last executing test programs: 10m46.114230845s ago: executing program 32 (id=241): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000080)={0xffff, 0x8000}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) close_range(r0, r1, 0x2) 10m34.770332151s ago: executing program 33 (id=221): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x742, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) unshare(0x8000000) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r0, 0x0, 0x80000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ptrace$setopts(0x4200, r1, 0xffffffffffffffff, 0x61) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000009c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x94c, 0xf, &(0x7f0000000240)=0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r4) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000300)=@ethernet={0x306, @random="610c106bcb63"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="a0e8c75236ec9d792db7182eece1eb2830139aecf04972", 0x17}, {&(0x7f0000000380)="56e2ef88903bb866cce89cc99b3519b524f614b821e077bea1610761f30827bcd86c48eae0f05d6db89bdfd8aa82f689e9e10e2281fef9a971dda5c3885a87410addfb01a854b382f8c09e63b914a978e7b8e08cb0e34a988638ca543e4f6fd1d800b59cafe11e42e8ab43f622aececfd249bf50a94d1927d5bdd78a5b2a6ef0bd5ebff625251742e337969fdefeeb6457031ad78f5088d80cfc3894e4ee6929c7c03afd1b86ef06a1caa89b9e66ddf37af30c50f529b5971fe36b4cb792d6d13765ef", 0xc3}, {&(0x7f0000000480)="0a13961d1031f964b8138ac2ee9356988bdb1ab1f3e36545cf6ce6412d714acdffccbe8cc30d60bcf97839bebcf83f73e4c8a778eeb75f6024864451b82507f91cea09021b8d8e8f8a7e6f1acc34b87cb27456c372c51aab68a0296b7a7ceaa039fe0dc692143be6f58ff7bb83c49aaae41222fd5b37c77b4e7c7fb9a20c81acb0", 0x81}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3d8}, 0x4008000) 8m25.06390909s ago: executing program 34 (id=735): syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x213, 0x0) (async) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x213, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x300, 0x70bd25, 0x25dfdbfe, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@broadcast, 0x4e22, 0x0, 0x4e20, 0x5, 0x2, 0x80, 0x20, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xbd79156f3dee0e9e}, @in=@multicast2, {0x8, 0xffff, 0x7, 0x8, 0x3, 0x6, 0xfff, 0x6}, {0x5, 0x8, 0x101, 0x101}, {0x0, 0xb1, 0x2}, 0x70bd29, 0x3500, 0x2, 0x0, 0x1, 0x81}, [@coaddr={0x14, 0xe, @in=@local}, @tfcpad={0x8, 0x16, 0x1}, @etimer_thresh={0x8, 0xc, 0x1}, @replay_thresh={0x8, 0xb, 0xfffffffe}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x88}, 0x14004050) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x300, 0x70bd25, 0x25dfdbfe, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@broadcast, 0x4e22, 0x0, 0x4e20, 0x5, 0x2, 0x80, 0x20, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xbd79156f3dee0e9e}, @in=@multicast2, {0x8, 0xffff, 0x7, 0x8, 0x3, 0x6, 0xfff, 0x6}, {0x5, 0x8, 0x101, 0x101}, {0x0, 0xb1, 0x2}, 0x70bd29, 0x3500, 0x2, 0x0, 0x1, 0x81}, [@coaddr={0x14, 0xe, @in=@local}, @tfcpad={0x8, 0x16, 0x1}, @etimer_thresh={0x8, 0xc, 0x1}, @replay_thresh={0x8, 0xb, 0xfffffffe}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x88}, 0x14004050) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f80)=@bridge_getlink={0x28, 0x12, 0xdba2e9e4846a7f93, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x75800, 0x1}, [@IFLA_CARRIER={0x5, 0x1d, 0x2}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) (async) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a0b"], 0x26}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, 0x0, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7m27.790691667s ago: executing program 7 (id=942): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) 7m27.686850185s ago: executing program 7 (id=944): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 7m27.583752449s ago: executing program 7 (id=946): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x149a82, 0x0) sendfile(r0, r0, 0x0, 0x5) 7m27.416486737s ago: executing program 7 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 7m26.493609104s ago: executing program 7 (id=953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000280)) fanotify_mark(r2, 0x21c, 0x1, r2, &(0x7f0000000000)='./file0\x00') 7m26.078878498s ago: executing program 7 (id=954): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local}}}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40044103, 0xf0ff1f00000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001380)={0x0, 0x10, 0xf109, 0x8, 0x0, 0x4, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x1000a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x98f90d, 0x0, '\x00', @ptr}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0xf5ff, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, 0x0, 0x0, 0x0) 7m15.005354369s ago: executing program 35 (id=902): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local}}}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40044103, 0xf0ff1f00000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001380)={0x0, 0x10, 0xf109, 0x8, 0x0, 0x4, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x1000a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x98f90d, 0x0, '\x00', @ptr}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (fail_nth: 15) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, 0x0, 0x0, 0x0) 7m12.738204553s ago: executing program 36 (id=936): creat(&(0x7f0000000780)='./file0\x00', 0x0) utime(&(0x7f0000000040)='./file0\x00', 0x0) 7m10.64703117s ago: executing program 37 (id=954): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local}}}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40044103, 0xf0ff1f00000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001380)={0x0, 0x10, 0xf109, 0x8, 0x0, 0x4, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x1000a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x98f90d, 0x0, '\x00', @ptr}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0xf5ff, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, 0x0, 0x0, 0x0) 6m55.22729627s ago: executing program 8 (id=981): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x21, @broadcast, 'vlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x7, 0x0, 0x20000000000005e, 0x0, 0x0, 0x8000}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000500), 0x40000000000029a, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES8=r1], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x15, 0x0, 0x0) sched_setaffinity(0x0, 0xffffff54, &(0x7f0000000200)=0xfffffffffffffffa) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4], 0x10}}, 0x21) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x4d) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x9, &(0x7f0000000280)={0x4, 0x2, 0x61c}) 6m51.163042304s ago: executing program 8 (id=1026): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x1f}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 6m50.638265238s ago: executing program 8 (id=1027): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60b819230000000000000000000000000000ffffe0000001fe8000000000000100000000000000aa"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x80040) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40044103, 0xf0ff1f00000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffffd, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001380)={0x0, 0x16, 0xf109, 0x8, 0x0, 0x4, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r2], 0x14}}, 0x4000811) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000011c0)={0xa, 0x5, 0xfd}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x1000a) socket$nl_netfilter(0x10, 0x3, 0xc) 6m35.55153541s ago: executing program 38 (id=1027): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60b819230000000000000000000000000000ffffe0000001fe8000000000000100000000000000aa"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x80040) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40044103, 0xf0ff1f00000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffffd, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001380)={0x0, 0x16, 0xf109, 0x8, 0x0, 0x4, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r2], 0x14}}, 0x4000811) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000011c0)={0xa, 0x5, 0xfd}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x1000a) socket$nl_netfilter(0x10, 0x3, 0xc) 1m40.903332219s ago: executing program 6 (id=1815): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000001200)=0x1, 0x4) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x88d6, 0x40) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) r2 = syz_open_dev$loop(0x0, 0x75f, 0x103382) syz_io_uring_complete(0x0) r3 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x500, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, &(0x7f0000000140)='0000111122223333', 0x0) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x13, 0x20000000}, 0x0) 1m39.005836484s ago: executing program 9 (id=1818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002104d31bc000000ff0f000007000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000488700"], 0x48) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x6, 0x49e, 0x1, 0x1, 0xd19f80, 0x19f3, 0x400, 0x19ef, 0x9b92, 0x3, 0x2800, 0x21d, 0x43e, 0xd1, 0xc, 0x1, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbb, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB="2373797a313a73f9ff0700a89a0000007000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000200)={0x3, 0x7, 0x7, 0x10000}) (async) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000200)={0x3, 0x7, 0x7, 0x10000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m38.273373541s ago: executing program 9 (id=1821): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1m37.536856121s ago: executing program 9 (id=1823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r0 = gettid() (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x401, 0x8}, 0xc) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = io_uring_setup(0x3d07, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1fffff, 0x0, 0x12071, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x1c, &(0x7f00000011c0)=[{0x0}], 0x1) (async, rerun: 64) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async, rerun: 64) r6 = dup(r5) (rerun: 64) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x10, &(0x7f0000000100)=""/16, 0x41100, 0x65, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xe, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r2, r6], &(0x7f0000000340)=[{0x5, 0x4, 0x9, 0x4}, {0x3, 0x4, 0x10, 0xc}], 0x10, 0xfff, @void, @value}, 0x94) (async, rerun: 32) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_gettime(r7, &(0x7f0000000000)) (async, rerun: 32) preadv(r8, &(0x7f0000000240)=[{&(0x7f000000c300)=""/102397, 0x18ffd}], 0x1, 0xfffffffd, 0x0) (rerun: 32) 1m37.492798388s ago: executing program 6 (id=1824): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) sendmmsg$unix(r1, &(0x7f000000f000)=[{{&(0x7f0000005d80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000048}}], 0x1, 0xd049ae514ddd4ba6) 1m37.327671775s ago: executing program 6 (id=1825): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x60a00, 0x100) 1m36.861302186s ago: executing program 6 (id=1826): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x9daa, 0x268603) syz_io_uring_setup(0x3c91, &(0x7f0000000400)={0x0, 0x8be9, 0x4a, 0x1000000, 0xe5}, &(0x7f0000000080), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x2, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x3, 0x2, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000", @ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prlimit64(r0, 0x5, &(0x7f00000001c0)={0x88, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) socket(0x10, 0x3, 0x0) 1m35.548204549s ago: executing program 6 (id=1829): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xfa) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_io_uring_setup(0x194, &(0x7f0000000200)={0x0, 0x0, 0x1000}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=r5], 0x128}, 0x20008800) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x80010, r11, 0x1821f000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x1, 0x2, 0x0}) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m35.346630966s ago: executing program 9 (id=1830): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000002280)='asymmetric\x00', &(0x7f0000002200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r2, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='aid=', @ANYRESHEX=r3, @ANYBLOB=',gid=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x374, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x348, 0x4, 0x0, 0x1, [{0x344, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x334, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x310, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x2fc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "99db3f4e237ebe73f08da1a4780b6909d74f804a7004acb80d73772eb045bb0b5feb3779086f51b8c1db7b88dfbedc1f4d9081427f8bef5fd1afd53d1654f8cd72724176111e95071f56eeb8394ffd921603847395b0bc83981a68eff4dbc1a38d8638988ef0acd284b4263845349f2c66c3329770335b642e44be6c7128fe2e1fcaea0a46d1583491aa5708b0671638c1bede86a249e409da69c2a721c1f75863ddd52ed4"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "baed278c1b3200de8a8a740ad7335365c23e"}, @NFTA_DATA_VALUE={0xcc, 0x1, "dd841e9421b0ed472bb1696825e45c230fc1cd37101bb844864a0cbd076582e418eec20481b2573494f6ff1c882b22d9b45f1cfd26b8b8f3be0a98b67dfb4b4d4d5c6d93b250a6c6bf70cee05aa20339f3cf59b0f650d65d9071b5f994a3df4d46e69aa409d1e63226c3230094af1a93cd62cc3dd280770da8920ceaae5d2c49cca0d6069b8968e9cb130e93e99466d3b89cdd48fd637f80188be98446eca6f2851145ee4c93cfd984da685cb83bcfbbae8f434f0346102e5aadff4efaa10a003767ef76b5be352b"}, @NFTA_DATA_VALUE={0x47, 0x1, "b56752acd7845f25f894517388a86ddcfc733bf4ceb6d0ce8641a626ac46972670b7fd65347626b4a03050d1411f598da442549ca90911f689421dfc8edb1194c21e3b"}]}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x39c}}, 0x0) 1m35.088667692s ago: executing program 9 (id=1832): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x9, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = open(0x0, 0x400141042, 0x0) ftruncate(r2, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6610000090780000"], 0x0) close(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502"], 0x0) 1m34.810958885s ago: executing program 9 (id=1833): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04"], 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='Fp', @ANYRESHEX, @ANYRES16, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3, @ANYRESDEC=r4]) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1m34.599389245s ago: executing program 39 (id=1833): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04"], 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='Fp', @ANYRESHEX, @ANYRES16, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3, @ANYRESDEC=r4]) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1m34.535973297s ago: executing program 6 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket(0x27, 0x3, 0x80001) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x7, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1424]}, 0x608) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) cachestat(r0, 0x0, &(0x7f0000000480), 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x26, 0x74, 0xf9, 0x8, 0x4c8, 0x720, 0x3e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x40, 0x5, 0x20, 0xd, [{{0x9, 0x4, 0x17, 0x3, 0x0, 0xcb, 0xc2, 0xed, 0xd}}, {{0x9, 0x4, 0x53, 0xf4, 0x0, 0xab, 0x93, 0x6, 0x8}}]}}]}}, 0x0) 1m19.457443877s ago: executing program 40 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket(0x27, 0x3, 0x80001) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x7, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1424]}, 0x608) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) cachestat(r0, 0x0, &(0x7f0000000480), 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x26, 0x74, 0xf9, 0x8, 0x4c8, 0x720, 0x3e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x40, 0x5, 0x20, 0xd, [{{0x9, 0x4, 0x17, 0x3, 0x0, 0xcb, 0xc2, 0xed, 0xd}}, {{0x9, 0x4, 0x53, 0xf4, 0x0, 0xab, 0x93, 0x6, 0x8}}]}}]}}, 0x0) 1m7.412624141s ago: executing program 5 (id=1893): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000000)={0x8, 0x1000090}, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000029018ba1e0f171e2894668a2d78dfa00147b0000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="0e00000000000000", @ANYRES32=r8, @ANYBLOB="cc930700000000090010aed9", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5, @void, @value}, 0x11) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @multicast1=0xe0000300}, 0x10) setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0) 1m6.433653828s ago: executing program 5 (id=1895): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) sendmmsg$unix(r1, &(0x7f000000f000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000048}}, {{&(0x7f0000005f00)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0xd049ae514ddd4ba6) 1m6.128092531s ago: executing program 5 (id=1898): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) 1m4.515044271s ago: executing program 5 (id=1900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x94c3ef5bbe1aa9af, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4004080) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m1.360766113s ago: executing program 5 (id=1912): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_io_uring_setup(0x2075, &(0x7f0000000080)={0x0, 0x8449, 0x80, 0x1, 0x1a8}, &(0x7f0000000000), &(0x7f0000000100)) fchown(r1, r3, r4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m1.100184242s ago: executing program 5 (id=1913): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 45.720593356s ago: executing program 41 (id=1913): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 25.701149319s ago: executing program 4 (id=2004): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = io_uring_setup(0x76e0, &(0x7f0000000340)={0x0, 0x4, 0x100, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pause() close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "ba2254c3"}, @main=@item_012={0x2, 0x0, 0x9, "deeb"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) 21.704056556s ago: executing program 4 (id=2013): syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f001600000904000001dbcc7a000905", @ANYRES32], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000001940)}}], 0x1, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) socket$inet(0x2, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002209001e001004000053000000786df504c9beea5e46f205c0d24d28879ac3a4c632266d4252ac39550e5e23616b904935f263c058340d2ba10c8d47fb9e442cd66c8e893f35cf550f7e67e2d245aa1d3f20de00"/97], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) io_uring_setup(0x1de0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 17.913347552s ago: executing program 4 (id=2031): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a800080008000c401f000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000009c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001114010000000000000000000800010000000000080003"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000f00)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vxcan1\x00'}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={0x0, 0x364}, 0x1, 0x0, 0x0, 0x40000}, 0x114) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000003147df8fcfffffffbdbdf250900e67573797a32000000000800410073567700140033006272697764676530000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x2004c8b0}, 0x200040c0) 16.027489059s ago: executing program 4 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48000) ioctl$BLKTRACESETUP(r0, 0xc0401273, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) 15.27249838s ago: executing program 4 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2040875) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000000c0)={0x6, {{0x2, 0x4e21, @local}}, {{0x2, 0x100, @multicast2}}}, 0x108) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x2, {{0x2, 0x6, @multicast1}}, {{0x2, 0x0, @private=0xa010100}}}, 0x108) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semop(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) (async) read$msr(r3, &(0x7f000004b680)=""/102391, 0x18ff7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1}, 0xc) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xa4, @empty, 0x1}, 0x1c) sendmmsg$inet(r5, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80448c0) (async) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r6) 12.698543151s ago: executing program 4 (id=2046): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x1dad, 0x80) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000380)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xe, 0x1, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) syz_open_dev$video4linux(0x0, 0x10000, 0x440) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 12.048742466s ago: executing program 42 (id=2046): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x1dad, 0x80) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000380)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xe, 0x1, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) syz_open_dev$video4linux(0x0, 0x10000, 0x440) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 11.999374574s ago: executing program 2 (id=2049): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x20, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)=@llc, 0x80, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000180)=""/33, 0x21}], 0x2}, 0x28f2609ed101178a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r4, 0x112, 0x13, 0x0, 0x2) r5 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=""/169, &(0x7f0000000040), 0x0, 0x2}, 0x38) syz_io_uring_setup(0x7c04, &(0x7f00000000c0)={0x0, 0x7, 0x800}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) mount$tmpfs(0x0, 0x0, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r6]) 10.952893861s ago: executing program 2 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) close(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000e5f000/0x3000)=nil, 0x3000, 0x1000001) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000080)={0x2, 0xb, 0x3ff, 0x5, 0x3, "65b6705dd4095f42"}) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000a78000/0x1000)=nil) 10.417557547s ago: executing program 2 (id=2053): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r3) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r7, &(0x7f0000000040)={0x18, 0x0, r8, {0x2}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r7, &(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) socket$unix(0x1, 0x2, 0x0) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) 9.27400104s ago: executing program 3 (id=2055): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000440)='\x00\x00\x00\x00\x00', 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-ce\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) (rerun: 64) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1145c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14020000ff94081b656330c62a68a0f861c164157bf89590488c23f4f3408185a054c83b2f9d529d59293f4534352402b785b8122ab243454886e922258ee6965c96ac3448b73fb26d502f4ec904ab5f33f90a78c8b5a0c59e51e47971da3801364b7296e124ccf94634ca9da6607afbe9da4939a1a1103bd1925e905ebe082f053b9b7bb1ed4483bddf45450fe97a0209006924fa131b52bb729bf2e19e7ba47bd401aa61728eba454276ad1725fddd000800"/190, @ANYRES16=r7, @ANYBLOB="0100000000000000000027000000"], 0x14}}, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @private0, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000000080)=ANY=[@ANYRES8=r5]) (async) ioperm(0x400, 0x918, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r8 = accept4(r2, 0x0, 0x0, 0x0) (async) r9 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000000)) (async, rerun: 64) sendto$inet6(r8, &(0x7f0000000300)="34bc07fcec58b8d4799296e07dddf90ad6338031098ce1e9d43c89b52abc3247e477d4064c1357d3aa6fc34a1a592c22c4a437d6a6d46b81ad9631597e484c63930e81a7847ecca7197f3f4e9bab81bf874f389d6491e65b04d84e7ca425f544f023bb683d60cac3030fc4aaca12f7bf3717eff48f648835ea9b99", 0x13, 0x400d0, 0x0, 0x0) (async, rerun: 64) read$alg(r8, &(0x7f0000000480)=""/198, 0xc6) 9.023944382s ago: executing program 2 (id=2056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) getgroups(0xffffff95, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102388, 0x18ff4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xfffffffffffffe6a, 0x0, 0x0, 0x0, 0x1000002, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffe, 0x8}, &(0x7f0000000480), &(0x7f00000004c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x81, 0x8, 0xffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x4000007, 0x7ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x2, 0x9, 0x246c}) syz_open_dev$dri(&(0x7f0000000040), 0x400, 0x20000) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000080)={0x0, 0x401}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) 8.733751705s ago: executing program 3 (id=2058): set_mempolicy(0x3, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) read(r3, &(0x7f0000000000), 0x2000) close(r3) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000300)={0x94d, 0x7fffffff, 0x2, {0xb, @sdr={0x39555659, 0xe237}}, 0x7}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd00, 0x0) close(0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200030e4, 0x0, 0x0, 0x0, 0x0, 0x0) 7.774486337s ago: executing program 3 (id=2059): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x8, 0xfffffffc, 0x72, 0x8000001}, &(0x7f0000000040)=0x9c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r3, @ANYBLOB], 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000000680)=""/161, 0xa1}, {&(0x7f0000000740)=""/188, 0xbc}], 0x6, &(0x7f0000000880)=""/106, 0x6a}, 0x3}, {{&(0x7f0000000900)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000980)=""/182, 0xb6}], 0x2, &(0x7f0000000a80)=""/46, 0x2e}, 0x9}, {{&(0x7f0000000ac0)=@phonet, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b40)=""/82, 0x52}, {&(0x7f0000000bc0)=""/164, 0xa4}, {&(0x7f0000000c80)=""/119, 0x77}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/159, 0x9f}], 0x5, &(0x7f0000000e80)=""/34, 0x22}, 0x1}], 0x3, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x290082) fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000004000000050009000000000008000700e0000002080002000500000008000800ac1e0001"], 0x34}}, 0x0) 6.552676534s ago: executing program 3 (id=2064): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x2000}, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002000000a64b563baebe708b9233a51a122d93f47344824d8e6aa8340d7c9e7ac11c0e232df69968b757e9347fc026e5a125e0eebf9fdb"], 0x0) syz_io_uring_setup(0x2d84, &(0x7f00000003c0)={0x0, 0x0, 0x1420, 0x0, 0xf3, 0x0, r0}, &(0x7f0000000000), &(0x7f00000002c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000b, 0x2010, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setregid(0x0, r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1e, 0x4, @fd_index=0x5, 0xe2e, &(0x7f0000000200)="01d12d3ae62dcd7aaffd06040c62a7fd7099cc5409444caf86d04b3f453b0ec1a4887fe8c0460b77d00a561c4ee80530b39c2321d7456aa0d2db081e5ca1a2887a4653d2e8c44833c2d243c856b2aa899fe4ccf33b062f23cb18661fb5c178ee0d2d4c42ea9d58fbedf254da40c2e8937d8c51d5f1db471634968da2e1315100a8980b463d150e54e35aae4e3d25a501616ce935f9ee24cca67968a7b698c5042e765e1cd3dade4293c5746ce2f414", 0xaf, 0x1e, 0x0, {0x0, r3}}) ioperm(0xa2f1, 0x3ff, 0x8007) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = fcntl$dupfd(r7, 0x0, r11) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 6.258521107s ago: executing program 0 (id=2065): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fsopen(&(0x7f0000000300)='vfat\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) 5.894837336s ago: executing program 0 (id=2066): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@isdn={0x22, 0xfe, 0x8, 0xfc, 0x76}, 0x80, 0x0}, 0x40) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xf) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373650000000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 5.442987908s ago: executing program 0 (id=2067): syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f001600000904000001dbcc7a000905", @ANYRES32], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000001940)}}], 0x1, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) socket$inet(0x2, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002209001e001004000053000000786df504c9beea5e46f205c0d24d28879ac3a4c632266d4252ac39550e5e23616b904935f263c058340d2ba10c8d47fb9e442cd66c8e893f35cf550f7e67e2d245aa1d3f20de00"/97], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) io_uring_setup(0x1de0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 4.510233233s ago: executing program 1 (id=2069): syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x82) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000000)) timerfd_create(0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x2, 0x10, 0x0, 0x40, 0x7}, 0x5e, &(0x7f0000000240)={0x5, 0xf, 0x5e, 0x5, [@generic={0x38, 0x10, 0xa, "258e863291363fa9ace5168ad345defaf742f564de4e53874bb78b5978a38555ddb6645dad9087ecf0a39d0552e5dc00ecf880c75f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "6b9094cee03cee9add19f764deefbb97"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x4, 0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42c}}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x3) 3.490741326s ago: executing program 2 (id=2070): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1e0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f0000000280)={0x0}) r1 = syz_usb_connect$cdc_ecm(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x0, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x9a, 0x3, 0x2, 0x6, 0x0, 0xb3, {{0xa, 0x24, 0x6, 0x0, 0x0, "89d929b83a"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x1}, [@obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0xfffa, 0x3, 0x7, 0x9bb, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x6, 0xd3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xe9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xfe, 0x8}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x80, 0x2, 0x0, 0x8, 0x78}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "74cbeba5c9a7b234f6dffcab3fe0c642"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x20, 0x1, 0x4, {0x4, 0x4, "0e5f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x40, 0x5, 0x34, "ff768bd22825a506e96802c9e3624888330fde9c34ad2b786f7f8d1da3096f86c814fb4a822a059e80f9422de0398a299c40dd4d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000540)={0x0, 0x8, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) bpf$ENABLE_STATS(0x20, &(0x7f0000000640), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000004e80)={{0x12, 0x1, 0x150, 0x3e, 0xc5, 0x1f, 0x8, 0xbda, 0x184, 0x794b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0xd0, 0x6, [{{0x9, 0x4, 0xd, 0x6, 0x0, 0xb5, 0xf6, 0x3d}}]}}]}}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x400000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0x105100, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x41, {0x41, 0x9, "c7f35578e0d6c27d6c7a64c553f4c8aab7f2d7a4e67d850f80139ac0feec6086f53b5085ae3cf27eb1df85ef0c93e3525d520ae0e01a3d91b9bb95857ea5d0"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x8, 0x0, "633c3685", "7e523b81"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x80, 0x6, 0x3, 0xfa, 0x7f, 0x434}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x12}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xe4}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x62}, 0x0, 0x0}) 3.259664616s ago: executing program 1 (id=2071): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000228bd7000fc030000002200020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) fstat(r2, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0xc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x6, 0x10000, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x40, 0xfe, 0x800}}]}]}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0xc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x6, 0x10000, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x40, 0xfe, 0x800}}]}]}}}]}, 0x78}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') 2.478657084s ago: executing program 3 (id=2072): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='Fp', @ANYRESHEX, @ANYRES16, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3]) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.466743148s ago: executing program 0 (id=2073): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008c00}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x50}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)='\xf3u\t\x9f\x918\xc0ud\xb0l \xfd\xd7\x03\x00\x898\xf8\xb5\x90Xp\xe3$\x1c\x9b\a\x92H\x00\x00\x00\x00\x81\f\x1et\x10\x0e\xcfV9\xbe*\xd2d\xc8}\xd6\xdb\x88\xfb\xc7B\x8c\xa8\xb3~\x14\x11\xe3', 0x0) pwrite64(r2, &(0x7f0000000840)="2fff98cb26", 0x5, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000440)={'binder1\x00'}) socket$inet6(0xa, 0x1, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYRESDEC=0x0], 0x6c}}, 0x840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="f1a49ff1e7e426be37cb1e523cc6018bec68ac6cf3285f156e6d144e9f37bd8906db48aed5c17a00092df5c23ed204285e1a22f71c7c747eaa1c0185b1", @ANYRES16=0x0, @ANYBLOB="000000000000020000000b000000"], 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000080900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a010400000000000000000100fffd140000001100010000000000000000000000000a"], 0x88}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "37d8"}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xf, 0x8, 0xd525, 'pptp\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 2.444021484s ago: executing program 1 (id=2074): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) io_uring_setup(0x2f8f, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) (async) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = socket(0x2a, 0x1, 0x7f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0xd0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xa4, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}, @TCA_U32_HASH={0x8, 0x2, 0x3e64}, @TCA_U32_POLICE={0x80, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x8, 0xffffffff, 0x7, {0x0, 0x1, 0x6, 0x40, 0x6, 0x5}, {0x2, 0x0, 0x7, 0xb4b0, 0x6, 0x6}, 0x6, 0x6, 0x5}}]}]}}]}, 0xd0}}, 0x44800) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 1.418775124s ago: executing program 3 (id=2075): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x10) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xfaf, 0xffff0001, 0x40, 0x7fffffff, 0x14, "ee13297b55395940e88ef7164aa3422f7f3236"}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004780)={&(0x7f0000004540)=@polexpire={0xcc, 0x1b, 0x800, 0x70bd2b, 0x25dfdbfb, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e24, 0x0, 0x0, 0x10, 0x20}, {0xfffffffffffffffa, 0x0, 0x5, 0x1, 0x2000000, 0x846, 0x4c, 0x6}, {0x4, 0x5, 0x8, 0xfffffffffffffffe}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1, 0x1}, 0xf}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40841) 1.249813916s ago: executing program 1 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xb0}}, 0x20050800) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) socketpair(0x3, 0x0, 0x28, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x6, 0x0, 0x1ff}, 0x10) 882.269261ms ago: executing program 1 (id=2077): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @mcast1, 0x6}, 0x1c) getpeername$inet6(r1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200"/79], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000c000000010000008000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000001"], 0x48) socket(0x2, 0x3, 0x0) 460.487682ms ago: executing program 0 (id=2078): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0xfffffffd}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x40, 0xfffffff9, 0xd4}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x17, 0x20000038, r2) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) prctl$PR_SET_SECUREBITS(0x1c, 0x35) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, r3) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x28000, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 158.530796ms ago: executing program 2 (id=2079): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000000)={0x2, {0x7, 0x800006, 0x9, 0xf85}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioperm(0x0, 0x7ff, 0x101) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='./cgroup\x00', 0x80400, 0xc) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, &(0x7f0000000d00)=ANY=[], 0x218}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x2, 0x4, @loopback}, 0x80, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) close(r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x130, 0x4c, 0x1a, 0x0, 0x73, 0x260, 0x258, 0x258, 0x260, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) socket$nl_generic(0x10, 0x3, 0x10) 103.185365ms ago: executing program 1 (id=2080): syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000000)) timerfd_create(0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x2, 0x10, 0x0, 0x40, 0x7}, 0x5e, &(0x7f0000000240)={0x5, 0xf, 0x5e, 0x5, [@generic={0x38, 0x10, 0xa, "258e863291363fa9ace5168ad345defaf742f564de4e53874bb78b5978a38555ddb6645dad9087ecf0a39d0552e5dc00ecf880c75f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "6b9094cee03cee9add19f764deefbb97"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x4, 0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42c}}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x3) 0s ago: executing program 0 (id=2081): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000955000000850000006d00e3f0e656969c491c1191ff94c5e1528b71364325a37dcfd486c275e0986dfeedbb357df75705b2e139e98777f86c741ec500d9a3"], 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000727000/0x1000)=nil, 0x1000, 0xc002, 0x0, 0xffffffffffffffbf, 0x7) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x19) ioctl$KDGKBENT(r9, 0x4b46, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYRES8, @ANYRES32=r8, @ANYBLOB="ba039a259eb4eb9752259495e5de0604000000000000e0042f1a8e931be2f4757f884b000c362a7266d46a01d2510cb45d5ddd13b3406ab8"], 0x44}}, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0) kernel console output (not intermixed with test programs): vb-usb: error while querying for an remote control event. [ 706.697605][ T29] audit: type=1400 audit(1732532684.535:8021): avc: denied { prog_load } for pid=15556 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 706.718550][ T29] audit: type=1400 audit(1732532684.535:8022): avc: denied { bpf } for pid=15556 comm="syz.4.1884" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 706.740271][ T29] audit: type=1400 audit(1732532684.535:8023): avc: denied { perfmon } for pid=15556 comm="syz.4.1884" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 706.790576][ T29] audit: type=1400 audit(1732532684.535:8024): avc: denied { prog_run } for pid=15556 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 706.820554][ T5886] m920x_read = error: -19 [ 706.828407][ T5886] dvb-usb: error while querying for an remote control event. [ 706.843702][ T29] audit: type=1400 audit(1732532684.605:8025): avc: denied { read write } for pid=10270 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 706.869297][ T29] audit: type=1400 audit(1732532684.635:8026): avc: denied { search } for pid=15560 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.908427][ T29] audit: type=1400 audit(1732532684.635:8027): avc: denied { search } for pid=15561 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.931186][ T3420] Bluetooth: Error in BCSP hdr checksum [ 706.937313][T15470] team0: Port device team_slave_0 added [ 706.948684][T15470] team0: Port device team_slave_1 added [ 706.970586][ T5886] m920x_read = error: -19 [ 706.975063][ T5886] dvb-usb: error while querying for an remote control event. [ 707.078507][T15470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.090606][ T5886] m920x_read = error: -19 [ 707.095029][ T5886] dvb-usb: error while querying for an remote control event. [ 707.098819][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.266460][T14231] Bluetooth: Error in BCSP hdr checksum [ 707.280455][ T5886] m920x_read = error: -19 [ 707.284807][ T5886] dvb-usb: error while querying for an remote control event. [ 707.313675][T15470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.401019][ T5886] m920x_read = error: -19 [ 707.405376][ T5886] dvb-usb: error while querying for an remote control event. [ 707.447526][T15470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.450690][ T3420] Bluetooth: Error in BCSP hdr checksum [ 707.508378][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.535379][T12680] Bluetooth: hci1: command 0x041b tx timeout [ 707.560539][ T5886] m920x_read = error: -19 [ 707.570113][ T5886] dvb-usb: error while querying for an remote control event. [ 707.585634][T15470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.630669][T15580] IPv6: Can't replace route, no match found [ 707.642545][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.695645][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.712147][ T5886] m920x_read = error: -19 [ 707.724809][ T5886] dvb-usb: error while querying for an remote control event. [ 707.738519][ T3420] Bluetooth: Error in BCSP hdr checksum [ 707.840669][ T5886] m920x_read = error: -19 [ 707.846397][ T5886] dvb-usb: error while querying for an remote control event. [ 707.914462][T15470] hsr_slave_0: entered promiscuous mode [ 707.935238][T15470] hsr_slave_1: entered promiscuous mode [ 707.978898][T15470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.980931][ T5886] m920x_read = error: -19 [ 708.007788][ T5886] dvb-usb: error while querying for an remote control event. [ 708.010414][T15470] Cannot create hsr debugfs directory [ 708.022865][ T3420] Bluetooth: Error in BCSP hdr checksum [ 708.131163][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.138963][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.146362][ T5886] m920x_read = error: -19 [ 708.166947][ T5886] dvb-usb: error while querying for an remote control event. [ 708.272142][T14231] Bluetooth: Error in BCSP hdr checksum [ 708.301386][ T5886] m920x_read = error: -19 [ 708.305719][ T5886] dvb-usb: error while querying for an remote control event. [ 708.420671][ T5886] m920x_read = error: -19 [ 708.425195][ T5886] dvb-usb: error while querying for an remote control event. [ 708.531152][ T61] Bluetooth: Error in BCSP hdr checksum [ 708.540501][ T5886] m920x_read = error: -19 [ 708.544861][ T5886] dvb-usb: error while querying for an remote control event. [ 708.672049][ T5886] usb 6-1: USB disconnect, device number 65 [ 708.682282][ T5885] m920x_read = error: -19 [ 708.686999][ T5885] dvb-usb: error while querying for an remote control event. [ 708.883009][ T3481] Bluetooth: Error in BCSP hdr checksum [ 709.484756][ T5885] m920x_read = error: -19 [ 709.491198][ T5885] dvb-usb: error while querying for an remote control event. [ 709.500366][ T3481] Bluetooth: Error in BCSP hdr checksum [ 709.590417][T12680] Bluetooth: hci1: command 0x041b tx timeout [ 709.619944][ T5885] m920x_read = error: -19 [ 709.645374][ T5885] dvb-usb: error while querying for an remote control event. [ 709.769462][ T2946] Bluetooth: Error in BCSP hdr checksum [ 709.782402][ T5885] m920x_read = error: -19 [ 709.786756][ T5885] dvb-usb: error while querying for an remote control event. [ 709.798125][T15470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.851242][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1888'. [ 709.881163][T15607] netlink: 'syz.5.1888': attribute type 25 has an invalid length. [ 709.940624][ T5885] m920x_read = error: -19 [ 709.944988][ T5885] dvb-usb: error while querying for an remote control event. [ 709.977815][T15470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.025653][ T35] Bluetooth: Error in BCSP hdr checksum [ 710.042082][T15607] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.051429][T15607] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.060142][T15607] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.069068][T15607] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.080579][ T5885] m920x_read = error: -19 [ 710.090484][ T5885] dvb-usb: error while querying for an remote control event. [ 710.241285][ T5885] m920x_read = error: -19 [ 710.245737][ T5885] dvb-usb: error while querying for an remote control event. [ 710.344316][ T11] Bluetooth: Error in BCSP hdr checksum [ 710.369782][T15470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.440497][ T5885] m920x_read = error: -19 [ 710.444919][ T5885] dvb-usb: error while querying for an remote control event. [ 710.511575][T15616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.562098][T15470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.590805][ T5885] m920x_read = error: -19 [ 710.595165][ T5885] dvb-usb: error while querying for an remote control event. [ 710.603209][ T3420] Bluetooth: Error in BCSP hdr checksum [ 710.747769][ T5885] m920x_read = error: -19 [ 710.767913][ T5885] dvb-usb: error while querying for an remote control event. [ 710.895209][T15629] dvmrp8: entered allmulticast mode [ 710.909556][T15627] dvmrp8: left allmulticast mode [ 711.355823][ T11] Bluetooth: Error in BCSP hdr checksum [ 711.460737][ T5885] m920x_read = error: -19 [ 711.465251][ T5885] dvb-usb: error while querying for an remote control event. [ 711.476902][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 711.476915][ T29] audit: type=1400 audit(1732532689.485:8320): avc: denied { read write } for pid=6887 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 711.555356][ T29] audit: type=1400 audit(1732532689.515:8321): avc: denied { search } for pid=5503 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.613275][ T3420] Bluetooth: Error in BCSP hdr checksum [ 711.650529][ T970] m920x_read = error: -19 [ 711.655153][ T970] dvb-usb: error while querying for an remote control event. [ 711.663582][ T29] audit: type=1400 audit(1732532689.515:8322): avc: denied { search } for pid=5503 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.726020][T15470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 711.740580][ T29] audit: type=1400 audit(1732532689.515:8323): avc: denied { read } for pid=5503 comm="dhcpcd" name="n190" dev="tmpfs" ino=7528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 711.803677][T15470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 711.820500][ T5885] m920x_read = error: -19 [ 711.824863][ T5885] dvb-usb: error while querying for an remote control event. [ 711.850410][ T29] audit: type=1400 audit(1732532689.515:8324): avc: denied { open } for pid=5503 comm="dhcpcd" path="/run/udev/data/n190" dev="tmpfs" ino=7528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 711.874573][T14235] Bluetooth: Error in BCSP hdr checksum [ 711.903238][T15470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 711.918526][ T29] audit: type=1400 audit(1732532689.515:8325): avc: denied { getattr } for pid=5503 comm="dhcpcd" path="/run/udev/data/n190" dev="tmpfs" ino=7528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 712.567037][ T970] m920x_read = error: -19 [ 712.571671][ T970] dvb-usb: error while querying for an remote control event. [ 712.684076][ T970] m920x_read = error: -19 [ 712.688628][ T970] dvb-usb: error while querying for an remote control event. [ 712.863562][T15470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 713.048596][ T29] audit: type=1400 audit(1732532689.515:8326): avc: denied { read write open } for pid=15295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.048748][ T970] m920x_read = error: -19 [ 713.081240][ T970] dvb-usb: error while querying for an remote control event. [ 713.393032][T14231] Bluetooth: Error in BCSP hdr checksum [ 713.432528][ T970] m920x_read = error: -19 [ 713.436896][ T970] dvb-usb: error while querying for an remote control event. [ 713.440531][ T35] Bluetooth: Error in BCSP hdr checksum [ 713.463807][T15295] audit: audit_backlog=65 > audit_backlog_limit=64 [ 713.471900][T15660] audit: audit_backlog=65 > audit_backlog_limit=64 [ 713.486640][T15295] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 713.550457][ T5885] m920x_read = error: -19 [ 713.554834][ T5885] dvb-usb: error while querying for an remote control event. [ 713.672518][ T5885] m920x_read = error: -19 [ 713.697215][ T5885] dvb-usb: error while querying for an remote control event. [ 713.705224][ T11] Bluetooth: Error in BCSP hdr checksum [ 713.796977][T15470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.860422][ T5885] m920x_read = error: -19 [ 713.864957][ T5885] dvb-usb: error while querying for an remote control event. [ 713.905444][T15470] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.939104][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.946262][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.971474][ T61] Bluetooth: Error in BCSP hdr checksum [ 714.001596][ T5886] m920x_read = error: -19 [ 714.006215][ T5886] dvb-usb: error while querying for an remote control event. [ 714.028655][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.035761][T14235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.161589][ T5885] m920x_read = error: -19 [ 714.165952][ T5885] dvb-usb: error while querying for an remote control event. [ 714.211782][T15684] xt_CT: No such helper "snmp" [ 714.224622][ T3420] Bluetooth: Error in BCSP hdr checksum [ 714.300420][ T5885] m920x_read = error: -19 [ 714.304889][ T5885] dvb-usb: error while querying for an remote control event. [ 714.431077][ T5885] m920x_read = error: -19 [ 714.435449][ T5885] dvb-usb: error while querying for an remote control event. [ 714.480659][ T35] Bluetooth: Error in BCSP hdr checksum [ 714.581620][ T5885] m920x_read = error: -19 [ 714.585996][ T5885] dvb-usb: error while querying for an remote control event. [ 714.759337][T15470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.823773][ T5885] m920x_read = error: -19 [ 714.825317][ T3420] Bluetooth: Error in BCSP hdr checksum [ 714.828116][ T5885] dvb-usb: error while querying for an remote control event. [ 715.010947][ T5921] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 715.043842][ T5885] m920x_read = error: -19 [ 715.048217][ T5885] dvb-usb: error while querying for an remote control event. [ 715.089017][ T35] Bluetooth: Error in BCSP hdr checksum [ 715.147248][T15470] veth0_vlan: entered promiscuous mode [ 715.160940][ T5885] m920x_read = error: -19 [ 715.165392][ T5885] dvb-usb: error while querying for an remote control event. [ 715.180273][T15470] veth1_vlan: entered promiscuous mode [ 715.218105][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.254975][ T5921] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 715.279852][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 715.280233][T15470] veth0_macvtap: entered promiscuous mode [ 715.295363][ T5886] m920x_read = error: -19 [ 715.298013][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1900'. [ 715.299731][ T5886] dvb-usb: error while querying for an remote control event. [ 715.312209][ T5921] usb 5-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 715.343583][ T2946] Bluetooth: Error in BCSP hdr checksum [ 715.345349][ T5921] usb 5-1: Manufacturer: syz [ 715.488562][ T5921] usb 5-1: config 0 descriptor?? [ 715.555647][ T5886] m920x_read = error: -19 [ 715.560062][ T5886] dvb-usb: error while querying for an remote control event. [ 715.613084][ T3420] Bluetooth: Error in BCSP hdr checksum [ 715.670950][ T5886] m920x_read = error: -19 [ 715.675574][ T5886] dvb-usb: error while querying for an remote control event. [ 715.782248][T15470] veth1_macvtap: entered promiscuous mode [ 715.840475][ T5886] m920x_read = error: -19 [ 715.857425][ T5886] dvb-usb: error while querying for an remote control event. [ 715.865811][ T61] Bluetooth: Error in BCSP hdr checksum [ 715.935988][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.013681][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.023835][ T5886] m920x_read = error: -19 [ 716.028183][ T5886] dvb-usb: error while querying for an remote control event. [ 716.084242][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.121421][ T3420] Bluetooth: Error in BCSP hdr checksum [ 716.153668][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.170490][ T5886] m920x_read = error: -19 [ 716.190548][ T5886] dvb-usb: error while querying for an remote control event. [ 716.228666][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.284458][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.340453][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.351499][ T5886] m920x_read = error: -19 [ 716.355846][ T5886] dvb-usb: error while querying for an remote control event. [ 716.383844][ T3420] Bluetooth: Error in BCSP hdr checksum [ 716.444225][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.493254][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 716.493269][ T29] audit: type=1400 audit(1732532694.495:8692): avc: denied { read write } for pid=6887 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.530469][ T5885] m920x_read = error: -19 [ 716.560609][ T5885] dvb-usb: error while querying for an remote control event. [ 716.568270][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.640742][T14235] Bluetooth: Error in BCSP hdr checksum [ 716.666059][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.697766][ T29] audit: type=1400 audit(1732532694.545:8693): avc: denied { read write open } for pid=6887 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.727715][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.738872][ T5885] m920x_read = error: -19 [ 716.752754][ T5885] dvb-usb: error while querying for an remote control event. [ 716.769411][ T29] audit: type=1400 audit(1732532694.545:8694): avc: denied { ioctl } for pid=6887 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.820382][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.851788][T15470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.860432][ T29] audit: type=1400 audit(1732532694.555:8695): avc: denied { search } for pid=15735 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.882583][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.905436][ T35] Bluetooth: Error in BCSP hdr checksum [ 716.911157][ T970] m920x_read = error: -19 [ 716.920528][ T970] dvb-usb: error while querying for an remote control event. [ 716.927396][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.968567][ T29] audit: type=1400 audit(1732532694.635:8696): avc: denied { search } for pid=15736 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.970350][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.050510][ T5886] m920x_read = error: -19 [ 717.055001][ T5886] dvb-usb: error while querying for an remote control event. [ 717.064438][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.075990][ T29] audit: type=1400 audit(1732532694.635:8697): avc: denied { read } for pid=15736 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.093317][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.147271][ T29] audit: type=1400 audit(1732532694.645:8698): avc: denied { open } for pid=15736 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.170674][T14235] Bluetooth: Error in BCSP hdr checksum [ 717.172284][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.185307][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.195832][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.220432][ T5886] m920x_read = error: -19 [ 717.224837][ T5886] dvb-usb: error while querying for an remote control event. [ 717.226459][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.280816][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.300879][ T29] audit: type=1400 audit(1732532694.645:8699): avc: denied { getattr } for pid=15736 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.341264][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.361088][ T5885] m920x_read = error: -19 [ 717.365439][ T5885] dvb-usb: error while querying for an remote control event. [ 717.375553][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.389323][ T29] audit: type=1400 audit(1732532694.685:8700): avc: denied { create } for pid=15737 comm="syz.5.1912" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 717.414519][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.427955][ T2946] Bluetooth: Error in BCSP hdr checksum [ 717.437039][ T29] audit: type=1400 audit(1732532694.685:8701): avc: denied { map } for pid=15737 comm="syz.5.1912" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 717.451528][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.480508][ T5885] m920x_read = error: -19 [ 717.485088][ T5885] dvb-usb: error while querying for an remote control event. [ 717.525207][ T8] usb 5-1: USB disconnect, device number 48 [ 717.557729][T15470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.569397][T15470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.578327][T15470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.587632][T15470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.597796][T15470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.600542][ T970] m920x_read = error: -19 [ 717.621326][ T5886] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 717.644568][ T970] dvb-usb: error while querying for an remote control event. [ 717.687735][ T61] Bluetooth: Error in BCSP hdr checksum [ 717.771218][ T5885] m920x_read = error: -19 [ 717.775586][ T5885] dvb-usb: error while querying for an remote control event. [ 717.790407][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 717.826086][ T5886] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 717.850554][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.872074][ T5886] usb 1-1: Product: syz [ 717.889154][ T5886] usb 1-1: Manufacturer: syz [ 717.900995][ T5886] usb 1-1: SerialNumber: syz [ 717.919745][ T5886] usb 1-1: config 0 descriptor?? [ 717.940519][ T5885] m920x_read = error: -19 [ 717.944878][ T5885] dvb-usb: error while querying for an remote control event. [ 717.954548][ T35] Bluetooth: Error in BCSP hdr checksum [ 717.976117][ T5886] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 718.008595][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.018659][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.130483][ T970] m920x_read = error: -19 [ 718.134930][ T970] dvb-usb: error while querying for an remote control event. [ 718.181920][T14231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.228660][ T11] Bluetooth: Error in BCSP hdr checksum [ 718.256333][T14231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.281427][ T970] m920x_read = error: -19 [ 718.301349][ T970] dvb-usb: error while querying for an remote control event. [ 718.450935][ T970] m920x_read = error: -19 [ 718.461976][ T970] dvb-usb: error while querying for an remote control event. [ 718.480401][ T8] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 718.492582][ T11] Bluetooth: Error in BCSP hdr checksum [ 718.610893][ T8] usb 5-1: device descriptor read/64, error -71 [ 718.631904][ T970] m920x_read = error: -19 [ 718.636346][ T970] dvb-usb: error while querying for an remote control event. [ 718.750756][ T970] m920x_read = error: -19 [ 718.755274][ T970] dvb-usb: error while querying for an remote control event. [ 718.880172][T14231] Bluetooth: Error in BCSP hdr checksum [ 718.912594][ T8] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 718.988666][ T970] m920x_read = error: -19 [ 719.010732][ T970] dvb-usb: error while querying for an remote control event. [ 719.120839][ T5949] m920x_read = error: -19 [ 719.125403][ T5949] dvb-usb: error while querying for an remote control event. [ 719.145254][ T61] Bluetooth: Error in BCSP hdr checksum [ 719.181357][ T8] usb 5-1: device descriptor read/64, error -71 [ 719.241188][ T5949] m920x_read = error: -19 [ 719.249401][ T5949] dvb-usb: error while querying for an remote control event. [ 719.321834][ T8] usb usb5-port1: attempt power cycle [ 719.381379][ T970] m920x_read = error: -19 [ 719.385946][ T970] dvb-usb: error while querying for an remote control event. [ 719.394382][ T5886] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 719.404188][ T35] Bluetooth: Error in BCSP hdr checksum [ 719.540850][ T5949] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 719.548555][ T970] m920x_read = error: -19 [ 719.560397][ T970] dvb-usb: error while querying for an remote control event. [ 719.659846][ T61] Bluetooth: Error in BCSP hdr checksum [ 719.690639][ T5886] m920x_read = error: -19 [ 719.695179][ T5886] dvb-usb: error while querying for an remote control event. [ 719.732357][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 719.757127][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.810601][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 719.839058][ T8] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 719.894613][ T8] usb 5-1: device descriptor read/8, error -71 [ 720.083037][ T970] m920x_read = error: -19 [ 720.087407][ T970] dvb-usb: error while querying for an remote control event. [ 720.095590][T14231] Bluetooth: Error in BCSP hdr checksum [ 720.095790][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 720.112378][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 720.123594][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 720.134473][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.160416][ T8] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 720.162971][ T5949] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 720.183650][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.183797][ T8] usb 5-1: device descriptor read/8, error -71 [ 720.200730][ T970] m920x_read = error: -19 [ 720.205079][ T970] dvb-usb: error while querying for an remote control event. [ 720.220510][ T5949] usb 4-1: Product: syz [ 720.224692][ T5949] usb 4-1: Manufacturer: syz [ 720.229302][ T5949] usb 4-1: SerialNumber: syz [ 720.277900][ T5949] usb 4-1: config 0 descriptor?? [ 720.302163][T15760] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 720.350575][ T970] m920x_read = error: -19 [ 720.354962][ T970] dvb-usb: error while querying for an remote control event. [ 720.367422][ T2946] Bluetooth: Error in BCSP hdr checksum [ 720.403119][ T8] usb usb5-port1: unable to enumerate USB device [ 720.500758][ T970] m920x_read = error: -19 [ 720.508853][ T970] dvb-usb: error while querying for an remote control event. [ 720.725997][ T2946] Bluetooth: Error in BCSP hdr checksum [ 720.768389][ T970] usb 1-1: USB disconnect, device number 48 [ 721.123795][ T5885] m920x_read = error: -19 [ 721.128208][ T5885] dvb-usb: error while querying for an remote control event. [ 721.138363][T14231] Bluetooth: Error in BCSP hdr checksum [ 721.362482][ T970] m920x_read = error: -19 [ 721.373670][ T970] dvb-usb: error while querying for an remote control event. [ 721.476677][T14231] Bluetooth: Error in BCSP hdr checksum [ 722.282940][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 722.282957][ T29] audit: type=1400 audit(1732532700.285:9029): avc: denied { create } for pid=15791 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 722.309148][ T29] audit: type=1400 audit(1732532700.285:9030): avc: denied { read write } for pid=10823 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.309748][T14231] Bluetooth: Error in BCSP hdr checksum [ 722.333968][ T29] audit: type=1400 audit(1732532700.285:9031): avc: denied { open } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.363479][ T5885] m920x_read = error: -19 [ 722.390504][ T29] audit: type=1400 audit(1732532700.285:9032): avc: denied { ioctl } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.404661][ T5885] dvb-usb: error while querying for an remote control event. [ 722.479322][ T29] audit: type=1400 audit(1732532700.375:9033): avc: denied { create } for pid=15791 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 722.501751][T14231] Bluetooth: Error in BCSP hdr checksum [ 722.516286][ T29] audit: type=1400 audit(1732532700.375:9034): avc: denied { read } for pid=5191 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 722.597009][ T29] audit: type=1400 audit(1732532700.375:9035): avc: denied { search } for pid=5191 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.650801][ T5885] m920x_read = error: -19 [ 722.656305][ T5885] dvb-usb: error while querying for an remote control event. [ 722.664020][ T5949] rc_core: IR keymap rc-snapstream-firefly not found [ 722.672148][ T29] audit: type=1400 audit(1732532700.375:9036): avc: denied { append } for pid=5191 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.695172][ T5949] Registered IR keymap rc-empty [ 722.695779][ T5949] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 723.167480][ T29] audit: type=1400 audit(1732532700.375:9037): avc: denied { open } for pid=5191 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 723.320758][ T5949] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 723.344381][ T5949] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input46 [ 723.353373][T14231] Bluetooth: Error in BCSP hdr checksum [ 723.427294][ T5886] m920x_read = error: -19 [ 723.433359][ T5886] dvb-usb: error while querying for an remote control event. [ 723.452548][ T29] audit: type=1400 audit(1732532700.375:9038): avc: denied { getattr } for pid=5191 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 723.511954][ T5949] usb 4-1: USB disconnect, device number 25 [ 723.517895][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 723.533429][T15805] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 723.561557][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 723.575446][ T61] Bluetooth: Error in BCSP hdr checksum [ 723.580537][ T5885] m920x_read = error: -19 [ 723.585335][ T5885] dvb-usb: error while querying for an remote control event. [ 723.750763][ T5885] m920x_read = error: -19 [ 723.755132][ T5885] dvb-usb: error while querying for an remote control event. [ 723.837898][ T2946] Bluetooth: Error in BCSP hdr checksum [ 723.931113][ T5885] m920x_read = error: -19 [ 723.946587][ T5885] dvb-usb: error while querying for an remote control event. [ 724.090507][ T5949] m920x_read = error: -19 [ 724.108258][ T5949] dvb-usb: error while querying for an remote control event. [ 724.139498][ T11] Bluetooth: Error in BCSP hdr checksum [ 724.270538][ T5949] m920x_read = error: -19 [ 724.294913][ T5949] dvb-usb: error while querying for an remote control event. [ 724.381283][ T61] Bluetooth: Error in BCSP hdr checksum [ 724.450655][ T5885] m920x_read = error: -19 [ 724.472462][ T5885] dvb-usb: error while querying for an remote control event. [ 724.621060][ T5949] m920x_read = error: -19 [ 724.640090][ T5949] dvb-usb: error while querying for an remote control event. [ 724.660745][ T35] Bluetooth: Error in BCSP hdr checksum [ 724.791005][ T5949] m920x_read = error: -19 [ 724.964835][ T5949] dvb-usb: error while querying for an remote control event. [ 725.002828][ T61] Bluetooth: Error in BCSP hdr checksum [ 725.121235][ T5949] m920x_read = error: -19 [ 725.175231][ T5949] dvb-usb: error while querying for an remote control event. [ 725.271370][T14231] Bluetooth: Error in BCSP hdr checksum [ 725.310514][ T5949] m920x_read = error: -19 [ 725.345890][ T5949] dvb-usb: error while querying for an remote control event. [ 725.480444][ T5949] m920x_read = error: -19 [ 725.484870][ T5949] dvb-usb: error while querying for an remote control event. [ 725.540706][ T61] Bluetooth: Error in BCSP hdr checksum [ 725.640791][ T5885] m920x_read = error: -19 [ 725.650416][ T5885] dvb-usb: error while querying for an remote control event. [ 725.882352][ T5885] m920x_read = error: -19 [ 725.901743][ T5885] dvb-usb: error while querying for an remote control event. [ 725.904690][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1929'. [ 725.909303][ T2946] Bluetooth: Error in BCSP hdr checksum [ 726.042851][ T5949] m920x_read = error: -19 [ 726.047278][ T5949] dvb-usb: error while querying for an remote control event. [ 726.190852][ T5949] m920x_read = error: -19 [ 726.195274][ T5949] dvb-usb: error while querying for an remote control event. [ 726.504213][T14235] Bluetooth: Error in BCSP hdr checksum [ 726.529535][T15858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 726.590432][ T2946] Bluetooth: Error in BCSP hdr checksum [ 726.671312][ T5949] m920x_read = error: -19 [ 726.675684][ T5949] dvb-usb: error while querying for an remote control event. [ 726.823783][ T3420] Bluetooth: Error in BCSP hdr checksum [ 726.910676][ T5949] m920x_read = error: -19 [ 726.915742][ T5949] dvb-usb: error while querying for an remote control event. [ 727.071068][ T5949] m920x_read = error: -19 [ 727.082275][ T5949] dvb-usb: error while querying for an remote control event. [ 727.146016][ T61] Bluetooth: Error in BCSP hdr checksum [ 727.210461][ T5949] m920x_read = error: -19 [ 727.220693][ T5949] dvb-usb: error while querying for an remote control event. [ 727.312493][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 727.312509][ T29] audit: type=1400 audit(1732532705.285:9354): avc: denied { read write } for pid=15873 comm="syz.0.1934" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 727.776160][ T5886] m920x_read = error: -19 [ 727.780865][ T5886] dvb-usb: error while querying for an remote control event. [ 727.782050][ T2946] Bluetooth: Error in BCSP hdr checksum [ 727.892399][ T5886] m920x_read = error: -19 [ 727.896770][ T5886] dvb-usb: error while querying for an remote control event. [ 727.918558][ T29] audit: type=1400 audit(1732532705.285:9355): avc: denied { open } for pid=15873 comm="syz.0.1934" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 728.583869][ T3420] Bluetooth: Error in BCSP hdr checksum [ 728.663920][ T5886] m920x_read = error: -19 [ 728.668297][ T5886] dvb-usb: error while querying for an remote control event. [ 728.693002][ T29] audit: type=1400 audit(1732532705.295:9356): avc: denied { mounton } for pid=15873 comm="syz.0.1934" path="/162/file0" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 728.788217][ T29] audit: type=1400 audit(1732532705.305:9357): avc: denied { mount } for pid=15873 comm="syz.0.1934" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 728.993802][T15895] audit: audit_backlog=65 > audit_backlog_limit=64 [ 729.000421][T15895] audit: audit_lost=64 audit_rate_limit=0 audit_backlog_limit=64 [ 729.008612][T15895] audit: backlog limit exceeded [ 729.015608][T15895] audit: audit_backlog=65 > audit_backlog_limit=64 [ 729.022247][T15895] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 729.030008][T15895] audit: backlog limit exceeded [ 729.366979][ T61] Bluetooth: Error in BCSP hdr checksum [ 729.367409][ T5886] m920x_read = error: -19 [ 729.468522][ T5886] dvb-usb: error while querying for an remote control event. [ 729.611889][ T61] Bluetooth: Error in BCSP hdr checksum [ 729.670670][ T5886] m920x_read = error: -19 [ 729.728174][ T5886] dvb-usb: error while querying for an remote control event. [ 729.812030][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1939'. [ 729.872211][T14235] Bluetooth: Error in BCSP hdr checksum [ 729.901262][ T5886] m920x_read = error: -19 [ 729.905625][ T5886] dvb-usb: error while querying for an remote control event. [ 730.081237][ T5886] m920x_read = error: -19 [ 730.085583][ T5886] dvb-usb: error while querying for an remote control event. [ 730.130736][ T61] Bluetooth: Error in BCSP hdr checksum [ 730.771756][ T11] Bluetooth: Error in BCSP hdr checksum [ 730.822848][ T5886] m920x_read = error: -19 [ 730.840772][ T5886] dvb-usb: error while querying for an remote control event. [ 730.970620][ T5886] m920x_read = error: -19 [ 730.976788][T15915] pim6reg1: entered promiscuous mode [ 730.990387][ T5886] dvb-usb: error while querying for an remote control event. [ 731.007949][T15915] pim6reg1: entered allmulticast mode [ 731.038393][ T3420] Bluetooth: Error in BCSP hdr checksum [ 731.133112][ T5886] m920x_read = error: -19 [ 731.137475][ T5886] dvb-usb: error while querying for an remote control event. [ 731.266366][ T5886] m920x_read = error: -19 [ 731.277317][ T5886] dvb-usb: error while querying for an remote control event. [ 731.303418][ T3420] Bluetooth: Error in BCSP hdr checksum [ 731.440442][ T5886] m920x_read = error: -19 [ 731.444822][ T5886] dvb-usb: error while querying for an remote control event. [ 731.685547][T15948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 732.302446][ T3420] Bluetooth: Error in BCSP hdr checksum [ 732.320845][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 732.320861][ T29] audit: type=1400 audit(1732532710.315:9659): avc: denied { ioctl } for pid=15944 comm="syz.4.1949" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 732.400563][ T5886] m920x_read = error: -19 [ 732.404933][ T5886] dvb-usb: error while querying for an remote control event. [ 732.442329][ T29] audit: type=1400 audit(1732532710.365:9660): avc: denied { read write open } for pid=15470 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.543401][ T29] audit: type=1400 audit(1732532710.365:9661): avc: denied { ioctl } for pid=15470 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.569290][ T5886] m920x_read = error: -19 [ 732.584114][ T5886] dvb-usb: error while querying for an remote control event. [ 732.632057][T15962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.641892][ T11] Bluetooth: Error in BCSP hdr checksum [ 732.657636][ T29] audit: type=1400 audit(1732532710.365:9662): avc: denied { search } for pid=15954 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.780616][ T5886] m920x_read = error: -19 [ 732.785157][ T5886] dvb-usb: error while querying for an remote control event. [ 732.785558][ T29] audit: type=1400 audit(1732532710.365:9663): avc: denied { search } for pid=15954 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.818800][ T29] audit: type=1400 audit(1732532710.365:9664): avc: denied { read } for pid=15954 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.855628][ T29] audit: type=1400 audit(1732532710.365:9665): avc: denied { open } for pid=15954 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.878529][ T3420] Bluetooth: Error in BCSP hdr checksum [ 732.883169][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 732.916728][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 732.926873][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 732.942762][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 732.947343][ T29] audit: type=1400 audit(1732532710.365:9666): avc: denied { getattr } for pid=15954 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.975595][ T5886] m920x_read = error: -19 [ 732.979950][ T5886] dvb-usb: error while querying for an remote control event. [ 732.989337][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 732.997465][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.119801][T15979] audit: audit_backlog=65 > audit_backlog_limit=64 [ 733.127674][T14235] Bluetooth: Error in BCSP hdr checksum [ 733.138069][T15976] audit: audit_backlog=65 > audit_backlog_limit=64 [ 733.210573][ T5886] m920x_read = error: -19 [ 733.214945][ T5886] dvb-usb: error while querying for an remote control event. [ 733.390505][ T5949] m920x_read = error: -19 [ 733.394915][ T5949] dvb-usb: error while querying for an remote control event. [ 733.402881][ T3420] Bluetooth: Error in BCSP hdr checksum [ 733.530933][ T5949] m920x_read = error: -19 [ 733.535308][ T5949] dvb-usb: error while querying for an remote control event. [ 733.751027][ T5949] m920x_read = error: -19 [ 733.756001][ T5949] dvb-usb: error while querying for an remote control event. [ 733.782398][ T11] Bluetooth: Error in BCSP hdr checksum [ 733.875913][ T5949] m920x_read = error: -19 [ 733.880274][ T5949] dvb-usb: error while querying for an remote control event. [ 734.011952][T14235] Bluetooth: Error in BCSP hdr checksum [ 734.020519][ T5949] m920x_read = error: -19 [ 734.025076][ T5949] dvb-usb: error while querying for an remote control event. [ 734.104841][T15969] chnl_net:caif_netlink_parms(): no params data found [ 734.150459][ T5949] m920x_read = error: -19 [ 734.154828][ T5949] dvb-usb: error while querying for an remote control event. [ 734.290458][ T5949] m920x_read = error: -19 [ 734.294980][ T5949] dvb-usb: error while querying for an remote control event. [ 734.359745][ T3420] Bluetooth: Error in BCSP hdr checksum [ 734.555023][ T5949] m920x_read = error: -19 [ 734.559367][ T5949] dvb-usb: error while querying for an remote control event. [ 734.593371][ T3420] Bluetooth: Error in BCSP hdr checksum [ 734.682279][ T5949] m920x_read = error: -19 [ 734.686651][ T5949] dvb-usb: error while querying for an remote control event. [ 735.022695][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.115982][T12680] Bluetooth: hci3: command tx timeout [ 735.172165][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.222795][T15969] bridge_slave_0: entered allmulticast mode [ 735.250647][T15969] bridge_slave_0: entered promiscuous mode [ 735.277737][ T5949] m920x_read = error: -19 [ 735.279559][ T3420] Bluetooth: Error in BCSP hdr checksum [ 735.282146][ T5949] dvb-usb: error while querying for an remote control event. [ 735.344395][T15969] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.374278][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.394655][T15969] bridge_slave_1: entered allmulticast mode [ 735.400805][ T5949] m920x_read = error: -19 [ 735.400824][ T5949] dvb-usb: error while querying for an remote control event. [ 735.432814][T15969] bridge_slave_1: entered promiscuous mode [ 735.662311][ T5886] m920x_read = error: -19 [ 735.667440][ T5886] dvb-usb: error while querying for an remote control event. [ 735.676245][ T2946] Bluetooth: Error in BCSP hdr checksum [ 735.781234][ T5886] m920x_read = error: -19 [ 735.852577][ T5886] dvb-usb: error while querying for an remote control event. [ 735.991336][T14231] Bluetooth: Error in BCSP hdr checksum [ 736.120261][ T5886] m920x_read = error: -19 [ 736.142892][T15969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.199906][ T5886] dvb-usb: error while querying for an remote control event. [ 736.204544][T15969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.213646][ T2946] Bluetooth: Error in BCSP hdr checksum [ 736.330607][ T5886] m920x_read = error: -19 [ 736.340719][ T5886] dvb-usb: error while querying for an remote control event. [ 736.428846][T15969] team0: Port device team_slave_0 added [ 736.472699][ T5949] m920x_read = error: -19 [ 736.475155][ T3420] Bluetooth: Error in BCSP hdr checksum [ 736.477091][ T5949] dvb-usb: error while querying for an remote control event. [ 736.512057][T15969] team0: Port device team_slave_1 added [ 736.603377][T15969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.624593][T16071] netlink: 'syz.4.1969': attribute type 8 has an invalid length. [ 736.625141][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.632503][ T5886] m920x_read = error: -19 [ 736.632520][ T5886] dvb-usb: error while querying for an remote control event. [ 736.690099][T15969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.727770][T15969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.740578][ T5886] m920x_read = error: -19 [ 736.741253][ T2946] Bluetooth: Error in BCSP hdr checksum [ 736.745066][ T5886] dvb-usb: error while querying for an remote control event. [ 736.768124][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.812553][T15969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.910207][T15969] hsr_slave_0: entered promiscuous mode [ 736.919828][ T5886] m920x_read = error: -19 [ 736.930957][ T5886] dvb-usb: error while querying for an remote control event. [ 737.152805][ T5886] m920x_read = error: -19 [ 737.203638][T12680] Bluetooth: hci3: command tx timeout [ 737.221754][T15969] hsr_slave_1: entered promiscuous mode [ 737.233274][ T5886] dvb-usb: error while querying for an remote control event. [ 737.396212][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 737.396228][ T29] audit: type=1400 audit(1732532715.395:10126): avc: denied { read write } for pid=10823 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.430285][ T2946] Bluetooth: Error in BCSP hdr checksum [ 737.443996][ T29] audit: type=1400 audit(1732532715.395:10127): avc: denied { open } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.481140][T15969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.488723][T15969] Cannot create hsr debugfs directory [ 737.508450][ T29] audit: type=1400 audit(1732532715.395:10128): avc: denied { ioctl } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.551400][ T5886] m920x_read = error: -19 [ 737.555764][ T5886] dvb-usb: error while querying for an remote control event. [ 737.565257][T14231] Bluetooth: Error in BCSP hdr checksum [ 737.579082][ T29] audit: type=1400 audit(1732532715.395:10129): avc: denied { search } for pid=16075 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.720748][ T5886] m920x_read = error: -19 [ 737.725215][ T5886] dvb-usb: error while querying for an remote control event. [ 737.875899][ T3420] Bluetooth: Error in BCSP hdr checksum [ 737.910635][ T29] audit: type=1400 audit(1732532715.395:10130): avc: denied { read } for pid=16075 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.111317][ T5886] m920x_read = error: -19 [ 738.115686][ T5886] dvb-usb: error while querying for an remote control event. [ 738.153571][ T3420] Bluetooth: Error in BCSP hdr checksum [ 738.170605][ T29] audit: type=1400 audit(1732532715.395:10131): avc: denied { open } for pid=16075 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.208712][ T29] audit: type=1400 audit(1732532715.395:10132): avc: denied { getattr } for pid=16075 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.301079][ T29] audit: type=1400 audit(1732532715.395:10133): avc: denied { getattr } for pid=16075 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 738.330663][ T5886] m920x_read = error: -19 [ 738.335027][ T5886] dvb-usb: error while querying for an remote control event. [ 738.355493][ T29] audit: type=1400 audit(1732532715.415:10134): avc: denied { search } for pid=16075 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.360439][ T8] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 738.385106][ T29] audit: type=1400 audit(1732532715.415:10135): avc: denied { read } for pid=16075 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.420699][ T3420] Bluetooth: Error in BCSP hdr checksum [ 738.461681][ T5886] m920x_read = error: -19 [ 738.466053][ T5886] dvb-usb: error while querying for an remote control event. [ 738.567557][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 738.584144][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 738.601461][ T5885] m920x_read = error: -19 [ 738.605816][ T5885] dvb-usb: error while querying for an remote control event. [ 738.646743][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 738.680446][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 738.685347][T14231] Bluetooth: Error in BCSP hdr checksum [ 738.728016][ T8] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 738.740453][ T5886] m920x_read = error: -19 [ 738.740472][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.744880][ T5886] dvb-usb: error while querying for an remote control event. [ 738.773759][ T8] usb 5-1: Product: syz [ 738.796210][ T8] usb 5-1: Manufacturer: syz [ 738.810808][ T8] usb 5-1: SerialNumber: syz [ 738.819439][ T8] usb 5-1: config 0 descriptor?? [ 738.847404][T16087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 738.881058][ T5886] m920x_read = error: -19 [ 738.885506][ T5886] dvb-usb: error while querying for an remote control event. [ 738.943443][T14231] Bluetooth: Error in BCSP hdr checksum [ 739.011491][ T5886] m920x_read = error: -19 [ 739.024885][ T5886] dvb-usb: error while querying for an remote control event. [ 739.160438][ T5886] m920x_read = error: -19 [ 739.164965][ T5886] dvb-usb: error while querying for an remote control event. [ 739.202859][ T2946] Bluetooth: Error in BCSP hdr checksum [ 739.270985][T12680] Bluetooth: hci3: command tx timeout [ 739.310456][ T5949] m920x_read = error: -19 [ 739.314825][ T5949] dvb-usb: error while querying for an remote control event. [ 739.447337][T16116] m920x_read = error: -19 [ 739.460380][T16116] dvb-usb: error while querying for an remote control event. [ 739.470650][ T5886] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 739.498160][T14235] Bluetooth: Error in BCSP hdr checksum [ 739.602118][T16116] m920x_read = error: -19 [ 739.627173][T16116] dvb-usb: error while querying for an remote control event. [ 739.653177][ T5886] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 739.689657][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.730647][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 739.751558][ T2946] Bluetooth: Error in BCSP hdr checksum [ 739.780858][T16116] m920x_read = error: -19 [ 739.785217][T16116] dvb-usb: error while querying for an remote control event. [ 739.800421][ T5886] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 739.833438][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.852078][ T5886] usb 3-1: Product: syz [ 739.856540][ T5886] usb 3-1: Manufacturer: syz [ 739.870394][ T5886] usb 3-1: SerialNumber: syz [ 739.898503][ T5886] usb 3-1: config 0 descriptor?? [ 739.939286][ T5886] usb-storage 3-1:0.0: USB Mass Storage device detected [ 739.960930][T16116] m920x_read = error: -19 [ 739.966517][T16116] dvb-usb: error while querying for an remote control event. [ 740.022769][ T35] Bluetooth: Error in BCSP hdr checksum [ 740.029351][ T5886] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 740.120549][T16116] m920x_read = error: -19 [ 740.124926][T16116] dvb-usb: error while querying for an remote control event. [ 740.272027][ T3420] Bluetooth: Error in BCSP hdr checksum [ 740.300603][T16116] m920x_read = error: -19 [ 740.304986][T16116] dvb-usb: error while querying for an remote control event. [ 740.346124][T15969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.391378][ T967] usb 3-1: USB disconnect, device number 44 [ 740.440506][T16116] m920x_read = error: -19 [ 740.444922][T16116] dvb-usb: error while querying for an remote control event. [ 740.495888][T15969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.622871][T15969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.665407][ T2946] Bluetooth: Error in BCSP hdr checksum [ 740.761679][T16116] m920x_read = error: -19 [ 740.850452][T16116] dvb-usb: error while querying for an remote control event. [ 740.969994][T15969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 741.033998][ T35] Bluetooth: Error in BCSP hdr checksum [ 741.150698][T16116] m920x_read = error: -19 [ 741.289140][T16116] dvb-usb: error while querying for an remote control event. [ 741.297898][ T3420] Bluetooth: Error in BCSP hdr checksum [ 741.353619][T12680] Bluetooth: hci3: command tx timeout [ 741.437263][ T8] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 741.488770][T16116] m920x_read = error: -19 [ 741.494094][ T8] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 741.497343][T15969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.520710][T16116] dvb-usb: error while querying for an remote control event. [ 741.551244][T14235] Bluetooth: Error in BCSP hdr checksum [ 741.621339][ C0] powermate: config urb returned -71 [ 741.626775][ C0] powermate: config urb returned -71 [ 741.635418][ C0] powermate: config urb returned -71 [ 741.640503][ T5886] m920x_read = error: -19 [ 741.641884][ C0] powermate: config urb returned -71 [ 741.645034][ T5886] dvb-usb: error while querying for an remote control event. [ 741.658767][ T8] usb 5-1: USB disconnect, device number 53 [ 741.658828][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 741.715838][T15969] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.716556][T16150] virtio-fs: tag <(null)> not found [ 741.768640][T14231] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.775759][T14231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.822229][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.829382][T14235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.842323][ T5886] m920x_read = error: -19 [ 741.846198][T14231] Bluetooth: Error in BCSP hdr checksum [ 741.850369][ T5886] dvb-usb: error while querying for an remote control event. [ 741.940519][T10520] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 741.957185][T15969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.010747][ T5886] m920x_read = error: -19 [ 742.030466][ T5886] dvb-usb: error while querying for an remote control event. [ 742.095077][T14235] Bluetooth: Error in BCSP hdr checksum [ 742.180719][ T5886] m920x_read = error: -19 [ 742.185091][ T5886] dvb-usb: error while querying for an remote control event. [ 742.198705][ T967] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 742.274584][T16164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1984'. [ 742.298290][T10520] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 742.298324][T10520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.298349][T10520] usb 3-1: Product: syz [ 742.298367][T10520] usb 3-1: Manufacturer: syz [ 742.298385][T10520] usb 3-1: SerialNumber: syz [ 742.301751][T10520] usb 3-1: config 0 descriptor?? [ 742.372304][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 742.380146][ T967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.385816][T14235] Bluetooth: Error in BCSP hdr checksum [ 742.412223][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 742.412236][ T29] audit: type=1400 audit(1732532720.415:10564): avc: denied { ioctl } for pid=16149 comm="syz.3.1981" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.443582][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.766781][ T5886] m920x_read = error: -19 [ 742.776651][ T5886] dvb-usb: error while querying for an remote control event. [ 742.841210][ T35] Bluetooth: Error in BCSP hdr checksum [ 742.872387][ T29] audit: type=1400 audit(1732532720.415:10565): avc: denied { search } for pid=16167 comm="sed" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.886733][ T967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.906985][ T967] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.916163][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.924644][ T967] usb 4-1: Product: syz [ 742.928853][ T967] usb 4-1: Manufacturer: syz [ 742.934270][ T967] usb 4-1: SerialNumber: syz [ 742.994505][ T29] audit: type=1400 audit(1732532720.415:10566): avc: denied { read } for pid=16167 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 743.017112][ T5886] m920x_read = error: -19 [ 743.026421][ T5886] dvb-usb: error while querying for an remote control event. [ 743.047015][ T29] audit: type=1400 audit(1732532720.415:10567): avc: denied { open } for pid=16167 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 743.077923][ T2946] Bluetooth: Error in BCSP hdr checksum [ 743.101689][ T29] audit: type=1400 audit(1732532720.415:10568): avc: denied { getattr } for pid=16167 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 743.161951][ T29] audit: type=1400 audit(1732532720.775:10569): avc: denied { module_request } for pid=15969 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 743.184445][T15313] m920x_read = error: -19 [ 743.188793][T15313] dvb-usb: error while querying for an remote control event. [ 743.286840][ T29] audit: type=1400 audit(1732532720.865:10570): avc: denied { search } for pid=16172 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.315579][T10520] mos7840 3-1:0.0: required endpoints missing [ 743.330694][T15313] m920x_read = error: -19 [ 743.346748][T10520] usb 3-1: USB disconnect, device number 45 [ 743.350428][T15313] dvb-usb: error while querying for an remote control event. [ 743.384746][ T29] audit: type=1400 audit(1732532720.915:10571): avc: denied { read write } for pid=10823 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.409203][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.418867][T15969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.454343][ T35] Bluetooth: Error in BCSP hdr checksum [ 743.498396][ T29] audit: type=1400 audit(1732532720.915:10572): avc: denied { read write open } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.541806][T15313] m920x_read = error: -19 [ 743.552089][T15313] dvb-usb: error while querying for an remote control event. [ 743.602328][T16191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.613416][T16185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 743.663608][T15969] veth0_vlan: entered promiscuous mode [ 743.683393][ T3420] Bluetooth: Error in BCSP hdr checksum [ 743.710506][T15313] m920x_read = error: -19 [ 743.718061][T15313] dvb-usb: error while querying for an remote control event. [ 743.768876][T15969] veth1_vlan: entered promiscuous mode [ 743.818258][T15969] veth0_macvtap: entered promiscuous mode [ 743.833626][T15969] veth1_macvtap: entered promiscuous mode [ 743.860459][T15313] m920x_read = error: -19 [ 743.866442][T15313] dvb-usb: error while querying for an remote control event. [ 743.897344][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.941230][ T3420] Bluetooth: Error in BCSP hdr checksum [ 743.950691][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.995973][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.006988][T16116] m920x_read = error: -19 [ 744.015940][T16116] dvb-usb: error while querying for an remote control event. [ 744.051971][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.081481][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.114073][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.135323][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.284536][T15313] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 744.294548][T16116] m920x_read = error: -19 [ 744.299135][T16116] dvb-usb: error while querying for an remote control event. [ 744.328893][ T3420] Bluetooth: Error in BCSP hdr checksum [ 744.695397][T16116] m920x_read = error: -19 [ 744.699772][T16116] dvb-usb: error while querying for an remote control event. [ 744.711737][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.735101][ T967] usb 4-1: 0:2 : does not exist [ 744.745650][ T2946] Bluetooth: Error in BCSP hdr checksum [ 744.782427][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.807438][T15313] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 744.822035][ T967] usb 4-1: USB disconnect, device number 26 [ 744.824689][T15313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 744.840788][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.853628][T15313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59357, setting to 1024 [ 744.890696][T16116] m920x_read = error: -19 [ 744.894332][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.907026][T16116] dvb-usb: error while querying for an remote control event. [ 744.921366][T10520] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 744.940091][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.942586][T15313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 744.963873][T14231] Bluetooth: Error in BCSP hdr checksum [ 744.969663][T15313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 744.989093][T15313] usb 5-1: New USB device found, idVendor=0f11, idProduct=2051, bcdDevice=79.c5 [ 745.004593][T15313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.013870][T15313] usb 5-1: Product: syz [ 745.018269][T15313] usb 5-1: Manufacturer: syz [ 745.023623][T15313] usb 5-1: SerialNumber: syz [ 745.047060][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.047491][T15313] usb 5-1: config 0 descriptor?? [ 745.062672][ T5886] m920x_read = error: -19 [ 745.066983][ T5886] dvb-usb: error while querying for an remote control event. [ 745.075150][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.114734][T16198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 745.126587][T10520] usb 3-1: Using ep0 maxpacket: 32 [ 745.144788][T15313] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 745.154550][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.172764][T10520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.200521][T16116] m920x_read = error: -19 [ 745.206049][T16116] dvb-usb: error while querying for an remote control event. [ 745.220606][ T3420] Bluetooth: Error in BCSP hdr checksum [ 745.223112][T15969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.237342][T10520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.278578][T10520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.341147][T16116] m920x_read = error: -19 [ 745.341267][T10520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 745.345492][T16116] dvb-usb: error while querying for an remote control event. [ 745.366612][T10520] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 745.407252][T10520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.441468][T16198] netlink: 'syz.4.1988': attribute type 11 has an invalid length. [ 745.449322][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 745.461322][T15313] m920x_read = error: -19 [ 745.466998][T10520] usb 3-1: config 0 descriptor?? [ 745.479824][T15313] dvb-usb: error while querying for an remote control event. [ 745.491875][ T61] Bluetooth: Error in BCSP hdr checksum [ 745.504947][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.516147][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.529368][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.540208][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.550691][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.561433][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.571801][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.594997][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.766524][T15313] m920x_read = error: -19 [ 745.771039][T15313] dvb-usb: error while querying for an remote control event. [ 745.778537][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.791390][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.008943][ T3420] Bluetooth: Error in BCSP hdr checksum [ 746.023834][T15313] m920x_read = error: -19 [ 746.028955][T16197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.039026][T15313] dvb-usb: error while querying for an remote control event. [ 746.046702][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.059411][T15313] usb 5-1: USB disconnect, device number 54 [ 746.065516][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.065919][T14231] Bluetooth: Error in BCSP hdr checksum [ 746.077116][T15969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.094327][T15313] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 746.112160][T15969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.124280][T15969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.160079][T15969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.169246][T10668] m920x_read = error: -19 [ 746.173779][T10668] dvb-usb: error while querying for an remote control event. [ 746.197569][T15969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.215059][T15969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.338446][T10668] m920x_read = error: -19 [ 746.339956][T10520] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 746.349832][T10520] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 746.349857][T10668] dvb-usb: error while querying for an remote control event. [ 746.357222][T10520] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 746.371791][T14235] Bluetooth: Error in BCSP hdr checksum [ 746.380396][T15969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.389231][T10520] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 746.520125][T15313] m920x_read = error: -19 [ 746.975056][T10520] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 746.999527][T10520] ntrig 0003:1B96:000A.001E: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 747.013168][T15313] dvb-usb: error while querying for an remote control event. [ 747.058009][T10520] usb 3-1: USB disconnect, device number 46 [ 747.112985][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.119251][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.141089][ T2946] Bluetooth: Error in BCSP hdr checksum [ 747.251995][T15313] m920x_read = error: -19 [ 747.256360][T15313] dvb-usb: error while querying for an remote control event. [ 747.307816][T16220] net_ratelimit: 26 callbacks suppressed [ 747.307827][T16220] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 747.415548][T14231] Bluetooth: Error in BCSP hdr checksum [ 747.432223][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 747.432237][ T29] audit: type=1400 audit(1732532725.435:10802): avc: denied { mounton } for pid=16219 comm="syz.3.1992" path="/28/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 747.460976][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.473643][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.487760][T16221] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 747.490531][T16116] m920x_read = error: -19 [ 747.504940][ T29] audit: type=1400 audit(1732532725.475:10803): avc: denied { write } for pid=15969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.513166][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.525607][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.547133][T16116] dvb-usb: error while querying for an remote control event. [ 747.656536][ T29] audit: type=1400 audit(1732532725.475:10804): avc: denied { read } for pid=15969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.677133][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.680795][T16116] m920x_read = error: -19 [ 747.712310][T16116] dvb-usb: error while querying for an remote control event. [ 747.725245][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.757482][ T2946] Bluetooth: Error in BCSP hdr checksum [ 747.759937][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.780468][ T29] audit: type=1400 audit(1732532725.495:10805): avc: denied { mount } for pid=16219 comm="syz.3.1992" name="/" dev="hugetlbfs" ino=49393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 747.856620][ T29] audit: type=1400 audit(1732532725.535:10806): avc: denied { create } for pid=16219 comm="syz.3.1992" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 747.879027][ T29] audit: type=1400 audit(1732532725.535:10807): avc: denied { read } for pid=16217 comm="syz.0.1991" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 747.902095][T16116] m920x_read = error: -19 [ 747.902114][T16116] dvb-usb: error while querying for an remote control event. [ 748.002883][T15969] audit: audit_backlog=65 > audit_backlog_limit=64 [ 748.011936][T16116] m920x_read = error: -19 [ 748.025674][T15969] audit: audit_lost=89 audit_rate_limit=0 audit_backlog_limit=64 [ 748.026008][T16235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 748.042047][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 748.047615][T16116] dvb-usb: error while querying for an remote control event. [ 748.061958][T14231] Bluetooth: Error in BCSP hdr checksum [ 748.281502][T15313] m920x_read = error: -19 [ 748.287846][T15313] dvb-usb: error while querying for an remote control event. [ 748.311035][ T2946] Bluetooth: Error in BCSP hdr checksum [ 748.427528][T10668] m920x_read = error: -19 [ 748.443829][T10668] dvb-usb: error while querying for an remote control event. [ 748.955489][T16245] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 749.039218][T16116] m920x_read = error: -19 [ 749.100585][ T11] Bluetooth: Error in BCSP hdr checksum [ 749.117371][T16116] dvb-usb: error while querying for an remote control event. [ 749.419046][ T2946] Bluetooth: Error in BCSP hdr checksum [ 749.780264][ T3420] Bluetooth: Error in BCSP hdr checksum [ 749.880538][T16116] m920x_read = error: -19 [ 749.884904][T16116] dvb-usb: error while querying for an remote control event. [ 750.030952][ T967] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 750.098239][T16116] m920x_read = error: -19 [ 750.103050][T16116] dvb-usb: error while querying for an remote control event. [ 750.112756][ T11] Bluetooth: Error in BCSP hdr checksum [ 750.205750][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 750.240674][T16116] m920x_read = error: -19 [ 750.245122][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.258650][T16116] dvb-usb: error while querying for an remote control event. [ 750.313512][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.343828][ T967] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 750.370981][ T3420] Bluetooth: Error in BCSP hdr checksum [ 750.400999][T16270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.410441][T16116] m920x_read = error: -19 [ 750.415471][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.429142][T16116] dvb-usb: error while querying for an remote control event. [ 750.496180][ T967] usb 3-1: config 0 descriptor?? [ 750.580436][T10668] m920x_read = error: -19 [ 750.584902][T10668] dvb-usb: error while querying for an remote control event. [ 750.634220][ T61] Bluetooth: Error in BCSP hdr checksum [ 750.740455][T10668] m920x_read = error: -19 [ 750.744820][T10668] dvb-usb: error while querying for an remote control event. [ 750.891124][ T11] Bluetooth: Error in BCSP hdr checksum [ 750.911625][T10668] m920x_read = error: -19 [ 750.922432][T10668] dvb-usb: error while querying for an remote control event. [ 751.050556][T10668] m920x_read = error: -19 [ 751.067282][T10668] dvb-usb: error while querying for an remote control event. [ 751.079531][ T967] hid-multitouch 0003:1FD2:6007.001F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 752.069203][T10668] m920x_read = error: -19 [ 752.085023][T14235] Bluetooth: Error in BCSP hdr checksum [ 752.129019][T10668] dvb-usb: error while querying for an remote control event. [ 752.312365][T10668] m920x_read = error: -19 [ 752.340088][T10668] dvb-usb: error while querying for an remote control event. [ 752.360988][ T11] Bluetooth: Error in BCSP hdr checksum [ 752.442247][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 752.442262][ T29] audit: type=1400 audit(1732532730.445:11092): avc: denied { search } for pid=16292 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.513402][T16116] m920x_read = error: -19 [ 752.536549][ T29] audit: type=1400 audit(1732532730.445:11093): avc: denied { read } for pid=16292 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.568335][T16116] dvb-usb: error while querying for an remote control event. [ 752.626449][ T61] Bluetooth: Error in BCSP hdr checksum [ 752.677783][ T29] audit: type=1400 audit(1732532730.445:11094): avc: denied { open } for pid=16292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.723834][T10668] m920x_read = error: -19 [ 752.741857][T10668] dvb-usb: error while querying for an remote control event. [ 752.770611][ T5888] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 752.801668][ T29] audit: type=1400 audit(1732532730.445:11095): avc: denied { getattr } for pid=16292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.902121][T10668] m920x_read = error: -19 [ 752.910022][ T29] audit: type=1400 audit(1732532730.475:11096): avc: denied { getattr } for pid=16292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.915870][T10668] dvb-usb: error while querying for an remote control event. [ 752.962084][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 752.965779][T14235] Bluetooth: Error in BCSP hdr checksum [ 752.983834][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.038765][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.049810][ T29] audit: type=1400 audit(1732532730.475:11097): avc: denied { search } for pid=16292 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.093953][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 753.160742][ T967] usb 3-1: USB disconnect, device number 47 [ 753.167806][T10668] m920x_read = error: -19 [ 753.196914][T10668] dvb-usb: error while querying for an remote control event. [ 753.210797][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 753.239018][T14233] Bluetooth: Error in BCSP hdr checksum [ 753.246874][ T29] audit: type=1400 audit(1732532730.475:11098): avc: denied { read } for pid=16292 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.260408][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.352989][T16291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.365539][ T29] audit: type=1400 audit(1732532730.485:11099): avc: denied { read open } for pid=16292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.369386][T16291] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 753.401044][T16116] m920x_read = error: -19 [ 753.406703][T16116] dvb-usb: error while querying for an remote control event. [ 753.418477][ T5888] usb 5-1: config 0 descriptor?? [ 753.490614][ T61] Bluetooth: Error in BCSP hdr checksum [ 753.566464][T10668] m920x_read = error: -19 [ 753.593011][T10668] dvb-usb: error while querying for an remote control event. [ 753.869233][ T5886] m920x_read = error: -19 [ 753.890899][ T5886] dvb-usb: error while querying for an remote control event. [ 753.916310][T16319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.016921][T16322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.068519][T16320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.088393][ T5886] m920x_read = error: -19 [ 754.170456][ T5886] dvb-usb: error while querying for an remote control event. [ 754.246361][T16320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.293369][ T61] Bluetooth: Error in BCSP hdr checksum [ 754.474634][ T61] Bluetooth: Error in BCSP hdr checksum [ 754.543618][T16116] m920x_read = error: -19 [ 754.547987][T16116] dvb-usb: error while querying for an remote control event. [ 754.604212][ T5888] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 754.629147][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0020/input/input48 [ 754.649849][T16308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.691437][ T2946] Bluetooth: Error in BCSP hdr checksum [ 754.743233][T16317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.798272][T10668] m920x_read = error: -19 [ 754.845972][T10668] dvb-usb: error while querying for an remote control event. [ 755.046023][ T35] Bluetooth: Error in BCSP hdr checksum [ 755.147726][T16116] m920x_read = error: -19 [ 755.312151][T16116] dvb-usb: error while querying for an remote control event. [ 755.415684][ T5888] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 755.434406][T14233] Bluetooth: Error in BCSP hdr checksum [ 756.131738][T10668] m920x_read = error: -19 [ 756.140475][T10668] dvb-usb: error while querying for an remote control event. [ 756.172234][ T11] Bluetooth: Error in BCSP hdr checksum [ 756.260771][T10668] m920x_read = error: -19 [ 756.265135][T10668] dvb-usb: error while querying for an remote control event. [ 756.420486][T10668] m920x_read = error: -19 [ 756.427090][ T35] Bluetooth: Error in BCSP hdr checksum [ 756.435030][T10668] dvb-usb: error while querying for an remote control event. [ 756.560448][T10668] m920x_read = error: -19 [ 756.564814][T10668] dvb-usb: error while querying for an remote control event. [ 756.660939][T14233] Bluetooth: Error in BCSP hdr checksum [ 756.712468][T10668] m920x_read = error: -19 [ 756.718721][T10668] dvb-usb: error while querying for an remote control event. [ 756.809768][T16116] usb 5-1: USB disconnect, device number 55 [ 756.863848][T10668] m920x_read = error: -19 [ 756.889478][T10668] dvb-usb: error while querying for an remote control event. [ 756.922038][ T11] Bluetooth: Error in BCSP hdr checksum [ 757.041036][T10668] m920x_read = error: -19 [ 757.052583][T10668] dvb-usb: error while querying for an remote control event. [ 757.183765][ T3420] Bluetooth: Error in BCSP hdr checksum [ 757.204132][T16378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2021'. [ 757.270978][T10668] m920x_read = error: -19 [ 757.282560][T10668] dvb-usb: error while querying for an remote control event. [ 757.287387][T16377] overlayfs: failed to resolve './file1': -2 [ 757.300813][T16116] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 757.450654][T14233] Bluetooth: Error in BCSP hdr checksum [ 757.461931][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 757.461941][ T29] audit: type=1400 audit(1732532735.465:11499): avc: denied { ioctl } for pid=16339 comm="syz.2.2012" path="/dev/usbmon7" dev="devtmpfs" ino=741 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 757.514491][T10668] m920x_read = error: -19 [ 757.533038][T10668] dvb-usb: error while querying for an remote control event. [ 757.562907][ T29] audit: type=1400 audit(1732532735.505:11500): avc: denied { ioctl } for pid=16344 comm="syz.4.2013" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 757.606851][T16116] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 757.666855][T16116] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.718066][ T29] audit: type=1400 audit(1732532735.505:11501): avc: denied { read } for pid=16367 comm="syz.3.2020" dev="nsfs" ino=4026532936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 757.720665][T14233] Bluetooth: Error in BCSP hdr checksum [ 757.745184][T10668] m920x_read = error: -19 [ 757.753145][T16116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 757.768439][T10668] dvb-usb: error while querying for an remote control event. [ 757.803532][T16116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 757.858047][T16116] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 757.886484][ T29] audit: type=1400 audit(1732532735.515:11502): avc: denied { read open } for pid=16367 comm="syz.3.2020" path="net:[4026532936]" dev="nsfs" ino=4026532936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 757.912968][T10668] m920x_read = error: -19 [ 757.944552][T16116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.953737][T10668] dvb-usb: error while querying for an remote control event. [ 757.971779][ T3420] Bluetooth: Error in BCSP hdr checksum [ 757.982193][T16116] usb 5-1: Product: syz [ 758.019180][T16116] usb 5-1: Manufacturer: syz [ 758.051783][T16116] usb 5-1: SerialNumber: syz [ 758.084169][ T29] audit: type=1400 audit(1732532735.515:11503): avc: denied { create } for pid=16367 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 758.105626][ T29] audit: type=1400 audit(1732532735.535:11504): avc: denied { write } for pid=16339 comm="syz.2.2012" path="socket:[49777]" dev="sockfs" ino=49777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.130975][ T29] audit: type=1400 audit(1732532735.545:11505): avc: denied { write } for pid=16339 comm="syz.2.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.131626][T10668] m920x_read = error: -19 [ 758.152390][ T29] audit: type=1400 audit(1732532735.595:11506): avc: denied { ioctl } for pid=16344 comm="syz.4.2013" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 758.189446][T16116] usb 5-1: config 0 descriptor?? [ 758.231559][T14233] Bluetooth: Error in BCSP hdr checksum [ 758.252418][T16346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 758.273711][ T29] audit: type=1400 audit(1732532735.595:11507): avc: denied { create } for pid=16367 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 758.310453][T10668] dvb-usb: error while querying for an remote control event. [ 758.367321][ T29] audit: type=1400 audit(1732532735.615:11508): avc: denied { read write } for pid=15969 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 758.440445][T10668] m920x_read = error: -19 [ 758.470031][T10668] dvb-usb: error while querying for an remote control event. [ 758.495485][ T2946] Bluetooth: Error in BCSP hdr checksum [ 758.620602][T10668] m920x_read = error: -19 [ 758.633386][T10668] dvb-usb: error while querying for an remote control event. [ 758.761762][ T2946] Bluetooth: Error in BCSP hdr checksum [ 758.780486][T10668] m920x_read = error: -19 [ 758.791628][T10668] dvb-usb: error while querying for an remote control event. [ 759.007281][T10668] m920x_read = error: -19 [ 759.012513][T10668] dvb-usb: error while querying for an remote control event. [ 759.042523][ T35] Bluetooth: Error in BCSP hdr checksum [ 759.142719][T10668] m920x_read = error: -19 [ 759.147172][T10668] dvb-usb: error while querying for an remote control event. [ 759.572164][ T35] Bluetooth: Error in BCSP hdr checksum [ 759.683775][T10668] m920x_read = error: -19 [ 759.777883][T10668] dvb-usb: error while querying for an remote control event. [ 759.831016][ T2946] Bluetooth: Error in BCSP hdr checksum [ 760.108485][ T5932] m920x_read = error: -19 [ 760.115115][ T5932] dvb-usb: error while querying for an remote control event. [ 760.123340][T16116] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 760.124977][T14233] Bluetooth: Error in BCSP hdr checksum [ 760.132152][T16116] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input49 [ 760.158009][ C1] powermate: config urb returned -71 [ 760.166936][ C1] powermate: config urb returned -71 [ 760.172579][ C1] powermate: config urb returned -71 [ 760.178543][ C1] powermate: config urb returned -71 [ 760.186834][T16116] usb 5-1: USB disconnect, device number 56 [ 760.192816][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 760.236197][T16430] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 760.264364][ T5932] m920x_read = error: -19 [ 760.302123][ T5932] dvb-usb: error while querying for an remote control event. [ 760.429250][ T11] Bluetooth: Error in BCSP hdr checksum [ 760.532317][ T5932] m920x_read = error: -19 [ 760.662775][ T5932] dvb-usb: error while querying for an remote control event. [ 760.692988][T14233] Bluetooth: Error in BCSP hdr checksum [ 760.798691][ T5932] m920x_read = error: -19 [ 760.806579][ T5932] dvb-usb: error while querying for an remote control event. [ 760.920452][ T5932] m920x_read = error: -19 [ 760.934855][ T5932] dvb-usb: error while querying for an remote control event. [ 761.040919][T16444] netlink: 'syz.4.2031': attribute type 21 has an invalid length. [ 761.116867][T14235] Bluetooth: Error in BCSP hdr checksum [ 761.146647][ T5888] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 761.485334][T16439] VFS: could not find a valid V7 on nullb0. [ 761.498716][T16439] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 761.520724][T16116] m920x_read = error: -19 [ 761.704167][T16116] dvb-usb: error while querying for an remote control event. [ 761.750586][ T11] Bluetooth: Error in BCSP hdr checksum [ 761.882123][T16116] m920x_read = error: -19 [ 761.886574][T16116] dvb-usb: error while querying for an remote control event. [ 761.897127][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 762.036093][T14235] Bluetooth: Error in BCSP hdr checksum [ 762.044521][T16116] m920x_read = error: -19 [ 762.048995][T16116] dvb-usb: error while querying for an remote control event. [ 762.141150][ T5888] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 762.225690][ T5888] usb 1-1: config 0 has no interface number 0 [ 762.240061][ T5888] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 762.291743][ T2946] Bluetooth: Error in BCSP hdr checksum [ 762.318776][ T5888] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 762.328978][ T5888] usb 1-1: New USB device strings: Mfr=36, Product=2, SerialNumber=3 [ 762.340850][T16116] m920x_read = error: -19 [ 762.355586][T16455] binder: 16454:16455 ioctl 4018620d 0 returned -22 [ 762.375572][ T5888] usb 1-1: Product: syz [ 762.385710][T16116] dvb-usb: error while querying for an remote control event. [ 762.398420][ T5888] usb 1-1: Manufacturer: syz [ 762.410095][ T5888] usb 1-1: SerialNumber: syz [ 762.446056][ T5888] usb 1-1: config 0 descriptor?? [ 762.472241][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 762.472258][ T29] audit: type=1400 audit(1732532740.475:11885): avc: denied { mounton } for pid=16456 comm="syz.4.2036" path="/196/bus/file0" dev="overlay" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 762.530751][T16441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 762.540458][T16116] m920x_read = error: -19 [ 762.544812][T16116] dvb-usb: error while querying for an remote control event. [ 762.582396][ T11] Bluetooth: Error in BCSP hdr checksum [ 762.616603][ T5888] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 762.631454][ T29] audit: type=1400 audit(1732532740.475:11886): avc: denied { mount } for pid=16456 comm="syz.4.2036" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 762.665528][ T5888] em28xx 1-1:0.132: Video interface 132 found: bulk [ 762.707720][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.725366][T16116] m920x_read = error: -19 [ 762.729723][T16116] dvb-usb: error while querying for an remote control event. [ 762.746204][ T29] audit: type=1400 audit(1732532740.515:11887): avc: denied { mounton } for pid=16456 comm="syz.4.2036" path="/196/bus/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 762.881062][ T29] audit: type=1400 audit(1732532740.515:11888): avc: denied { mount } for pid=16456 comm="syz.4.2036" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 762.943077][T15313] m920x_read = error: -19 [ 762.948115][T15313] dvb-usb: error while querying for an remote control event. [ 763.014969][T14233] Bluetooth: Error in BCSP hdr checksum [ 763.057788][ T29] audit: type=1400 audit(1732532740.525:11889): avc: denied { read write } for pid=15295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.091035][T16116] m920x_read = error: -19 [ 763.400306][T16116] dvb-usb: error while querying for an remote control event. [ 763.729875][ T5888] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 763.793184][ T2946] Bluetooth: Error in BCSP hdr checksum [ 763.806601][ T5503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 763.814566][T16461] audit: audit_backlog=65 > audit_backlog_limit=64 [ 763.821185][T16461] audit: audit_lost=105 audit_rate_limit=0 audit_backlog_limit=64 [ 763.829321][T16461] audit: backlog limit exceeded [ 763.834458][ T29] audit: type=1400 audit(1732532740.525:11890): avc: denied { read write open } for pid=15295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.890685][T15313] m920x_read = error: -19 [ 763.899112][T15313] dvb-usb: error while querying for an remote control event. [ 763.951050][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 764.020672][T15313] m920x_read = error: -19 [ 764.025140][T15313] dvb-usb: error while querying for an remote control event. [ 764.051111][ T3420] Bluetooth: Error in BCSP hdr checksum [ 764.171154][T15313] m920x_read = error: -19 [ 764.175659][T15313] dvb-usb: error while querying for an remote control event. [ 764.711107][T14235] Bluetooth: Error in BCSP hdr checksum [ 764.838831][T16116] m920x_read = error: -19 [ 764.850203][T16116] dvb-usb: error while querying for an remote control event. [ 764.985424][ T5888] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 765.032179][T16116] m920x_read = error: -19 [ 765.036541][T16116] dvb-usb: error while querying for an remote control event. [ 765.043951][ T5888] em28xx 1-1:0.132: board has no eeprom [ 765.105975][ T5888] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 765.143067][ T5888] em28xx 1-1:0.132: analog set to bulk mode. [ 765.204367][ T967] em28xx 1-1:0.132: Registering V4L2 extension [ 765.220473][T16116] m920x_read = error: -19 [ 765.224845][T16116] dvb-usb: error while querying for an remote control event. [ 765.233247][ T5888] usb 1-1: USB disconnect, device number 49 [ 765.288680][ T5888] em28xx 1-1:0.132: Disconnecting em28xx [ 765.480932][T16116] m920x_read = error: -19 [ 765.497092][T16116] dvb-usb: error while querying for an remote control event. [ 765.512155][T16485] netfs: Couldn't get user pages (rc=-14) [ 765.641028][T16116] m920x_read = error: -19 [ 765.658242][T16116] dvb-usb: error while querying for an remote control event. [ 765.801387][T10520] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 765.822171][T16116] m920x_read = error: -19 [ 765.832293][T16116] dvb-usb: error while querying for an remote control event. [ 765.938785][ T967] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 765.947830][T10520] usb 4-1: device descriptor read/64, error -71 [ 765.970766][T16116] m920x_read = error: -19 [ 765.986929][ T967] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 765.994115][T16116] dvb-usb: error while querying for an remote control event. [ 766.048061][ T967] em28xx 1-1:0.132: No AC97 audio processor [ 766.100525][T16116] m920x_read = error: -19 [ 766.219663][T16116] dvb-usb: error while querying for an remote control event. [ 766.248423][ T967] usb 1-1: Decoder not found [ 766.260868][T10520] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 766.859450][ T967] em28xx 1-1:0.132: failed to create media graph [ 766.868044][ T967] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 766.877013][T16116] m920x_read = error: -19 [ 766.878142][ T967] em28xx 1-1:0.132: Remote control support is not available for this card. [ 766.890826][ T5888] em28xx 1-1:0.132: Closing input extension [ 766.961111][T16116] dvb-usb: error while querying for an remote control event. [ 767.000644][T10520] usb 4-1: device descriptor read/64, error -71 [ 767.030020][ T5888] em28xx 1-1:0.132: Freeing device [ 767.080958][T16116] m920x_read = error: -19 [ 767.096619][T16116] dvb-usb: error while querying for an remote control event. [ 767.136094][T10520] usb usb4-port1: attempt power cycle [ 767.240642][T16116] m920x_read = error: -19 [ 767.260128][T16116] dvb-usb: error while querying for an remote control event. [ 767.413596][T16116] m920x_read = error: -19 [ 767.442891][T16116] dvb-usb: error while querying for an remote control event. [ 767.481294][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 767.481309][ T29] audit: type=1400 audit(1732532745.475:12408): avc: denied { read } for pid=5503 comm="dhcpcd" name="n69" dev="tmpfs" ino=1065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 767.520255][T10520] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 767.581449][T16116] m920x_read = error: -19 [ 767.585020][T10520] usb 4-1: device descriptor read/8, error -71 [ 767.585791][T16116] dvb-usb: error while querying for an remote control event. [ 767.633340][ T29] audit: type=1400 audit(1732532745.475:12409): avc: denied { open } for pid=5503 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=1065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 767.867484][T16525] Bluetooth: MGMT ver 1.23 [ 767.877669][ T29] audit: type=1400 audit(1732532745.475:12410): avc: denied { getattr } for pid=5503 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=1065 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 767.900959][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.908887][T10520] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 768.263657][T15313] m920x_read = error: -19 [ 768.268008][T15313] dvb-usb: error while querying for an remote control event. [ 768.293276][T12680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 768.305186][T12680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 768.317992][T12680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 768.333425][T12680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 768.338355][T12680] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 768.346263][T12680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 768.354361][T16528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 768.354379][T16528] audit: audit_lost=112 audit_rate_limit=0 audit_backlog_limit=64 [ 768.354394][T16528] audit: backlog limit exceeded [ 768.365563][T16493] audit: audit_backlog=65 > audit_backlog_limit=64 [ 768.365581][T16493] audit: audit_lost=113 audit_rate_limit=0 audit_backlog_limit=64 [ 768.365598][T16493] audit: backlog limit exceeded [ 768.380891][T15313] m920x_read = error: -19 [ 768.380959][T15313] dvb-usb: error while querying for an remote control event. [ 768.425778][T10520] usb 4-1: device descriptor read/8, error -71 [ 768.450651][T16524] audit: audit_backlog=65 > audit_backlog_limit=64 [ 768.491443][T15313] m920x_read = error: -19 [ 768.491529][T15313] dvb-usb: error while querying for an remote control event. [ 768.535449][T10520] usb usb4-port1: unable to enumerate USB device [ 768.610978][T15313] m920x_read = error: -19 [ 768.611062][T15313] dvb-usb: error while querying for an remote control event. [ 768.731476][T15313] m920x_read = error: -19 [ 768.731557][T15313] dvb-usb: error while querying for an remote control event. [ 768.850869][T15313] m920x_read = error: -19 [ 768.850960][T15313] dvb-usb: error while querying for an remote control event. [ 768.960707][T15313] m920x_read = error: -19 [ 768.965161][T15313] dvb-usb: error while querying for an remote control event. [ 769.096962][T15313] m920x_read = error: -19 [ 769.145729][T15313] dvb-usb: error while querying for an remote control event. [ 769.264591][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2057'. [ 769.291057][T16543] netlink: 'syz.1.2057': attribute type 5 has an invalid length. [ 769.400986][T15313] m920x_read = error: -19 [ 769.405361][T15313] dvb-usb: error while querying for an remote control event. [ 769.419275][T16543] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.428295][T16543] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.437358][T16543] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.446102][T16543] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.552592][ T5932] m920x_read = error: -19 [ 769.557058][ T5932] dvb-usb: error while querying for an remote control event. [ 769.914437][ T5932] m920x_read = error: -19 [ 769.949012][ T5932] dvb-usb: error while querying for an remote control event. [ 770.018511][T16543] vxlan0: entered promiscuous mode [ 770.165298][ T5932] m920x_read = error: -19 [ 770.215610][ T5932] dvb-usb: error while querying for an remote control event. [ 770.455542][ T5932] m920x_read = error: -19 [ 770.459937][ T5932] dvb-usb: error while querying for an remote control event. [ 770.572279][ T5932] m920x_read = error: -19 [ 770.582285][ T5932] dvb-usb: error while querying for an remote control event. [ 770.598275][T16524] chnl_net:caif_netlink_parms(): no params data found [ 770.630426][ T5853] Bluetooth: hci2: command tx timeout [ 771.022541][T16524] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.035532][ T5932] m920x_read = error: -19 [ 771.041527][ T5932] dvb-usb: error while querying for an remote control event. [ 771.049583][T16524] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.073240][T16524] bridge_slave_0: entered allmulticast mode [ 771.080158][T16524] bridge_slave_0: entered promiscuous mode [ 771.108584][T16524] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.125644][T16524] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.135795][T16524] bridge_slave_1: entered allmulticast mode [ 771.150764][T15313] m920x_read = error: -19 [ 771.155340][T15313] dvb-usb: error while querying for an remote control event. [ 771.191751][T16524] bridge_slave_1: entered promiscuous mode [ 771.283400][ T5932] m920x_read = error: -19 [ 771.287771][ T5932] dvb-usb: error while querying for an remote control event. [ 771.322588][T16576] FAULT_INJECTION: forcing a failure. [ 771.322588][T16576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.337675][T16524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.354663][T16576] CPU: 0 UID: 0 PID: 16576 Comm: syz.0.2063 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 771.359465][T16524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.365085][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.365118][T16576] Call Trace: [ 771.365126][T16576] [ 771.365135][T16576] dump_stack_lvl+0x16c/0x1f0 [ 771.395055][T16576] should_fail_ex+0x497/0x5b0 [ 771.399764][T16576] _copy_to_user+0x32/0xd0 [ 771.404211][T16576] simple_read_from_buffer+0xd0/0x160 [ 771.409610][T16576] proc_fail_nth_read+0x198/0x270 [ 771.414663][T16576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.420239][T16576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.425815][T16576] vfs_read+0x1df/0xbe0 [ 771.429993][T16576] ? __fget_files+0x1fc/0x3a0 [ 771.434686][T16576] ? __pfx___mutex_lock+0x10/0x10 [ 771.439727][T16576] ? __pfx_vfs_read+0x10/0x10 [ 771.444426][T16576] ? __fget_files+0x206/0x3a0 [ 771.449117][T16576] ksys_read+0x12b/0x250 [ 771.453362][T16576] ? __pfx_ksys_read+0x10/0x10 [ 771.458147][T16576] do_syscall_64+0xcd/0x250 [ 771.462667][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.468614][T16576] RIP: 0033:0x7f1b7277d25c [ 771.473039][T16576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 771.492661][T16576] RSP: 002b:00007f1b73492030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 771.501076][T16576] RAX: ffffffffffffffda RBX: 00007f1b72935fa0 RCX: 00007f1b7277d25c [ 771.509043][T16576] RDX: 000000000000000f RSI: 00007f1b734920a0 RDI: 0000000000000005 [ 771.517009][T16576] RBP: 00007f1b73492090 R08: 0000000000000000 R09: 0000000000000000 [ 771.524987][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.532969][T16576] R13: 0000000000000000 R14: 00007f1b72935fa0 R15: 00007ffe25910d58 [ 771.540955][T16576] [ 771.544169][ T5932] m920x_read = error: -19 [ 771.560411][ T5932] dvb-usb: error while querying for an remote control event. [ 771.564198][ T967] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 771.584027][T16524] team0: Port device team_slave_0 added [ 771.628606][T16524] team0: Port device team_slave_1 added [ 771.784929][ T967] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 771.794221][T16524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.818257][ T967] usb 2-1: config 0 has no interface number 0 [ 771.826503][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.865741][ T967] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 771.904623][ T967] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid maxpacket 128, setting to 64 [ 771.946463][T16524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.973745][ T967] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 772.026390][T16524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.059213][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.080468][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.111447][ T967] usb 2-1: Product: syz [ 772.119171][ T967] usb 2-1: Manufacturer: syz [ 772.137939][ T967] usb 2-1: SerialNumber: syz [ 772.163238][ T967] usb 2-1: config 0 descriptor?? [ 772.171135][T16574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 772.178413][T16574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 772.210517][T16524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.429864][T16524] hsr_slave_0: entered promiscuous mode [ 772.449374][T16524] hsr_slave_1: entered promiscuous mode [ 772.475455][T16524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.497953][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 772.497969][ T29] audit: type=1400 audit(1732532750.495:12824): avc: denied { recv } for pid=16583 comm="syz.0.2065" saddr=10.128.0.169 src=30006 daddr=10.128.0.190 dest=59634 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 772.555596][T16524] Cannot create hsr debugfs directory [ 772.639814][T16116] m920x_read = error: -19 [ 772.645227][T16116] dvb-usb: error while querying for an remote control event. [ 772.712244][ T5853] Bluetooth: hci2: command tx timeout [ 772.723451][ T967] usb 2-1: USB disconnect, device number 41 [ 772.794347][T16116] m920x_read = error: -19 [ 772.798714][T16116] dvb-usb: error while querying for an remote control event. [ 772.812250][ T29] audit: type=1400 audit(1732532750.495:12825): avc: denied { recv } for pid=16583 comm="syz.0.2065" saddr=10.128.0.169 src=30006 daddr=10.128.0.190 dest=59634 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 772.861833][ T5932] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 772.864578][ T29] audit: type=1400 audit(1732532750.535:12826): avc: denied { read write } for pid=10823 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.988026][ T29] audit: type=1400 audit(1732532750.535:12827): avc: denied { open } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.030693][T16116] m920x_read = error: -19 [ 773.030813][T10520] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 773.035041][T16116] dvb-usb: error while querying for an remote control event. [ 773.096032][ T29] audit: type=1400 audit(1732532750.535:12828): avc: denied { ioctl } for pid=10823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3036 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.190506][T16116] m920x_read = error: -19 [ 773.194980][T16116] dvb-usb: error while querying for an remote control event. [ 773.210395][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 773.220750][T10520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 773.230845][T10520] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 773.254084][ T5932] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 773.274527][ T29] audit: type=1400 audit(1732532750.575:12829): avc: denied { create } for pid=16573 comm="syz.1.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 773.288825][T10520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 773.294597][ T5932] usb 4-1: config 0 has no interface number 0 [ 773.294638][ T5932] usb 4-1: config 0 interface 12 has no altsetting 0 [ 773.353206][ T5932] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 773.391484][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.399505][ T5932] usb 4-1: Product: syz [ 773.400846][T10520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 773.403980][T16116] m920x_read = error: -19 [ 773.430387][ T29] audit: type=1400 audit(1732532750.575:12830): avc: denied { setopt } for pid=16573 comm="syz.1.2062" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 773.443114][T10520] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 773.482049][T16116] dvb-usb: error while querying for an remote control event. [ 773.489483][ T5932] usb 4-1: Manufacturer: syz [ 773.521065][T10520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.527543][ T5932] usb 4-1: SerialNumber: syz [ 773.535710][ T29] audit: type=1400 audit(1732532750.595:12831): avc: denied { connect } for pid=16573 comm="syz.1.2062" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 773.560265][ T5503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 773.567474][T10520] usb 1-1: Product: syz [ 773.572222][T10520] usb 1-1: Manufacturer: syz [ 773.582951][ T5503] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 773.591230][T10520] usb 1-1: SerialNumber: syz [ 773.592615][ T5932] usb 4-1: config 0 descriptor?? [ 773.616292][T10520] usb 1-1: config 0 descriptor?? [ 773.620452][T16116] m920x_read = error: -19 [ 773.625631][T16116] dvb-usb: error while querying for an remote control event. [ 773.637827][T16590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 773.740770][T16116] m920x_read = error: -19 [ 774.065715][T16116] dvb-usb: error while querying for an remote control event. [ 774.210753][T16116] m920x_read = error: -19 [ 774.225666][T16116] dvb-usb: error while querying for an remote control event. [ 774.371253][T16116] m920x_read = error: -19 [ 774.375657][T16116] dvb-usb: error while querying for an remote control event. [ 774.468487][T10520] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 774.488785][T10520] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 774.523548][ C0] powermate: config urb returned -71 [ 774.529122][ C0] powermate: config urb returned -71 [ 774.534755][ C0] powermate: config urb returned -71 [ 774.540857][ C0] powermate: config urb returned -71 [ 774.562019][T16116] m920x_read = error: -19 [ 774.562525][T10520] usb 1-1: USB disconnect, device number 50 [ 774.566383][T16116] dvb-usb: error while querying for an remote control event. [ 774.566402][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 774.688666][T16116] m920x_read = error: -19 [ 774.693241][T16116] dvb-usb: error while querying for an remote control event. [ 774.791871][ T5853] Bluetooth: hci2: command tx timeout [ 774.861536][T16116] m920x_read = error: -19 [ 774.866529][T16116] dvb-usb: error while querying for an remote control event. [ 775.390487][T10520] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 775.479863][T16116] m920x_read = error: -19 [ 775.484878][T16116] dvb-usb: error while querying for an remote control event. [ 775.495122][ T5932] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 775.504837][ T5932] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 775.512257][ T5932] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 775.533119][ T5932] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 775.560883][ T5932] usb 4-1: USB disconnect, device number 31 [ 775.571460][T10520] usb 3-1: Using ep0 maxpacket: 32 [ 775.610756][T16116] m920x_read = error: -19 [ 775.611590][T10520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.621063][T16116] dvb-usb: error while querying for an remote control event. [ 776.021803][T10520] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 776.032265][T10520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.063071][T16524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 776.082992][T10520] usb 3-1: config 0 descriptor?? [ 776.118669][T16524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 776.160492][ T5932] m920x_read = error: -19 [ 776.169665][ T5932] dvb-usb: error while querying for an remote control event. [ 776.545237][ T5932] m920x_read = error: -19 [ 776.572871][ T5932] dvb-usb: error while querying for an remote control event. [ 776.575991][T16524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 776.659613][T16524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 776.711925][ T5932] m920x_read = error: -19 [ 776.716292][ T5932] dvb-usb: error while querying for an remote control event. [ 776.765000][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.797138][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.846253][T10520] ryos 0003:1E7D:31CE.0021: unknown main item tag 0x4 [ 776.865340][T16619] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2073'. [ 776.874771][ T5932] m920x_read = error: -19 [ 776.874852][T10520] ryos 0003:1E7D:31CE.0021: item fetching failed at offset 2/5 [ 776.879098][ T5932] dvb-usb: error while querying for an remote control event. [ 776.895180][ T5853] Bluetooth: hci2: command tx timeout [ 776.918212][T10520] ryos 0003:1E7D:31CE.0021: parse failed [ 776.970830][T10520] ryos 0003:1E7D:31CE.0021: probe with driver ryos failed with error -22 [ 777.034648][T16524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.041605][T15313] m920x_read = error: -19 [ 777.056339][T15313] dvb-usb: error while querying for an remote control event. [ 777.061587][T16619] x_tables: duplicate underflow at hook 3 [ 777.082965][ T5932] usb 3-1: USB disconnect, device number 48 [ 777.132061][T16524] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.163545][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.170709][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.199026][T10668] m920x_read = error: -19 [ 777.220637][T10668] dvb-usb: error while querying for an remote control event. [ 777.273163][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.280290][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.351238][T10668] m920x_read = error: -19 [ 777.355611][T10668] dvb-usb: error while querying for an remote control event. [ 777.409140][T16524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.501829][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 777.501845][ T29] audit: type=1400 audit(1732532755.505:13236): avc: denied { search } for pid=16633 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.570617][T10668] m920x_read = error: -19 [ 777.584565][T10668] dvb-usb: error while querying for an remote control event. [ 777.635379][ T29] audit: type=1400 audit(1732532755.505:13237): avc: denied { read } for pid=16633 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.737637][ T29] audit: type=1400 audit(1732532755.505:13238): avc: denied { open } for pid=16633 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.793246][T10668] m920x_read = error: -19 [ 777.797623][T10668] dvb-usb: error while querying for an remote control event. [ 777.808553][ T29] audit: type=1400 audit(1732532755.505:13239): avc: denied { getattr } for pid=16633 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.834042][ C1] vkms_vblank_simulate: vblank timer overrun [ 777.905154][ T29] audit: type=1400 audit(1732532755.505:13240): avc: denied { getattr } for pid=16633 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 777.931842][T10668] m920x_read = error: -19 [ 777.937577][T10668] dvb-usb: error while querying for an remote control event. [ 778.046937][T16649] --map-set only usable from mangle table [ 778.056343][ C0] ================================================================== [ 778.064430][ C0] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 778.072261][ C0] Read of size 8 at addr ffff88807c05c498 by task syz.2.2079/16647 [ 778.074219][ T29] audit: type=1400 audit(1732532755.535:13241): avc: denied { search } for pid=16635 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.080229][ C0] [ 778.080240][ C0] CPU: 0 UID: 0 PID: 16647 Comm: syz.2.2079 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 778.080267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 778.102604][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.104860][ C0] Call Trace: [ 778.132818][T10668] m920x_read = error: -19 [ 778.134507][ C0] [ 778.134518][ C0] dump_stack_lvl+0x116/0x1f0 [ 778.138841][T10668] dvb-usb: error while querying for an remote control event. [ 778.141742][ C0] print_report+0xc3/0x620 [ 778.141771][ C0] ? __virt_addr_valid+0x5e/0x590 [ 778.163280][ C0] ? __phys_addr+0xc6/0x150 [ 778.167811][ C0] kasan_report+0xd9/0x110 [ 778.172252][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 778.177380][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 778.182524][ C0] selinux_ip_output+0x1e0/0x1f0 [ 778.187474][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 778.192955][ C0] nf_hook_slow+0xbb/0x200 [ 778.197409][ C0] nf_hook+0x386/0x6d0 [ 778.201505][ C0] ? __pfx_dst_output+0x10/0x10 [ 778.206368][ C0] ? __pfx_nf_hook+0x10/0x10 [ 778.210983][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 778.216815][ C0] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 778.222393][ C0] ? __pfx_dst_output+0x10/0x10 [ 778.223258][T16630] audit: audit_backlog=65 > audit_backlog_limit=64 [ 778.227240][ C0] ? __ip_make_skb+0x1150/0x1d00 [ 778.227263][ C0] ? do_csum+0x26f/0x2d0 [ 778.227292][ C0] __ip_local_out+0x339/0x640 [ 778.247995][ C0] ? __pfx_dst_output+0x10/0x10 [ 778.252389][T16524] audit: audit_backlog=65 > audit_backlog_limit=64 [ 778.252845][ C0] ip_push_pending_frames+0xa0/0x5b0 [ 778.264620][ C0] ip_send_unicast_reply+0xd0e/0x1650 [ 778.270015][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 778.270392][T16524] audit: audit_lost=131 audit_rate_limit=0 audit_backlog_limit=64 [ 778.275825][ C0] ? sk_free+0x6a/0x90 [ 778.275853][ C0] ? tcp_v4_rcv+0x3432/0x4390 [ 778.292251][T10668] m920x_read = error: -19 [ 778.292321][ C0] ? ip_protocol_deliver_rcu+0xba/0x4c0 [ 778.296759][T10668] dvb-usb: error while querying for an remote control event. [ 778.302141][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 778.302176][ C0] ? mark_lock+0xb5/0xc60 [ 778.319104][ C0] ? tcp_v4_send_reset+0xd35/0x2f20 [ 778.324325][ C0] tcp_v4_send_reset+0x129b/0x2f20 [ 778.329454][ C0] ? hlock_class+0x4e/0x130 [ 778.329946][T16524] audit: backlog limit exceeded [ 778.333969][ C0] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 778.333998][ C0] ? tcp_parse_options+0x1f5/0x11b0 [ 778.334037][ C0] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 778.334066][ C0] ? __asan_memmove+0x3c/0x60 [ 778.334090][ C0] ? tcp_v4_rcv+0x371d/0x4390 [ 778.334117][ C0] tcp_v4_rcv+0x371d/0x4390 [ 778.334154][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 778.334185][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 778.334219][ C0] ? rcu_is_watching+0x12/0xc0 [ 778.334253][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 778.334281][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 778.334317][ C0] ip_local_deliver_finish+0x316/0x570 [ 778.334351][ C0] ip_local_deliver+0x18e/0x1f0 [ 778.405284][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 778.410684][ C0] ip_rcv+0x2c3/0x5d0 [ 778.414689][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 778.419215][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 778.425129][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 778.431558][ C0] ? rcu_is_watching+0x12/0xc0 [ 778.436341][ C0] ? process_backlog+0x3f1/0x15f0 [ 778.441382][ C0] ? process_backlog+0x3f1/0x15f0 [ 778.446418][ C0] __netif_receive_skb+0x1d/0x160 [ 778.451457][ C0] process_backlog+0x443/0x15f0 [ 778.456326][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 778.461719][ C0] net_rx_action+0xa94/0x1010 [ 778.466417][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 778.471531][ C0] ? __pfx_mark_lock+0x10/0x10 [ 778.476274][ C0] ? run_timer_base+0x11c/0x190 [ 778.481115][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 778.486327][ C0] ? sched_clock+0x38/0x60 [ 778.488750][T10668] m920x_read = error: -19 [ 778.490755][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 778.490789][ C0] ? mark_held_locks+0x9f/0xe0 [ 778.490825][ C0] handle_softirqs+0x213/0x8f0 [ 778.490860][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 778.490892][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 778.519828][ C0] do_softirq+0xb2/0xf0 [ 778.523982][ C0] [ 778.526892][ C0] [ 778.529810][ C0] __local_bh_enable_ip+0x100/0x120 [ 778.535000][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 778.540115][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 778.545036][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 778.550130][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 778.555655][ C0] ? hlock_class+0x4e/0x130 [ 778.560142][ C0] ? mark_lock+0xb5/0xc60 [ 778.564454][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 778.569639][ C0] ? selinux_ip_postroute+0x73b/0xde0 [ 778.574997][ C0] ? __pfx_mark_lock+0x10/0x10 [ 778.579747][ C0] ? find_held_lock+0x2d/0x110 [ 778.584505][ C0] ? mark_held_locks+0x9f/0xe0 [ 778.589258][ C0] ip_finish_output2+0xc6c/0x2150 [ 778.594275][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 778.599720][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 778.604556][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 778.609739][ C0] __ip_finish_output+0x49e/0x950 [ 778.614764][ C0] ip_finish_output+0x35/0x380 [ 778.619519][ C0] ip_output+0x13b/0x2a0 [ 778.623742][ C0] ? __pfx_ip_output+0x10/0x10 [ 778.628506][ C0] ip_local_out+0x33e/0x4a0 [ 778.632992][ C0] __ip_queue_xmit+0x777/0x1970 [ 778.637825][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 778.642915][ C0] __tcp_transmit_skb+0x2b39/0x3df0 [ 778.648100][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 778.653628][ C0] ? __pfx_lock_release+0x10/0x10 [ 778.658634][ C0] ? ktime_get+0x206/0x300 [ 778.663032][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.668239][ C0] tcp_write_xmit+0x12b1/0x8560 [ 778.673097][ C0] ? tcp_current_mss+0x27e/0x500 [ 778.678022][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 778.683553][ C0] tcp_send_fin+0x154/0xc70 [ 778.688042][ C0] ? __pfx_tcp_send_fin+0x10/0x10 [ 778.693049][ C0] ? mark_held_locks+0x9f/0xe0 [ 778.697794][ C0] tcp_shutdown+0x12b/0x170 [ 778.702283][ C0] mptcp_subflow_shutdown+0x1c3/0x380 [ 778.707644][ C0] mptcp_check_send_data_fin+0x24a/0x450 [ 778.713266][ C0] __mptcp_close+0x8cb/0xb90 [ 778.717837][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 778.723191][ C0] ? __pfx___mptcp_close+0x10/0x10 [ 778.728293][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 778.733564][ C0] mptcp_close+0x28/0xe0 [ 778.737792][ C0] inet_release+0x13c/0x280 [ 778.742278][ C0] __sock_release+0xb0/0x270 [ 778.746852][ C0] ? __pfx_sock_close+0x10/0x10 [ 778.751683][ C0] sock_close+0x1c/0x30 [ 778.755821][ C0] __fput+0x3f8/0xb60 [ 778.759786][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.764971][ C0] task_work_run+0x14e/0x250 [ 778.769558][ C0] ? __pfx_task_work_run+0x10/0x10 [ 778.774671][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 778.780384][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 778.786030][ C0] do_syscall_64+0xda/0x250 [ 778.790532][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.796417][ C0] RIP: 0033:0x7fb2cf37e819 [ 778.800810][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.820400][ C0] RSP: 002b:00007fff97158198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 778.828798][ C0] RAX: 0000000000000000 RBX: 00000000000bde8c RCX: 00007fb2cf37e819 [ 778.836751][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 778.844715][ C0] RBP: 00007fb2cf537ba0 R08: 0000000000000001 R09: 00007fff9715848f [ 778.852663][ C0] R10: 00007fb2cf200000 R11: 0000000000000246 R12: 00000000000bdf65 [ 778.860615][ C0] R13: 00007fb2cf535fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 778.868569][ C0] [ 778.871564][ C0] [ 778.873863][ C0] The buggy address belongs to the object at ffff88807c05c420 [ 778.873863][ C0] which belongs to the cache tw_sock_TCPv6 of size 288 [ 778.888065][ C0] The buggy address is located 120 bytes inside of [ 778.888065][ C0] allocated 288-byte region [ffff88807c05c420, ffff88807c05c540) [ 778.902219][ C0] [ 778.904536][ C0] The buggy address belongs to the physical page: [ 778.910936][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c05c [ 778.919670][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 778.928143][ C0] memcg:ffff888032c3a201 [ 778.932369][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 778.939896][ C0] page_type: f5(slab) [ 778.943856][ C0] raw: 00fff00000000040 ffff88803009a780 dead000000000122 0000000000000000 [ 778.952420][ C0] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff888032c3a201 [ 778.960982][ C0] head: 00fff00000000040 ffff88803009a780 dead000000000122 0000000000000000 [ 778.969631][ C0] head: 0000000000000000 0000000080170017 00000001f5000000 ffff888032c3a201 [ 778.978291][ C0] head: 00fff00000000001 ffffea0001f01701 ffffffffffffffff 0000000000000000 [ 778.986940][ C0] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 778.995583][ C0] page dumped because: kasan: bad access detected [ 779.001974][ C0] page_owner tracks the page as allocated [ 779.007666][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10561, tgid 10561 (syz.9.1028), ts 367494330952, free_ts 367467808657 [ 779.027091][ C0] post_alloc_hook+0x2d1/0x350 [ 779.031844][ C0] get_page_from_freelist+0xfce/0x2f80 [ 779.037285][ C0] __alloc_pages_noprof+0x223/0x25a0 [ 779.042550][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 779.047991][ C0] new_slab+0x2c9/0x410 [ 779.052130][ C0] ___slab_alloc+0xdac/0x1880 [ 779.056877][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 779.062231][ C0] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 779.067680][ C0] inet_twsk_alloc+0x120/0x970 [ 779.072428][ C0] tcp_time_wait+0x5f/0xe10 [ 779.076919][ C0] tcp_fin+0x418/0x500 [ 779.080967][ C0] tcp_data_queue+0x1d61/0x4d80 [ 779.085799][ C0] tcp_rcv_state_process+0xf6f/0x4c40 [ 779.091152][ C0] tcp_v6_do_rcv+0x492/0x1730 [ 779.095818][ C0] __release_sock+0x14c/0x400 [ 779.100475][ C0] __tcp_close+0x4f3/0xff0 [ 779.104872][ C0] page last free pid 5198 tgid 5198 stack trace: [ 779.111173][ C0] free_unref_page+0x661/0x1080 [ 779.116006][ C0] __mmdrop+0xd5/0x460 [ 779.120077][ C0] finish_task_switch.isra.0+0x7af/0xcc0 [ 779.125690][ C0] __schedule+0xe60/0x5ad0 [ 779.130090][ C0] schedule+0xe7/0x350 [ 779.134158][ C0] syslog_print+0x214/0x5d0 [ 779.138649][ C0] do_syslog+0x3e1/0x6c0 [ 779.142967][ C0] __x64_sys_syslog+0x74/0xb0 [ 779.147629][ C0] do_syscall_64+0xcd/0x250 [ 779.152112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.158003][ C0] [ 779.160306][ C0] Memory state around the buggy address: [ 779.165916][ C0] ffff88807c05c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 779.173955][ C0] ffff88807c05c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 779.181997][ C0] >ffff88807c05c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 779.190038][ C0] ^ [ 779.194890][ C0] ffff88807c05c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 779.202938][ C0] ffff88807c05c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 779.210974][ C0] ================================================================== [ 779.219160][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 779.226362][ C0] CPU: 0 UID: 0 PID: 16647 Comm: syz.2.2079 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 779.236778][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 779.246813][ C0] Call Trace: [ 779.250071][ C0] [ 779.252896][ C0] dump_stack_lvl+0x3d/0x1f0 [ 779.257567][ C0] panic+0x71d/0x800 [ 779.261452][ C0] ? mark_held_locks+0x9f/0xe0 [ 779.266201][ C0] ? __pfx_panic+0x10/0x10 [ 779.270617][ C0] ? irqentry_exit+0x3b/0x90 [ 779.275225][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 779.280413][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 779.285510][ C0] check_panic_on_warn+0xab/0xb0 [ 779.290440][ C0] end_report+0x117/0x180 [ 779.294777][ C0] kasan_report+0xe9/0x110 [ 779.299199][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 779.304319][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 779.309413][ C0] selinux_ip_output+0x1e0/0x1f0 [ 779.314332][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 779.319769][ C0] nf_hook_slow+0xbb/0x200 [ 779.324173][ C0] nf_hook+0x386/0x6d0 [ 779.328236][ C0] ? __pfx_dst_output+0x10/0x10 [ 779.333072][ C0] ? __pfx_nf_hook+0x10/0x10 [ 779.337658][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 779.343455][ C0] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 779.349014][ C0] ? __pfx_dst_output+0x10/0x10 [ 779.353844][ C0] ? __ip_make_skb+0x1150/0x1d00 [ 779.358761][ C0] ? do_csum+0x26f/0x2d0 [ 779.362991][ C0] __ip_local_out+0x339/0x640 [ 779.367646][ C0] ? __pfx_dst_output+0x10/0x10 [ 779.372477][ C0] ip_push_pending_frames+0xa0/0x5b0 [ 779.377741][ C0] ip_send_unicast_reply+0xd0e/0x1650 [ 779.383096][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 779.388886][ C0] ? sk_free+0x6a/0x90 [ 779.392947][ C0] ? tcp_v4_rcv+0x3432/0x4390 [ 779.397697][ C0] ? ip_protocol_deliver_rcu+0xba/0x4c0 [ 779.403247][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 779.408530][ C0] ? mark_lock+0xb5/0xc60 [ 779.412839][ C0] ? tcp_v4_send_reset+0xd35/0x2f20 [ 779.418017][ C0] tcp_v4_send_reset+0x129b/0x2f20 [ 779.423111][ C0] ? hlock_class+0x4e/0x130 [ 779.427605][ C0] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 779.433047][ C0] ? tcp_parse_options+0x1f5/0x11b0 [ 779.438231][ C0] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 779.444453][ C0] ? __asan_memmove+0x3c/0x60 [ 779.449110][ C0] ? tcp_v4_rcv+0x371d/0x4390 [ 779.453767][ C0] tcp_v4_rcv+0x371d/0x4390 [ 779.458266][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 779.463110][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 779.468635][ C0] ? rcu_is_watching+0x12/0xc0 [ 779.473387][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 779.478220][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 779.483595][ C0] ip_local_deliver_finish+0x316/0x570 [ 779.489036][ C0] ip_local_deliver+0x18e/0x1f0 [ 779.493872][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 779.499228][ C0] ip_rcv+0x2c3/0x5d0 [ 779.503196][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 779.507679][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 779.513556][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 779.519953][ C0] ? rcu_is_watching+0x12/0xc0 [ 779.524705][ C0] ? process_backlog+0x3f1/0x15f0 [ 779.529706][ C0] ? process_backlog+0x3f1/0x15f0 [ 779.534707][ C0] __netif_receive_skb+0x1d/0x160 [ 779.539710][ C0] process_backlog+0x443/0x15f0 [ 779.544539][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 779.549890][ C0] net_rx_action+0xa94/0x1010 [ 779.554547][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 779.559653][ C0] ? __pfx_mark_lock+0x10/0x10 [ 779.564397][ C0] ? run_timer_base+0x11c/0x190 [ 779.569243][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 779.574428][ C0] ? sched_clock+0x38/0x60 [ 779.578848][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 779.583681][ C0] ? mark_held_locks+0x9f/0xe0 [ 779.588425][ C0] handle_softirqs+0x213/0x8f0 [ 779.593182][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 779.598447][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 779.603535][ C0] do_softirq+0xb2/0xf0 [ 779.607674][ C0] [ 779.610582][ C0] [ 779.613490][ C0] __local_bh_enable_ip+0x100/0x120 [ 779.618668][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 779.623760][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 779.628675][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 779.633682][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 779.639036][ C0] ? hlock_class+0x4e/0x130 [ 779.643552][ C0] ? mark_lock+0xb5/0xc60 [ 779.647904][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 779.653103][ C0] ? selinux_ip_postroute+0x73b/0xde0 [ 779.658465][ C0] ? __pfx_mark_lock+0x10/0x10 [ 779.663222][ C0] ? find_held_lock+0x2d/0x110 [ 779.667991][ C0] ? mark_held_locks+0x9f/0xe0 [ 779.672739][ C0] ip_finish_output2+0xc6c/0x2150 [ 779.677754][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 779.683198][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 779.688032][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 779.693215][ C0] __ip_finish_output+0x49e/0x950 [ 779.698228][ C0] ip_finish_output+0x35/0x380 [ 779.702983][ C0] ip_output+0x13b/0x2a0 [ 779.707205][ C0] ? __pfx_ip_output+0x10/0x10 [ 779.711954][ C0] ip_local_out+0x33e/0x4a0 [ 779.716440][ C0] __ip_queue_xmit+0x777/0x1970 [ 779.721282][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 779.726385][ C0] __tcp_transmit_skb+0x2b39/0x3df0 [ 779.731574][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 779.737107][ C0] ? __pfx_lock_release+0x10/0x10 [ 779.742127][ C0] ? ktime_get+0x206/0x300 [ 779.746541][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 779.751724][ C0] tcp_write_xmit+0x12b1/0x8560 [ 779.756556][ C0] ? tcp_current_mss+0x27e/0x500 [ 779.761477][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 779.767005][ C0] tcp_send_fin+0x154/0xc70 [ 779.771500][ C0] ? __pfx_tcp_send_fin+0x10/0x10 [ 779.776524][ C0] ? mark_held_locks+0x9f/0xe0 [ 779.781268][ C0] tcp_shutdown+0x12b/0x170 [ 779.785752][ C0] mptcp_subflow_shutdown+0x1c3/0x380 [ 779.791103][ C0] mptcp_check_send_data_fin+0x24a/0x450 [ 779.796717][ C0] __mptcp_close+0x8cb/0xb90 [ 779.801290][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 779.806646][ C0] ? __pfx___mptcp_close+0x10/0x10 [ 779.811741][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 779.817006][ C0] mptcp_close+0x28/0xe0 [ 779.821233][ C0] inet_release+0x13c/0x280 [ 779.825719][ C0] __sock_release+0xb0/0x270 [ 779.830290][ C0] ? __pfx_sock_close+0x10/0x10 [ 779.835122][ C0] sock_close+0x1c/0x30 [ 779.839261][ C0] __fput+0x3f8/0xb60 [ 779.843241][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.848424][ C0] task_work_run+0x14e/0x250 [ 779.852993][ C0] ? __pfx_task_work_run+0x10/0x10 [ 779.858084][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 779.863785][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 779.869399][ C0] do_syscall_64+0xda/0x250 [ 779.873880][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.879756][ C0] RIP: 0033:0x7fb2cf37e819 [ 779.884157][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.903758][ C0] RSP: 002b:00007fff97158198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 779.912153][ C0] RAX: 0000000000000000 RBX: 00000000000bde8c RCX: 00007fb2cf37e819 [ 779.920100][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 779.928047][ C0] RBP: 00007fb2cf537ba0 R08: 0000000000000001 R09: 00007fff9715848f [ 779.935994][ C0] R10: 00007fb2cf200000 R11: 0000000000000246 R12: 00000000000bdf65 [ 779.943943][ C0] R13: 00007fb2cf535fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 779.951899][ C0] [ 779.955121][ C0] Kernel Offset: disabled [ 779.959431][ C0] Rebooting in 86400 seconds..