:172.20.20.0 [ 1237.196358][ T5888] m920x_read = error: -19 [ 1237.200867][ T5888] dvb-usb: error while querying for an remote control event. [ 1237.344711][ T5888] m920x_read = error: -19 [ 1237.356850][ T5888] dvb-usb: error while querying for an remote control event. [ 1237.478965][ T5888] m920x_read = error: -19 [ 1237.513889][ T5888] dvb-usb: error while querying for an remote control event. [ 1238.597431][ T5888] m920x_read = error: -19 [ 1238.631930][ T5888] dvb-usb: error while querying for an remote control event. [ 1238.931220][ T5884] m920x_read = error: -19 [ 1238.941484][ T5884] dvb-usb: error while querying for an remote control event. [ 1239.081181][ T5888] m920x_read = error: -19 [ 1239.093158][ T5888] dvb-usb: error while querying for an remote control event. [ 1239.240700][ T5884] m920x_read = error: -19 [ 1239.245142][ T5884] dvb-usb: error while querying for an remote control event. [ 1239.653052][ T5888] m920x_read = error: -19 [ 1239.661643][ T5888] dvb-usb: error while querying for an remote control event. [ 1239.802575][ T5884] m920x_read = error: -19 [ 1240.786835][ T5884] dvb-usb: error while querying for an remote control event. [ 1240.899072][T11973] m920x_read = error: -19 [ 1240.903482][T11973] dvb-usb: error while querying for an remote control event. [ 1241.074762][ T5884] m920x_read = error: -19 [ 1241.079406][ T5884] dvb-usb: error while querying for an remote control event. [ 1241.266594][T11973] m920x_read = error: -19 [ 1241.271185][T11973] dvb-usb: error while querying for an remote control event. [ 1241.399191][T11973] m920x_read = error: -19 [ 1241.403626][T11973] dvb-usb: error while querying for an remote control event. [ 1241.416836][ T5888] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1241.560978][ T5884] m920x_read = error: -19 [ 1241.565488][ T5884] dvb-usb: error while querying for an remote control event. [ 1241.623673][ T5888] usb 5-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 1241.645516][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1241.706495][ T5888] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1241.740725][T11973] m920x_read = error: -19 [ 1241.745118][T11973] dvb-usb: error while querying for an remote control event. [ 1241.767911][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1241.798366][ T5888] usb 5-1: SerialNumber: syz [ 1242.062481][ T5884] m920x_read = error: -19 [ 1242.091102][ T5884] dvb-usb: error while querying for an remote control event. [ 1242.291094][ T5888] usb 5-1: 0:2 : does not exist [ 1242.302728][ T5888] usb 5-1: unit 255 not found! [ 1242.482457][ T5888] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1242.491298][ T5885] m920x_read = error: -19 [ 1242.495684][ T5885] dvb-usb: error while querying for an remote control event. [ 1242.597840][ T5888] usb 5-1: USB disconnect, device number 31 [ 1242.628317][ T5884] m920x_read = error: -19 [ 1242.632682][ T5884] dvb-usb: error while querying for an remote control event. [ 1242.663795][ T9776] udevd[9776]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.809239][ T5885] m920x_read = error: -19 [ 1242.837522][ T5885] dvb-usb: error while querying for an remote control event. [ 1242.971827][ T5888] m920x_read = error: -19 [ 1242.976332][ T5888] dvb-usb: error while querying for an remote control event. [ 1243.111437][ T5884] m920x_read = error: -19 [ 1243.115938][ T5884] dvb-usb: error while querying for an remote control event. [ 1243.259859][ T5888] m920x_read = error: -19 [ 1243.264354][ T5888] dvb-usb: error while querying for an remote control event. [ 1243.419854][ T5884] m920x_read = error: -19 [ 1243.440728][ T5884] dvb-usb: error while querying for an remote control event. [ 1244.039537][ T5888] m920x_read = error: -19 [ 1244.067273][ T5888] dvb-usb: error while querying for an remote control event. [ 1244.366405][ T5888] m920x_read = error: -19 [ 1244.437047][ T5888] dvb-usb: error while querying for an remote control event. [ 1244.552337][ T5888] m920x_read = error: -19 [ 1244.596995][ T5888] dvb-usb: error while querying for an remote control event. [ 1244.835880][ T5888] m920x_read = error: -19 [ 1244.836244][ T5888] dvb-usb: error while querying for an remote control event. [ 1244.979083][ T5888] m920x_read = error: -19 [ 1244.979686][ T5888] dvb-usb: error while querying for an remote control event. [ 1245.215780][ T5888] m920x_read = error: -19 [ 1245.251199][ T5888] dvb-usb: error while querying for an remote control event. [ 1245.422505][ T5884] m920x_read = error: -19 [ 1245.436879][ T5884] dvb-usb: error while querying for an remote control event. [ 1245.581069][ T5884] m920x_read = error: -19 [ 1245.599023][ T5884] dvb-usb: error while querying for an remote control event. [ 1245.794552][ T5884] m920x_read = error: -19 [ 1245.847369][ T5884] dvb-usb: error while querying for an remote control event. [ 1246.538240][ T5884] m920x_read = error: -19 [ 1246.556404][ T5884] dvb-usb: error while querying for an remote control event. [ 1247.230334][ T5884] m920x_read = error: -19 [ 1247.234760][ T5884] dvb-usb: error while querying for an remote control event. [ 1247.599167][ T5888] m920x_read = error: -19 [ 1247.603584][ T5888] dvb-usb: error while querying for an remote control event. [ 1247.829126][ T5884] m920x_read = error: -19 [ 1247.833558][ T5884] dvb-usb: error while querying for an remote control event. [ 1248.011905][ T5888] m920x_read = error: -19 [ 1248.016331][ T5888] dvb-usb: error while querying for an remote control event. [ 1248.205747][ T5884] m920x_read = error: -19 [ 1248.220439][ T5884] dvb-usb: error while querying for an remote control event. [ 1248.369384][ T5888] m920x_read = error: -19 [ 1248.395587][ T5888] dvb-usb: error while querying for an remote control event. [ 1248.598260][ T5888] m920x_read = error: -19 [ 1248.603480][ T5888] dvb-usb: error while querying for an remote control event. [ 1248.879359][ T5884] m920x_read = error: -19 [ 1248.884150][ T5884] dvb-usb: error while querying for an remote control event. [ 1249.232371][ T5885] m920x_read = error: -19 [ 1249.406924][ T5885] dvb-usb: error while querying for an remote control event. [ 1249.413956][T13891] netlink: 'syz.7.1977': attribute type 10 has an invalid length. [ 1249.423656][T13891] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1977'. [ 1249.626574][ T5885] m920x_read = error: -19 [ 1249.645628][ T5885] dvb-usb: error while querying for an remote control event. [ 1250.539283][ T5888] m920x_read = error: -19 [ 1250.543698][ T5888] dvb-usb: error while querying for an remote control event. [ 1250.727986][ T5885] m920x_read = error: -19 [ 1250.732490][ T5885] dvb-usb: error while querying for an remote control event. [ 1251.529142][ T5888] m920x_read = error: -19 [ 1251.533579][ T5888] dvb-usb: error while querying for an remote control event. [ 1251.699566][ T5885] m920x_read = error: -19 [ 1251.704074][ T5885] dvb-usb: error while querying for an remote control event. [ 1251.838882][T13909] binder: BINDER_SET_CONTEXT_MGR already set [ 1251.844939][T13909] binder: 13907:13909 ioctl 4018620d 200000000040 returned -16 [ 1251.853857][T13909] binder: 13907:13909 ioctl c0306201 2000000003c0 returned -14 [ 1251.889556][ T5888] m920x_read = error: -19 [ 1251.894058][ T5888] dvb-usb: error while querying for an remote control event. [ 1252.069177][ T5884] m920x_read = error: -19 [ 1252.073601][ T5884] dvb-usb: error while querying for an remote control event. [ 1252.249672][ T5884] m920x_read = error: -19 [ 1252.254402][ T5884] dvb-usb: error while querying for an remote control event. [ 1252.514374][ T5885] m920x_read = error: -19 [ 1252.554276][ T5885] dvb-usb: error while querying for an remote control event. [ 1252.767004][ T5885] m920x_read = error: -19 [ 1252.771425][ T5885] dvb-usb: error while querying for an remote control event. [ 1252.946645][T11973] m920x_read = error: -19 [ 1252.968655][T11973] dvb-usb: error while querying for an remote control event. [ 1253.119068][ T5885] m920x_read = error: -19 [ 1253.133692][ T5885] dvb-usb: error while querying for an remote control event. [ 1253.277763][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 1253.286912][T11973] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1253.296169][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 1253.305568][ T5885] m920x_read = error: -19 [ 1253.313342][ T5885] dvb-usb: error while querying for an remote control event. [ 1253.326070][T13926] ceph: No mds server is up or the cluster is laggy [ 1253.534641][T11973] usb 5-1: Using ep0 maxpacket: 16 [ 1253.567081][T11973] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1253.585418][ T5884] m920x_read = error: -19 [ 1253.630866][ T5884] dvb-usb: error while querying for an remote control event. [ 1253.648912][T11973] usb 5-1: config 0 has no interface number 0 [ 1253.745730][T11973] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1254.359136][T11973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.372387][ T5885] m920x_read = error: -19 [ 1254.395340][T11973] usb 5-1: Product: syz [ 1254.596010][T11973] usb 5-1: Manufacturer: syz [ 1254.622458][ T5885] dvb-usb: error while querying for an remote control event. [ 1254.709128][T11973] usb 5-1: SerialNumber: syz [ 1254.746229][T11973] usb 5-1: config 0 descriptor?? [ 1255.118896][ T5886] m920x_read = error: -19 [ 1255.159882][ T5886] dvb-usb: error while querying for an remote control event. [ 1255.173523][T11973] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1255.333960][ T7967] m920x_read = error: -19 [ 1255.377565][ T7967] dvb-usb: error while querying for an remote control event. [ 1255.729236][ T7967] m920x_read = error: -19 [ 1256.359465][ T7967] dvb-usb: error while querying for an remote control event. [ 1256.440214][T11821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.470812][T11821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.481465][T11821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.493864][T11821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.503152][T11821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.529172][ T7967] m920x_read = error: -19 [ 1256.533594][ T7967] dvb-usb: error while querying for an remote control event. [ 1256.669536][T13943] m920x_read = error: -19 [ 1256.674556][T13943] dvb-usb: error while querying for an remote control event. [ 1256.719243][T13954] lo speed is unknown, defaulting to 1000 [ 1256.856578][ T7967] m920x_read = error: -19 [ 1256.866692][T13964] atomic_op ffff8880292d6998 conn xmit_atomic 0000000000000000 [ 1256.920918][ T7967] dvb-usb: error while querying for an remote control event. [ 1257.260755][T13943] m920x_read = error: -19 [ 1257.480403][T13943] dvb-usb: error while querying for an remote control event. [ 1257.685595][T13943] m920x_read = error: -19 [ 1257.750668][T13943] dvb-usb: error while querying for an remote control event. [ 1257.963027][ T7967] m920x_read = error: -19 [ 1258.046591][ T7967] dvb-usb: error while querying for an remote control event. [ 1258.164154][ T7967] m920x_read = error: -19 [ 1258.201734][ T7967] dvb-usb: error while querying for an remote control event. [ 1258.357182][T11973] gspca_spca1528: reg_r err -71 [ 1258.362185][T11973] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1258.379634][T13943] m920x_read = error: -19 [ 1258.384046][T13943] dvb-usb: error while querying for an remote control event. [ 1258.434461][T11973] usb 5-1: USB disconnect, device number 32 [ 1258.517582][T13943] m920x_read = error: -19 [ 1258.522408][T13943] dvb-usb: error while querying for an remote control event. [ 1258.596890][T11821] Bluetooth: hci1: command tx timeout [ 1259.448881][ T5886] m920x_read = error: -19 [ 1259.471575][ T5886] dvb-usb: error while querying for an remote control event. [ 1259.777050][T11973] m920x_read = error: -19 [ 1259.793075][T13954] chnl_net:caif_netlink_parms(): no params data found [ 1259.800125][T11973] dvb-usb: error while querying for an remote control event. [ 1259.926998][ T5886] m920x_read = error: -19 [ 1259.931420][ T5886] dvb-usb: error while querying for an remote control event. [ 1260.102437][T11973] m920x_read = error: -19 [ 1260.132787][T11973] dvb-usb: error while querying for an remote control event. [ 1260.234557][T13954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.252585][T13954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.267653][T13954] bridge_slave_0: entered allmulticast mode [ 1260.288247][T13954] bridge_slave_0: entered promiscuous mode [ 1260.297167][ T8259] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1260.305008][ T5886] m920x_read = error: -19 [ 1260.319889][ T5886] dvb-usb: error while querying for an remote control event. [ 1260.323798][T13954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.338112][T13974] fuse: root generation should be zero [ 1260.415332][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.452243][T13954] bridge_slave_1: entered allmulticast mode [ 1260.498565][ T8259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.513252][T13954] bridge_slave_1: entered promiscuous mode [ 1260.533965][T11973] m920x_read = error: -19 [ 1260.537287][ T8259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.556908][T11973] dvb-usb: error while querying for an remote control event. [ 1260.580111][ T8259] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1260.618394][ T8259] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1260.645292][ T8259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.677088][T11821] Bluetooth: hci1: command tx timeout [ 1260.684499][ T8259] usb 8-1: config 0 descriptor?? [ 1260.736785][T11973] m920x_read = error: -19 [ 1260.741293][T11973] dvb-usb: error while querying for an remote control event. [ 1260.888413][ T5886] m920x_read = error: -19 [ 1260.893202][ T5886] dvb-usb: error while querying for an remote control event. [ 1260.912024][T13954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.936970][ T8259] usbhid 8-1:0.0: can't add hid device: -71 [ 1260.943834][ T8259] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1260.984765][ T8259] usb 8-1: USB disconnect, device number 11 [ 1260.991862][T13954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.037055][ T5886] m920x_read = error: -19 [ 1261.041473][ T5886] dvb-usb: error while querying for an remote control event. [ 1261.201760][T11973] m920x_read = error: -19 [ 1261.206172][T11973] dvb-usb: error while querying for an remote control event. [ 1261.230160][T13954] team0: Port device team_slave_0 added [ 1261.261043][T13954] team0: Port device team_slave_1 added [ 1261.362419][ T5886] m920x_read = error: -19 [ 1261.377505][ T5886] dvb-usb: error while querying for an remote control event. [ 1261.461410][T13954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.496282][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.776476][T13954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.982750][T13954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.059494][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.352382][ T5886] m920x_read = error: -19 [ 1262.365226][ T5886] dvb-usb: error while querying for an remote control event. [ 1262.373088][T13954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.496999][T11973] m920x_read = error: -19 [ 1262.501561][T11973] dvb-usb: error while querying for an remote control event. [ 1262.748609][T11821] Bluetooth: hci1: command tx timeout [ 1262.798149][ T5886] m920x_read = error: -19 [ 1262.802777][ T5886] dvb-usb: error while querying for an remote control event. [ 1262.943445][ T5886] m920x_read = error: -19 [ 1262.989748][ T5886] dvb-usb: error while querying for an remote control event. [ 1263.387481][T11973] m920x_read = error: -19 [ 1263.399702][T11973] dvb-usb: error while querying for an remote control event. [ 1263.424847][T13954] hsr_slave_0: entered promiscuous mode [ 1263.452801][T13954] hsr_slave_1: entered promiscuous mode [ 1263.567017][ T5886] m920x_read = error: -19 [ 1263.571591][ T5886] dvb-usb: error while querying for an remote control event. [ 1263.599505][T13954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1263.622257][T13954] Cannot create hsr debugfs directory [ 1263.647025][ T5812] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1263.736935][T11973] m920x_read = error: -19 [ 1263.765413][T11973] dvb-usb: error while querying for an remote control event. [ 1263.829650][ T5812] usb 9-1: Using ep0 maxpacket: 16 [ 1263.854442][ T5812] usb 9-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 1264.816857][ T5812] usb 9-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 1264.826515][ T5886] m920x_read = error: -19 [ 1264.826957][ T5812] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1264.850019][ T5812] usb 9-1: string descriptor 0 read error: -22 [ 1264.856355][ T5812] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1264.856834][T11821] Bluetooth: hci1: command tx timeout [ 1264.871000][ T5812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.885984][ T5886] dvb-usb: error while querying for an remote control event. [ 1264.896711][T14016] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1265.010075][T14016] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1265.019054][ T5886] m920x_read = error: -19 [ 1265.023453][ T5886] dvb-usb: error while querying for an remote control event. [ 1265.180772][T11973] m920x_read = error: -19 [ 1265.202122][T11973] dvb-usb: error while querying for an remote control event. [ 1265.383209][ T5812] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 1265.449513][ T5886] m920x_read = error: -19 [ 1265.454424][ T5886] dvb-usb: error while querying for an remote control event. [ 1266.379663][ T5886] m920x_read = error: -19 [ 1266.384668][ T5886] dvb-usb: error while querying for an remote control event. [ 1266.539035][T11973] m920x_read = error: -19 [ 1266.553683][T11973] dvb-usb: error while querying for an remote control event. [ 1266.669319][ T5886] usb 9-1: USB disconnect, device number 11 [ 1266.715295][T13943] m920x_read = error: -19 [ 1266.736932][T13943] dvb-usb: error while querying for an remote control event. [ 1266.797666][ T5886] usblp0: removed [ 1266.881426][T13943] m920x_read = error: -19 [ 1266.885843][T13943] dvb-usb: error while querying for an remote control event. [ 1267.911210][ T5886] m920x_read = error: -19 [ 1267.915633][ T5886] dvb-usb: error while querying for an remote control event. [ 1267.987392][T14051] netlink: 'syz.5.2023': attribute type 10 has an invalid length. [ 1267.995292][T14051] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2023'. [ 1268.047052][T11973] m920x_read = error: -19 [ 1268.051468][T11973] dvb-usb: error while querying for an remote control event. [ 1268.207562][ T5886] m920x_read = error: -19 [ 1268.215327][ T5886] dvb-usb: error while querying for an remote control event. [ 1270.041784][T11973] m920x_read = error: -19 [ 1270.046292][T11973] dvb-usb: error while querying for an remote control event. [ 1270.176908][T11973] m920x_read = error: -19 [ 1270.218960][T11973] dvb-usb: error while querying for an remote control event. [ 1270.363786][ T5886] m920x_read = error: -19 [ 1270.403021][ T5886] dvb-usb: error while querying for an remote control event. [ 1270.770578][T11973] m920x_read = error: -19 [ 1270.775013][T11973] dvb-usb: error while querying for an remote control event. [ 1270.963963][T11973] m920x_read = error: -19 [ 1270.982557][T11973] dvb-usb: error while querying for an remote control event. [ 1271.097363][T13954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1271.120340][T13943] m920x_read = error: -19 [ 1271.126652][T13943] dvb-usb: error while querying for an remote control event. [ 1271.149968][T13954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1271.204996][T13954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1271.251674][T13954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1271.268187][ T5886] m920x_read = error: -19 [ 1271.278984][ T5886] dvb-usb: error while querying for an remote control event. [ 1271.417010][ T5886] m920x_read = error: -19 [ 1271.438928][ T5886] dvb-usb: error while querying for an remote control event. [ 1271.564671][ T5886] m920x_read = error: -19 [ 1271.586149][ T5886] dvb-usb: error while querying for an remote control event. [ 1271.749820][T11973] m920x_read = error: -19 [ 1271.770589][T11973] dvb-usb: error while querying for an remote control event. [ 1271.830174][T13954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.717640][ T5886] m920x_read = error: -19 [ 1272.722066][ T5886] dvb-usb: error while querying for an remote control event. [ 1272.925070][T11973] m920x_read = error: -19 [ 1272.936966][T11973] dvb-usb: error while querying for an remote control event. [ 1273.049211][T11973] m920x_read = error: -19 [ 1273.092548][T11973] dvb-usb: error while querying for an remote control event. [ 1273.312443][T13943] m920x_read = error: -19 [ 1273.312586][T13943] dvb-usb: error while querying for an remote control event. [ 1273.336843][T13954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.875498][T13943] m920x_read = error: -19 [ 1273.875532][T13943] dvb-usb: error while querying for an remote control event. [ 1274.072001][T13943] m920x_read = error: -19 [ 1274.072127][T13943] dvb-usb: error while querying for an remote control event. [ 1274.686970][T11973] m920x_read = error: -19 [ 1274.687002][T11973] dvb-usb: error while querying for an remote control event. [ 1274.857448][T14094] tty tty36: ldisc open failed (-12), clearing slot 35 [ 1274.983577][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.998916][T11973] m920x_read = error: -19 [ 1275.003931][T11973] dvb-usb: error while querying for an remote control event. [ 1275.811871][T13943] m920x_read = error: -19 [ 1275.816317][T13943] dvb-usb: error while querying for an remote control event. [ 1276.012014][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.019165][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.068736][T13943] m920x_read = error: -19 [ 1276.073139][T13943] dvb-usb: error while querying for an remote control event. [ 1276.111489][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.118703][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.291248][T13943] m920x_read = error: -19 [ 1276.295747][T13943] dvb-usb: error while querying for an remote control event. [ 1276.583694][T11973] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1276.813664][ T7967] m920x_read = error: -19 [ 1276.847159][ T7967] dvb-usb: error while querying for an remote control event. [ 1276.896712][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.126595][ T7967] m920x_read = error: -19 [ 1277.131040][ T7967] dvb-usb: error while querying for an remote control event. [ 1277.293351][ T7967] m920x_read = error: -19 [ 1277.331353][ T7967] dvb-usb: error while querying for an remote control event. [ 1277.371709][T11973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1277.432281][T11973] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1277.449475][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.460309][T11973] usb 5-1: can't read configurations, error -71 [ 1277.546888][ T5886] m920x_read = error: -19 [ 1277.551302][ T5886] dvb-usb: error while querying for an remote control event. [ 1277.581935][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.689434][ T7967] m920x_read = error: -19 [ 1277.693852][ T7967] dvb-usb: error while querying for an remote control event. [ 1277.864239][ T7967] m920x_read = error: -19 [ 1278.005763][ T7967] dvb-usb: error while querying for an remote control event. [ 1278.146189][ T5886] m920x_read = error: -19 [ 1278.185439][ T5886] dvb-usb: error while querying for an remote control event. [ 1278.403037][ T5886] m920x_read = error: -19 [ 1278.408248][ T64] bridge_slave_1: left allmulticast mode [ 1278.413895][ T64] bridge_slave_1: left promiscuous mode [ 1278.449543][ T5886] dvb-usb: error while querying for an remote control event. [ 1278.476097][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.579427][ T64] bridge_slave_0: left allmulticast mode [ 1279.360811][ T5886] m920x_read = error: -19 [ 1279.366843][ T5886] dvb-usb: error while querying for an remote control event. [ 1279.417526][ T64] bridge_slave_0: left promiscuous mode [ 1279.447657][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.477074][ T5886] m920x_read = error: -19 [ 1279.487108][ T5886] dvb-usb: error while querying for an remote control event. [ 1279.732530][ T5886] m920x_read = error: -19 [ 1279.769786][ T5886] dvb-usb: error while querying for an remote control event. [ 1279.950219][T13943] m920x_read = error: -19 [ 1279.954645][T13943] dvb-usb: error while querying for an remote control event. [ 1280.086008][T14138] overlayfs: missing 'lowerdir' [ 1280.142294][ T5886] m920x_read = error: -19 [ 1280.147001][ T5886] dvb-usb: error while querying for an remote control event. [ 1280.286947][ T5886] m920x_read = error: -19 [ 1280.291390][ T5886] dvb-usb: error while querying for an remote control event. [ 1280.505036][T13943] m920x_read = error: -19 [ 1280.540676][T13943] dvb-usb: error while querying for an remote control event. [ 1280.774104][ T5886] m920x_read = error: -19 [ 1280.780657][ T5886] dvb-usb: error while querying for an remote control event. [ 1281.107818][T11973] m920x_read = error: -19 [ 1281.113192][T11973] dvb-usb: error while querying for an remote control event. [ 1281.312111][ T5886] m920x_read = error: -19 [ 1281.316505][ T5886] dvb-usb: error while querying for an remote control event. [ 1281.491314][T11973] m920x_read = error: -19 [ 1281.495745][T11973] dvb-usb: error while querying for an remote control event. [ 1281.629632][ T64] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1281.667681][ T5886] m920x_read = error: -19 [ 1281.680620][ T5886] dvb-usb: error while querying for an remote control event. [ 1281.840036][T11973] m920x_read = error: -19 [ 1281.845357][T11973] dvb-usb: error while querying for an remote control event. [ 1281.998285][ T5886] m920x_read = error: -19 [ 1282.015878][ T5886] dvb-usb: error while querying for an remote control event. [ 1282.160652][T11973] m920x_read = error: -19 [ 1282.190889][T11973] dvb-usb: error while querying for an remote control event. [ 1282.612459][T11973] m920x_read = error: -19 [ 1282.645906][T11973] dvb-usb: error while querying for an remote control event. [ 1282.788501][T11973] m920x_read = error: -19 [ 1282.802650][T11973] dvb-usb: error while querying for an remote control event. [ 1282.935832][T11973] m920x_read = error: -19 [ 1282.941828][T11973] dvb-usb: error while querying for an remote control event. [ 1283.008674][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.032258][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.048657][ T64] bond0 (unregistering): Released all slaves [ 1283.057081][T13943] m920x_read = error: -19 [ 1283.061465][T13943] dvb-usb: error while querying for an remote control event. [ 1283.080422][ T64] bond1 (unregistering): Released all slaves [ 1283.199041][T14141] ip6erspan0: entered promiscuous mode [ 1283.205216][T11973] m920x_read = error: -19 [ 1283.220736][T11973] dvb-usb: error while querying for an remote control event. [ 1283.347095][ T7967] m920x_read = error: -19 [ 1283.351509][ T7967] dvb-usb: error while querying for an remote control event. [ 1283.475674][T14166] syzkaller0: entered promiscuous mode [ 1283.481682][T14166] syzkaller0: entered allmulticast mode [ 1283.501317][T11973] m920x_read = error: -19 [ 1283.516202][T11973] dvb-usb: error while querying for an remote control event. [ 1283.525365][T13954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.586606][ T7967] m920x_read = error: -19 [ 1284.666938][ T7967] dvb-usb: error while querying for an remote control event. [ 1284.738067][T14182] overlayfs: missing 'lowerdir' [ 1284.818514][T13943] m920x_read = error: -19 [ 1284.822947][T13943] dvb-usb: error while querying for an remote control event. [ 1285.060134][ T7967] m920x_read = error: -19 [ 1285.064559][ T7967] dvb-usb: error while querying for an remote control event. [ 1285.924065][T13943] m920x_read = error: -19 [ 1285.928526][T13943] dvb-usb: error while querying for an remote control event. [ 1286.266651][ T7967] m920x_read = error: -19 [ 1286.291742][ T7967] dvb-usb: error while querying for an remote control event. [ 1287.016376][T13954] veth0_vlan: entered promiscuous mode [ 1287.024794][T13943] m920x_read = error: -19 [ 1287.039734][T13943] dvb-usb: error while querying for an remote control event. [ 1287.106824][ T64] hsr_slave_0: left promiscuous mode [ 1287.128246][ T64] hsr_slave_1: left promiscuous mode [ 1287.141214][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.281285][T11973] m920x_read = error: -19 [ 1287.285777][T11973] dvb-usb: error while querying for an remote control event. [ 1287.293572][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.333047][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.356840][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.460110][T11973] m920x_read = error: -19 [ 1287.464552][T11973] dvb-usb: error while querying for an remote control event. [ 1287.512728][ T64] veth1_macvtap: left promiscuous mode [ 1287.525091][ T64] veth0_macvtap: left promiscuous mode [ 1287.541650][ T64] veth1_vlan: left promiscuous mode [ 1287.551886][ T64] veth0_vlan: left promiscuous mode [ 1287.624006][ T7967] m920x_read = error: -19 [ 1287.630165][ T7967] dvb-usb: error while querying for an remote control event. [ 1287.758590][T11973] m920x_read = error: -19 [ 1287.765930][T11973] dvb-usb: error while querying for an remote control event. [ 1287.889708][ T7967] m920x_read = error: -19 [ 1287.904046][ T7967] dvb-usb: error while querying for an remote control event. [ 1288.126901][T11973] m920x_read = error: -19 [ 1288.136830][T11973] dvb-usb: error while querying for an remote control event. [ 1288.271678][T11973] m920x_read = error: -19 [ 1288.276091][T11973] dvb-usb: error while querying for an remote control event. [ 1288.434058][T13943] m920x_read = error: -19 [ 1288.438785][T13943] dvb-usb: error while querying for an remote control event. [ 1288.550628][T11973] m920x_read = error: -19 [ 1288.555081][T11973] dvb-usb: error while querying for an remote control event. [ 1288.687013][T13943] m920x_read = error: -19 [ 1288.694851][T13943] dvb-usb: error while querying for an remote control event. [ 1288.817953][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1288.827591][T11973] m920x_read = error: -19 [ 1288.836833][T11973] dvb-usb: error while querying for an remote control event. [ 1288.970578][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1288.983546][T11973] m920x_read = error: -19 [ 1288.990094][T11973] dvb-usb: error while querying for an remote control event. [ 1289.136962][T13943] m920x_read = error: -19 [ 1289.151938][T13943] dvb-usb: error while querying for an remote control event. [ 1289.298855][T14213] /dev/nullb0: Can't open blockdev [ 1289.322951][T13943] m920x_read = error: -19 [ 1289.346368][T13943] dvb-usb: error while querying for an remote control event. [ 1289.584773][T11973] m920x_read = error: -19 [ 1289.605831][T11973] dvb-usb: error while querying for an remote control event. [ 1289.793654][T13943] m920x_read = error: -19 [ 1289.930563][T13943] dvb-usb: error while querying for an remote control event. [ 1290.026949][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1290.093327][T11973] m920x_read = error: -19 [ 1290.101270][T11973] dvb-usb: error while querying for an remote control event. [ 1290.297119][T11973] m920x_read = error: -19 [ 1290.306784][T11973] dvb-usb: error while querying for an remote control event. [ 1290.471155][T11973] m920x_read = error: -19 [ 1290.475808][T11973] dvb-usb: error while querying for an remote control event. [ 1290.591626][T11973] m920x_read = error: -19 [ 1290.596249][T11973] dvb-usb: error while querying for an remote control event. [ 1290.723459][T11973] m920x_read = error: -19 [ 1290.736709][T11973] dvb-usb: error while querying for an remote control event. [ 1290.859241][T11973] m920x_read = error: -19 [ 1290.863652][T11973] dvb-usb: error while querying for an remote control event. [ 1290.987524][T13943] m920x_read = error: -19 [ 1291.004243][T13943] dvb-usb: error while querying for an remote control event. [ 1291.174603][ T7967] m920x_read = error: -19 [ 1291.196281][ T7967] dvb-usb: error while querying for an remote control event. [ 1291.374174][T13943] m920x_read = error: -19 [ 1291.390843][T13943] dvb-usb: error while querying for an remote control event. [ 1291.544945][T11973] m920x_read = error: -19 [ 1291.563423][T11973] dvb-usb: error while querying for an remote control event. [ 1291.723774][T13943] m920x_read = error: -19 [ 1291.737249][T13943] dvb-usb: error while querying for an remote control event. [ 1291.870012][T13943] m920x_read = error: -19 [ 1291.881017][T13943] dvb-usb: error while querying for an remote control event. [ 1292.014790][T13943] m920x_read = error: -19 [ 1292.037759][T13943] dvb-usb: error while querying for an remote control event. [ 1292.101480][T14222] overlayfs: missing 'lowerdir' [ 1292.174881][T13943] m920x_read = error: -19 [ 1292.184007][T13943] dvb-usb: error while querying for an remote control event. [ 1292.306958][T11973] m920x_read = error: -19 [ 1292.312098][T11973] dvb-usb: error while querying for an remote control event. [ 1292.437205][T13943] m920x_read = error: -19 [ 1292.441698][T13943] dvb-usb: error while querying for an remote control event. [ 1292.455287][T13954] veth1_vlan: entered promiscuous mode [ 1292.582195][T13954] veth0_macvtap: entered promiscuous mode [ 1292.612724][T11973] m920x_read = error: -19 [ 1292.639817][T13954] veth1_macvtap: entered promiscuous mode [ 1292.648493][T11973] dvb-usb: error while querying for an remote control event. [ 1292.896464][T11973] m920x_read = error: -19 [ 1292.931396][T11973] dvb-usb: error while querying for an remote control event. [ 1292.933562][T14235] /dev/nullb0: Can't open blockdev [ 1293.068497][T13954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.243267][T11973] m920x_read = error: -19 [ 1293.281401][T11973] dvb-usb: error while querying for an remote control event. [ 1293.302822][T13954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.349622][T13954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.387470][T13954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.446849][T13954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.467083][T11973] m920x_read = error: -19 [ 1293.471865][T13954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.489144][T11973] dvb-usb: error while querying for an remote control event. [ 1293.688219][T11973] m920x_read = error: -19 [ 1293.940388][T11973] dvb-usb: error while querying for an remote control event. [ 1294.147800][ T7967] m920x_read = error: -19 [ 1294.152504][ T7967] dvb-usb: error while querying for an remote control event. [ 1294.370493][T13943] m920x_read = error: -19 [ 1294.375786][T13943] dvb-usb: error while querying for an remote control event. [ 1294.511138][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.529622][ T7967] m920x_read = error: -19 [ 1294.534096][ T7967] dvb-usb: error while querying for an remote control event. [ 1294.557911][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.648346][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.671743][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.683497][T13943] m920x_read = error: -19 [ 1294.688091][T13943] dvb-usb: error while querying for an remote control event. [ 1294.824479][T13943] m920x_read = error: -19 [ 1294.847093][T13943] dvb-usb: error while querying for an remote control event. [ 1295.001373][T13943] m920x_read = error: -19 [ 1295.019977][T13943] dvb-usb: error while querying for an remote control event. [ 1295.867995][T14259] overlayfs: missing 'lowerdir' [ 1295.964423][ T7967] m920x_read = error: -19 [ 1296.485892][ T7967] dvb-usb: error while querying for an remote control event. [ 1296.678722][T13943] m920x_read = error: -19 [ 1296.683145][T13943] dvb-usb: error while querying for an remote control event. [ 1297.600760][ T5885] m920x_read = error: -19 [ 1297.605215][ T5885] dvb-usb: error while querying for an remote control event. [ 1299.274082][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2080'. [ 1299.869111][T13943] m920x_read = error: -19 [ 1299.873534][T13943] dvb-usb: error while querying for an remote control event. [ 1299.911969][T14273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.190433][ T5885] m920x_read = error: -19 [ 1300.195196][ T5885] dvb-usb: error while querying for an remote control event. [ 1300.955322][T13943] m920x_read = error: -19 [ 1300.959827][T13943] dvb-usb: error while querying for an remote control event. [ 1301.093470][ T7967] m920x_read = error: -19 [ 1301.126812][ T7967] dvb-usb: error while querying for an remote control event. [ 1301.238725][ T7967] m920x_read = error: -19 [ 1301.264604][ T7967] dvb-usb: error while querying for an remote control event. [ 1301.490553][ T5885] m920x_read = error: -19 [ 1301.524548][ T5885] dvb-usb: error while querying for an remote control event. [ 1301.787200][ T7967] m920x_read = error: -19 [ 1301.807387][ T7967] dvb-usb: error while querying for an remote control event. [ 1301.963558][ T7967] m920x_read = error: -19 [ 1301.981681][ T7967] dvb-usb: error while querying for an remote control event. [ 1302.154512][ T5885] m920x_read = error: -19 [ 1302.165829][ T5885] dvb-usb: error while querying for an remote control event. [ 1302.362097][ T7967] m920x_read = error: -19 [ 1302.366513][ T7967] dvb-usb: error while querying for an remote control event. [ 1302.404059][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1302.421521][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1302.448531][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1302.459401][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1302.468154][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1302.545695][ T5885] m920x_read = error: -19 [ 1302.832305][ T5885] dvb-usb: error while querying for an remote control event. [ 1303.072668][ T7967] m920x_read = error: -19 [ 1303.139126][T14314] overlayfs: missing 'lowerdir' [ 1303.145663][ T7967] dvb-usb: error while querying for an remote control event. [ 1303.192679][T14311] lo speed is unknown, defaulting to 1000 [ 1303.955865][T13943] m920x_read = error: -19 [ 1304.036208][T13943] dvb-usb: error while querying for an remote control event. [ 1304.199967][ T7967] m920x_read = error: -19 [ 1304.205843][ T7967] dvb-usb: error while querying for an remote control event. [ 1304.384134][T13943] m920x_read = error: -19 [ 1304.401549][T13943] dvb-usb: error while querying for an remote control event. [ 1304.508253][ T51] Bluetooth: hci6: command tx timeout [ 1304.606924][ T7967] m920x_read = error: -19 [ 1304.611868][ T7967] dvb-usb: error while querying for an remote control event. [ 1304.789027][T13943] m920x_read = error: -19 [ 1304.796795][T13943] dvb-usb: error while querying for an remote control event. [ 1305.762181][ T7967] m920x_read = error: -19 [ 1305.985463][ T7967] dvb-usb: error while querying for an remote control event. [ 1306.142244][T13943] m920x_read = error: -19 [ 1306.146676][T13943] dvb-usb: error while querying for an remote control event. [ 1306.463456][ T7967] m920x_read = error: -19 [ 1306.589168][ T51] Bluetooth: hci6: command tx timeout [ 1307.159321][ T7967] dvb-usb: error while querying for an remote control event. [ 1307.289844][T14311] chnl_net:caif_netlink_parms(): no params data found [ 1307.289868][T13943] m920x_read = error: -19 [ 1307.289893][T13943] dvb-usb: error while querying for an remote control event. [ 1307.369427][ T30] audit: type=1400 audit(2000001826.386:487): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14346 comm="syz.8.2101" [ 1307.627032][ T7967] m920x_read = error: -19 [ 1307.631505][ T7967] dvb-usb: error while querying for an remote control event. [ 1308.203561][T14353] delete_channel: no stack [ 1308.248475][T14357] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2102'. [ 1308.354805][ T7967] m920x_read = error: -19 [ 1308.360810][ T7967] dvb-usb: error while querying for an remote control event. [ 1308.507090][T13943] m920x_read = error: -19 [ 1308.511608][T13943] dvb-usb: error while querying for an remote control event. [ 1308.661089][ T7967] m920x_read = error: -19 [ 1308.665610][ T7967] dvb-usb: error while querying for an remote control event. [ 1308.677423][ T51] Bluetooth: hci6: command tx timeout [ 1308.801406][ T7967] m920x_read = error: -19 [ 1308.818820][ T7967] dvb-usb: error while querying for an remote control event. [ 1308.905836][T14311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.928916][T14311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.948418][T14371] overlayfs: missing 'lowerdir' [ 1308.975153][ T7967] m920x_read = error: -19 [ 1308.976393][T14311] bridge_slave_0: entered allmulticast mode [ 1309.011667][ T7967] dvb-usb: error while querying for an remote control event. [ 1309.083375][T14311] bridge_slave_0: entered promiscuous mode [ 1309.144011][T14311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.175107][T14311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.177193][ T7967] m920x_read = error: -19 [ 1309.199207][ T7967] dvb-usb: error while querying for an remote control event. [ 1309.199677][T14311] bridge_slave_1: entered allmulticast mode [ 1309.265551][T14311] bridge_slave_1: entered promiscuous mode [ 1309.368050][ T7967] m920x_read = error: -19 [ 1309.394239][ T7967] dvb-usb: error while querying for an remote control event. [ 1309.522345][T14311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.564284][T13943] m920x_read = error: -19 [ 1309.583257][T13943] dvb-usb: error while querying for an remote control event. [ 1309.585060][T14311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.765608][T14390] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1309.930867][ T7967] m920x_read = error: -19 [ 1310.145834][ T7967] dvb-usb: error while querying for an remote control event. [ 1310.300634][T14311] team0: Port device team_slave_0 added [ 1310.332156][T14311] team0: Port device team_slave_1 added [ 1310.351606][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 1310.388706][T14394] futex_wake_op: syz.0.2114 tries to shift op by 36; fix this program [ 1310.474789][T13943] m920x_read = error: -19 [ 1310.486985][T13943] dvb-usb: error while querying for an remote control event. [ 1310.757727][ T51] Bluetooth: hci6: command tx timeout [ 1311.040723][T13943] m920x_read = error: -19 [ 1311.062681][T13943] dvb-usb: error while querying for an remote control event. [ 1311.062901][T14311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.147953][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.226065][T14311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.244353][T14311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.251863][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.277805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1311.292166][T14311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.369467][ T5885] m920x_read = error: -19 [ 1311.422351][ T5885] dvb-usb: error while querying for an remote control event. [ 1311.559389][T13943] m920x_read = error: -19 [ 1311.564157][T13943] dvb-usb: error while querying for an remote control event. [ 1311.634234][T14405] overlayfs: missing 'lowerdir' [ 1311.677109][T14311] hsr_slave_0: entered promiscuous mode [ 1311.701529][T14311] hsr_slave_1: entered promiscuous mode [ 1311.737071][ T5885] m920x_read = error: -19 [ 1311.757830][ T5885] dvb-usb: error while querying for an remote control event. [ 1311.866962][ T5885] m920x_read = error: -19 [ 1311.884271][ T5885] dvb-usb: error while querying for an remote control event. [ 1312.051849][ T7967] m920x_read = error: -19 [ 1312.056251][ T7967] dvb-usb: error while querying for an remote control event. [ 1312.213718][T13943] m920x_read = error: -19 [ 1312.226935][T13943] dvb-usb: error while querying for an remote control event. [ 1312.347292][ T7967] m920x_read = error: -19 [ 1312.351781][ T7967] dvb-usb: error while querying for an remote control event. [ 1312.523354][T14417] binder: 14401:14417 ioctl 4018620d 0 returned -22 [ 1312.543322][T13943] m920x_read = error: -19 [ 1313.267509][T13943] dvb-usb: error while querying for an remote control event. [ 1313.490350][ T7967] m920x_read = error: -19 [ 1313.494748][ T7967] dvb-usb: error while querying for an remote control event. [ 1314.108753][T13943] m920x_read = error: -19 [ 1314.113163][T13943] dvb-usb: error while querying for an remote control event. [ 1314.331385][ T7967] m920x_read = error: -19 [ 1314.335794][ T7967] dvb-usb: error while querying for an remote control event. [ 1315.095687][T13943] m920x_read = error: -19 [ 1315.106971][T13943] dvb-usb: error while querying for an remote control event. [ 1315.224873][T13943] m920x_read = error: -19 [ 1315.241487][T13943] dvb-usb: error while querying for an remote control event. [ 1315.408900][ T7967] m920x_read = error: -19 [ 1315.413604][ T7967] dvb-usb: error while querying for an remote control event. [ 1315.492785][T14444] netlink: 'syz.5.2132': attribute type 1 has an invalid length. [ 1315.675881][T13943] m920x_read = error: -19 [ 1315.717705][T13943] dvb-usb: error while querying for an remote control event. [ 1315.743915][T14448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1316.436865][T13943] m920x_read = error: -19 [ 1316.441299][T13943] dvb-usb: error while querying for an remote control event. [ 1316.576907][T13943] m920x_read = error: -19 [ 1316.606054][T13943] dvb-usb: error while querying for an remote control event. [ 1316.641979][T14444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1316.698023][T14450] veth3: entered promiscuous mode [ 1316.713078][T14450] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1316.767989][ T5885] m920x_read = error: -19 [ 1316.775727][ T5885] dvb-usb: error while querying for an remote control event. [ 1316.778317][T14454] erspan0: entered allmulticast mode [ 1316.867472][T14454] bond1: (slave erspan0): making interface the new active one [ 1316.899604][T14454] erspan0: entered promiscuous mode [ 1316.917501][T13943] m920x_read = error: -19 [ 1316.921899][T13943] dvb-usb: error while querying for an remote control event. [ 1316.926943][T14454] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 1317.267844][ T5885] m920x_read = error: -19 [ 1317.272551][ T5885] dvb-usb: error while querying for an remote control event. [ 1318.258713][ T5885] m920x_read = error: -19 [ 1318.263208][ T5885] dvb-usb: error while querying for an remote control event. [ 1318.932158][ T7967] m920x_read = error: -19 [ 1318.937604][ T7967] dvb-usb: error while querying for an remote control event. [ 1319.295830][T14311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1319.303454][ T5885] m920x_read = error: -19 [ 1319.325004][T14311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.350182][ T5885] dvb-usb: error while querying for an remote control event. [ 1319.482026][T14311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.516994][T13943] m920x_read = error: -19 [ 1319.521397][T13943] dvb-usb: error while querying for an remote control event. [ 1319.540935][T14311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1319.721560][ T5885] m920x_read = error: -19 [ 1319.727699][ T5885] dvb-usb: error while querying for an remote control event. [ 1319.898769][ T5885] m920x_read = error: -19 [ 1319.909796][ T5885] dvb-usb: error while querying for an remote control event. [ 1319.953286][T14311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.890603][T13943] m920x_read = error: -19 [ 1320.927657][T13943] dvb-usb: error while querying for an remote control event. [ 1320.933349][T14311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.020336][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.027810][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.058553][ T5885] m920x_read = error: -19 [ 1321.089493][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.096844][T11728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.044532][ T5885] dvb-usb: error while querying for an remote control event. [ 1322.449305][ T7967] m920x_read = error: -19 [ 1322.453714][ T7967] dvb-usb: error while querying for an remote control event. [ 1322.838686][ T5885] m920x_read = error: -19 [ 1322.844377][ T5885] dvb-usb: error while querying for an remote control event. [ 1323.919526][ T7967] m920x_read = error: -19 [ 1323.923938][ T7967] dvb-usb: error while querying for an remote control event. [ 1324.322859][ T5885] m920x_read = error: -19 [ 1324.327346][ T5885] dvb-usb: error while querying for an remote control event. [ 1324.672588][ T5885] m920x_read = error: -19 [ 1324.775293][ T5885] dvb-usb: error while querying for an remote control event. [ 1325.232294][ T7967] m920x_read = error: -19 [ 1325.248363][T14311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.267219][ T7967] dvb-usb: error while querying for an remote control event. [ 1325.402826][ T5885] m920x_read = error: -19 [ 1325.436862][ T5885] dvb-usb: error while querying for an remote control event. [ 1325.463813][T14311] veth0_vlan: entered promiscuous mode [ 1325.519701][T14311] veth1_vlan: entered promiscuous mode [ 1325.864297][T14311] veth0_macvtap: entered promiscuous mode [ 1326.391100][ T5885] m920x_read = error: -19 [ 1326.395504][ T5885] dvb-usb: error while querying for an remote control event. [ 1326.402268][T14311] veth1_macvtap: entered promiscuous mode [ 1326.584956][ T7967] m920x_read = error: -19 [ 1326.751370][ T7967] dvb-usb: error while querying for an remote control event. [ 1327.647110][ T7967] m920x_read = error: -19 [ 1327.651518][ T7967] dvb-usb: error while querying for an remote control event. [ 1327.731257][T14311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.861524][T14311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.910049][T14311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.927263][T13943] m920x_read = error: -19 [ 1327.931646][T13943] dvb-usb: error while querying for an remote control event. [ 1327.946985][T14311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.986998][T14311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.995750][T14311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.099614][T13943] m920x_read = error: -19 [ 1328.126275][T13943] dvb-usb: error while querying for an remote control event. [ 1328.344982][T14531] use of bytesused == 0 is deprecated and will be removed in the future, [ 1328.354566][T14531] use the actual size instead. [ 1328.500986][ T7967] m920x_read = error: -19 [ 1328.624685][ T7967] dvb-usb: error while querying for an remote control event. [ 1329.055437][ T5886] m920x_read = error: -19 [ 1329.060180][ T5886] dvb-usb: error while querying for an remote control event. [ 1329.282177][ T5888] m920x_read = error: -19 [ 1329.426124][ T5888] dvb-usb: error while querying for an remote control event. [ 1329.984824][ T5885] m920x_read = error: -19 [ 1330.091063][ T5885] dvb-usb: error while querying for an remote control event. [ 1330.477193][ T5886] m920x_read = error: -19 [ 1330.504414][ T5886] dvb-usb: error while querying for an remote control event. [ 1330.829848][ T5885] m920x_read = error: -19 [ 1330.834314][ T5885] dvb-usb: error while querying for an remote control event. [ 1330.857003][T11435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.864894][T11435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.732035][ T5888] m920x_read = error: -19 [ 1331.771426][ T5888] dvb-usb: error while querying for an remote control event. [ 1331.993667][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.001798][ T5886] m920x_read = error: -19 [ 1332.001829][ T5886] dvb-usb: error while querying for an remote control event. [ 1332.030260][T14555] tipc: Started in network mode [ 1332.050940][T14555] tipc: Node identity 4, cluster identity 4711 [ 1332.056148][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.086167][T14555] tipc: Node number set to 4 [ 1332.125972][ T5886] m920x_read = error: -19 [ 1332.135212][ T5886] dvb-usb: error while querying for an remote control event. [ 1332.291063][ T5888] m920x_read = error: -19 [ 1332.348152][ T5888] dvb-usb: error while querying for an remote control event. [ 1333.196341][ T5888] m920x_read = error: -19 [ 1333.232943][ T5888] dvb-usb: error while querying for an remote control event. [ 1333.484845][ T5885] m920x_read = error: -19 [ 1333.501025][ T5885] dvb-usb: error while querying for an remote control event. [ 1334.379008][T13943] m920x_read = error: -19 [ 1334.383846][T13943] dvb-usb: error while querying for an remote control event. [ 1334.518946][T13943] m920x_read = error: -19 [ 1334.542165][T13943] dvb-usb: error while querying for an remote control event. [ 1334.812241][ T5888] m920x_read = error: -19 [ 1334.946993][ T5888] dvb-usb: error while querying for an remote control event. [ 1335.071923][T14586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1335.089481][ T5886] m920x_read = error: -19 [ 1335.095433][ T5886] dvb-usb: error while querying for an remote control event. [ 1335.179821][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1335.337016][ T5886] m920x_read = error: -19 [ 1335.480325][ T5886] dvb-usb: error while querying for an remote control event. [ 1335.845806][ T13] erspan0: left promiscuous mode [ 1336.096077][ T7967] m920x_read = error: -19 [ 1336.154325][ T7967] dvb-usb: error while querying for an remote control event. [ 1336.329814][ T5886] m920x_read = error: -19 [ 1336.345710][ T5886] dvb-usb: error while querying for an remote control event. [ 1336.572936][ T7967] m920x_read = error: -19 [ 1336.596931][ T7967] dvb-usb: error while querying for an remote control event. [ 1336.743271][T14610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.831714][ T7967] m920x_read = error: -19 [ 1336.877193][ T7967] dvb-usb: error while querying for an remote control event. [ 1337.153102][ T7967] m920x_read = error: -19 [ 1337.166842][ T7967] dvb-usb: error while querying for an remote control event. [ 1337.348797][ T5886] m920x_read = error: -19 [ 1337.360670][ T5886] dvb-usb: error while querying for an remote control event. [ 1337.518971][ T5886] m920x_read = error: -19 [ 1337.523399][ T5886] dvb-usb: error while querying for an remote control event. [ 1337.703258][ T5886] m920x_read = error: -19 [ 1337.855781][ T5886] dvb-usb: error while querying for an remote control event. [ 1338.141369][ T7967] m920x_read = error: -19 [ 1338.264672][ T7967] dvb-usb: error while querying for an remote control event. [ 1338.925749][ T5885] m920x_read = error: -19 [ 1338.930343][ T5885] dvb-usb: error while querying for an remote control event. [ 1339.763858][T13943] m920x_read = error: -19 [ 1339.768304][T13943] dvb-usb: error while querying for an remote control event. [ 1340.146634][T14636] netlink: 'syz.8.2179': attribute type 10 has an invalid length. [ 1340.154895][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2179'. [ 1340.405538][ T5885] m920x_read = error: -19 [ 1340.437263][ T5885] dvb-usb: error while querying for an remote control event. [ 1340.682685][ T5885] m920x_read = error: -19 [ 1340.691106][ T5885] dvb-usb: error while querying for an remote control event. [ 1341.378323][ T7967] m920x_read = error: -19 [ 1341.382907][ T7967] dvb-usb: error while querying for an remote control event. [ 1341.929137][ T5885] m920x_read = error: -19 [ 1341.933846][ T5885] dvb-usb: error while querying for an remote control event. [ 1342.200522][T13943] m920x_read = error: -19 [ 1342.204962][T13943] dvb-usb: error while querying for an remote control event. [ 1344.281507][ T5885] m920x_read = error: -19 [ 1344.688830][ T5885] dvb-usb: error while querying for an remote control event. [ 1345.021280][ T5886] m920x_read = error: -19 [ 1345.025701][ T5886] dvb-usb: error while querying for an remote control event. [ 1345.283159][ T5886] m920x_read = error: -19 [ 1345.330921][ T5886] dvb-usb: error while querying for an remote control event. [ 1345.615317][ T5885] m920x_read = error: -19 [ 1345.703321][ T5885] dvb-usb: error while querying for an remote control event. [ 1345.860909][ T5886] m920x_read = error: -19 [ 1345.865611][ T5886] dvb-usb: error while querying for an remote control event. [ 1346.987590][ T5885] m920x_read = error: -19 [ 1346.993663][ T5885] dvb-usb: error while querying for an remote control event. [ 1347.260230][ T5888] m920x_read = error: -19 [ 1347.264634][ T5888] dvb-usb: error while querying for an remote control event. [ 1348.178667][ T5886] m920x_read = error: -19 [ 1348.183099][ T5886] dvb-usb: error while querying for an remote control event. [ 1348.381520][T14700] Invalid source name [ 1348.385623][T14700] UBIFS error (pid: 14700): cannot open "./file0", error -22 [ 1349.119813][ T5885] m920x_read = error: -19 [ 1349.842600][ T5885] dvb-usb: error while querying for an remote control event. [ 1350.728494][ T5888] m920x_read = error: -19 [ 1350.732939][ T5888] dvb-usb: error while querying for an remote control event. [ 1350.942937][T13943] m920x_read = error: -19 [ 1350.967586][T13943] dvb-usb: error while querying for an remote control event. [ 1351.119140][T13943] m920x_read = error: -19 [ 1351.123564][T13943] dvb-usb: error while querying for an remote control event. [ 1351.184079][ T30] audit: type=1400 audit(2000001870.176:488): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14722 comm="syz.4.2206" daddr=::ffff:172.20.20.0 [ 1351.300280][T13943] m920x_read = error: -19 [ 1351.376784][T13943] dvb-usb: error while querying for an remote control event. [ 1351.603709][ T5886] m920x_read = error: -19 [ 1351.608165][ T5886] dvb-usb: error while querying for an remote control event. [ 1352.251861][ T5886] m920x_read = error: -19 [ 1352.256290][ T5886] dvb-usb: error while querying for an remote control event. [ 1352.775367][ T5886] m920x_read = error: -19 [ 1352.874428][ T5886] dvb-usb: error while querying for an remote control event. [ 1353.042976][T13943] m920x_read = error: -19 [ 1353.083349][T13943] dvb-usb: error while querying for an remote control event. [ 1353.282986][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 1353.292198][T13943] m920x_read = error: -19 [ 1353.302281][T13943] dvb-usb: error while querying for an remote control event. [ 1353.475775][ T5885] m920x_read = error: -19 [ 1353.501599][ T5885] dvb-usb: error while querying for an remote control event. [ 1353.675796][T13943] m920x_read = error: -19 [ 1353.714283][T13943] dvb-usb: error while querying for an remote control event. [ 1353.864957][T14751] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1353.877189][ T5885] m920x_read = error: -19 [ 1353.881586][ T5885] dvb-usb: error while querying for an remote control event. [ 1354.227745][ T5885] m920x_read = error: -19 [ 1354.232157][ T5885] dvb-usb: error while querying for an remote control event. [ 1354.286803][T14763] netlink: 'syz.4.2216': attribute type 29 has an invalid length. [ 1355.069463][T13943] m920x_read = error: -19 [ 1355.300051][T14758] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1355.996943][T13943] dvb-usb: error while querying for an remote control event. [ 1356.110042][T13943] m920x_read = error: -19 [ 1356.114443][T13943] dvb-usb: error while querying for an remote control event. [ 1356.372885][ T5886] m920x_read = error: -19 [ 1356.377348][ T5886] dvb-usb: error while querying for an remote control event. [ 1356.420336][T14758] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1356.716975][ T5886] m920x_read = error: -19 [ 1356.737713][T14770] netlink: 'syz.4.2216': attribute type 29 has an invalid length. [ 1356.777480][ T5886] dvb-usb: error while querying for an remote control event. [ 1357.287665][T13943] m920x_read = error: -19 [ 1357.292061][T13943] dvb-usb: error while querying for an remote control event. [ 1357.318268][T14777] Cannot find map_set index 0 as target [ 1357.500437][ T5885] m920x_read = error: -19 [ 1357.547859][ T5885] dvb-usb: error while querying for an remote control event. [ 1357.735937][ T5885] m920x_read = error: -19 [ 1357.770353][ T5885] dvb-usb: error while querying for an remote control event. [ 1357.979124][ T5886] m920x_read = error: -19 [ 1357.983552][ T5886] dvb-usb: error while querying for an remote control event. [ 1358.202033][ T5885] m920x_read = error: -19 [ 1358.206454][ T5885] dvb-usb: error while querying for an remote control event. [ 1358.559682][ T5888] m920x_read = error: -19 [ 1358.584921][ T5888] dvb-usb: error while querying for an remote control event. [ 1358.753183][ T5885] m920x_read = error: -19 [ 1358.771879][ T5885] dvb-usb: error while querying for an remote control event. [ 1358.941539][ T5888] m920x_read = error: -19 [ 1358.961525][ T5888] dvb-usb: error while querying for an remote control event. [ 1359.129248][ T5885] m920x_read = error: -19 [ 1359.164125][ T5885] dvb-usb: error while querying for an remote control event. [ 1359.334683][T13943] m920x_read = error: -19 [ 1359.354770][T13943] dvb-usb: error while querying for an remote control event. [ 1359.508892][ T5885] m920x_read = error: -19 [ 1359.513314][ T5885] dvb-usb: error while querying for an remote control event. [ 1359.709273][ T5888] m920x_read = error: -19 [ 1359.724646][ T5888] dvb-usb: error while querying for an remote control event. [ 1360.520243][T13943] m920x_read = error: -19 [ 1360.590522][T13943] dvb-usb: error while querying for an remote control event. [ 1360.745869][ T5885] m920x_read = error: -19 [ 1360.766814][ T5885] dvb-usb: error while querying for an remote control event. [ 1360.888905][ T5885] m920x_read = error: -19 [ 1360.893307][ T5885] dvb-usb: error while querying for an remote control event. [ 1361.058979][T13943] m920x_read = error: -19 [ 1361.063384][T13943] dvb-usb: error while querying for an remote control event. [ 1361.409019][ T5888] m920x_read = error: -19 [ 1361.413435][ T5888] dvb-usb: error while querying for an remote control event. [ 1362.253234][ T5888] m920x_read = error: -19 [ 1362.314509][ T5888] dvb-usb: error while querying for an remote control event. [ 1362.599089][ T5885] m920x_read = error: -19 [ 1362.603807][ T5885] dvb-usb: error while querying for an remote control event. [ 1362.836569][ T5888] m920x_read = error: -19 [ 1362.856804][ T5888] dvb-usb: error while querying for an remote control event. [ 1363.059557][ T5888] m920x_read = error: -19 [ 1363.835785][T14831] Smack: duplicate mount options [ 1364.025154][ T5888] dvb-usb: error while querying for an remote control event. [ 1364.514651][ T5888] m920x_read = error: -19 [ 1364.537492][ T5888] dvb-usb: error while querying for an remote control event. [ 1364.668417][ T5888] m920x_read = error: -19 [ 1364.684480][ T5888] dvb-usb: error while querying for an remote control event. [ 1364.828432][T13943] m920x_read = error: -19 [ 1364.853639][T13943] dvb-usb: error while querying for an remote control event. [ 1365.396924][ T5888] m920x_read = error: -19 [ 1365.415571][ T5888] dvb-usb: error while querying for an remote control event. [ 1365.884531][ T5885] m920x_read = error: -19 [ 1365.889147][ T5885] dvb-usb: error while querying for an remote control event. [ 1366.087309][ T5885] m920x_read = error: -19 [ 1366.091705][ T5885] dvb-usb: error while querying for an remote control event. [ 1366.355935][T13943] m920x_read = error: -19 [ 1366.400722][T13943] dvb-usb: error while querying for an remote control event. [ 1366.711337][T13943] m920x_read = error: -19 [ 1366.780942][T13943] dvb-usb: error while querying for an remote control event. [ 1367.106915][ T5888] m920x_read = error: -19 [ 1367.158769][ T5888] dvb-usb: error while querying for an remote control event. [ 1367.388468][ T5888] m920x_read = error: -19 [ 1367.392863][ T5888] dvb-usb: error while querying for an remote control event. [ 1369.378805][T13943] m920x_read = error: -19 [ 1369.383216][T13943] dvb-usb: error while querying for an remote control event. [ 1370.288980][ T30] audit: type=1400 audit(2000001889.306:489): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14864 comm="syz.5.2249" daddr=::ffff:172.20.20.0 [ 1370.322605][ T5885] m920x_read = error: -19 [ 1370.345469][ T5885] dvb-usb: error while querying for an remote control event. [ 1370.937736][ T5885] m920x_read = error: -19 [ 1370.942137][ T5885] dvb-usb: error while querying for an remote control event. [ 1371.235509][T13943] m920x_read = error: -19 [ 1371.246815][ T5888] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1371.260428][T13943] dvb-usb: error while querying for an remote control event. [ 1371.446871][ T5888] usb 9-1: Using ep0 maxpacket: 16 [ 1371.528128][ T5888] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1371.578864][T14882] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 1371.589077][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'. [ 1371.852430][ T5888] usb 9-1: config 0 has no interface number 0 [ 1371.859946][ T5885] m920x_read = error: -19 [ 1371.864500][ T5885] dvb-usb: error while querying for an remote control event. [ 1371.929323][ T5888] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1371.987120][ T5888] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1372.028576][T13943] m920x_read = error: -19 [ 1372.033096][T13943] dvb-usb: error while querying for an remote control event. [ 1372.082297][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.573623][T13943] m920x_read = error: -19 [ 1372.593674][ T5888] usb 9-1: Product: syz [ 1372.610218][T13943] dvb-usb: error while querying for an remote control event. [ 1372.646304][ T5888] usb 9-1: Manufacturer: syz [ 1372.656782][ T5888] usb 9-1: SerialNumber: syz [ 1372.683311][ T5888] usb 9-1: config 0 descriptor?? [ 1372.710488][T14882] team0: Port device geneve0 added [ 1372.813717][ T5885] m920x_read = error: -19 [ 1372.856971][ T5885] dvb-usb: error while querying for an remote control event. [ 1372.938990][T14890] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 1372.948272][T14890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2261'. [ 1373.446772][T13943] m920x_read = error: -19 [ 1373.451225][T13943] dvb-usb: error while querying for an remote control event. [ 1373.538726][T14890] team0: Port device geneve0 added [ 1373.798035][ T5888] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input29 [ 1374.403207][ T5885] m920x_read = error: -19 [ 1374.426911][ T5885] dvb-usb: error while querying for an remote control event. [ 1374.695221][ T5886] m920x_read = error: -19 [ 1374.699856][ T5886] dvb-usb: error while querying for an remote control event. [ 1374.832556][T14906] netlink: 'syz.0.2265': attribute type 11 has an invalid length. [ 1375.543677][ T5888] usb 9-1: USB disconnect, device number 12 [ 1375.557539][ T5885] m920x_read = error: -19 [ 1375.562248][ T5885] dvb-usb: error while querying for an remote control event. [ 1375.624344][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 1375.764341][ T5886] m920x_read = error: -19 [ 1377.150340][ T5886] dvb-usb: error while querying for an remote control event. [ 1377.368412][T13943] m920x_read = error: -19 [ 1377.775087][T13943] dvb-usb: error while querying for an remote control event. [ 1378.049985][T13943] m920x_read = error: -19 [ 1378.095081][T13943] dvb-usb: error while querying for an remote control event. [ 1378.280319][ T7967] m920x_read = error: -19 [ 1378.292184][ T7967] dvb-usb: error while querying for an remote control event. [ 1378.834350][T14935] xt_TCPMSS: Only works on TCP SYN packets [ 1379.027065][T13943] m920x_read = error: -19 [ 1379.036956][T13943] dvb-usb: error while querying for an remote control event. [ 1379.347400][T11821] Bluetooth: hci1: command 0x0406 tx timeout [ 1379.377259][T13943] m920x_read = error: -19 [ 1379.381636][T13943] dvb-usb: error while querying for an remote control event. [ 1379.425303][T14925] netlink: 'syz.5.2269': attribute type 1 has an invalid length. [ 1379.509477][ T7967] m920x_read = error: -19 [ 1379.513878][ T7967] dvb-usb: error while querying for an remote control event. [ 1379.903054][ T5886] m920x_read = error: -19 [ 1379.907583][ T5886] dvb-usb: error while querying for an remote control event. [ 1380.570219][ T5888] m920x_read = error: -19 [ 1380.574730][ T5888] dvb-usb: error while querying for an remote control event. [ 1381.003600][T14950] syz.8.2273: attempt to access beyond end of device [ 1381.003600][T14950] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1381.647452][T14925] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1381.717178][ T5885] m920x_read = error: -19 [ 1381.836894][ T5885] dvb-usb: error while querying for an remote control event. [ 1381.847455][T11577] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1382.201537][ T5888] m920x_read = error: -19 [ 1382.205932][ T5888] dvb-usb: error while querying for an remote control event. [ 1382.210963][T11577] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 1382.837377][T11577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.845427][T11577] usb 2-1: Product: syz [ 1382.972839][T11577] usb 2-1: Manufacturer: syz [ 1382.998587][T11577] usb 2-1: SerialNumber: syz [ 1383.022859][T11577] usb 2-1: config 0 descriptor?? [ 1383.040232][ T5888] m920x_read = error: -19 [ 1383.044696][ T5888] dvb-usb: error while querying for an remote control event. [ 1383.387097][T14970] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1384.204566][T13943] m920x_read = error: -19 [ 1385.158861][T13943] dvb-usb: error while querying for an remote control event. [ 1385.329966][ T5888] m920x_read = error: -19 [ 1385.334366][ T5888] dvb-usb: error while querying for an remote control event. [ 1385.946170][ T5885] m920x_read = error: -19 [ 1385.968388][ T5885] dvb-usb: error while querying for an remote control event. [ 1386.623097][ T5885] m920x_read = error: -19 [ 1386.646762][ T5885] dvb-usb: error while querying for an remote control event. [ 1386.776289][ T5885] m920x_read = error: -19 [ 1386.797883][ T5885] dvb-usb: error while querying for an remote control event. [ 1387.082519][ T5885] m920x_read = error: -19 [ 1387.082546][ T5885] dvb-usb: error while querying for an remote control event. [ 1387.582883][ T5885] m920x_read = error: -19 [ 1387.582910][ T5885] dvb-usb: error while querying for an remote control event. [ 1387.699332][ T5885] m920x_read = error: -19 [ 1387.699363][ T5885] dvb-usb: error while querying for an remote control event. [ 1388.657600][ T5885] m920x_read = error: -19 [ 1388.662014][ T5885] dvb-usb: error while querying for an remote control event. [ 1388.668143][T11577] usb 2-1: can't set config #0, error -110 [ 1388.877936][ T5888] m920x_read = error: -19 [ 1388.882338][ T5888] dvb-usb: error while querying for an remote control event. [ 1389.054139][T15003] fuse: Bad value for 'fd' [ 1389.066381][T15003] overlayfs: missing 'lowerdir' [ 1389.095756][ T5885] m920x_read = error: -19 [ 1389.111986][ T5885] dvb-usb: error while querying for an remote control event. [ 1389.420693][ T5888] m920x_read = error: -19 [ 1390.227296][ T5888] dvb-usb: error while querying for an remote control event. [ 1390.409581][ T5886] m920x_read = error: -19 [ 1390.413982][ T5886] dvb-usb: error while querying for an remote control event. [ 1391.609919][ T5886] usb 2-1: USB disconnect, device number 3 [ 1391.718737][T13943] m920x_read = error: -19 [ 1391.723138][T13943] dvb-usb: error while querying for an remote control event. [ 1392.118453][ T5885] m920x_read = error: -19 [ 1392.186757][ T5885] dvb-usb: error while querying for an remote control event. [ 1392.327785][ T5886] m920x_read = error: -19 [ 1392.332174][ T5886] dvb-usb: error while querying for an remote control event. [ 1392.418604][T15026] netlink: 'syz.1.2298': attribute type 10 has an invalid length. [ 1392.426462][T15026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1393.827371][ T5885] m920x_read = error: -19 [ 1393.843040][ T5885] dvb-usb: error while querying for an remote control event. [ 1394.386485][ T5886] m920x_read = error: -19 [ 1394.412343][ T5886] dvb-usb: error while querying for an remote control event. [ 1394.612344][ T5885] m920x_read = error: -19 [ 1394.667653][ T5885] dvb-usb: error while querying for an remote control event. [ 1394.819713][ T5885] m920x_read = error: -19 [ 1394.881492][ T5885] dvb-usb: error while querying for an remote control event. [ 1395.152961][T15056] vivid-001: disconnect [ 1395.644389][T13943] m920x_read = error: -19 [ 1395.650549][T13943] dvb-usb: error while querying for an remote control event. [ 1395.713911][T15048] vivid-001: reconnect [ 1396.083648][T15058] netlink: 'syz.8.2306': attribute type 10 has an invalid length. [ 1396.115955][T15058] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2306'. [ 1396.354603][T13943] m920x_read = error: -19 [ 1396.359368][T13943] dvb-usb: error while querying for an remote control event. [ 1396.569301][ T5886] m920x_read = error: -19 [ 1396.573708][ T5886] dvb-usb: error while querying for an remote control event. [ 1396.889097][ T51] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1396.910914][ T5886] m920x_read = error: -19 [ 1396.915390][ T5886] dvb-usb: error while querying for an remote control event. [ 1397.066257][T15065] overlayfs: failed to clone lowerpath [ 1397.106985][ T5888] m920x_read = error: -19 [ 1397.111487][ T5888] dvb-usb: error while querying for an remote control event. [ 1397.162079][T15066] overlayfs: failed to clone upperpath [ 1398.113434][ T5888] m920x_read = error: -19 [ 1398.125512][ T5888] dvb-usb: error while querying for an remote control event. [ 1398.840458][T13943] m920x_read = error: -19 [ 1398.844852][T13943] dvb-usb: error while querying for an remote control event. [ 1398.963660][T15084] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1399.065907][ T5886] m920x_read = error: -19 [ 1399.084674][ T5886] dvb-usb: error while querying for an remote control event. [ 1399.333494][T15084] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1399.412986][ T5888] m920x_read = error: -19 [ 1399.484958][ T5888] dvb-usb: error while querying for an remote control event. [ 1399.704660][T13943] m920x_read = error: -19 [ 1399.720327][T13943] dvb-usb: error while querying for an remote control event. [ 1400.000467][ T5888] m920x_read = error: -19 [ 1400.290914][ T30] audit: type=1400 audit(2000001919.296:490): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15095 comm="syz.8.2317" daddr=::ffff:172.20.20.20 dest=20001 [ 1400.903792][ T5888] dvb-usb: error while querying for an remote control event. [ 1401.119523][ T5885] m920x_read = error: -19 [ 1401.123928][ T5885] dvb-usb: error while querying for an remote control event. [ 1401.553907][ T5888] m920x_read = error: -19 [ 1401.581297][ T5888] dvb-usb: error while querying for an remote control event. [ 1401.801544][T15109] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2319'. [ 1402.239163][ T5888] m920x_read = error: -19 [ 1402.296308][ T5888] dvb-usb: error while querying for an remote control event. [ 1403.032267][ T5886] m920x_read = error: -19 [ 1403.040801][ T5886] dvb-usb: error while querying for an remote control event. [ 1403.358338][T13943] m920x_read = error: -19 [ 1403.478202][T15126] syz.0.2322: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1403.494120][T15126] CPU: 1 UID: 0 PID: 15126 Comm: syz.0.2322 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1403.494151][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1403.494173][T15126] Call Trace: [ 1403.494185][T15126] [ 1403.494195][T15126] dump_stack_lvl+0x189/0x250 [ 1403.494235][T15126] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1403.494265][T15126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1403.494299][T15126] ? __pfx__printk+0x10/0x10 [ 1403.494321][T15126] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1403.494346][T15126] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1403.494377][T15126] warn_alloc+0x214/0x310 [ 1403.494410][T15126] ? stack_depot_save_flags+0x40/0x900 [ 1403.494451][T15126] ? __pfx_warn_alloc+0x10/0x10 [ 1403.494485][T15126] ? kasan_save_track+0x4f/0x80 [ 1403.494511][T15126] ? xskq_create+0x56/0x170 [ 1403.494541][T15126] ? xsk_init_queue+0xb0/0x110 [ 1403.494568][T15126] ? xsk_setsockopt+0x43f/0x710 [ 1403.494595][T15126] ? do_sock_setsockopt+0x257/0x3e0 [ 1403.494620][T15126] ? __x64_sys_setsockopt+0x18b/0x220 [ 1403.494644][T15126] ? do_syscall_64+0xfa/0x3b0 [ 1403.494677][T15126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.494708][T15126] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1403.494819][T15126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1403.494858][T15126] ? __kasan_kmalloc+0x93/0xb0 [ 1403.494900][T15126] vmalloc_user_noprof+0xad/0xf0 [ 1403.494930][T15126] ? xskq_create+0xbf/0x170 [ 1403.494961][T15126] xskq_create+0xbf/0x170 [ 1403.494993][T15126] xsk_init_queue+0xb0/0x110 [ 1403.495025][T15126] xsk_setsockopt+0x43f/0x710 [ 1403.495050][T15126] ? rcu_is_watching+0x15/0xb0 [ 1403.495083][T15126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1403.495108][T15126] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1403.495131][T15126] ? __fget_files+0x2a/0x420 [ 1403.495162][T15126] ? __fget_files+0x2a/0x420 [ 1403.495195][T15126] ? lock_acquire+0x175/0x360 [ 1403.495222][T15126] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1403.495249][T15126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1403.495278][T15126] do_sock_setsockopt+0x257/0x3e0 [ 1403.495305][T15126] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1403.495335][T15126] ? __fget_files+0x2a/0x420 [ 1403.495373][T15126] __x64_sys_setsockopt+0x18b/0x220 [ 1403.495404][T15126] do_syscall_64+0xfa/0x3b0 [ 1403.495434][T15126] ? lockdep_hardirqs_on+0x9c/0x150 [ 1403.495465][T15126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.495485][T15126] ? clear_bhb_loop+0x60/0xb0 [ 1403.495510][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.495531][T15126] RIP: 0033:0x7f2ad598e969 [ 1403.495554][T15126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.495573][T15126] RSP: 002b:00007f2ad687c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1403.495595][T15126] RAX: ffffffffffffffda RBX: 00007f2ad5bb6240 RCX: 00007f2ad598e969 [ 1403.495612][T15126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1403.495625][T15126] RBP: 00007f2ad5a10ab1 R08: 0000000000000052 R09: 0000000000000000 [ 1403.495638][T15126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.495652][T15126] R13: 0000000000000000 R14: 00007f2ad5bb6240 R15: 00007ffd56bcca08 [ 1403.495684][T15126] [ 1403.495747][T15126] Mem-Info: [ 1403.741549][ T30] audit: type=1400 audit(2000001922.486:491): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15117 comm="syz.0.2322" daddr=::ffff:172.20.20.57 dest=20001 [ 1403.747067][T15126] active_anon:255 inactive_anon:13904 isolated_anon:0 [ 1403.747067][T15126] active_file:29354 inactive_file:37089 isolated_file:0 [ 1403.747067][T15126] unevictable:769 dirty:166 writeback:0 [ 1403.747067][T15126] slab_reclaimable:10939 slab_unreclaimable:127271 [ 1403.747067][T15126] mapped:51603 shmem:9969 pagetables:1236 [ 1403.747067][T15126] sec_pagetables:0 bounce:0 [ 1403.747067][T15126] kernel_misc_reclaimable:0 [ 1403.747067][T15126] free:1225674 free_pcp:12951 free_cma:0 [ 1403.891485][T15126] Node 0 active_anon:1020kB inactive_anon:55616kB active_file:117212kB inactive_file:148356kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:206412kB dirty:664kB writeback:0kB shmem:38340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1403.891584][T13943] dvb-usb: error while querying for an remote control event. [ 1403.934628][T15126] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1403.999344][T15126] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1404.137339][T15126] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1404.143772][T13943] m920x_read = error: -19 [ 1404.144764][T15126] Node 0 DMA32 free:988784kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:55604kB active_file:115432kB inactive_file:148296kB unevictable:1540kB writepending:672kB present:3129332kB managed:2561648kB mlocked:0kB bounce:0kB free_pcp:31800kB local_pcp:27564kB free_cma:0kB [ 1404.185694][T13943] dvb-usb: error while querying for an remote control event. [ 1404.247684][T15126] lowmem_reserve[]: 0 0 1 1 1 [ 1404.257253][T15126] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1788kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1404.308810][ T5885] m920x_read = error: -19 [ 1404.353942][T15126] lowmem_reserve[]: 0 0 0 0 0 [ 1404.362957][T15126] Node 1 Normal free:3904596kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17464kB local_pcp:9708kB free_cma:0kB [ 1404.452283][T15126] lowmem_reserve[]: 0 0 0 0 0 [ 1404.459052][T15126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1404.487452][T15126] Node 0 DMA32: 131*4kB (UE) 153*8kB (UE) 700*16kB (UME) 1121*32kB (UME) 563*64kB (UME) 236*128kB (UME) 140*256kB (UME) 50*512kB (UM) 19*1024kB (UM) 15*2048kB (UME) 186*4096kB (UM) = 988532kB [ 1404.539405][T15126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1404.568349][T15126] Node 1 Normal: 189*4kB (UE) 58*8kB (UME) 35*16kB (UME) 105*32kB (UME) 31*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3904596kB [ 1404.599865][ T5885] dvb-usb: error while querying for an remote control event. [ 1404.658140][T15126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1404.670244][T15126] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=3 hugepages_size=2048kB [ 1404.679911][T15126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1404.689530][T15126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1404.698918][T15126] 76431 total pagecache pages [ 1404.703631][T15126] 0 pages in swap cache [ 1404.708391][T15126] Free swap = 124996kB [ 1404.712570][T15126] Total swap = 124996kB [ 1404.717377][T15126] 2097051 pages RAM [ 1404.721212][T15126] 0 pages HighMem/MovableOnly [ 1404.725911][T15126] 424532 pages reserved [ 1404.730721][T15126] 0 pages cma reserved [ 1404.737611][T13943] m920x_read = error: -19 [ 1404.795760][T13943] dvb-usb: error while querying for an remote control event. [ 1405.022169][ T5885] m920x_read = error: -19 [ 1405.040891][ T5885] dvb-usb: error while querying for an remote control event. [ 1406.096269][ T5886] m920x_read = error: -19 [ 1406.101214][ T5886] dvb-usb: error while querying for an remote control event. [ 1406.451276][ T5888] m920x_read = error: -19 [ 1406.514543][ T5888] dvb-usb: error while querying for an remote control event. [ 1406.594694][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2331'. [ 1406.780322][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2331'. [ 1406.802094][ T5885] m920x_read = error: -19 [ 1407.606838][ T5885] dvb-usb: error while querying for an remote control event. [ 1407.832293][T15156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.858074][ T5886] m920x_read = error: -19 [ 1407.901338][ T5886] dvb-usb: error while querying for an remote control event. [ 1408.015486][ T8259] IPVS: starting estimator thread 0... [ 1408.347410][T15157] IPVS: using max 26 ests per chain, 62400 per kthread [ 1408.416366][ T5885] m920x_read = error: -19 [ 1408.420812][ T5885] dvb-usb: error while querying for an remote control event. [ 1408.547823][ T5885] m920x_read = error: -19 [ 1408.573586][ T5885] dvb-usb: error while querying for an remote control event. [ 1408.668498][T15168] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2334'. [ 1408.736013][ T5886] m920x_read = error: -19 [ 1408.766560][ T5886] dvb-usb: error while querying for an remote control event. [ 1408.969324][ T5886] m920x_read = error: -19 [ 1409.005402][ T5886] dvb-usb: error while querying for an remote control event. [ 1409.614752][ T5888] m920x_read = error: -19 [ 1409.631483][ T5888] dvb-usb: error while querying for an remote control event. [ 1409.759637][ T5886] m920x_read = error: -19 [ 1409.821566][ T5886] dvb-usb: error while querying for an remote control event. [ 1410.033698][ T5886] m920x_read = error: -19 [ 1410.041762][ T5886] dvb-usb: error while querying for an remote control event. [ 1410.868569][ T5885] m920x_read = error: -19 [ 1410.872997][ T5885] dvb-usb: error while querying for an remote control event. [ 1411.197687][ T5888] m920x_read = error: -19 [ 1411.202060][ T5888] dvb-usb: error while querying for an remote control event. [ 1411.433858][ T5888] m920x_read = error: -19 [ 1411.457897][ T5888] dvb-usb: error while querying for an remote control event. [ 1411.609178][ T5888] m920x_read = error: -19 [ 1411.691084][ T5888] dvb-usb: error while querying for an remote control event. [ 1412.299338][ T5886] m920x_read = error: -19 [ 1412.342094][ T5886] dvb-usb: error while querying for an remote control event. [ 1413.432683][ T5885] m920x_read = error: -19 [ 1413.441671][ T5885] dvb-usb: error while querying for an remote control event. [ 1414.291637][ T5888] m920x_read = error: -19 [ 1414.296496][ T5888] dvb-usb: error while querying for an remote control event. [ 1414.386202][T15222] netlink: 'syz.8.2352': attribute type 10 has an invalid length. [ 1414.394447][T15222] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2352'. [ 1414.708349][ T5885] m920x_read = error: -19 [ 1414.712838][ T5885] dvb-usb: error while querying for an remote control event. [ 1415.049178][ T5888] m920x_read = error: -19 [ 1415.057326][ T5888] dvb-usb: error while querying for an remote control event. [ 1415.187993][T15237] netlink: 'syz.4.2355': attribute type 11 has an invalid length. [ 1415.853322][T15230] overlayfs: missing 'lowerdir' [ 1415.941805][ T5888] m920x_read = error: -19 [ 1415.946183][ T5888] dvb-usb: error while querying for an remote control event. [ 1416.107431][ T5886] m920x_read = error: -19 [ 1416.112117][ T5886] dvb-usb: error while querying for an remote control event. [ 1416.319873][ T5888] m920x_read = error: -19 [ 1416.339646][ T5888] dvb-usb: error while querying for an remote control event. [ 1416.573557][T15245] overlayfs: failed to clone lowerpath [ 1417.353131][T13943] m920x_read = error: -19 [ 1417.370224][T13943] dvb-usb: error while querying for an remote control event. [ 1417.400809][T15249] overlayfs: failed to clone upperpath [ 1418.028284][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1418.105355][ T7967] m920x_read = error: -19 [ 1418.173742][ T7967] dvb-usb: error while querying for an remote control event. [ 1418.825087][ T5885] m920x_read = error: -19 [ 1418.862215][T15254] delete_channel: no stack [ 1419.404380][ T5885] dvb-usb: error while querying for an remote control event. [ 1419.654177][ T5885] m920x_read = error: -19 [ 1420.070048][T15272] netlink: 'syz.1.2366': attribute type 3 has an invalid length. [ 1420.078548][T15272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2366'. [ 1420.223484][ T5885] dvb-usb: error while querying for an remote control event. [ 1420.473877][T15277] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2365'. [ 1420.916125][T15280] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2368'. [ 1420.929194][T15280] lo speed is unknown, defaulting to 1000 [ 1420.935015][T15280] lo speed is unknown, defaulting to 1000 [ 1420.943661][T15280] lo speed is unknown, defaulting to 1000 [ 1420.962806][T15280] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1421.029455][T15280] lo speed is unknown, defaulting to 1000 [ 1421.036917][T15280] lo speed is unknown, defaulting to 1000 [ 1421.046314][T15280] lo speed is unknown, defaulting to 1000 [ 1421.053959][T15280] lo speed is unknown, defaulting to 1000 [ 1421.061471][T15280] lo speed is unknown, defaulting to 1000 [ 1421.069007][T15280] lo speed is unknown, defaulting to 1000 [ 1421.076379][T15280] lo speed is unknown, defaulting to 1000 [ 1422.104523][ T5888] m920x_read = error: -19 [ 1422.126743][ T5888] dvb-usb: error while querying for an remote control event. [ 1423.359505][ T5888] m920x_read = error: -19 [ 1423.363912][ T5888] dvb-usb: error while querying for an remote control event. [ 1423.508814][ T5888] m920x_read = error: -19 [ 1423.513239][ T5888] dvb-usb: error while querying for an remote control event. [ 1423.554986][T15303] binder: BINDER_SET_CONTEXT_MGR already set [ 1423.561067][T15303] binder: 15302:15303 ioctl 4018620d 200000000040 returned -16 [ 1423.570414][T15303] binder: 15302:15303 ioctl 5601 0 returned -22 [ 1423.662017][ T5886] m920x_read = error: -19 [ 1423.666582][ T5886] dvb-usb: error while querying for an remote control event. [ 1423.715325][T15308] overlayfs: missing 'lowerdir' [ 1424.806323][ T5888] m920x_read = error: -19 [ 1425.164939][ T5888] dvb-usb: error while querying for an remote control event. [ 1425.445299][T15295] Bluetooth: hci6: command 0x0406 tx timeout [ 1426.647820][ T7967] m920x_read = error: -19 [ 1426.652213][ T7967] dvb-usb: error while querying for an remote control event. [ 1427.033895][ T5886] m920x_read = error: -19 [ 1427.038447][ T5886] dvb-usb: error while querying for an remote control event. [ 1427.606421][T15340] overlayfs: failed to clone upperpath [ 1428.033614][ T5886] m920x_read = error: -19 [ 1428.047311][ T5886] dvb-usb: error while querying for an remote control event. [ 1428.437163][T15344] [U] „ [ 1429.046350][ T5886] m920x_read = error: -19 [ 1429.076752][ T5886] dvb-usb: error while querying for an remote control event. [ 1429.485371][T13943] m920x_read = error: -19 [ 1429.491292][T13943] dvb-usb: error while querying for an remote control event. [ 1430.176493][ T7967] m920x_read = error: -19 [ 1430.180944][ T7967] dvb-usb: error while querying for an remote control event. [ 1430.454002][T13943] m920x_read = error: -19 [ 1430.487578][T13943] dvb-usb: error while querying for an remote control event. [ 1431.761120][ T7967] m920x_read = error: -19 [ 1431.765523][ T7967] dvb-usb: error while querying for an remote control event. [ 1432.638534][ T5886] m920x_read = error: -19 [ 1432.642923][ T5886] dvb-usb: error while querying for an remote control event. [ 1433.797957][ T5886] m920x_read = error: -19 [ 1433.802350][ T5886] dvb-usb: error while querying for an remote control event. [ 1434.543885][T15388] dvmrp8: entered allmulticast mode [ 1434.833717][ T5886] m920x_read = error: -19 [ 1434.838327][ T5886] dvb-usb: error while querying for an remote control event. [ 1435.798273][ T5886] m920x_read = error: -19 [ 1435.802674][ T5886] dvb-usb: error while querying for an remote control event. [ 1436.396677][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2399'. [ 1436.408795][T13943] m920x_read = error: -19 [ 1436.413167][T13943] dvb-usb: error while querying for an remote control event. [ 1436.662569][ T5886] m920x_read = error: -19 [ 1437.237473][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 1437.250196][ T5886] dvb-usb: error while querying for an remote control event. [ 1437.392280][ T7967] m920x_read = error: -19 [ 1437.405420][ T7967] dvb-usb: error while querying for an remote control event. [ 1438.618135][ T5886] m920x_read = error: -19 [ 1438.622626][ T5886] dvb-usb: error while querying for an remote control event. [ 1439.199048][T13943] m920x_read = error: -19 [ 1439.232101][T13943] dvb-usb: error while querying for an remote control event. [ 1440.189081][T13943] m920x_read = error: -19 [ 1440.353932][T13943] dvb-usb: error while querying for an remote control event. [ 1440.430262][T15430] netlink: 'syz.1.2407': attribute type 15 has an invalid length. [ 1440.449947][T15430] netlink: 723 bytes leftover after parsing attributes in process `syz.1.2407'. [ 1441.077756][ T31] INFO: task syz.7.2061:14198 blocked for more than 143 seconds. [ 1441.085543][ T31] Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 [ 1441.137352][ T5888] m920x_read = error: -19 [ 1441.142080][ T5888] dvb-usb: error while querying for an remote control event. [ 1441.193709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1441.264891][ T31] task:syz.7.2061 state:D stack:26640 pid:14198 tgid:14190 ppid:9849 task_flags:0x400140 flags:0x00004006 [ 1441.300629][T13943] m920x_read = error: -19 [ 1441.305400][T13943] dvb-usb: error while querying for an remote control event. [ 1441.324699][ T31] Call Trace: [ 1441.334611][ T31] [ 1441.350829][ T31] __schedule+0x16a2/0x4cb0 [ 1441.364883][ T31] ? schedule+0x165/0x360 [ 1441.400074][ T31] ? __pfx___schedule+0x10/0x10 [ 1441.413560][ T31] ? schedule+0x91/0x360 [ 1441.426432][ T31] schedule+0x165/0x360 [ 1441.442414][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 1441.462251][ T31] schedule_preempt_disabled+0x13/0x30 [ 1441.483878][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 1441.501743][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1441.533806][ T31] down_read+0x98/0x2e0 [ 1441.560835][ T31] super_lock+0x2a9/0x3b0 [ 1441.565186][ T5888] m920x_read = error: -19 [ 1441.587464][ T31] ? __pfx_super_lock+0x10/0x10 [ 1441.589035][ T5888] dvb-usb: error while querying for an remote control event. [ 1441.595879][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1441.624402][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1441.639397][ T31] __iterate_supers+0x126/0x250 [ 1441.655743][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 1441.687415][ T31] __se_sys_quotactl+0x353/0x950 [ 1441.699191][ T31] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1441.717689][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1441.738797][ T31] do_syscall_64+0xfa/0x3b0 [ 1441.752872][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.764857][T13943] m920x_read = error: -19 [ 1441.782671][T13943] dvb-usb: error while querying for an remote control event. [ 1441.783944][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1441.824627][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1441.833204][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.857547][ T31] RIP: 0033:0x7f7a1ed8e969 [ 1441.875324][ T31] RSP: 002b:00007f7a1cbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1441.915003][ T31] RAX: ffffffffffffffda RBX: 00007f7a1efb6160 RCX: 00007f7a1ed8e969 [ 1441.949565][ T5888] m920x_read = error: -19 [ 1441.951885][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 1441.980660][ T31] RBP: 00007f7a1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1442.006288][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1442.024542][ T5888] dvb-usb: error while querying for an remote control event. [ 1442.030600][ T31] R13: 0000000000000000 R14: 00007f7a1efb6160 R15: 00007ffcb65e4a68 [ 1442.071996][ T31] [ 1442.077334][ T31] [ 1442.077334][ T31] Showing all locks held in the system: [ 1442.085087][ T31] 1 lock held by khungtaskd/31: [ 1442.132633][ T31] #0: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1442.164509][ T31] 2 locks held by getty/5584: [ 1442.179294][T13943] m920x_read = error: -19 [ 1442.183798][T13943] dvb-usb: error while querying for an remote control event. [ 1442.184800][ T31] #0: ffff88814c81f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1442.212623][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1442.233963][ T31] 6 locks held by kworker/1:5/5886: [ 1442.242713][ T31] 1 lock held by syz-executor/11944: [ 1442.253540][ T31] #0: ffff8880341020e0 (&type->s_umount_key#87){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1442.264703][ T31] 1 lock held by syz.7.2061/14198: [ 1442.274812][ T31] #0: ffff8880341020e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 1442.306776][ T31] 2 locks held by syz.0.2405/15427: [ 1442.321629][ T31] 1 lock held by syz.4.2406/15437: [ 1442.322963][ T5886] m920x_read = error: -19 [ 1442.336699][ T5886] dvb-usb: error while querying for an remote control event. [ 1442.347621][ T31] #0: ffff8880341020e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 1442.417474][ T31] [ 1442.419858][ T31] ============================================= [ 1442.419858][ T31] [ 1442.443654][ T31] NMI backtrace for cpu 0 [ 1442.443674][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1442.443706][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.443719][ T31] Call Trace: [ 1442.443728][ T31] [ 1442.443738][ T31] dump_stack_lvl+0x189/0x250 [ 1442.443773][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1442.443800][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.443832][ T31] ? __pfx__printk+0x10/0x10 [ 1442.443867][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1442.443898][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1442.443922][ T31] ? _printk+0xcf/0x120 [ 1442.443948][ T31] ? __pfx__printk+0x10/0x10 [ 1442.443972][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1442.444003][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1442.444033][ T31] watchdog+0xfee/0x1030 [ 1442.444064][ T31] ? watchdog+0x1de/0x1030 [ 1442.444100][ T31] kthread+0x711/0x8a0 [ 1442.444127][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.444153][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.444178][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.444207][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.444236][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.444259][ T31] ret_from_fork+0x3f9/0x770 [ 1442.444292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.444327][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.444346][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.444366][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.444390][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.444427][ T31] [ 1442.444437][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1442.479663][ T5886] m920x_read = error: -19 [ 1442.482401][ C1] NMI backtrace for cpu 1 [ 1442.482416][ C1] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:5 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1442.482443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.482455][ C1] Workqueue: events legacy_dvb_usb_read_remote_control [ 1442.482490][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1442.482514][ C1] Code: 8b 3d b4 c7 f7 0b 48 89 de 5b e9 f3 8e 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 d0 98 92 65 8b 15 98 83 d8 10 81 e2 00 01 ff 00 [ 1442.482530][ C1] RSP: 0018:ffffc90000a08d38 EFLAGS: 00000002 [ 1442.482545][ C1] RAX: ffffffff81ae5fbd RBX: ffff8880b8727b88 RCX: dffffc0000000000 [ 1442.482561][ C1] RDX: 0000000000010000 RSI: ffff8880b8727b90 RDI: ffffc9000451fd48 [ 1442.482574][ C1] RBP: ffffc90000a08e90 R08: ffffffff8f9fb8f7 R09: 1ffffffff1f3f71e [ 1442.482588][ C1] R10: dffffc0000000000 R11: fffffbfff1f3f71f R12: ffffc9000451fd40 [ 1442.482602][ C1] R13: dffffc0000000000 R14: ffff8880b8727ac0 R15: 0000000000000001 [ 1442.482615][ C1] FS: 0000000000000000(0000) GS:ffff888125d93000(0000) knlGS:0000000000000000 [ 1442.482631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.482643][ C1] CR2: 000000110c368b97 CR3: 0000000061b40000 CR4: 00000000003526f0 [ 1442.482659][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1442.482670][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1442.482682][ C1] Call Trace: [ 1442.482689][ C1] [ 1442.482696][ C1] __hrtimer_run_queues+0x36d/0xc60 [ 1442.482735][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1442.482761][ C1] ? read_tsc+0x9/0x20 [ 1442.482786][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1442.482827][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1442.482858][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1442.482883][ C1] [ 1442.482890][ C1] [ 1442.482897][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1442.482916][ C1] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 1442.482933][ C1] Code: 85 32 01 00 00 e8 d1 5f 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 c0 5f 1f 00 eb 06 e8 b9 5f 1f 00 fb 48 c7 c7 e0 32 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36 [ 1442.482948][ C1] RSP: 0018:ffffc900048bf740 EFLAGS: 00000293 [ 1442.482962][ C1] RAX: ffffffff81a0ecc7 RBX: ffffffff81a0eb84 RCX: ffff888030a93c00 [ 1442.482976][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e1332e0 [ 1442.482988][ C1] RBP: ffffc900048bf850 R08: ffffffff8f9fb8f7 R09: 1ffffffff1f3f71e [ 1442.483002][ C1] R10: dffffc0000000000 R11: fffffbfff1f3f71f R12: dffffc0000000000 [ 1442.483015][ C1] R13: 1ffff92000917eec R14: 0000000000000200 R15: 0000000000000017 [ 1442.483030][ C1] ? vprintk_emit+0x444/0x7a0 [ 1442.483047][ C1] ? vprintk_emit+0x587/0x7a0 [ 1442.483066][ C1] ? vprintk_emit+0x444/0x7a0 [ 1442.483082][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1442.483121][ C1] _printk+0xcf/0x120 [ 1442.483141][ C1] ? __pfx__printk+0x10/0x10 [ 1442.483159][ C1] ? usb_control_msg+0x2bf/0x3e0 [ 1442.483182][ C1] m920x_rc_query+0x2f6/0x830 [ 1442.483211][ C1] legacy_dvb_usb_read_remote_control+0x100/0x470 [ 1442.483241][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1442.483267][ C1] ? __pfx_legacy_dvb_usb_read_remote_control+0x10/0x10 [ 1442.483298][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.483322][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1442.483347][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1442.483373][ C1] process_scheduled_works+0xae1/0x17b0 [ 1442.483414][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1442.483455][ C1] worker_thread+0x8a0/0xda0 [ 1442.483482][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1442.483511][ C1] ? __kthread_parkme+0x7b/0x200 [ 1442.483544][ C1] kthread+0x711/0x8a0 [ 1442.483564][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1442.483590][ C1] ? __pfx_kthread+0x10/0x10 [ 1442.483609][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.483632][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.483656][ C1] ? __pfx_kthread+0x10/0x10 [ 1442.483675][ C1] ret_from_fork+0x3f9/0x770 [ 1442.483701][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.483727][ C1] ? __switch_to_asm+0x39/0x70 [ 1442.483744][ C1] ? __switch_to_asm+0x33/0x70 [ 1442.483760][ C1] ? __pfx_kthread+0x10/0x10 [ 1442.483779][ C1] ret_from_fork_asm+0x1a/0x30 [ 1442.483805][ C1] [ 1442.557404][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1442.557431][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1442.557458][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.557474][ T31] Call Trace: [ 1442.557484][ T31] [ 1442.557496][ T31] dump_stack_lvl+0x99/0x250 [ 1442.557536][ T31] ? __asan_memcpy+0x40/0x70 [ 1442.557562][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.557596][ T31] ? __pfx__printk+0x10/0x10 [ 1442.557634][ T31] panic+0x2db/0x790 [ 1442.557680][ T31] ? __pfx_panic+0x10/0x10 [ 1442.557712][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1442.557752][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1442.557783][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1442.557822][ T31] watchdog+0x102d/0x1030 [ 1442.557854][ T31] ? watchdog+0x1de/0x1030 [ 1442.557891][ T31] kthread+0x711/0x8a0 [ 1442.557921][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.557950][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.557977][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.558008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.558040][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.558066][ T31] ret_from_fork+0x3f9/0x770 [ 1442.558099][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.558133][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.558152][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.558171][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.558194][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.558230][ T31] [ 1442.558557][ T31] Kernel Offset: disabled