last executing test programs: 12m36.345358477s ago: executing program 0 (id=3059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}}, 0x20040080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_usb_connect$uac3(0x0, 0x98, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x384, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x22, 0x1b}, [@processing_unit={0x5, 0x24, 0x9, 0x1, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x2, 0x1, 0x5, 0x2, 0x3, 0x7, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3, 0x4}}}}}}}}]}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x13, 0x0}, 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x8}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x4, 0x1, 0x0, 0x3, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}}, 0xf9) syz_open_dev$dri(0x0, 0x7, 0x220042) socketpair$unix(0x1, 0x3, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) 12m32.690460636s ago: executing program 0 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (fail_nth: 8) 12m31.839745092s ago: executing program 0 (id=3068): syz_clone3(&(0x7f0000000300)={0x182000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x14955, &(0x7f00000001c0)={0x0, 0x40008335, 0x8000, 0x2, 0x331}, 0x0, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() chroot(&(0x7f0000000240)='./file2\x00') readv(r0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f0000000500)=""/59, 0x3b}], 0x4) socket(0x2b, 0x800, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0xffffffff800000a9, 0x39d, 0x4, 0x5c281ca0, 0x9, 0x0, 0x0, 0x100, 0x12af}}, 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 12m28.638274293s ago: executing program 0 (id=3073): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000080)=@ethtool_cmd={0x40, 0xffffffff, 0x8, 0x2, 0x4, 0x3, 0xa, 0x63, 0xd, 0x41, 0x3, 0x417b, 0x3, 0xc3, 0x8, 0x3, [0x7583, 0x4ca]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f210", 0x59) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f0000000100)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x800) 12m27.663149972s ago: executing program 0 (id=3077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x1) fcntl$notify(r5, 0x402, 0x2) write$binfmt_elf32(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4601040202be05000000000000020006000400000019000000380000005e020000d30a00000400200001"], 0x758) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xffffff5f, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1000000000000001}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/39, 0x0, 0x0, 0x3a}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x40000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 12m24.835214186s ago: executing program 0 (id=3082): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f0000000280)) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f0000000280)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x81, 0x1, &(0x7f0000000040)={0x0, "f045ab7e871ec7e18cbeecfc381bcec6b71fb2ce035ff4cb1e31f5a0b8fa7e9b86"}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 12m24.091491787s ago: executing program 32 (id=3082): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f0000000280)) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f0000000280)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x81, 0x1, &(0x7f0000000040)={0x0, "f045ab7e871ec7e18cbeecfc381bcec6b71fb2ce035ff4cb1e31f5a0b8fa7e9b86"}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4m9.831909853s ago: executing program 4 (id=4770): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0) 4m9.675702243s ago: executing program 4 (id=4771): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0xa7, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100d537}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 4m9.347961176s ago: executing program 4 (id=4775): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x242, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8005, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x40000002, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x41, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x5, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x7, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r0, &(0x7f0000000740)="605511a04273e925437138111c", 0xd, 0x8001, &(0x7f0000000780)=@hci={0x1d, 0x2, 0x1}, 0x80) 4m8.789074116s ago: executing program 4 (id=4777): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0xa541) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000001740)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fchdir(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r8, &(0x7f00000102c0)={0x2020}, 0x7) lseek(r2, 0x2, 0x4) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010180, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r9, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) signalfd4(r10, &(0x7f0000000000)={[0x3ff, 0x8]}, 0x8, 0x80000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x8, 0xdb0b5b474030073c, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0xc4, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8039}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x0, 0x52, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x30}, 0x2}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000380)=0xc) 4m7.227817851s ago: executing program 4 (id=4782): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000100)=0xd) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48978, 0x20000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff9}}]}]}, @IFLA_MASTER={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x440, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {0x0, 0xfff1}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x101, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x9, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x83, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x20003fe, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff05e, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x10007, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x8, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x100001, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x7e5c8ae379747d18}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r14, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m6.953307898s ago: executing program 4 (id=4784): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 4m6.028609198s ago: executing program 33 (id=4784): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 12.595616998s ago: executing program 3 (id=5653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r4) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000200)={r9, 0x40}, &(0x7f0000000240)=0x8) getsockname$packet(r7, &(0x7f0000000280), &(0x7f0000000380)=0x14) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000840)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x0, 0x0, 0x3}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0xfffffffd}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="658300000000ffdbdf2501000000080001007400000008000300", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x40806) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r15, 0x8983, &(0x7f0000001180)={0x1, 'xfrm0\x00', {}, 0x101}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r15, &(0x7f0000001080)={&(0x7f00000003c0), 0xc, &(0x7f0000001040)={&(0x7f0000000880)={0x7bc, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_TID_CONFIG={0x3cc, 0x11d, 0x0, 0x1, [{0x388, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x36c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x30, 0x24, 0x3, 0xc, 0x6, 0x48, 0xb]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x5}, {0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x10}, {0x7, 0x3}, {0x2}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x1}, {0x2, 0x9}, {0x2, 0x5}, {0x7}, {0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x5, 0x0, 0x87, 0x4, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x36, 0x24, 0x1b, 0x36, 0x18, 0x24, 0x24, 0x16, 0x1b, 0x12, 0xc, 0x1, 0x30, 0x72, 0x3, 0x1b, 0x36, 0xc, 0x9, 0x6, 0x9, 0xb, 0x12, 0x30, 0x30, 0x18, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xedb, 0x4, 0xe, 0x5, 0x6, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3ff, 0x7, 0x2, 0x10, 0x4, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x8}, {0x4}, {0x4, 0x3}, {0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x1, 0x1, 0x5c, 0x18, 0x0, 0x6, 0x2, 0x3, 0x2, 0x1b, 0xb, 0x60, 0x5, 0x4, 0xb, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x8c2, 0xf, 0x0, 0x4, 0x8, 0x9]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x1000, 0x4, 0x898, 0x7, 0x6, 0xb3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0xffff, 0x81, 0xa69, 0x7f, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x6}, {0x7, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {}, {0x4, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x3, 0x8}, {0x0, 0x6}, {0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x6}, {0x6, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x7}, {0x2, 0x9}, {0x6, 0x2}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0xa}, {0x4}, {0x6, 0x8}, {0x6}, {0x4, 0x5}, {0x1}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x1, 0x6c, 0x2, 0x6, 0x9, 0x9233973559f5aa6b, 0x9, 0x2]}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x9}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x2}, {0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {}, {0x2, 0x8}, {0x3, 0xa}, {0x3, 0x4}, {0x3, 0x1}, {0x4, 0x3}, {0x1}, {0x4, 0x8}, {0x4}, {0x2, 0x6}, {0x7}, {0x6, 0x9}, {0x7}, {0x7, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x4}, {0x4, 0x2}, {0x3}, {0x4, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x4, 0x2}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x4}, {}, {0x3, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x8}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd, 0x5, 0x0, 0x2, 0x3, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0xa}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0x3}, {0x3, 0x3}, {0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {}, {0x4, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x1}, {0x6}, {0x4, 0x3}, {0x3, 0x4}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0xfffe, 0x3, 0x8, 0x6, 0x7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x1, 0x4, 0xff80, 0x0, 0x3, 0x2]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5e50, 0x8, 0x3ff, 0x39, 0xa, 0x4, 0x80, 0x3e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff3, 0x2, 0x81, 0x4, 0x3, 0x7, 0x10, 0x8]}}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {}, {0x4, 0xa}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xdc0c, 0x0, 0x2, 0x1, 0x1800, 0x80, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x7}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x4}, {0x7}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x3}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x2}, {0x2}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x8}, {0x7, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x384, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x60c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffff8000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x2e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3, 0x3, 0x1000, 0x6, 0x200, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x216, 0x3, 0xbc81, 0x8, 0x5, 0xe058, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0xd, 0x200, 0x3, 0x7, 0x2, 0x3ff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc98e, 0x7, 0x9, 0xd4, 0x8, 0x111, 0xff, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x1000, 0x2e, 0x8, 0x4, 0xe, 0xfff9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd5f5, 0xff, 0x4, 0x9, 0xb, 0x8000, 0x0, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x5}, {0x3, 0x6}, {0x3, 0x6}, {0x4}, {0x7, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x17}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {}, {0x4, 0x8}, {0x0, 0x7}, {0x7}, {0x1}, {0x6, 0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x8}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x6}, {0x5, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x7}, {0x3, 0x8}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x17}, {0x4, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x4be, 0x400, 0x0, 0x895b, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7835, 0x5d86, 0xd8d, 0x9, 0x5, 0x1ff, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x9, 0x1, 0x100, 0x1, 0x2d, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xd, 0x1, 0x10, 0x6, 0xfff4, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc61, 0x1, 0x7fff, 0x1, 0x9, 0x7ff, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x7}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x5}, {0x6, 0xd}, {0x0, 0x3}, {0x7, 0x4}, {0x7, 0x2}, {0x3}, {0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x5, 0x8}, {0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x5, 0x3}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x2}, {0x4, 0x1}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6, 0x1, 0x2, 0x3ff, 0x2, 0xa29]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe, 0x2, 0x6, 0x3, 0x5, 0x5, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x6}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x3}, {0x7, 0xa}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x1, 0x7}, {0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x4}, {0x3, 0x4}, {0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x6}, {}, {0x7}, {0x0, 0x6}, {}, {}, {0x7, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x7}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x1b}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x3}, {0x1}, {0x3, 0x6}, {0x4, 0x3}, {0x7, 0xa}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x3}, {0x2}, {0x2, 0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x8}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x5, 0x9}, {0x3, 0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x36]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x7}, {0x2, 0x9}, {0x3}, {0x1, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x6}, {0x3, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0xf}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x7}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0x9}, {0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0xc, 0x12, 0xb, 0x36, 0x5, 0x4]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) 11.272506106s ago: executing program 3 (id=5656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) unshare(0x2c020400) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) socket(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x62, 0x50, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x40, 0x9, {0xa, 0x25, 0x25, 0x3, 0xb, 0x320}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x0, 0x0, {0xa, 0x25, 0x25, 0x4, 0x8, 0x5}}}}}}}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x1, 0x4, 0x401, 0x9, 0x2, "66c200", 0xffffff6c}}) pipe2(&(0x7f0000000180), 0x80080) 9.704181654s ago: executing program 6 (id=5660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000003f01f00810000006f08000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000da6dfdb4b94b85c6f0e5622eaf00"/41], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x1f}) ioctl$I2C_FUNCS(r4, 0x705, &(0x7f0000000040)=0x9) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000300)={0x15, 0x110, 0xfa08, {r7, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010200000000106a05840000000000006a119ba3000100000000090400000103005aee5a5b99f5fb96f7daec850000092100000001220b0009058103", @ANYRESHEX], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b000000b04f344ca67bab"], 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x4, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x100}, {0x200, 0x3ff}, {0x5, 0x1}, {0x7eb, 0x8}, {0x2007ff, 0xf0}, {0x6}], 0x3, 0xbf, 0x8, 0x0, 0x5}}, 0xfff}) io_uring_setup(0x5ba8, &(0x7f0000000440)={0x0, 0xfca0, 0x2, 0xfffffffd, 0x4}) 9.238778923s ago: executing program 3 (id=5662): r0 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x2, &(0x7f00000002c0)={0x2, 0xfffffffe}) r1 = syz_io_uring_setup(0xec4, &(0x7f00000000c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x74f}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x7ffe, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_uring_enter(r1, 0x20, 0xa9e7, 0x3, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x1000000000000007}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0xb, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r8, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 8.928034424s ago: executing program 1 (id=5663): r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$tcp_mem(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) close_range(r0, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x48810) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0x2, 0x18e71dbba339d5e2}, 0xfffffffffffffcdf) 8.70694835s ago: executing program 1 (id=5664): socket$kcm(0x11, 0x20000000000000a, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5900000002060300000000000000003051662f070000070500017a31000000000c00078008000640000000000500050002000000fe997f24364303883015671105000100"/103], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(r0, 0x0, 0x24044010) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, 0x0, 0x4184) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x61, 0x7) writev(r7, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r9, 0x0, &(0x7f0000000380), 0x80000) getsockopt$inet6_tcp_int(r8, 0x6, 0x11, 0x0, &(0x7f0000000240)=0xb) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x4000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) 8.242046184s ago: executing program 1 (id=5666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020067726574617030000000000000000000"], 0x2c}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d81482fb16) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)='*-^m{&^\x00', 0x480, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x400]}, {0x9, 0x5, 0xe553, 0x1fffffffe00}}, 0x70f, &(0x7f0000000140), &(0x7f0000000180)=0x3}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='illinois', 0x8) 6.577306509s ago: executing program 1 (id=5667): openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000001c0)="a086eae9603333149f7f9a15719a7620", &(0x7f0000000200)=@tcp=r0, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r1 = syz_io_uring_setup(0x4f8e, &(0x7f0000000040)={0x0, 0x8dc, 0x20000, 0x1, 0x362}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x19, [0x6, 0xf, 0x5, 0x6, 0x8, 0xa, 0x2, 0xa, 0xd, 0x7, 0x3, 0x0, 0x6, 0xf, 0x7, 0x3], 0x1, [0x7fff, 0x5, 0x2, 0x7, 0x17d, 0xa, 0x9, 0x2, 0x6, 0xd, 0x7d6c, 0x4038, 0x1, 0x63, 0x47e], [0xcb, 0x5, 0x100, 0x1, 0xfffc, 0x7c9, 0x2c, 0xa, 0x9, 0xea95, 0x7, 0x8348, 0xfffa, 0xf, 0x40, 0xaa]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x1000003, 0x1000, 0x0, 0x0, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) 6.460212547s ago: executing program 5 (id=5668): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x4000) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902"], 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) close(r0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x210, 0x210, 0x17c, 0xdc, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0xfe, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @multicast2, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) 6.010305965s ago: executing program 2 (id=5669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x80ff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb, [{0x9, 0x5, 0x0, 0x3, 0x6, 0xfffffffb}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x6, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x2, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25fc}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0xdd1e, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0x2, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x4, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10002, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdc, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.7543655s ago: executing program 6 (id=5670): socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="9f1d6354a2eb281438bb72042df7782a0122ed4a325534d75abca157dbea678b258ff89afdaf3833c436089b04fddb581551d434931e0990e272662ee46c53e2207b55da74af6d29d2619a42ee394c8758b1a3c8719883ffaf123523edd66d902081e3b1313598515a7c80330f3dff57716f000dc840232a2dcf2d8b724f4c77a4adc944668de60c67aa37102d0c903b7cf85a7f6442c2357eeb879627d6ee5ea7f96438e60d150f83362057c2c81f199710e271e005edcdbb1c66f8b6651f26b5e826d33cbe055451930fc623749bfc36", 0xd1}, {&(0x7f0000000340)="a6c88dd6650a2a8f33642893043f799944e368913e91805e65f91cc6eae92034a6db3df004b6d35033298e15d7f6bd1c7dd1", 0x32}, {&(0x7f00000004c0)="b77e7e3bfcd84d3b85724a9a564e328a", 0x10}], 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x100) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.603584886s ago: executing program 5 (id=5671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) socket$l2tp6(0xa, 0x2, 0x73) 5.240217957s ago: executing program 1 (id=5672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) unshare(0x2c020400) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) socket(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x62, 0x50, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x40, 0x9, {0xa, 0x25, 0x25, 0x3, 0xb, 0x320}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x0, 0x0, {0xa, 0x25, 0x25, 0x4, 0x8, 0x5}}}}}}}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x1, 0x4, 0x401, 0x9, 0x2, "66c200", 0xffffff6c}}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x42ea, 0x0) 5.216013451s ago: executing program 2 (id=5673): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5366b1b827f6001000493700", 0x10) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[0x0]) shutdown(r0, 0x1) 5.016965745s ago: executing program 5 (id=5674): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0xa, 0x6) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast1, 0x0}, &(0x7f0000000140)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x96f6d000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00ff001a0000012abd7000fcdbdf2502106002fe00ff0e00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x840) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000084, 0x0, 0x8001}]}) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0x30000200) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r1, @ANYRES16=r3], 0x1c}, 0x1, 0xff07}, 0x90) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6a}, 0x40c0001) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}, 0x30004001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0000b8a4d18a202dd9297000fcdbdf6404000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x24000005) 4.762243309s ago: executing program 3 (id=5675): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x4c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000240)={0x0, 0x35f, 0x80000, 0xffffffffffffffff, 0x0, 0x0}) symlink(&(0x7f0000000780)='./file0\x00', &(0x7f0000000040)='./file0\x00') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0x80800, 0x0, 0x10}, 0x18) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000200)=0xf, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x45880) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=""/1, 0x1) 4.756740739s ago: executing program 5 (id=5676): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x208500) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/134) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ff919f84f399c77c2ab152a703"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f5c79d2674119cb429fe662569"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200400d0}, 0x20000890) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FS_IOC_GETVERSION(r3, 0x80047601, &(0x7f0000000280)) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000002c0)={0x7, 0x5, 0xc26, 0x1, 0xffffffff, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000300)={0x4, 0xffff, 0x5, 0x63, 0x0, "4b2c9d4fc4d5559ef62ce9ed2a3856e61eb245", 0xfffffffd, 0x283}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ptrace$cont(0x1f, r5, 0x1ff, 0x0) ptrace$cont(0x9, r5, 0x234349b3, 0x7ff) syz_usb_connect$midi(0x3, 0xa9, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x1, 0x1, 0x2, 0x80, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x965, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xf5, 0x80}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x53a8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xb, 0x61}], [{{0x9, 0x5, 0x2, 0x8, 0x40, 0x4, 0x1b, 0x6, {0x12, 0x25, 0x1, 0xe, "7c3613971b0ab29fa3898d65f7ef"}}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0x7f, 0xf2, {0xc, 0x25, 0x1, 0x8, "6a4dd7aac71073b9"}}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x9, 0x7, 0x4, {0x8, 0x25, 0x1, 0x4, "9bd82083"}}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x6, 0xb, 0x3, {0x13, 0x25, 0x1, 0xf, "4b560706ca9dc70370f6d107a25eda"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0xd, 0xf, 0xdf, 0x40, 0xbc}, 0x44, &(0x7f00000004c0)={0x5, 0xf, 0x44, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0x5, 0x8, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x3, 0xfffd}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xbd, 0xf, 0x209, [0xff3f3f, 0x0, 0xff0030, 0xff000f, 0xcf, 0xc050]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x58, 0x4, 0x6}]}, 0x9, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3808}}, {0x59, &(0x7f00000005c0)=@string={0x59, 0x3, "2fc98ca6ee65691aed37d02ce26419f3b774808d23189e0c80e567b9e9b5da8617fafb98c1293487e57a0169d3438f4055555311e94371fbd54ee673f1c7556fe69c6597990f7c8420081f4c8205887d1f8b10db015f84"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x300a}}, {0x1e, &(0x7f00000006c0)=@string={0x1e, 0x3, "fc3887e0272b7eb86c39dca80f2bf8caa052cf553839677962474ff8"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x415}}, {0x61, &(0x7f0000000780)=@string={0x61, 0x3, "4d0ebdea4b6e2ba4e825d90afde7b14da6394a257c3bb099e9d5fb05c4624de0a335caa9b18162889182b3f52a3e1d752322419f05e8b0384dbf0fa0d2f324a9cfbb44fdde00240c5e208d67251b0c41909c93613b85d4c73bd4283279d2f9"}}]}) r6 = syz_clone(0x100, &(0x7f0000000880)="f194b02329bd36ec61604bf2d89fa2656e8846b83d97830b94cab249ecaadc02910938d75329c1223b373f3520a1218eff9295453edb6efd4794f364edc5ba0bbf47cf5b39846469088fe184267fe3277e7afec246e3306b2d32fe00e4d7a674261081cb8e10a6e1f6b8af94ce970634298dac963f534817baa40bd34547d16ee84ea53de012e204f3a326a996416cc323fcc6f85f992b86f0e8de09dc07ef31746abcf540b31274749a53d2719d9617e8e4a20a", 0xb4, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="5baa4e12512ca5b3b1d5db0f61dc5f2794a87c35f681c06b246e89257b6dd37adb645665bd6670956ceda545cce0727dfa6ec13e589ad4f1b46997a9d0c10da68be781d4c4dab28e409448bf5663") r7 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000e80)={0x9, 0x6, {r5}, {0xee01}, 0x5, 0x40000000}) fstat(r1, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000f40)={0xffffffffffffffff}, 0x4080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) fstat(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat$tcp_mem(0xffffff9c, &(0x7f0000001a40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r14 = openat$tcp_mem(0xffffff9c, &(0x7f0000001dc0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) statx(0xffffffffffffff9c, &(0x7f00000047c0)='./file0\x00', 0x2000, 0x800, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004900)={0x0, 0x0, 0x0}, &(0x7f0000004940)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000004980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006a40)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r20 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000006ac0), 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000006b80)=[{{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="17d363ebe62d04cda35da74256f401e0e3e72cc058886e9bf349dc0e914295f11280fe25c62a52ce71aacebcf7abc58b976eb537c7715484cc3e7fe64b909029009699c589a8680a2b3f950fcf00d977b8ce02ec9365325b2ca0e1222bbbc3363ebd8cda46a97c13702847b1b68eeec9", 0x70}, {&(0x7f0000000b40)="8370752de674961a3e23a8e215778fd546843529ced3da59376c35e8027c5b459719c288b6d53cd17a900a98de8f5ae407082c7db2f7e9e1b59d70e308bb1c82b0ed43f4e6b94752c0ac268178f30de9f25489cbbeeb2613aa6432a5d2d865b63de21ae689e23c816aaac0df77f08e75ebf5210cf86f4604dd33d5ef104fe8c346ff59f5c488b039cb664441a4c32976ef3eb6619bd01563c9c69f61028c2414f3887a8e3f527724e2167e267ab3ddf0aa10650f12a4edd56f7f45342aa235a9bc5cb38cb21a63836d5f5c1a4dd250ac4cbbd2051e37152a29c34e229962d7e9c287ace3a0", 0xe5}, {&(0x7f0000000c40)="36305e006c0dfe0cdd5a90acc64e918ea6dc367a0b059af7103eafb10bf5f44ec694dd0d69c76ebfc9b4dca25fe4757bf2e597cef296421ee5ec662ce17e67a9f13ea05f76ae139b99e0307d2cc2a881194cfff2e684cd3bf6e90c1f21d9a07f", 0x60}, {&(0x7f0000000cc0)="93dfcfb47c1cdc7434dcc5c2235aafde9beb34e84d9d05c8fd6611bd98b1417c1a8974e38c6ac85f694133304ed2974f73914ccc9dd7c85448a1a1ec7cfa5ef440137ed90d3fb3d2d4d128de15f631d7d9ad91686e42cfb1335c0a9254bc649a90", 0x61}, {&(0x7f0000000d40)="cde4b495211a27d44ce8bdc90d670ffb9c470e5853f48df09ff7696656fe78c412c113", 0x23}, {&(0x7f0000000d80)="b3980ab80e312b1f1af1d41eb178a3f774a3bb3c23a0bf3a6cc6c2d0f08b7a87fdf1a3b72b313fe4533abe6566c82ba0102a9f1fe972288c8b04bfbd3b907e23b6c3b145725969a4d77ca5863a08606e9d635cc78275c1ce883008a78e54715821137779f217181744b0ff2efe128ca9cca3caadd40f3530a410a881a066208f49205136b1112a3f58b537", 0x8b}], 0x6, &(0x7f0000000f80)=[@rights={{0x24, 0x1, 0x1, [r3, r1, r4, r4, r3, r4]}}, @cred={{0x18, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r4, r3, r0, r0, r10, r3, r4, r3, r3]}}], 0x6c, 0x800}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001080)="84c88d1f16a50e23a671f3905471f4bbb9814aa7d8f2842516508e59bfabd9da3a5a49a7e44f1a3bcb9b21e6305271158497e7e513be7af1ae187eecc834683f1eefd1e5ded0838a559af01b38ff0f1538ea5d33a5459f2caa81535ad6aa7dd8e7ff1ef6ded017b2d02728bdb22367e0e00aa5c47bfe21cdb0ad1d6670b8847e503cd54da1b89f83b60818608bc90182dc1bce7f350994e2", 0x98}, {&(0x7f0000001140)="291068dd5233a47bd6461c2f8dca935cb0e6b0bcf2afb78c2cc70d6df580f57cbfe4f0da07b951e29648d6fd6757b8d3b0c4076f1e076094d11c6c990e6e2b656fe06b99f2a04b0b918343b9bced5d8cf2271e6968c12ddd0485bc1c158fd4f6d436c354f63192f13f41cdacc12dc8a27ad9fc379b3b3f04b0bfd5df7be96942e31ccef8f2ad5c3875d917d6", 0x8c}, {&(0x7f0000001200)="b5f422ea4be905da7a331a0ddba63f8a595d77af7628d936dd5a3f7d63526e539fb9f429a206a37ab6545aa09f0cba5d417e70a9583129af634f4bbd5de3ddaab0526d63544a7bb1adf3061401bbc379a8c923d3b3b000324057d6a53e7a82e89aae6fcb61f85e5183d7df95ca1b8ee4daeb8f229942edd120b5a9b3a0799cc7aeb97a26a75b58de84580674201bbf9e3960f6eef0467452d1f76dc50a9df60af000679e7ef3835714ff4a97a3b8e2b27a9e4b3426f23c441a83db89d61530cfdc650aff6ff09bdf43b42fc340ae42d4eff40d78", 0xd4}], 0x3, &(0x7f0000001440)=[@cred={{0x18, 0x1, 0x2, {r6, r11, r12}}}], 0x18, 0x40884}}, {{&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001500)="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", 0xfd}], 0x1, 0x0, 0x0, 0x4008010}}, {{&(0x7f0000001640)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000016c0)="64e957126eebe93053", 0x9}, {&(0x7f0000001700)="48ea60265a482f436920f8739f1ec78f56b042d78891bdc26e264257d279a3054032bac98c85deaefb9d859202476fda7df6fd70bc44d06281909a4f82582cbef5ac42", 0x43}, {&(0x7f0000001780)="437940086adb7729d8e96aebb07fbf370ecf039271edf3340a14a2e5c2e02c1ae37b20b230844a8204a93f9ae7a229028fa4d42dbf6d022de908e9cc7773127543aa81196fbbfef17a10a97bff7ac49610e0e42e7d298dc168e8eeeacfc16880aca1aef5c677e4684560c728c40ad5a5ef49bdbf8b546723e3a05f46c71d9467ed751b87d3435df22f85cbe49d444581795f0b0857027c0071200357e4b3f32c0a95109341db9f0989faf5fdef407b66752aa528b414bc", 0xb7}, {&(0x7f0000001840)="51634cf5f1ffe16b94855ab1b65cafc487ec6bca231622ffe26301492a77bca28ffd7b6892d18f1fceb4a5293e8cd17a3df42ab3e44eacadde956a7ffbc68ded886b8dedd5215583d6d8ccdb1e65cc612af91c40d52546e93e999aadfcc7f62fcec9c5cc14a87056b71be7873e8a209d157747a5b8379acbac5715d8e76aa2b9283fadd34162d4bcefd8f2bab6e378e4f90b51db6c10039e21567c97d925e2bdf8056783d8936762fafb7b73b81f7cb3fc5f4b88ac854fdbfa54ab7e6000c3065cda2f2c578ca8fc53810e17c4d346025e58329505e60a828cd010a5a1affd712450", 0xe2}, {&(0x7f0000001940)="b013d5e5c7d00fcc6de56aef5d22", 0xe}, {&(0x7f0000001980)="83eb5c3ddf06681d1e3720b39d6e3d88de", 0x11}, {&(0x7f00000019c0)="0601e22c53824564f844f2cc3a258ba81f0b31f953a46dbeb80a9e89932aac", 0x1f}], 0x7, &(0x7f0000001a80)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, r13, r3]}}], 0x1c, 0x20000080}}, {{&(0x7f0000001ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001b40)="8a2076880568b009370d39cbc4564de011a14e5ed26bde7cf972ba00e18f60cfcf40d42b97e5956931e9172057451fb025af691712c4564c89287513e2a16e913b9a3a93af8a43a78b31f3", 0x4b}], 0x1, &(0x7f0000001c00)=[@rights={{0x14, 0x1, 0x1, [r4, r4]}}], 0x14, 0x20008800}}, {{&(0x7f0000001c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001cc0)="0a49918b9cfb8c0f961cc0a7ed23cb7fd91e90f70362f05dd13556d355bf1e8a6718b331e122b5c46fae7de560e4bd72142cd19cd9bd746e25c6cdb2c80c818dace04256", 0x44}, {&(0x7f0000001d40)}], 0x2, &(0x7f0000001e00)=[@rights={{0x2c, 0x1, 0x1, [r14, r0, r1, r4, r3, r1, r4, 0xffffffffffffffff]}}], 0x2c, 0xc001}}, {{&(0x7f0000001e40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000001ec0)="1feef139932223b146d25ccd54f9832423d745c32bd3b1e5ddae44ce8a3d13848b6c959a2f186547dbdf44cb67ad7c705fda98", 0x33}, {&(0x7f0000001f00)="392ebbb7e1de166e7599cf2b3d1b86dcf326f9c75f4a96e064f8af3c5cadc8a304c161a21ed2414d16bfbb03a220551ccea4f5bc92d53b20b038550ee8b2e11893", 0x41}, {&(0x7f0000001f80)="d9b8ac54a7a31340808af27fd6a87d4de95233a047cb10b7f4ad868da015c432b4d9c0901114ffbc29251de8d438426bc82b0bfba28774b663ce26bd048d2cfbd3a36f444d11ae9fedcf66021256cd84930740a93f85e0b8d8369a92ba5dfa1b7e021d8e526f866575f7114337b5d822f30929993f03332bdd237168d4a3b9d048f8efbac1f4cd20d6b1d3f6a8363091b7db4b25645c786a0d6353d016e098bac650bed71a69bf6febc6821bdf0bc751ebf2e9ff2feab1bf30045b3838590d84f38f5687240576c88aa200eb7a05f21104c1efb7bdd46c3a0aba15f996f40889282f19d7b58f9094d2c5dfb1bb2418a6c2cff8f1b72dd17f59eeaa7d91e187962b2311d55a43e8df518f3e130c551743c58362307b638a76ab75f6dbee7d6bb26c81117218ea5c112882d85f83a17a6e34541d3ee83ffb303953390bfa18e61e9b9601d740acd00542ffcab3cc9aa9eca3c0c63ac426303e97f1325660e38b2358e8c65f33a69e93eab9594f56290b7701dfe6db01669b58014fb485b15c7ba5d5bc16ab26ebe375818a825ce5d20438efd103f3b84e0cb7bf08b55c56485e48743d3364f4994852c7c01747ad13277a24b634efd4a0c4856127fb55c7af7c8b178cedf9661fa249887acdccf7b4fc98b4f446abcbb1b07b149eac80242b8d59f84f1c69ebdcc25d749ddc38aaddc765567d299dfcd867d557fd98919799d35d754d0d0b75429a671a880710c46cc0cb6292d18d46ba1d81a92fd07741c70df821dbf2d8ca4b8fc7913252e901e744cbfc0362756bc727b8bff026dc20e444994075a233fea3429d518f7008afefd578f4d6b7b11095bab9b823175e18011383a54f156eded767b1c9897008fedd3175758b890e2a445e92407046f9651b5bc051c16ff7f00023c57d1f3789bdf4c844d1e0b7b8339ba24744a84786e911ced7db5f16510466edf987250bc8b223ccf250b5e773ead45120896153d1a5a72fa57c4144875e5b06397c726a330a9fd2709440262cfc994a806cf9e2a16fb0854590a4ae08a099d1872de89555b754bc4534437581c56347cfc1c76ef21843988db514544306bb48529cd918789c5eebbe505f4d3cf52702cb6b75c14069d2f1b45bb81af592bc83a823a91b4b7c34d911b91092afac36859982a72ce9dd0a706dfa16da1705fc5bf97d9fa2e201398b066938665a61d0239c8cfb0d01ea3785009c05ac11f5f9750c48f63724b33044d806078090d1694e1326bf655e856a909df787fea1f88655861519d0ca9bdf8990156e005837eb305c18b72a32a2a41363dbd2b8f76504a0e4460e5b142093fe7198a199db7735a484ebb97b6bab3e4624da17141a1a88673bdae2b0aafbb01f3084631c45eefab3088931f81c908645a72cabec4d18e00fcc0aee56c87474e8741793986656ac519090e244eb9e169d318368a8691a0db60e90d90f1c063fbdbd44ea0428e3ca41a97a982fdf2819ea024b3d58b35b97708b453841b8f5666aa6a9a263e6a643389846d0293f770a8dd161d67a7d8b6e94fa375edfd6c7a46fc7ea23b3d6f06cd1b3f71630397bd49601537643dc9cfc373d25940bd16eaa02e7936d93f2cc137a1e3c196e79ebc02865b3f8df4adc6031e04679a86646ca358ca159fd6969203f15763cf5f1afdf79c906b7a2fefc7a8981eb88bfda21781c073a9284c98c20bd58085e6c74153316a3c0ad1078b3dfe66d0e5bc17a49ddb3bcb063263f5e781ba8ac20dc15c5577171f2f35b0d4611c03027c1bab61059ca1688e3631fe8ba275374527440d9424bc4d32de49dcd44a6d8b69baaf70e6a08eee66adb923e6c2d406fe3aab4c435e539fe88726384ea04be1ce4cb397ffa897f437169554da617dc8528dab1697aabfa4a58aa038077ca6580db26e094344fc215d6583fe1d23e56c1a651f81a603225db3e66ba9238be6d8d108ecd986693e760a0b239049ec7a2b3e6d475a45f5f5d9fae6225af4fbb9ec75765ebadc5d2e27646a88c8161fab38772628671b63730a27b710266c519bcb4181ef72a3ae6e2026d1104ce1f17157df88aa911a678b90de6a479c2022d054f3f8220a4590c1cab413ee1e102f20d2d73ba47e5da7baa44ae041ec5b4ff30c17ceb77f54ee786dff24b92f8766ed8e852f35c5a24bca5e841dbc923889e6e62d06695d3d8b4e3666d095cd271c9919131075636558fe205fb84f61ba5a80722208da565e465699d1bce605e37f28def14015bc0c4a2b62a2fbe81365c7322cadbf04e2552eec28ee2bf01b0d1085a48c4c7c4f73265d22abe3f724c98e0ce2fd0c35738d71d7610e0674a84d3e13805bcf0b6e68269df24b9540ed1742a0ddbf59fc9dc0e0608ff03940969e7e7016ef197dcf63a9633b9f0c433fa165b31116749292be07d22535552616e377811d2e55299ccc13b3a58464aae00055d3caa89caf954138e0c27a0d8708c3c20691fbdb86de0ccbfbf158b8c1a4212e23886d5da01121a661c0441186e3f05ca766cb76d9a566e17ed3e82f0470d81f85961a72c14d5762bf6386c0b67e9e0e1a7cccf447cc8e97b759176e6bc3bb8dfd8ed53ac5133e9123f462b3ae36e364e5528fe3552fcd655575df82814711e681a4eaaca12b48adb2b998d4fa73c5eb0e7743f1bca917116c2f0727f8c4656aabef6f2bcd52fff204c3c06517ddf7ad850b1da85878c1d111bff8243eb348891fe1dd1f66fb16f01ac518d0ea2b5e850af36b6a6084388085060aa071581334d67dd95d22b1045fdac0a112fa506396d1dd8635f63895d055960ba0fe5992da5062161b2eb0060a89bdb0b7f4e4dc8a810237ffe6e59b3712dba8ac688bf48dbe8c184a86533b3af3606be170e7b3cc56aabe85c4bb7494a089875447e3358c17e8f8aaf98d43c511a5b5086bf6724977552ec513ebb4d3038dddce6cd6a16e630e64eefe9d6d40627b6cf57c8be2ec50c4ca79b912bae9456ee4b4a00986e6710d113762ba0e45c3449a98a218bdff7506c420724367130c36d7556732fdbcc12b8dbd4eea246557c30facf52fe10e83cf0fd49f22bbfe22647c1fc6c238782fb703f80ea6bf287ae37cee2a222271681121e2db63453262bdc0f0f45ff280b1b8a2605cc5b324a963320acb8e7898e952ca45ac95d7618286b49847c3ee7079cee9bba973aa7d3163ac70494b97b66abc31118996d6a3fcc552f1a50c277d58405c348da7d5fbc70314f932f6fa74949da58619ea0cae76827caf21224d76ed7d2f412872c356b9e5eebd6b2b6ac699464e1247b591076aa60a5fe86c4c46142fe1de5a552495a57d9b54d720a8b7f06ed9fbcd0b696941cb243e999daa1674be227a8adac91cb999806b9890562e4d3c73faecc9ab8d29ab73af198a2843959f89956dc9b6168693078dd4054118298e2fd579dd81ebbe6f217b60b0adee9d58f9d4e7ddc3eff285281a56ba372dcabfaa6927dc0c049e4a660e253c18b42652bdd30e1410f7fc0b92cb64ca3af107f5ba6f1973e71f53b09b3acf20e91488488e87a89c97dc2552ebcc763f71637b977732247b54bc3d2987eb3391d4b79837cb980ca086f16905a63d2cf3913260b3aaccc8c6285b01d1b39641463bd0e27dfac8472e49d76f17a5770f84b91f5463b31589ce4328fcc586ed070e05bb28bf616cc25db02ac51b6dff34c4e6dd585c1fd8c3f59c37715e19f3d0cbbe573418b9605ef8465cc9bdaca5165d6a00c12343f7360f7f79a630edc84ece2c6e1735e77d88309ebd32dea3df958bc3afa8b4549d7112acc9a4545174647563b4168e6d1e62e72de4572b64adf7539d0ea357d2a2e7a2c7095ed739d813dda0a82aebf70d133611cf5938e31816e33b8dbafa73302665372d2ec35109fe6276fc2c85b2f9593dd94ee2635d905aa03f7cd3982d1daa648aba30a172b29ebeb7911a8f8f75d8e393cf9faa07a20d66134cc8ca2a970b51d2f9bf3a06aa9d1f8442fb1323f7927bfad1ce43dc7f14b9ef2523bcc3976e1e8fdc5e23bfed4aee0532ee3e1f5c99243b748c9945d0389eb4706769c0eaf3a8f1acf0181d030b5c324f2db4809d8099f1534a86475cfadb3042f4d99ec35a5b96bcef465ccdd763d4478de0747c69f966295f94ee58f3b984c5b455583f23293809633d2e9c4be1d1e7cf8a92bee2a5a842374fb928a50d2d6412f08a3a29dc407faf8b59fe4ba17a01bcd5c26d8db0bf70a2df32c2787a0bede4aee6d3d6cec33b7acce7fc924f26c11d348fe0f9dc8bcdb03641250f3f7a907a4c6b2cd6db2997be03dece41088eccc5dd6d14eb7e447d3f68bbc97cc5dc8240b4e8a751d4e8321a05b83cee161a399f86ad38bb2c49def541f57b64c8008c48a5723d6b798b5e92697e9ba00dde776db2346c23f5fab52f49e0262cbc5170da656043d7ede068ae047479620d465ca83301dd8b8a9a6ab296553a069c8ea302c8714963a8f4f3350e2c989336ac22c0efa1d5e1a43305c484bd6c52907328bb3105fe4aad2252fee681f5570964bd7515c21a9cd3440d14c13c535122cf2a33ef6356a48eed1990513399f45364617ccc60d92260391a2d5c30705ba5a23b3500cd086cfd2a65b180a7818094d82323cc1c6f04658bf60a1eac8d8865fedf8571c200f396a6302201bab59a72e3912ee76ace03f4bf70b312a1d621de073214987054b7b28793546930dfa71d6e077e37b20bdd63a4417afd1dcf2019a3c53402b6c39df24978a2465bf3edebc43d11fbaecb7b44b86dc1fff9d94bdf7aa20f8adfeed0bea03b66a20c7ee4e44d6c0069eb49377bbd8012b5a681ef854a1f16d2ca0d2f6e7449a4b940e2498aef89b626c003b56e8ab337017d3152825bdfdf84871ff4718091297471f85a57c36166da9daf228621aefc34c6ba840b79dc174600c5b38e80341531c437bf8371ecdeb47ce3e095e227afe7be3e7534a6594b1b9fbb24c91d18507a1a07d42ffd302bb98d36f1d3168a0aafd9ab3b156a9c787c0b3f884c6eef3338aae86f5a4dbe5a1820b4a6abe8ed7fdb3a5fb2b7e6f681a911849a54646f0c1d10fd77abefc417e705fe0577232a72872ba949b30b52a6551b88da90af1f1e62f9a00e56dac109b3e3b0a029bff9aee36b6b23587c4e797d2875a694dc6671a0ce3ad1da9c307f7c9fcb5d153bdf94126b7944c1669e10f9013d2e1fbdc785caf28497f9cee9a5c40b8539694d699baa34b5ba5a17282f38643b8d40bd1d2cb5ad1d3f20f9c99213f0ab05ef36bfeb19aaaea4abc8add6d72e658d02eedfb360be38c7da68220f29138c505df942da7a6bcad44e2674b55ffde09cd5991735cc70516521576748ecf1816f67cee1ad0de66c985758a86121a7c7d4142615708c9530a4afd2dfb24a869812dc4983a06f8c0c1b2e84719dcd6ed54383c5893eb3753ea3172963c2e27243f4d36e81cb3c9d6c9329d724d4e4ef62eb2fdcd4ab2a18bc3e21d62f2ec2c41ffe5696a93dbae07205fd266032dbc4e7574659d20b5998f5de06f9ab35d44b3c7a56159f892376e018e91cb0d8ffd1577dd4b88038c4f21296a2c8d4d5d2f4ee90d26128b4939a22ae4bcef2fc6c87a97772d1efbff79e12918e872923ce03ef8045be7f1d269ef8fca9c3094461f2c169b61a9d51e7888f82f207d907b21055e13a83019559e29dbe11f98ef4d93642fac4a79dfc1b6cb545b3c7ec9b8563b34f2798d028a30dc2d3b10126ebcffce602eff8f8562f0630c46bc8bf72fec0ca4e05c3125a3747294c1e7bfa15b3004a26a3106eb56", 0x1000}, {&(0x7f0000002f80)="f8d1b53361ab15f7b25bb7560fce1fa634970647f62ada70d01ebbf0be534619c8059f2de521be14601b9d77484c553c198ce4e9b29f25c5c6d35c9e1e8a35fcc53bb807863806b833023c9bd45b95bbdb50d7b444768e580dec511bc9a10ee8c08ad24a7defdd6ce90ff3b17646e4bc592056f39f16bdf8f3ff17f8bae439879890cc8b6e01d37d3376c80d31b52b17b0dccf0a64c43aa845cbc301fdb6170c388ea4285e42d5fd6a585bebfbd60cd40e99028c208ef4e7", 0xb8}, {&(0x7f0000003040)="8dc87ee8a978cfb9f43006e6fac383e433820c1270f5cdbe7150fc0e1040c44b59", 0x21}], 0x5, 0x0, 0x0, 0x40080}}, {{&(0x7f00000030c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000003140)="d3ce5768308600ef3a4308b13394f50a81fe5ead9113f7b89b5f1c0b3340b4e25044ce131e14e571bbab0c94170e40d1edbe398ccf241dcc8e528bb247629f0056c272a6419c569f39478709921c21528a5e0d6296de4be7e50c5594de738d3ff58c9628d32745c72d718d06dc69b5db8ef60805e4a06b408632d72199741d9069b75aa553010ac7d9bb12421fe015a2625e92f3a7c1059959fe93f947bc7747e2d1977ea7c1120c864b8f2d4e188be0099fc355386bb7a59e049c332574b9b349f25ce73b1cff77009ce760bc6f78010d6b7b6ac66aa9cc6567ff7fbc", 0xdd}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="5fda7b2780bb2ef44f5e5d2eba9ce67bc473f9b74ae6160ff748863baf367b10b0a9705ed70103d7b745376280d7b203fcbbf33605893bd369a62c413f8dece7806a583c3d6c30831b25e08f211f438c26101e6d0451f30b1dda15f8e388074a218042a90b7c0cd00cc811f80ba4f7e2419ceffeea771260b3148cb1f159ab0d784b6e288ffcb7969e8261aea1681c558b64809f7933150c45cf3ee3e40d16988d52045baae0ad7873ade5443a", 0xad}, {&(0x7f0000004300)="8951cbde5b0acab3a77870cbe2e4dd5c22b38904210eccb1007457d30acf6aed4be80e535d6f8831c89564926a14286a14bc6113e919db82b9e69337b412c2f93611790bbbf8d91ec3", 0x49}, {&(0x7f0000004380)="42f2b4e0fbcd7c24336aa7d16c4696c397f50469a3b2cee0b4d45b8352a70c7eba3cf32d85b55725585fb9a856cf18a8bb0429dce04c4adab0a40203c7e0fdfe53052395857f25ffb9cadeb11c68ce1ca8181c94184c6793e9c8bdd1c11cc118752e139ee9be61aa4606b55c858ffc453f5b057e63423390c12c55bed01afeb98f68392afd21274431902128e1073c476d4d5ff691f1443eebc23be0818c6b296cd957d8e9c957fb6b153c5ba99aef3d198be939b174b02736eb79d4f8241d29460fd9754c3e148b1d1b978f8ffaeef969ffe5e7dfb74968963aef39c5", 0xdd}, {&(0x7f0000004480)="d0e0912f99da6ce7361323dac21118c3b1bd90a36a18e91e48b8a576cada1a09b7d5d96e58bddd6770b6d6c099dfd1a1395a67b9bc21dbbe1032238d26a88a7bef6a843623d847e8d495cddfad638ecf380326f2669e87ff60bcb74b6034908f5dca767ff54ac55ea67e76f4a301369c7808466a61d39dfd44d590765688cf5b4ce9c57c6e9473e74e17bd0d2f1e4b7bb45ba9d812e276ac915c15aca50bcbac7bba6bb628d3a10b91c5030c04077c7e91426c35e6f0572dcd6d638bce0e497bd55935e061e92d82aa1b465706621c8d48af667de807375b4c5e205936bf93d2c620d60b", 0xe4}, {&(0x7f0000004580)="bca443bb859c0a1c29ce3ef11a123c3cfe022f7c4aa31cacdf52140d5e32", 0x1e}, {&(0x7f00000045c0)="654ed08ebb26b42e4ded361c941a7ae61a4c1f68a900f4fdd1c8561df66f7394fef5301823b01f55869a1f63c0249c39723b697d390aaab48516b7896c4626fcccdde323027e7b944b5958d01e322ca5585cc6967512f5f9e4616e3baec7b171193b3f7032f36c44a11fc3ad916e558156809c3a0aa1df798e2de84138def7d067eba7fdbcec4c67515052682e3c7428bcaa9b10b53c9d05b8a8892e8e6908ce0c4a056b7cbdb387b1a5964c0272ae52af94c9cbec0205d083b4d7f1b40bf011f7ac1e80f39c2bf194f2ed4e2cc87d174b68ed0773c77a91bc", 0xd9}, {&(0x7f00000046c0)="3c4ab17d6102bba6e93204d32ecc9e394eed83e0e8f9028ca09ac3ac910769ef3b39806d8f24585e52e063192db20b9e4f778ccb9ba12f511b274f2007a4c51fe6eb15e6fb57a7c903993e0e89bb01", 0x4f}], 0x9, &(0x7f0000006b00)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r15, r16}}}, @cred={{0x18, 0x1, 0x2, {r6, r17, r18}}}, @rights={{0x34, 0x1, 0x1, [r4, r19, r3, r3, r3, r4, r4, r3, r20, r4]}}], 0x64}}], 0x8, 0x4000000) 4.686041749s ago: executing program 2 (id=5677): openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @empty, @remote, @rand_addr=0x64010102}}}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f051066054802000301090212000104957081"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r1, &(0x7f0000000640), &(0x7f0000000680)=""/251}, 0x1c) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002780)={&(0x7f0000000500)=[{0x9, 0xa10, 0x0, 0x0}], 0x1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6fc0}}, 0xb4}}, 0x2c000010) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x200}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x10, 0x6e6bbc}}, 0xb4}, 0x1, 0x0, 0x0, 0x240448b0}, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x802) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1ff", 0x2}], 0x200000000000005a) unshare(0x2a020400) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x149040, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) splice(r4, &(0x7f0000000180)=0x2, r7, &(0x7f0000000280)=0x7fff, 0x1000, 0x0) landlock_restrict_self(r7, 0xe) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) syz_clone(0x630051c0, 0x0, 0x22, 0x0, 0x0, 0x0) 4.442010992s ago: executing program 3 (id=5678): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x400000000001, 0x100) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x8, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24080}, 0x4c050) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bind$alg(r2, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e44785ae9d7ff67347c3819271408a4975a52c1ab9b8b4db3945d10328f51895d704dc33a47d3a158da98", 0x2d}, {&(0x7f0000000440)="d3370d4bf5328db259678875a2d50c3b36adcfd58684580d5095c7454f60c432944f43cb9051e9a9a8259d7e4dfec86f6e0116097221541af670a3d62bf0ed206c8b75ed1eeb0b5dad4cae312fb40d2755e2ecf92f5cdee5785e4ae7fc3264d70b2d1c7aef9044b6ed4dce53adbaeb7778fc95aee91141f2188a2502880e4c67be52dbf0ef3bba4f98a6fa1ed2f6ee2ebacfc49ef6414e8abbbe12713de9850d800f140c903c", 0xa6}], 0x2}], 0x1, 0x34040047) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.529082747s ago: executing program 1 (id=5679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00000129bd7000fcdbdf250a2020070001ff060024000008000600080000004ad6427c258ebbd95e21a2259f3a5efcccd26c590e9ddb065344cd871f0d08b71e6e3e33c5f6167d5dd691d05a218e4feb5b814a4e965bce8284b93bf4032ee22b190baacb20499362d727efb8c16ef6861d2f2a205bcec3ee279768222e77ce140e4df6bdcae4f77ae3e1d667c3f28bec5c281ec7e07fd0ff59cdef0be3ce05b4cb92b57b34710adb3982c3249e4b43cddd5ec11709d07f4a81238af08ecbcaa79dc5dfd22e76731c4d2f2ae50bf9cc6fd21ae7ce22fdbaa34a19e28b5cf1fd6e69022ae346c64509973485e63c74"], 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000000000", @ANYRES32=0x0, @ANYBLOB="870c040069920700280012800e00010069703667726574617000000014000280060011004e20000006001000000700001400030069703667726574617030000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000105}, 0x8840) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000000)={0x3, 0x4}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x4, 0x51a, 0x24, @local, @local, 0x20, 0x41, 0x4, 0x5}}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000004c0)={0x0, 0x1, 0x0, r6, 0x5}, 0xc) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffffffff, 0x2001) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a800c0002000300", @ANYRES32=0x0, @ANYBLOB="00049fdd"], 0x3c}], 0x1}, 0x4000010) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020813050503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x15, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.615866483s ago: executing program 5 (id=5680): socket$kcm(0x11, 0x20000000000000a, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5900000002060300000000000000003051662f070000070500017a31000000000c00078008000640000000000500050002000000fe997f24364303883015671105000100"/103], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(r0, 0x0, 0x24044010) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, 0x0, 0x4184) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x61, 0x7) writev(r7, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r8, 0x0, &(0x7f0000000380), 0x80000) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x4000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) 1.60243754s ago: executing program 3 (id=5681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x4000) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902"], 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) close(r0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x210, 0x210, 0x17c, 0xdc, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0xfe, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @multicast2, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) 1.379060711s ago: executing program 6 (id=5682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x4000001000, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2}) 1.356324532s ago: executing program 5 (id=5683): r0 = syz_usb_connect$cdc_ncm(0x1, 0x7a, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x1, 0x0, 0xa4, 0xffb, 0xcf, 0xb69, 0xc1, 0x5, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0xfffffaea, 0x6, 0x101, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed6, 0x8, 0x8000100, 0x101, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x807, 0xf, 0x101, 0xd4, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xfffffffe, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x101, 0x2, 0x6, 0x100, 0x5, 0x252, 0x2000081, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x8, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x44, 0x8, 0x7, 0x3, 0x401, 0x66cd, 0x8, 0xc, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d0001000000000904"], 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) (async) r3 = userfaultfd(0x80801) (async) r4 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) fgetxattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="73656375726974792e6970766c616eb000"], &(0x7f0000000200)=""/183, 0xb7) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x8) (async) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f0000000880)=[{0x0, 0x2001, 0x41, &(0x7f0000000780)="310effe2d13e03ce32538a798a56ff148c0bd8086264365a63372dbf5e90c79d0aa9390f757f2d891b8a44a6e911703abcd29b87422a45587475d1a95570955424"}], 0x1}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x780000a, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 1.203006413s ago: executing program 2 (id=5684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x4000001000, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2}) (fail_nth: 1) 690.558733ms ago: executing program 6 (id=5685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 624.373516ms ago: executing program 2 (id=5686): unshare(0x100000) unshare(0x22020600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109022400010000000009040000010300080009210000040122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0xc, &(0x7f0000000100)={0x0, 0xc, 0x3d, {0x3d, 0x10, "898cf568b6138d7540e8323d34d1666fc0bb7ba4ef3d227c45dc0293432bf9ee301c8fae727a6354eafa3675ceeff03cb6cc7d80174247bf6b658a"}}, 0x0}, 0x0) 531.332305ms ago: executing program 6 (id=5687): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5366b1b827f6001000493700", 0x10) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[0x0]) shutdown(r0, 0x1) 227.953404ms ago: executing program 6 (id=5688): prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x13290}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x1ff, 0x80, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffdff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x5, 0x10000) getrlimit(0x0, &(0x7f00000001c0)) linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x1400) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x45080) 0s ago: executing program 2 (id=5689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) unshare(0x2c020400) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) socket(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x62, 0x50, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x40, 0x9, {0xa, 0x25, 0x25, 0x3, 0xb, 0x320}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x0, 0x0, {0xa, 0x25, 0x25, 0x4, 0x8, 0x5}}}}}}}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x1, 0x4, 0x401, 0x9, 0x2, "66c200", 0xffffff6c}}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x42ea, 0x0) kernel console output (not intermixed with test programs): 1880.696245][T26651] .`: renamed from bond0 (while UP) [ 1880.774260][T24610] m920x_read = error: -19 [ 1880.778734][T24610] dvb-usb: error while querying for an remote control event. [ 1880.794215][T24605] m920x_read = error: -19 [ 1880.800298][T24605] dvb-usb: error while querying for an remote control event. [ 1880.849996][T24592] usb 6-1: USB disconnect, device number 100 [ 1880.871293][T26661] tipc: Failed to remove unknown binding: 66,1,1/0:882733512/882733514 [ 1880.912482][T24592] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1880.916025][T24605] m920x_read = error: -19 [ 1880.939608][T24605] dvb-usb: error while querying for an remote control event. [ 1880.947244][T24592] cp210x 6-1:0.0: device disconnected [ 1880.953912][T24610] m920x_read = error: -19 [ 1880.967213][T24610] dvb-usb: error while querying for an remote control event. [ 1880.994179][T24608] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1881.012876][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5531'. [ 1881.124097][T24605] m920x_read = error: -19 [ 1881.133293][T24605] dvb-usb: error while querying for an remote control event. [ 1881.144938][T24605] m920x_read = error: -19 [ 1881.154558][T24605] dvb-usb: error while querying for an remote control event. [ 1881.236173][T26672] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5533'. [ 1881.253376][T24605] m920x_read = error: -19 [ 1881.258185][T24605] dvb-usb: error while querying for an remote control event. [ 1881.273741][T24605] m920x_read = error: -19 [ 1881.279428][T24605] dvb-usb: error while querying for an remote control event. [ 1881.373402][T24605] m920x_read = error: -19 [ 1881.377842][T26677] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5534'. [ 1881.391389][T24605] dvb-usb: error while querying for an remote control event. [ 1881.399550][T24610] m920x_read = error: -19 [ 1881.410626][T24610] dvb-usb: error while querying for an remote control event. [ 1881.533623][T24610] m920x_read = error: -19 [ 1881.551591][T24610] dvb-usb: error while querying for an remote control event. [ 1881.566655][T24605] m920x_read = error: -19 [ 1881.579303][T24605] dvb-usb: error while querying for an remote control event. [ 1881.683878][T24605] m920x_read = error: -19 [ 1881.690565][T24605] dvb-usb: error while querying for an remote control event. [ 1881.706248][T24610] m920x_read = error: -19 [ 1881.719064][T24610] dvb-usb: error while querying for an remote control event. [ 1881.823356][T24610] m920x_read = error: -19 [ 1881.829175][T24610] dvb-usb: error while querying for an remote control event. [ 1881.843672][T24605] m920x_read = error: -19 [ 1881.854001][T24605] dvb-usb: error while querying for an remote control event. [ 1881.894304][T26679] syz.1.5535 (26679): drop_caches: 2 [ 1881.953449][T24605] m920x_read = error: -19 [ 1881.969943][T24605] dvb-usb: error while querying for an remote control event. [ 1881.986775][T24610] m920x_read = error: -19 [ 1882.012084][T24610] dvb-usb: error while querying for an remote control event. [ 1882.114212][T24610] m920x_read = error: -19 [ 1882.127501][T24610] dvb-usb: error while querying for an remote control event. [ 1882.149866][T24605] m920x_read = error: -19 [ 1882.165553][T24605] dvb-usb: error while querying for an remote control event. [ 1882.282902][T24605] m920x_read = error: -19 [ 1882.297095][T24605] dvb-usb: error while querying for an remote control event. [ 1882.314856][T24610] m920x_read = error: -19 [ 1882.324108][T24610] dvb-usb: error while querying for an remote control event. [ 1882.424572][T24610] m920x_read = error: -19 [ 1882.429111][T24610] dvb-usb: error while querying for an remote control event. [ 1882.443797][T24610] m920x_read = error: -19 [ 1882.452014][T24610] dvb-usb: error while querying for an remote control event. [ 1882.553434][T24610] m920x_read = error: -19 [ 1882.564241][T24610] dvb-usb: error while querying for an remote control event. [ 1882.590820][T24610] m920x_read = error: -19 [ 1882.604979][T24610] dvb-usb: error while querying for an remote control event. [ 1882.693405][T24610] m920x_read = error: -19 [ 1882.697924][T24610] dvb-usb: error while querying for an remote control event. [ 1882.723394][T24610] m920x_read = error: -19 [ 1882.735664][T24610] dvb-usb: error while querying for an remote control event. [ 1882.773546][T24592] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1882.824645][T24610] m920x_read = error: -19 [ 1882.839199][T24610] dvb-usb: error while querying for an remote control event. [ 1882.864054][T24610] m920x_read = error: -19 [ 1882.871441][T24610] dvb-usb: error while querying for an remote control event. [ 1882.947186][T26689] syz.5.5539 (26689): drop_caches: 2 [ 1882.963776][T24592] usb 2-1: Using ep0 maxpacket: 32 [ 1882.967027][T24610] m920x_read = error: -19 [ 1882.978466][T24592] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1882.991319][T24610] dvb-usb: error while querying for an remote control event. [ 1882.998973][T24608] m920x_read = error: -19 [ 1883.003408][T24608] dvb-usb: error while querying for an remote control event. [ 1883.023426][T24592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.051879][T24592] usb 2-1: config 0 descriptor?? [ 1883.072429][T24592] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1883.113894][T24610] m920x_read = error: -19 [ 1883.130069][T24610] dvb-usb: error while querying for an remote control event. [ 1883.147809][T24608] m920x_read = error: -19 [ 1883.165154][T24608] dvb-usb: error while querying for an remote control event. [ 1883.273403][T24608] m920x_read = error: -19 [ 1883.278007][T24608] dvb-usb: error while querying for an remote control event. [ 1883.293467][T24608] m920x_read = error: -19 [ 1883.302676][T24608] dvb-usb: error while querying for an remote control event. [ 1883.393402][T24608] m920x_read = error: -19 [ 1883.404650][T24608] dvb-usb: error while querying for an remote control event. [ 1883.417168][T26695] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5540'. [ 1883.427330][T24608] m920x_read = error: -19 [ 1883.432736][T24608] dvb-usb: error while querying for an remote control event. [ 1883.493566][T24592] gspca_vc032x: reg_w err -71 [ 1883.504286][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.522014][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.533443][T24608] m920x_read = error: -19 [ 1883.541734][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.552138][T24608] dvb-usb: error while querying for an remote control event. [ 1883.559507][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559562][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559573][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559585][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559596][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559607][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559618][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559629][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559640][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559652][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559663][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559674][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559684][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559696][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559707][T24592] gspca_vc032x: I2c Bus Busy Wait 00 [ 1883.559719][T24592] gspca_vc032x: Unknown sensor... [ 1883.559820][T24592] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1883.654752][T24610] m920x_read = error: -19 [ 1883.659252][T24610] dvb-usb: error while querying for an remote control event. [ 1883.669101][T24592] usb 2-1: USB disconnect, device number 47 [ 1883.724998][T26696] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.5538'. [ 1883.773690][T24608] m920x_read = error: -19 [ 1883.785255][T24608] dvb-usb: error while querying for an remote control event. [ 1883.795916][T26687] fuse: Unknown parameter '.*_նUþ  bl9ZQ[s·g84~pUj#zs99pGDi1Qyf\ [ 1883.795916][T26687] ' [ 1883.832601][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1883.853650][T24608] m920x_read = error: -19 [ 1883.858171][T24608] dvb-usb: error while querying for an remote control event. [ 1883.866177][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1883.895435][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1883.923465][T24608] m920x_read = error: -19 [ 1883.929125][T24608] dvb-usb: error while querying for an remote control event. [ 1883.996736][T24608] m920x_read = error: -19 [ 1884.014051][T24608] dvb-usb: error while querying for an remote control event. [ 1884.043387][T24608] m920x_read = error: -19 [ 1884.056007][T24608] dvb-usb: error while querying for an remote control event. [ 1884.112173][T26699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5542'. [ 1884.141474][T26699] netlink: 'syz.6.5542': attribute type 4 has an invalid length. [ 1884.149747][T24608] m920x_read = error: -19 [ 1884.155849][T24608] dvb-usb: error while querying for an remote control event. [ 1884.173333][T26699] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5542'. [ 1884.183805][T24608] m920x_read = error: -19 [ 1884.188464][T24608] dvb-usb: error while querying for an remote control event. [ 1884.253070][T26693] loop5: detected capacity change from 0 to 7 [ 1884.283012][T26693] Dev loop5: unable to read RDB block 7 [ 1884.289004][T24608] m920x_read = error: -19 [ 1884.293790][T24608] dvb-usb: error while querying for an remote control event. [ 1884.303694][T24608] m920x_read = error: -19 [ 1884.308554][T24608] dvb-usb: error while querying for an remote control event. [ 1884.357399][T26693] loop5: unable to read partition table [ 1884.403329][T24608] m920x_read = error: -19 [ 1884.412311][T24608] dvb-usb: error while querying for an remote control event. [ 1884.433322][T24605] m920x_read = error: -19 [ 1884.437872][T24605] dvb-usb: error while querying for an remote control event. [ 1884.453981][T26693] loop5: partition table beyond EOD, truncated [ 1884.480940][T26693] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1884.553375][T24608] m920x_read = error: -19 [ 1884.568423][T24608] dvb-usb: error while querying for an remote control event. [ 1884.579903][T24605] m920x_read = error: -19 [ 1884.590252][T24605] dvb-usb: error while querying for an remote control event. [ 1884.715771][T24605] m920x_read = error: -19 [ 1884.720231][T24605] dvb-usb: error while querying for an remote control event. [ 1884.728237][T24608] m920x_read = error: -19 [ 1884.736189][T24608] dvb-usb: error while querying for an remote control event. [ 1884.854442][T24608] m920x_read = error: -19 [ 1884.861169][T24608] dvb-usb: error while querying for an remote control event. [ 1884.869001][T24605] m920x_read = error: -19 [ 1884.876545][T24605] dvb-usb: error while querying for an remote control event. [ 1884.993515][T24605] m920x_read = error: -19 [ 1884.998177][T24605] dvb-usb: error while querying for an remote control event. [ 1885.007991][T24608] m920x_read = error: -19 [ 1885.009265][T26706] netlink: 'syz.2.5545': attribute type 21 has an invalid length. [ 1885.027788][T24608] dvb-usb: error while querying for an remote control event. [ 1885.143875][T24608] m920x_read = error: -19 [ 1885.148496][T24608] dvb-usb: error while querying for an remote control event. [ 1885.163448][T24605] m920x_read = error: -19 [ 1885.170692][T24605] dvb-usb: error while querying for an remote control event. [ 1885.284810][T24605] m920x_read = error: -19 [ 1885.289968][T24605] dvb-usb: error while querying for an remote control event. [ 1885.298218][T24608] m920x_read = error: -19 [ 1885.303346][T24608] dvb-usb: error while querying for an remote control event. [ 1885.414627][T24608] m920x_read = error: -19 [ 1885.421030][T24608] dvb-usb: error while querying for an remote control event. [ 1885.429504][T24605] m920x_read = error: -19 [ 1885.439292][T24605] dvb-usb: error while querying for an remote control event. [ 1885.553440][T24605] m920x_read = error: -19 [ 1885.559064][T24605] dvb-usb: error while querying for an remote control event. [ 1885.567710][T24608] m920x_read = error: -19 [ 1885.578966][T24608] dvb-usb: error while querying for an remote control event. [ 1885.694111][T24605] m920x_read = error: -19 [ 1885.699142][T24605] dvb-usb: error while querying for an remote control event. [ 1885.707069][T24610] m920x_read = error: -19 [ 1885.712273][T24610] dvb-usb: error while querying for an remote control event. [ 1885.823333][T24605] m920x_read = error: -19 [ 1885.827870][T24605] dvb-usb: error while querying for an remote control event. [ 1885.835726][T24610] m920x_read = error: -19 [ 1885.841083][T24610] dvb-usb: error while querying for an remote control event. [ 1885.913401][T24608] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1885.943338][T24610] m920x_read = error: -19 [ 1885.948136][T24610] dvb-usb: error while querying for an remote control event. [ 1885.958269][T24605] m920x_read = error: -19 [ 1885.967206][T24605] dvb-usb: error while querying for an remote control event. [ 1886.073571][T24608] usb 3-1: Using ep0 maxpacket: 16 [ 1886.090565][T24605] m920x_read = error: -19 [ 1886.098456][T24608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.118777][T24605] dvb-usb: error while querying for an remote control event. [ 1886.127960][T24610] m920x_read = error: -19 [ 1886.134187][T24608] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1886.148509][T24610] dvb-usb: error while querying for an remote control event. [ 1886.164367][T24608] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1886.199275][T24608] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1886.220494][T24608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.243286][T24608] usb 3-1: Product: syz [ 1886.254245][T24610] m920x_read = error: -19 [ 1886.264254][T24608] usb 3-1: Manufacturer: syz [ 1886.277975][T24610] dvb-usb: error while querying for an remote control event. [ 1886.286456][T24605] m920x_read = error: -19 [ 1886.293896][T24608] usb 3-1: SerialNumber: syz [ 1886.298607][T24605] dvb-usb: error while querying for an remote control event. [ 1886.322470][T24608] cdc_ether 3-1:1.0: missing cdc ether descriptor [ 1886.413355][T24608] m920x_read = error: -19 [ 1886.418280][T24608] dvb-usb: error while querying for an remote control event. [ 1886.426171][T24605] m920x_read = error: -19 [ 1886.432608][T24605] dvb-usb: error while querying for an remote control event. [ 1886.525093][T24605] usb 3-1: USB disconnect, device number 14 [ 1886.546082][T24610] m920x_read = error: -19 [ 1886.577104][T24610] dvb-usb: error while querying for an remote control event. [ 1886.588232][T24608] m920x_read = error: -19 [ 1886.596524][T24608] dvb-usb: error while querying for an remote control event. [ 1886.718809][T24608] m920x_read = error: -19 [ 1886.725811][T24608] dvb-usb: error while querying for an remote control event. [ 1886.735312][T24610] m920x_read = error: -19 [ 1886.739899][T24610] dvb-usb: error while querying for an remote control event. [ 1886.854003][T24610] m920x_read = error: -19 [ 1886.861367][T24610] dvb-usb: error while querying for an remote control event. [ 1886.869226][T24605] m920x_read = error: -19 [ 1886.877967][T24605] dvb-usb: error while querying for an remote control event. [ 1886.993692][T24605] m920x_read = error: -19 [ 1887.000630][T24605] dvb-usb: error while querying for an remote control event. [ 1887.008340][T24610] m920x_read = error: -19 [ 1887.022502][T24610] dvb-usb: error while querying for an remote control event. [ 1887.123319][T24610] m920x_read = error: -19 [ 1887.129874][T24610] dvb-usb: error while querying for an remote control event. [ 1887.143606][T24610] m920x_read = error: -19 [ 1887.152165][T24610] dvb-usb: error while querying for an remote control event. [ 1887.243727][T24610] m920x_read = error: -19 [ 1887.257587][T24610] dvb-usb: error while querying for an remote control event. [ 1887.274964][T24605] m920x_read = error: -19 [ 1887.288067][T24605] dvb-usb: error while querying for an remote control event. [ 1887.304979][T26731] FAULT_INJECTION: forcing a failure. [ 1887.304979][T26731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.319162][T26731] CPU: 0 UID: 0 PID: 26731 Comm: syz.2.5554 Tainted: G L syzkaller #0 PREEMPT(full) [ 1887.319197][T26731] Tainted: [L]=SOFTLOCKUP [ 1887.319206][T26731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1887.319220][T26731] Call Trace: [ 1887.319230][T26731] [ 1887.319244][T26731] dump_stack_lvl+0xe8/0x150 [ 1887.319273][T26731] should_fail_ex+0x412/0x560 [ 1887.319308][T26731] _copy_from_user+0x2d/0xb0 [ 1887.319341][T26731] do_ipv6_getsockopt+0x2d9/0x2610 [ 1887.319375][T26731] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1887.319396][T26731] ? aa_label_sk_perm+0x532/0x6e0 [ 1887.319433][T26731] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1887.319463][T26731] ? __lock_acquire+0x6b5/0x2cf0 [ 1887.319490][T26731] ? _parse_integer_limit+0x1ae/0x1f0 [ 1887.319521][T26731] ? kstrtoull+0x12f/0x1d0 [ 1887.319564][T26731] ? aa_sk_perm+0x6d5/0x900 [ 1887.319592][T26731] ? get_pid_task+0x20/0x1f0 [ 1887.319629][T26731] ipv6_getsockopt+0xbd/0x2b0 [ 1887.319652][T26731] ? __lock_acquire+0x6b5/0x2cf0 [ 1887.319676][T26731] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1887.319698][T26731] ? aa_sock_opt_perm+0xff/0x1a0 [ 1887.319730][T26731] ? sock_common_getsockopt+0x2d/0xb0 [ 1887.319757][T26731] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1887.319785][T26731] do_sock_getsockopt+0x51d/0x7e0 [ 1887.319825][T26731] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1887.319855][T26731] ? __fget_files+0x2a/0x420 [ 1887.319899][T26731] ? __fget_files+0x2a/0x420 [ 1887.319924][T26731] ? __fget_files+0x3a0/0x420 [ 1887.319960][T26731] ? __fget_files+0x2a/0x420 [ 1887.319992][T26731] __ia32_sys_getsockopt+0x1a4/0x240 [ 1887.320033][T26731] __do_fast_syscall_32+0x229/0x6e0 [ 1887.320056][T26731] ? do_fast_syscall_32+0x33/0x70 [ 1887.320077][T26731] ? lockdep_hardirqs_on+0x7a/0x110 [ 1887.320096][T26731] ? asm_int80_emulation+0x1a/0x20 [ 1887.320116][T26731] ? do_int80_emulation+0x286/0x530 [ 1887.320137][T26731] ? trace_irq_disable+0x3b/0x140 [ 1887.320172][T26731] do_fast_syscall_32+0x33/0x70 [ 1887.320194][T26731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1887.320219][T26731] RIP: 0023:0xf707f01c [ 1887.320238][T26731] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1887.320257][T26731] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1887.320280][T26731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1887.320294][T26731] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000080001ffc [ 1887.320309][T26731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1887.320321][T26731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1887.320334][T26731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1887.320382][T26731] [ 1887.596389][T24605] m920x_read = error: -19 [ 1887.600811][T24605] dvb-usb: error while querying for an remote control event. [ 1887.608553][T24605] m920x_read = error: -19 [ 1887.613011][T24605] dvb-usb: error while querying for an remote control event. [ 1887.779358][T24605] m920x_read = error: -19 [ 1887.789865][T24605] dvb-usb: error while querying for an remote control event. [ 1887.808461][T24605] m920x_read = error: -19 [ 1887.817152][T24605] dvb-usb: error while querying for an remote control event. [ 1887.903292][T24592] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1887.913798][T24610] m920x_read = error: -19 [ 1887.918529][T24610] dvb-usb: error while querying for an remote control event. [ 1887.957324][T24610] m920x_read = error: -19 [ 1887.963236][T24610] dvb-usb: error while querying for an remote control event. [ 1888.021799][T26740] __nla_validate_parse: 4 callbacks suppressed [ 1888.021815][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5557'. [ 1888.033908][T24610] m920x_read = error: -19 [ 1888.042108][T24610] dvb-usb: error while querying for an remote control event. [ 1888.053984][T24592] usb 3-1: Using ep0 maxpacket: 8 [ 1888.061149][T24592] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1888.070242][T24592] usb 3-1: config 2 has no interface number 0 [ 1888.076436][T24610] m920x_read = error: -19 [ 1888.076466][T24610] dvb-usb: error while querying for an remote control event. [ 1888.088814][T24592] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1888.098141][T24592] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1888.108933][T24592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.118842][T24592] usb 3-1: Product: syz [ 1888.123481][T24592] usb 3-1: Manufacturer: syz [ 1888.128231][T24592] usb 3-1: SerialNumber: syz [ 1888.154234][T24610] m920x_read = error: -19 [ 1888.158787][T24610] dvb-usb: error while querying for an remote control event. [ 1888.187354][T24610] m920x_read = error: -19 [ 1888.192514][T24610] dvb-usb: error while querying for an remote control event. [ 1888.273526][T24610] m920x_read = error: -19 [ 1888.278210][T24610] dvb-usb: error while querying for an remote control event. [ 1888.324542][T24610] m920x_read = error: -19 [ 1888.329208][T24610] dvb-usb: error while querying for an remote control event. [ 1888.393963][T24610] m920x_read = error: -19 [ 1888.398488][T24610] dvb-usb: error while querying for an remote control event. [ 1888.444128][T24610] m920x_read = error: -19 [ 1888.448755][T24610] dvb-usb: error while querying for an remote control event. [ 1888.493287][T12423] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1888.524414][T24610] m920x_read = error: -19 [ 1888.530270][T24610] dvb-usb: error while querying for an remote control event. [ 1888.551455][T24592] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1888.563523][T24610] m920x_read = error: -19 [ 1888.570965][T24610] dvb-usb: error while querying for an remote control event. [ 1888.580909][T24592] usb 3-1: USB disconnect, device number 15 [ 1888.623385][T12423] usb 6-1: device descriptor read/64, error -71 [ 1888.643620][T24610] m920x_read = error: -19 [ 1888.652439][T24610] dvb-usb: error while querying for an remote control event. [ 1888.703395][T24610] m920x_read = error: -19 [ 1888.708665][T24610] dvb-usb: error while querying for an remote control event. [ 1888.773919][T24610] m920x_read = error: -19 [ 1888.778528][T24610] dvb-usb: error while querying for an remote control event. [ 1888.823708][T24610] m920x_read = error: -19 [ 1888.828398][T24610] dvb-usb: error while querying for an remote control event. [ 1888.883451][T12423] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1888.893319][T24610] m920x_read = error: -19 [ 1888.897777][T24610] dvb-usb: error while querying for an remote control event. [ 1888.943404][T24610] m920x_read = error: -19 [ 1888.948982][T24610] dvb-usb: error while querying for an remote control event. [ 1889.013315][T12423] usb 6-1: device descriptor read/64, error -71 [ 1889.015253][T24610] m920x_read = error: -19 [ 1889.025224][T24610] dvb-usb: error while querying for an remote control event. [ 1889.063418][T24610] m920x_read = error: -19 [ 1889.067911][T24610] dvb-usb: error while querying for an remote control event. [ 1889.105625][T26751] FAULT_INJECTION: forcing a failure. [ 1889.105625][T26751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1889.120488][T26751] CPU: 0 UID: 0 PID: 26751 Comm: syz.2.5560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1889.120514][T26751] Tainted: [L]=SOFTLOCKUP [ 1889.120521][T26751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1889.120530][T26751] Call Trace: [ 1889.120537][T26751] [ 1889.120543][T26751] dump_stack_lvl+0xe8/0x150 [ 1889.120566][T26751] should_fail_ex+0x412/0x560 [ 1889.120591][T26751] _copy_to_user+0x31/0xb0 [ 1889.120617][T26751] simple_read_from_buffer+0xe1/0x170 [ 1889.120641][T26751] proc_fail_nth_read+0x1bb/0x230 [ 1889.120663][T26751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1889.120693][T26751] ? rw_verify_area+0x2a6/0x4d0 [ 1889.120715][T26751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1889.120736][T26751] vfs_read+0x20c/0xa70 [ 1889.120762][T26751] ? __pfx___mutex_lock+0x10/0x10 [ 1889.120780][T26751] ? __pfx_vfs_read+0x10/0x10 [ 1889.120803][T26751] ? __fget_files+0x2a/0x420 [ 1889.120831][T26751] ? __fget_files+0x3a0/0x420 [ 1889.120848][T26751] ? __fget_files+0x2a/0x420 [ 1889.120874][T26751] ksys_read+0x150/0x270 [ 1889.120902][T26751] ? __pfx_ksys_read+0x10/0x10 [ 1889.120928][T26751] ? asm_int80_emulation+0x1a/0x20 [ 1889.120948][T26751] do_int80_emulation+0x181/0x530 [ 1889.120964][T26751] ? trace_irq_disable+0x3b/0x140 [ 1889.120986][T26751] ? asm_int80_emulation+0x1a/0x20 [ 1889.121001][T26751] ? clear_bhb_loop+0x40/0x90 [ 1889.121016][T26751] ? clear_bhb_loop+0x40/0x90 [ 1889.121036][T26751] asm_int80_emulation+0x1a/0x20 [ 1889.121050][T26751] RIP: 0023:0xf71b61ab [ 1889.121065][T26751] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1889.121100][T26751] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1889.121122][T26751] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f546d5d0 [ 1889.121137][T26751] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1889.121150][T26751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1889.121162][T26751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1889.121180][T26751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1889.121207][T26751] [ 1889.347711][T24610] m920x_read = error: -19 [ 1889.353932][T24610] dvb-usb: error while querying for an remote control event. [ 1889.363539][T24610] m920x_read = error: -19 [ 1889.368511][T24610] dvb-usb: error while querying for an remote control event. [ 1889.388273][T12423] usb usb6-port1: attempt power cycle [ 1889.483356][T24610] m920x_read = error: -19 [ 1889.487992][T24610] dvb-usb: error while querying for an remote control event. [ 1889.495618][T24605] m920x_read = error: -19 [ 1889.500039][T24605] dvb-usb: error while querying for an remote control event. [ 1889.623338][T24610] m920x_read = error: -19 [ 1889.628491][T26759] syz.2.5564 (26759): drop_caches: 2 [ 1889.633899][T24610] dvb-usb: error while querying for an remote control event. [ 1889.641418][T24610] m920x_read = error: -19 [ 1889.645972][T24610] dvb-usb: error while querying for an remote control event. [ 1889.733373][T12423] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1889.753958][T24610] m920x_read = error: -19 [ 1889.758469][T24610] dvb-usb: error while querying for an remote control event. [ 1889.765255][T12423] usb 6-1: device descriptor read/8, error -71 [ 1889.779583][T24608] m920x_read = error: -19 [ 1889.790974][T24608] dvb-usb: error while querying for an remote control event. [ 1889.816483][T24605] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1889.923392][T24608] m920x_read = error: -19 [ 1889.928491][T24608] dvb-usb: error while querying for an remote control event. [ 1889.936104][T24610] m920x_read = error: -19 [ 1889.940994][T24610] dvb-usb: error while querying for an remote control event. [ 1889.997454][T24605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.013448][T24605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.019802][T12423] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1890.027640][T24605] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1890.040736][T24605] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1890.049175][T24610] m920x_read = error: -19 [ 1890.056065][T24610] dvb-usb: error while querying for an remote control event. [ 1890.064749][T24608] m920x_read = error: -19 [ 1890.068549][T12423] usb 6-1: device descriptor read/8, error -71 [ 1890.077112][T24605] usb 4-1: Manufacturer: syz [ 1890.082112][T24608] dvb-usb: error while querying for an remote control event. [ 1890.094865][T24605] usb 4-1: config 0 descriptor?? [ 1890.103456][T24592] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1890.183413][T24608] m920x_read = error: -19 [ 1890.186100][T12423] usb usb6-port1: unable to enumerate USB device [ 1890.190616][T24608] dvb-usb: error while querying for an remote control event. [ 1890.202257][T24608] m920x_read = error: -19 [ 1890.206704][T24608] dvb-usb: error while querying for an remote control event. [ 1890.275293][T24592] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1890.284966][T24592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.296405][T24592] usb 2-1: config 0 descriptor?? [ 1890.303360][T24608] m920x_read = error: -19 [ 1890.308061][T24608] dvb-usb: error while querying for an remote control event. [ 1890.318621][T24592] cp210x 2-1:0.0: cp210x converter detected [ 1890.334663][T24608] m920x_read = error: -19 [ 1890.339819][T24608] dvb-usb: error while querying for an remote control event. [ 1890.353415][T24610] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1890.424118][T24608] m920x_read = error: -19 [ 1890.428968][T24608] dvb-usb: error while querying for an remote control event. [ 1890.453421][T24608] m920x_read = error: -19 [ 1890.457931][T24608] dvb-usb: error while querying for an remote control event. [ 1890.505515][T24610] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1890.516538][T24610] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1890.528156][T24610] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1890.541361][T24592] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1890.549862][T24592] cp210x 2-1:0.0: querying part number failed [ 1890.553976][T24608] m920x_read = error: -19 [ 1890.560728][T24610] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1890.571612][T24592] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1890.584644][T24608] dvb-usb: error while querying for an remote control event. [ 1890.594007][T24610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1890.613704][T24608] m920x_read = error: -19 [ 1890.618188][T24610] usb 3-1: SerialNumber: syz [ 1890.622894][T24608] dvb-usb: error while querying for an remote control event. [ 1890.723450][T24610] m920x_read = error: -19 [ 1890.728000][T24610] dvb-usb: error while querying for an remote control event. [ 1890.753477][T24610] m920x_read = error: -19 [ 1890.758769][T24610] dvb-usb: error while querying for an remote control event. [ 1890.853631][T24610] m920x_read = error: -19 [ 1890.865312][T24610] dvb-usb: error while querying for an remote control event. [ 1890.884073][T24610] m920x_read = error: -19 [ 1890.889997][T24610] dvb-usb: error while querying for an remote control event. [ 1890.950190][T24605] usbhid 4-1:0.0: can't add hid device: -71 [ 1890.985089][T24605] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1890.993694][T24610] m920x_read = error: -19 [ 1890.999673][T24610] dvb-usb: error while querying for an remote control event. [ 1891.012414][T24605] usb 4-1: USB disconnect, device number 124 [ 1891.041950][T24608] m920x_read = error: -19 [ 1891.046956][T24608] dvb-usb: error while querying for an remote control event. [ 1891.104433][T26771] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 1891.123784][T24608] m920x_read = error: -19 [ 1891.130002][T24608] dvb-usb: error while querying for an remote control event. [ 1891.163350][T24608] m920x_read = error: -19 [ 1891.167919][T24608] dvb-usb: error while querying for an remote control event. [ 1891.265563][T24605] m920x_read = error: -19 [ 1891.276166][T24605] dvb-usb: error while querying for an remote control event. [ 1891.288016][T24608] m920x_read = error: -19 [ 1891.296471][T24608] dvb-usb: error while querying for an remote control event. [ 1891.413480][T24608] m920x_read = error: -19 [ 1891.417924][T24608] dvb-usb: error while querying for an remote control event. [ 1891.425651][T24605] m920x_read = error: -19 [ 1891.430324][T24605] dvb-usb: error while querying for an remote control event. [ 1891.553348][T24605] m920x_read = error: -19 [ 1891.558425][T24605] dvb-usb: error while querying for an remote control event. [ 1891.566346][T24608] m920x_read = error: -19 [ 1891.571407][T24608] dvb-usb: error while querying for an remote control event. [ 1891.685212][T24608] m920x_read = error: -19 [ 1891.694603][T24608] dvb-usb: error while querying for an remote control event. [ 1891.702639][T24608] m920x_read = error: -19 [ 1891.708217][T24608] dvb-usb: error while querying for an remote control event. [ 1891.803320][T24608] m920x_read = error: -19 [ 1891.810729][T24608] dvb-usb: error while querying for an remote control event. [ 1891.833452][T24608] m920x_read = error: -19 [ 1891.841036][T24608] dvb-usb: error while querying for an remote control event. [ 1891.943321][T24608] m920x_read = error: -19 [ 1891.947795][T24608] dvb-usb: error while querying for an remote control event. [ 1891.963366][T24608] m920x_read = error: -19 [ 1891.969022][T24608] dvb-usb: error while querying for an remote control event. [ 1892.064333][T24608] m920x_read = error: -19 [ 1892.072043][T24608] dvb-usb: error while querying for an remote control event. [ 1892.083862][T24605] m920x_read = error: -19 [ 1892.093025][T24605] dvb-usb: error while querying for an remote control event. [ 1892.203444][T24605] m920x_read = error: -19 [ 1892.214505][T24605] dvb-usb: error while querying for an remote control event. [ 1892.236272][T24605] m920x_read = error: -19 [ 1892.247735][T24605] dvb-usb: error while querying for an remote control event. [ 1892.353928][T24605] m920x_read = error: -19 [ 1892.359642][T24605] dvb-usb: error while querying for an remote control event. [ 1892.383850][T24605] m920x_read = error: -19 [ 1892.393063][T24605] dvb-usb: error while querying for an remote control event. [ 1892.473450][T24605] m920x_read = error: -19 [ 1892.479732][T24605] dvb-usb: error while querying for an remote control event. [ 1892.513814][T24605] m920x_read = error: -19 [ 1892.524805][T24605] dvb-usb: error while querying for an remote control event. [ 1892.613739][T24605] m920x_read = error: -19 [ 1892.620409][T24605] dvb-usb: error while querying for an remote control event. [ 1892.653371][T24605] m920x_read = error: -19 [ 1892.660580][T24605] dvb-usb: error while querying for an remote control event. [ 1892.681109][T26788] tipc: Failed to remove unknown binding: 66,1,1/2409690488:1057456659/1057456661 [ 1892.768329][T24605] m920x_read = error: -19 [ 1892.773096][T24605] dvb-usb: error while querying for an remote control event. [ 1892.793574][T24605] m920x_read = error: -19 [ 1892.798108][T24605] dvb-usb: error while querying for an remote control event. [ 1892.871117][T24605] usb 2-1: USB disconnect, device number 48 [ 1892.888011][T26792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1892.894805][T24610] m920x_read = error: -19 [ 1892.909421][T26792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1892.912656][T24610] dvb-usb: error while querying for an remote control event. [ 1892.931130][T24605] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1892.939879][T26792] netlink: 'syz.3.5575': attribute type 4 has an invalid length. [ 1892.946727][T24608] m920x_read = error: -19 [ 1892.952109][T24608] dvb-usb: error while querying for an remote control event. [ 1892.961166][T24605] cp210x 2-1:0.0: device disconnected [ 1892.968909][T26792] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1893.049650][T12423] usb 3-1: USB disconnect, device number 16 [ 1893.073457][T24608] m920x_read = error: -19 [ 1893.083921][T24608] dvb-usb: error while querying for an remote control event. [ 1893.111582][T24608] m920x_read = error: -19 [ 1893.123262][T24608] dvb-usb: error while querying for an remote control event. [ 1893.207351][T26800] syz.2.5578 (26800): drop_caches: 2 [ 1893.214801][T24605] m920x_read = error: -19 [ 1893.225878][T24605] dvb-usb: error while querying for an remote control event. [ 1893.243703][T24608] m920x_read = error: -19 [ 1893.256063][T24608] dvb-usb: error while querying for an remote control event. [ 1893.306296][T26798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1893.355459][T24608] m920x_read = error: -19 [ 1893.366065][T24608] dvb-usb: error while querying for an remote control event. [ 1893.383350][T24605] m920x_read = error: -19 [ 1893.391810][T24605] dvb-usb: error while querying for an remote control event. [ 1893.493313][T24605] m920x_read = error: -19 [ 1893.499270][T24605] dvb-usb: error while querying for an remote control event. [ 1893.513295][T24608] m920x_read = error: -19 [ 1893.523337][T24608] dvb-usb: error while querying for an remote control event. [ 1893.633485][T24608] m920x_read = error: -19 [ 1893.643609][T24608] dvb-usb: error while querying for an remote control event. [ 1893.661563][T24608] m920x_read = error: -19 [ 1893.671629][T24608] dvb-usb: error while querying for an remote control event. [ 1893.773485][T24608] m920x_read = error: -19 [ 1893.783800][T24608] dvb-usb: error while querying for an remote control event. [ 1893.803399][T24608] m920x_read = error: -19 [ 1893.814714][T24608] dvb-usb: error while querying for an remote control event. [ 1893.897179][T26806] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5577'. [ 1893.913340][T24608] m920x_read = error: -19 [ 1893.918030][T24608] dvb-usb: error while querying for an remote control event. [ 1893.933972][T24608] m920x_read = error: -19 [ 1893.943729][T24608] dvb-usb: error while querying for an remote control event. [ 1894.034339][T24608] m920x_read = error: -19 [ 1894.043988][T24608] dvb-usb: error while querying for an remote control event. [ 1894.065300][T24608] m920x_read = error: -19 [ 1894.071465][T24608] dvb-usb: error while querying for an remote control event. [ 1894.163323][T24608] m920x_read = error: -19 [ 1894.174278][T24608] dvb-usb: error while querying for an remote control event. [ 1894.204060][T24608] m920x_read = error: -19 [ 1894.213336][T24608] dvb-usb: error while querying for an remote control event. [ 1894.261224][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1894.261244][ T29] audit: type=1326 audit(1779632332.986:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26804 comm="syz.2.5579" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf707f01c code=0x0 [ 1894.304662][T24608] m920x_read = error: -19 [ 1894.310793][T24608] dvb-usb: error while querying for an remote control event. [ 1894.333744][T24608] m920x_read = error: -19 [ 1894.338412][T24608] dvb-usb: error while querying for an remote control event. [ 1894.434767][T24608] m920x_read = error: -19 [ 1894.443651][T24608] dvb-usb: error while querying for an remote control event. [ 1894.464701][T24608] m920x_read = error: -19 [ 1894.469410][T24608] dvb-usb: error while querying for an remote control event. [ 1894.564988][T24608] m920x_read = error: -19 [ 1894.570789][T24608] dvb-usb: error while querying for an remote control event. [ 1894.594788][T24608] m920x_read = error: -19 [ 1894.606018][T24608] dvb-usb: error while querying for an remote control event. [ 1894.695229][T24608] m920x_read = error: -19 [ 1894.719276][T24608] dvb-usb: error while querying for an remote control event. [ 1894.734271][T24605] m920x_read = error: -19 [ 1894.756353][T24605] dvb-usb: error while querying for an remote control event. [ 1894.819103][T26809] netlink: 724 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1894.841218][T26809] netlink: 724 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1894.863391][T24605] m920x_read = error: -19 [ 1894.870606][T24605] dvb-usb: error while querying for an remote control event. [ 1894.906819][T24605] m920x_read = error: -19 [ 1894.917600][T24605] dvb-usb: error while querying for an remote control event. [ 1894.928873][T26811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5582'. [ 1895.004803][T24605] m920x_read = error: -19 [ 1895.014963][T24605] dvb-usb: error while querying for an remote control event. [ 1895.054355][T24605] m920x_read = error: -19 [ 1895.062544][T24605] dvb-usb: error while querying for an remote control event. [ 1895.126840][T26815] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1895.154580][T24605] m920x_read = error: -19 [ 1895.168612][T24605] dvb-usb: error while querying for an remote control event. [ 1895.193601][T24608] m920x_read = error: -19 [ 1895.201886][T24608] dvb-usb: error while querying for an remote control event. [ 1895.303652][T24608] m920x_read = error: -19 [ 1895.314043][T24608] dvb-usb: error while querying for an remote control event. [ 1895.333342][T24608] m920x_read = error: -19 [ 1895.337904][T24608] dvb-usb: error while querying for an remote control event. [ 1895.444813][T24608] m920x_read = error: -19 [ 1895.457219][T24608] dvb-usb: error while querying for an remote control event. [ 1895.465113][T24605] m920x_read = error: -19 [ 1895.472272][T24605] dvb-usb: error while querying for an remote control event. [ 1895.511233][T26827] FAULT_INJECTION: forcing a failure. [ 1895.511233][T26827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.527459][T26827] CPU: 0 UID: 0 PID: 26827 Comm: syz.2.5586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1895.527487][T26827] Tainted: [L]=SOFTLOCKUP [ 1895.527499][T26827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1895.527510][T26827] Call Trace: [ 1895.527521][T26827] [ 1895.527527][T26827] dump_stack_lvl+0xe8/0x150 [ 1895.527551][T26827] should_fail_ex+0x412/0x560 [ 1895.527576][T26827] _copy_from_user+0x2d/0xb0 [ 1895.527601][T26827] do_ip_setsockopt+0x3ee/0x2ea0 [ 1895.527628][T26827] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1895.527651][T26827] ? aa_sk_perm+0x6d5/0x900 [ 1895.527677][T26827] ? __pfx_aa_sk_perm+0x10/0x10 [ 1895.527698][T26827] ? aa_sock_opt_perm+0xff/0x1a0 [ 1895.527721][T26827] ip_setsockopt+0x66/0x110 [ 1895.527763][T26827] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1895.527798][T26827] do_sock_setsockopt+0x17c/0x1b0 [ 1895.527826][T26827] __ia32_sys_setsockopt+0x13d/0x1b0 [ 1895.527854][T26827] __do_fast_syscall_32+0x229/0x6e0 [ 1895.527871][T26827] ? do_fast_syscall_32+0x33/0x70 [ 1895.527887][T26827] ? lockdep_hardirqs_on+0x7a/0x110 [ 1895.527901][T26827] ? asm_int80_emulation+0x1a/0x20 [ 1895.527915][T26827] ? do_int80_emulation+0x286/0x530 [ 1895.527957][T26827] ? trace_irq_disable+0x3b/0x140 [ 1895.527995][T26827] do_fast_syscall_32+0x33/0x70 [ 1895.528023][T26827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1895.528050][T26827] RIP: 0023:0xf707f01c [ 1895.528070][T26827] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1895.528089][T26827] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1895.528112][T26827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1895.528126][T26827] RDX: 0000000000000031 RSI: 0000000080001500 RDI: 0000000000000004 [ 1895.528140][T26827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1895.528153][T26827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1895.528172][T26827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1895.528203][T26827] [ 1895.644385][T24605] m920x_read = error: -19 [ 1895.748256][T24608] m920x_read = error: -19 [ 1895.754112][T24608] dvb-usb: error while querying for an remote control event. [ 1895.855565][T24605] dvb-usb: error while querying for an remote control event. [ 1895.887545][T24605] m920x_read = error: -19 [ 1895.892156][T24605] dvb-usb: error while querying for an remote control event. [ 1895.927271][T26830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1895.938779][T26830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1895.983361][T24605] m920x_read = error: -19 [ 1896.004182][T24605] dvb-usb: error while querying for an remote control event. [ 1896.017479][T26833] netlink: 'syz.3.5587': attribute type 4 has an invalid length. [ 1896.025755][T24605] m920x_read = error: -19 [ 1896.046277][T26833] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1896.055921][T24605] dvb-usb: error while querying for an remote control event. [ 1896.134296][T24605] m920x_read = error: -19 [ 1896.138801][T24605] dvb-usb: error while querying for an remote control event. [ 1896.184240][T24605] m920x_read = error: -19 [ 1896.197150][T24605] dvb-usb: error while querying for an remote control event. [ 1896.253585][T24605] m920x_read = error: -19 [ 1896.259831][T24605] dvb-usb: error while querying for an remote control event. [ 1896.335936][T24605] m920x_read = error: -19 [ 1896.342331][T24605] dvb-usb: error while querying for an remote control event. [ 1896.394453][T24605] m920x_read = error: -19 [ 1896.406407][T24605] dvb-usb: error while querying for an remote control event. [ 1896.492623][ T29] audit: type=1326 audit(1779632335.216:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26838 comm="syz.3.5590" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff801c code=0x0 [ 1896.516668][T24608] m920x_read = error: -19 [ 1896.521174][T24608] dvb-usb: error while querying for an remote control event. [ 1896.530895][T26841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5591'. [ 1896.544748][T24605] m920x_read = error: -19 [ 1896.550428][T24605] dvb-usb: error while querying for an remote control event. [ 1896.655357][T24605] m920x_read = error: -19 [ 1896.667897][T24605] dvb-usb: error while querying for an remote control event. [ 1896.681379][T24608] m920x_read = error: -19 [ 1896.692596][T24608] dvb-usb: error while querying for an remote control event. [ 1896.793292][T12423] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1896.805946][T24608] m920x_read = error: -19 [ 1896.814253][T24608] dvb-usb: error while querying for an remote control event. [ 1896.824210][T24608] m920x_read = error: -19 [ 1896.828723][T24608] dvb-usb: error while querying for an remote control event. [ 1896.933547][T24608] m920x_read = error: -19 [ 1896.941434][T24608] dvb-usb: error while querying for an remote control event. [ 1896.953374][T24605] m920x_read = error: -19 [ 1896.958433][T12423] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1896.962065][T24605] dvb-usb: error while querying for an remote control event. [ 1896.977483][T12423] usb 4-1: config 0 has no interface number 0 [ 1896.986100][T12423] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1897.000640][T12423] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1897.010706][T24592] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1897.019850][T12423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.028767][T12423] usb 4-1: Product: syz [ 1897.044538][T12423] usb 4-1: Manufacturer: syz [ 1897.054822][T12423] usb 4-1: SerialNumber: syz [ 1897.087068][T12423] usb 4-1: config 0 descriptor?? [ 1897.104824][T12423] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1897.133017][T24605] m920x_read = error: -19 [ 1897.145744][T24605] dvb-usb: error while querying for an remote control event. [ 1897.153359][T24592] usb 2-1: device descriptor read/64, error -71 [ 1897.161303][T24608] m920x_read = error: -19 [ 1897.168660][T24608] dvb-usb: error while querying for an remote control event. [ 1897.283437][T24605] m920x_read = error: -19 [ 1897.297759][T24605] dvb-usb: error while querying for an remote control event. [ 1897.310001][T24608] m920x_read = error: -19 [ 1897.323979][T24608] dvb-usb: error while querying for an remote control event. [ 1897.395478][T24592] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1897.420786][T26856] syz.6.5597 (26856): drop_caches: 2 [ 1897.443456][T24608] m920x_read = error: -19 [ 1897.453279][T24608] dvb-usb: error while querying for an remote control event. [ 1897.466180][T24608] m920x_read = error: -19 [ 1897.470618][T24608] dvb-usb: error while querying for an remote control event. [ 1897.534004][T24592] usb 2-1: device descriptor read/64, error -71 [ 1897.543870][T26843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.567102][T26843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.578087][T24608] m920x_read = error: -19 [ 1897.588307][T24608] dvb-usb: error while querying for an remote control event. [ 1897.597901][T24605] m920x_read = error: -19 [ 1897.607891][T24605] dvb-usb: error while querying for an remote control event. [ 1897.648051][T24592] usb usb2-port1: attempt power cycle [ 1897.723648][T24605] m920x_read = error: -19 [ 1897.731622][T24605] dvb-usb: error while querying for an remote control event. [ 1897.740927][T24608] m920x_read = error: -19 [ 1897.750304][T24608] dvb-usb: error while querying for an remote control event. [ 1897.767027][T26866] netlink: 'syz.6.5600': attribute type 4 has an invalid length. [ 1897.863354][T24608] m920x_read = error: -19 [ 1897.867912][T24608] dvb-usb: error while querying for an remote control event. [ 1897.875556][T24605] m920x_read = error: -19 [ 1897.880210][T24605] dvb-usb: error while querying for an remote control event. [ 1897.880300][T26869] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1897.897980][T26868] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1897.912517][T26869] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1897.919067][T26869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1897.936635][T26869] vhci_hcd vhci_hcd.0: Device attached [ 1897.952270][T26870] vhci_hcd: connection closed [ 1897.954466][T25237] vhci_hcd vhci_hcd.6: stop threads [ 1897.965633][T25237] vhci_hcd vhci_hcd.6: release socket [ 1897.971572][T25237] vhci_hcd vhci_hcd.6: disconnect device [ 1897.993444][T24610] m920x_read = error: -19 [ 1897.998154][T24610] dvb-usb: error while querying for an remote control event. [ 1898.006327][T24605] m920x_read = error: -19 [ 1898.010952][T24605] dvb-usb: error while querying for an remote control event. [ 1898.023318][T24592] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1898.044770][T24592] usb 2-1: device descriptor read/8, error -71 [ 1898.113353][T24605] m920x_read = error: -19 [ 1898.117811][T24605] dvb-usb: error while querying for an remote control event. [ 1898.125748][T24610] m920x_read = error: -19 [ 1898.134351][T24610] dvb-usb: error while querying for an remote control event. [ 1898.235073][T24610] m920x_read = error: -19 [ 1898.240868][T24610] dvb-usb: error while querying for an remote control event. [ 1898.250298][T24605] m920x_read = error: -19 [ 1898.255254][T24605] dvb-usb: error while querying for an remote control event. [ 1898.283342][T24592] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1898.314702][T24592] usb 2-1: device descriptor read/8, error -71 [ 1898.364005][T24605] m920x_read = error: -19 [ 1898.369110][T24605] dvb-usb: error while querying for an remote control event. [ 1898.377015][T24610] m920x_read = error: -19 [ 1898.381459][T24610] dvb-usb: error while querying for an remote control event. [ 1898.423763][T24592] usb usb2-port1: unable to enumerate USB device [ 1898.471485][T26876] __nla_validate_parse: 5 callbacks suppressed [ 1898.471535][T26876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5602'. [ 1898.494256][T24610] m920x_read = error: -19 [ 1898.513199][T24610] dvb-usb: error while querying for an remote control event. [ 1898.524171][T24610] m920x_read = error: -19 [ 1898.528759][T24610] dvb-usb: error while querying for an remote control event. [ 1898.633533][T24610] m920x_read = error: -19 [ 1898.642028][T24610] dvb-usb: error while querying for an remote control event. [ 1898.649797][T24605] m920x_read = error: -19 [ 1898.657481][T24605] dvb-usb: error while querying for an remote control event. [ 1898.773946][T24605] m920x_read = error: -19 [ 1898.781401][T24605] dvb-usb: error while querying for an remote control event. [ 1898.791047][T24610] m920x_read = error: -19 [ 1898.802553][T24610] dvb-usb: error while querying for an remote control event. [ 1898.904928][T24610] m920x_read = error: -19 [ 1898.911648][T24610] dvb-usb: error while querying for an remote control event. [ 1898.933928][T24610] m920x_read = error: -19 [ 1898.941796][T24610] dvb-usb: error while querying for an remote control event. [ 1899.036668][T24610] m920x_read = error: -19 [ 1899.042501][T24610] dvb-usb: error while querying for an remote control event. [ 1899.073448][T24610] m920x_read = error: -19 [ 1899.078465][T24610] dvb-usb: error while querying for an remote control event. [ 1899.153292][T24610] m920x_read = error: -19 [ 1899.161223][T24610] dvb-usb: error while querying for an remote control event. [ 1899.193336][T24610] m920x_read = error: -19 [ 1899.201096][T24610] dvb-usb: error while querying for an remote control event. [ 1899.283392][T24610] m920x_read = error: -19 [ 1899.289583][T24610] dvb-usb: error while querying for an remote control event. [ 1899.313481][T24610] m920x_read = error: -19 [ 1899.329223][T24610] dvb-usb: error while querying for an remote control event. [ 1899.403332][T24610] m920x_read = error: -19 [ 1899.414130][T24610] dvb-usb: error while querying for an remote control event. [ 1899.463456][T24610] m920x_read = error: -19 [ 1899.470922][T24610] dvb-usb: error while querying for an remote control event. [ 1899.533319][T24610] m920x_read = error: -19 [ 1899.542860][T24610] dvb-usb: error while querying for an remote control event. [ 1899.560171][T24592] usb 4-1: USB disconnect, device number 125 [ 1899.593358][T24610] m920x_read = error: -19 [ 1899.610809][T24610] dvb-usb: error while querying for an remote control event. [ 1899.619722][T24592] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1899.673764][T24610] m920x_read = error: -19 [ 1899.679406][T24610] dvb-usb: error while querying for an remote control event. [ 1899.749979][ T9273] Bluetooth: hci4: ISO packet too small [ 1899.757148][T24610] m920x_read = error: -19 [ 1899.763325][T24610] dvb-usb: error while querying for an remote control event. [ 1899.793850][T24610] m920x_read = error: -19 [ 1899.800294][T24610] dvb-usb: error while querying for an remote control event. [ 1899.883348][T24610] m920x_read = error: -19 [ 1899.889578][T24610] dvb-usb: error while querying for an remote control event. [ 1899.923451][T24610] m920x_read = error: -19 [ 1899.929715][T24610] dvb-usb: error while querying for an remote control event. [ 1900.013409][T24610] m920x_read = error: -19 [ 1900.022058][T24610] dvb-usb: error while querying for an remote control event. [ 1900.045999][T24610] m920x_read = error: -19 [ 1900.051687][T24610] dvb-usb: error while querying for an remote control event. [ 1900.143565][T24605] m920x_read = error: -19 [ 1900.149037][T24605] dvb-usb: error while querying for an remote control event. [ 1900.183517][T24605] m920x_read = error: -19 [ 1900.188096][T24605] dvb-usb: error while querying for an remote control event. [ 1900.273365][T24605] m920x_read = error: -19 [ 1900.283843][T24605] dvb-usb: error while querying for an remote control event. [ 1900.313718][T24605] m920x_read = error: -19 [ 1900.318959][T24605] dvb-usb: error while querying for an remote control event. [ 1900.373466][T24610] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1900.403368][T24605] m920x_read = error: -19 [ 1900.407946][T24605] dvb-usb: error while querying for an remote control event. [ 1900.433455][T24605] m920x_read = error: -19 [ 1900.443410][T24605] dvb-usb: error while querying for an remote control event. [ 1900.523347][T24605] m920x_read = error: -19 [ 1900.528967][T24605] dvb-usb: error while querying for an remote control event. [ 1900.538544][T24610] usb 4-1: Using ep0 maxpacket: 32 [ 1900.551394][T24610] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1900.566733][T24605] m920x_read = error: -19 [ 1900.574369][T24610] usb 4-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.589841][T24605] dvb-usb: error while querying for an remote control event. [ 1900.600691][T24610] usb 4-1: config 230 has 1 interface, different from the descriptor's value: 3 [ 1900.622759][T24610] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1900.643295][T24610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.653344][T24605] m920x_read = error: -19 [ 1900.657895][T24605] dvb-usb: error while querying for an remote control event. [ 1900.666181][T24610] usb 4-1: Product: syz [ 1900.670463][T24610] usb 4-1: Manufacturer: syz [ 1900.675250][T24610] usb 4-1: SerialNumber: syz [ 1900.713434][T24605] m920x_read = error: -19 [ 1900.718186][T24605] dvb-usb: error while querying for an remote control event. [ 1900.774237][T24605] m920x_read = error: -19 [ 1900.779585][T24605] dvb-usb: error while querying for an remote control event. [ 1900.833470][T24605] m920x_read = error: -19 [ 1900.838052][T24605] dvb-usb: error while querying for an remote control event. [ 1900.893739][T24605] m920x_read = error: -19 [ 1900.898706][T24605] dvb-usb: error while querying for an remote control event. [ 1900.909848][T24610] usb 4-1: unit 4 not found! [ 1900.914626][T24610] usb 4-1: unit 0 not found! [ 1900.933992][T26904] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5613'. [ 1900.953379][T24605] m920x_read = error: -19 [ 1900.958026][T24605] dvb-usb: error while querying for an remote control event. [ 1901.013346][T24605] m920x_read = error: -19 [ 1901.018026][T24605] dvb-usb: error while querying for an remote control event. [ 1901.073409][T24605] m920x_read = error: -19 [ 1901.078038][T24605] dvb-usb: error while querying for an remote control event. [ 1901.133346][T24605] m920x_read = error: -19 [ 1901.144848][T24605] dvb-usb: error while querying for an remote control event. [ 1901.193533][T24605] m920x_read = error: -19 [ 1901.198303][T24605] dvb-usb: error while querying for an remote control event. [ 1901.263803][T24605] m920x_read = error: -19 [ 1901.268453][T24605] dvb-usb: error while querying for an remote control event. [ 1901.311994][T24605] usb 4-1: USB disconnect, device number 126 [ 1901.319101][T24608] m920x_read = error: -19 [ 1901.324550][T24608] dvb-usb: error while querying for an remote control event. [ 1901.383504][T24608] m920x_read = error: -19 [ 1901.388081][T24608] dvb-usb: error while querying for an remote control event. [ 1901.443471][T24608] m920x_read = error: -19 [ 1901.449718][T24608] dvb-usb: error while querying for an remote control event. [ 1901.504018][T24608] m920x_read = error: -19 [ 1901.511676][T24608] dvb-usb: error while querying for an remote control event. [ 1901.563426][T24605] m920x_read = error: -19 [ 1901.568079][T24605] dvb-usb: error while querying for an remote control event. [ 1901.623410][T24605] m920x_read = error: -19 [ 1901.629483][T24605] dvb-usb: error while querying for an remote control event. [ 1901.684838][T24605] m920x_read = error: -19 [ 1901.689590][T24605] dvb-usb: error while querying for an remote control event. [ 1901.753351][T24605] m920x_read = error: -19 [ 1901.762271][T24605] dvb-usb: error while querying for an remote control event. [ 1901.796558][T24592] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1901.803699][T24605] m920x_read = error: -19 [ 1901.808791][T24605] dvb-usb: error while querying for an remote control event. [ 1901.885587][T24605] m920x_read = error: -19 [ 1901.903007][T24605] dvb-usb: error while querying for an remote control event. [ 1901.933323][T24605] m920x_read = error: -19 [ 1901.940780][T24605] dvb-usb: error while querying for an remote control event. [ 1902.033868][T24605] m920x_read = error: -19 [ 1902.041956][T24605] dvb-usb: error while querying for an remote control event. [ 1902.052475][T26926] syz.2.5621 (26926): drop_caches: 2 [ 1902.063398][T24605] m920x_read = error: -19 [ 1902.069765][T24605] dvb-usb: error while querying for an remote control event. [ 1902.163306][T24605] m920x_read = error: -19 [ 1902.175503][T24605] dvb-usb: error while querying for an remote control event. [ 1902.210561][T24605] m920x_read = error: -19 [ 1902.224091][T12423] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1902.227597][T24605] dvb-usb: error while querying for an remote control event. [ 1902.313487][T24605] m920x_read = error: -19 [ 1902.322567][T24605] dvb-usb: error while querying for an remote control event. [ 1902.373369][T24605] m920x_read = error: -19 [ 1902.379919][T24605] dvb-usb: error while querying for an remote control event. [ 1902.402667][T12423] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1902.427153][T12423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.443329][T24605] m920x_read = error: -19 [ 1902.453401][T24605] dvb-usb: error while querying for an remote control event. [ 1902.454943][T12423] usb 2-1: Product: syz [ 1902.483630][T12423] usb 2-1: Manufacturer: syz [ 1902.497027][T12423] usb 2-1: SerialNumber: syz [ 1902.512195][T12423] usb 2-1: config 0 descriptor?? [ 1902.523427][T24605] m920x_read = error: -19 [ 1902.538129][T24605] dvb-usb: error while querying for an remote control event. [ 1902.583886][T24605] m920x_read = error: -19 [ 1902.592895][T24605] dvb-usb: error while querying for an remote control event. [ 1902.663523][T24605] m920x_read = error: -19 [ 1902.680363][T24605] dvb-usb: error while querying for an remote control event. [ 1902.723421][T24605] m920x_read = error: -19 [ 1902.733023][T24605] dvb-usb: error while querying for an remote control event. [ 1902.813354][T24605] m920x_read = error: -19 [ 1902.832499][T24605] dvb-usb: error while querying for an remote control event. [ 1902.863341][T24608] m920x_read = error: -19 [ 1902.868898][T24608] dvb-usb: error while querying for an remote control event. [ 1902.984911][T24608] m920x_read = error: -19 [ 1902.993090][T24608] dvb-usb: error while querying for an remote control event. [ 1903.002080][T24605] m920x_read = error: -19 [ 1903.013031][T24605] dvb-usb: error while querying for an remote control event. [ 1903.123831][T24605] m920x_read = error: -19 [ 1903.132896][T24605] dvb-usb: error while querying for an remote control event. [ 1903.146278][T24608] m920x_read = error: -19 [ 1903.156827][T24608] dvb-usb: error while querying for an remote control event. [ 1903.273893][T24608] m920x_read = error: -19 [ 1903.285213][T24608] dvb-usb: error while querying for an remote control event. [ 1903.304842][T24608] m920x_read = error: -19 [ 1903.316203][T24608] dvb-usb: error while querying for an remote control event. [ 1903.413658][T24608] m920x_read = error: -19 [ 1903.424784][T24608] dvb-usb: error while querying for an remote control event. [ 1903.444033][T24608] m920x_read = error: -19 [ 1903.456391][T24608] dvb-usb: error while querying for an remote control event. [ 1903.553723][T24608] m920x_read = error: -19 [ 1903.564413][T24608] dvb-usb: error while querying for an remote control event. [ 1903.583713][T24608] m920x_read = error: -19 [ 1903.596695][T24608] dvb-usb: error while querying for an remote control event. [ 1903.683306][T24608] m920x_read = error: -19 [ 1903.694375][T24608] dvb-usb: error while querying for an remote control event. [ 1903.723769][T24608] m920x_read = error: -19 [ 1903.735591][T24608] dvb-usb: error while querying for an remote control event. [ 1903.813574][T24608] m920x_read = error: -19 [ 1903.822130][T24608] dvb-usb: error while querying for an remote control event. [ 1903.867380][T24608] m920x_read = error: -19 [ 1903.876693][T24608] dvb-usb: error while querying for an remote control event. [ 1903.945016][T24608] m920x_read = error: -19 [ 1903.954812][T24608] dvb-usb: error while querying for an remote control event. [ 1904.003984][T24608] m920x_read = error: -19 [ 1904.015765][T24608] dvb-usb: error while querying for an remote control event. [ 1904.089151][T24608] m920x_read = error: -19 [ 1904.095991][T24608] dvb-usb: error while querying for an remote control event. [ 1904.133613][T24608] m920x_read = error: -19 [ 1904.145578][T24608] dvb-usb: error while querying for an remote control event. [ 1904.223595][T24608] m920x_read = error: -19 [ 1904.234525][T24608] dvb-usb: error while querying for an remote control event. [ 1904.263839][T24608] m920x_read = error: -19 [ 1904.276058][T24608] dvb-usb: error while querying for an remote control event. [ 1904.363866][T24608] m920x_read = error: -19 [ 1904.372535][T24608] dvb-usb: error while querying for an remote control event. [ 1904.405084][T24608] m920x_read = error: -19 [ 1904.416106][T24608] dvb-usb: error while querying for an remote control event. [ 1904.503344][T24608] m920x_read = error: -19 [ 1904.514735][T12423] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1904.520207][T24608] dvb-usb: error while querying for an remote control event. [ 1904.544036][T24605] m920x_read = error: -19 [ 1904.560902][T24605] dvb-usb: error while querying for an remote control event. [ 1904.576357][T12423] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1904.588644][T26937] tipc: Failed to remove unknown binding: 66,1,1/0:2260675215/2260675217 [ 1904.603447][T12423] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1904.673444][T24605] m920x_read = error: -19 [ 1904.686631][T12423] usb 2-1: USB disconnect, device number 53 [ 1904.689488][T24605] dvb-usb: error while querying for an remote control event. [ 1904.717253][T24608] m920x_read = error: -19 [ 1904.735267][T24608] dvb-usb: error while querying for an remote control event. [ 1904.853409][T24608] m920x_read = error: -19 [ 1904.871927][T24608] dvb-usb: error while querying for an remote control event. [ 1904.885350][T24605] m920x_read = error: -19 [ 1904.896771][T24605] dvb-usb: error while querying for an remote control event. [ 1905.023638][T24605] m920x_read = error: -19 [ 1905.035672][T24605] dvb-usb: error while querying for an remote control event. [ 1905.043848][T24608] m920x_read = error: -19 [ 1905.055333][T24608] dvb-usb: error while querying for an remote control event. [ 1905.186197][T24608] m920x_read = error: -19 [ 1905.204140][T24608] dvb-usb: error while querying for an remote control event. [ 1905.234046][T24608] m920x_read = error: -19 [ 1905.234057][T26941] bond1: option mode: unable to set because the bond device has slaves [ 1905.262131][T24608] dvb-usb: error while querying for an remote control event. [ 1905.290259][T26941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5626'. [ 1905.333333][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5626'. [ 1905.345987][T24608] m920x_read = error: -19 [ 1905.356425][T26942] netlink: 'syz.1.5626': attribute type 4 has an invalid length. [ 1905.369552][T24608] dvb-usb: error while querying for an remote control event. [ 1905.393318][T24605] m920x_read = error: -19 [ 1905.406787][T24605] dvb-usb: error while querying for an remote control event. [ 1905.420202][T26942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5626'. [ 1905.504401][T24605] m920x_read = error: -19 [ 1905.509992][T24605] dvb-usb: error while querying for an remote control event. [ 1905.545092][T24605] m920x_read = error: -19 [ 1905.556491][T24605] dvb-usb: error while querying for an remote control event. [ 1905.645373][T24605] m920x_read = error: -19 [ 1905.663330][T24605] dvb-usb: error while querying for an remote control event. [ 1905.691354][T24605] m920x_read = error: -19 [ 1905.701792][T24605] dvb-usb: error while querying for an remote control event. [ 1905.793573][T24605] m920x_read = error: -19 [ 1905.803261][T24605] dvb-usb: error while querying for an remote control event. [ 1905.823353][T24605] m920x_read = error: -19 [ 1905.832763][T24605] dvb-usb: error while querying for an remote control event. [ 1905.924499][T24605] m920x_read = error: -19 [ 1905.933229][T24605] dvb-usb: error while querying for an remote control event. [ 1905.963352][T24605] m920x_read = error: -19 [ 1905.975478][T24605] dvb-usb: error while querying for an remote control event. [ 1906.060046][T26950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 1906.063913][T24605] m920x_read = error: -19 [ 1906.103348][T24608] m920x_read = error: -19 [ 1906.109328][T24608] dvb-usb: error while querying for an remote control event. [ 1906.122095][T24605] dvb-usb: error while querying for an remote control event. [ 1906.133312][T12423] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1906.253460][T24605] m920x_read = error: -19 [ 1906.259190][T24605] dvb-usb: error while querying for an remote control event. [ 1906.266844][T24608] m920x_read = error: -19 [ 1906.276918][T24608] dvb-usb: error while querying for an remote control event. [ 1906.318208][T12423] usb 6-1: config 0 has no interfaces? [ 1906.337144][T12423] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1906.365773][T12423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.393337][T24608] m920x_read = error: -19 [ 1906.402861][T24608] dvb-usb: error while querying for an remote control event. [ 1906.412088][T24605] m920x_read = error: -19 [ 1906.424548][T24605] dvb-usb: error while querying for an remote control event. [ 1906.432929][T12423] usb 6-1: config 0 descriptor?? [ 1906.554861][T24605] m920x_read = error: -19 [ 1906.566367][T24605] dvb-usb: error while querying for an remote control event. [ 1906.574357][T24608] m920x_read = error: -19 [ 1906.586004][T24608] dvb-usb: error while querying for an remote control event. [ 1906.667013][T26948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.698756][T26948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.703872][T24608] m920x_read = error: -19 [ 1906.721263][T24608] dvb-usb: error while querying for an remote control event. [ 1906.730988][T24605] m920x_read = error: -19 [ 1906.740744][T24605] dvb-usb: error while querying for an remote control event. [ 1906.753657][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5628'. [ 1906.821863][T26948] macvtap1: entered promiscuous mode [ 1906.849055][T26948] syz_tun: entered promiscuous mode [ 1906.853702][T24605] m920x_read = error: -19 [ 1906.870946][T24605] dvb-usb: error while querying for an remote control event. [ 1906.880096][T24608] m920x_read = error: -19 [ 1906.892026][T26948] macvtap1: entered allmulticast mode [ 1906.894899][T24608] dvb-usb: error while querying for an remote control event. [ 1907.014583][T24608] m920x_read = error: -19 [ 1907.022224][T24608] dvb-usb: error while querying for an remote control event. [ 1907.033330][T24605] m920x_read = error: -19 [ 1907.042475][T24605] dvb-usb: error while querying for an remote control event. [ 1907.153342][T24605] m920x_read = error: -19 [ 1907.160105][T24605] dvb-usb: error while querying for an remote control event. [ 1907.169494][T24608] m920x_read = error: -19 [ 1907.175354][T24608] dvb-usb: error while querying for an remote control event. [ 1907.201481][T26957] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5629'. [ 1907.287440][T26956] syzkaller0: entered promiscuous mode [ 1907.294271][T24608] m920x_read = error: -19 [ 1907.302641][T24608] dvb-usb: error while querying for an remote control event. [ 1907.312245][T24605] m920x_read = error: -19 [ 1907.319074][T26956] syzkaller0: entered allmulticast mode [ 1907.325134][T24605] dvb-usb: error while querying for an remote control event. [ 1907.374091][T26956] input: syz0 as /devices/virtual/input/input93 [ 1907.443467][T24605] m920x_read = error: -19 [ 1907.449646][T24605] dvb-usb: error while querying for an remote control event. [ 1907.457859][T24608] m920x_read = error: -19 [ 1907.464688][T24608] dvb-usb: error while querying for an remote control event. [ 1907.490182][T24608] usb 6-1: USB disconnect, device number 106 [ 1907.563319][T24605] m920x_read = error: -19 [ 1907.577661][T24605] dvb-usb: error while querying for an remote control event. [ 1907.585942][T24610] m920x_read = error: -19 [ 1907.597063][T24610] dvb-usb: error while querying for an remote control event. [ 1907.713366][T24608] m920x_read = error: -19 [ 1907.719858][T24608] dvb-usb: error while querying for an remote control event. [ 1907.733383][T24610] m920x_read = error: -19 [ 1907.739232][T24610] dvb-usb: error while querying for an remote control event. [ 1907.843316][T24610] m920x_read = error: -19 [ 1907.853104][T24610] dvb-usb: error while querying for an remote control event. [ 1907.872481][T24610] m920x_read = error: -19 [ 1907.884065][T24610] dvb-usb: error while querying for an remote control event. [ 1907.973325][T24610] m920x_read = error: -19 [ 1907.977768][T24610] dvb-usb: error while querying for an remote control event. [ 1908.005898][T24610] m920x_read = error: -19 [ 1908.019129][T24610] dvb-usb: error while querying for an remote control event. [ 1908.096083][T24610] m920x_read = error: -19 [ 1908.110252][T24610] dvb-usb: error while querying for an remote control event. [ 1908.144376][T24610] m920x_read = error: -19 [ 1908.152292][T24610] dvb-usb: error while querying for an remote control event. [ 1908.197884][T26964] syz.3.5632 (26964): drop_caches: 2 [ 1908.235864][T24610] m920x_read = error: -19 [ 1908.254944][T24610] dvb-usb: error while querying for an remote control event. [ 1908.285608][T24610] m920x_read = error: -19 [ 1908.300591][T24610] dvb-usb: error while querying for an remote control event. [ 1908.421777][T24610] m920x_read = error: -19 [ 1908.433859][T24610] dvb-usb: error while querying for an remote control event. [ 1908.468271][T24610] m920x_read = error: -19 [ 1908.480409][T24610] dvb-usb: error while querying for an remote control event. [ 1908.593065][T24610] m920x_read = error: -19 [ 1908.604779][T24610] dvb-usb: error while querying for an remote control event. [ 1908.619509][T24610] m920x_read = error: -19 [ 1908.632247][T24610] dvb-usb: error while querying for an remote control event. [ 1908.723322][T24610] m920x_read = error: -19 [ 1908.728743][T24610] dvb-usb: error while querying for an remote control event. [ 1908.773379][T24608] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1908.784760][T24610] m920x_read = error: -19 [ 1908.794767][T24610] dvb-usb: error while querying for an remote control event. [ 1908.873408][T24610] m920x_read = error: -19 [ 1908.877921][T24610] dvb-usb: error while querying for an remote control event. [ 1908.923380][T24605] m920x_read = error: -19 [ 1908.958329][T24605] dvb-usb: error while querying for an remote control event. [ 1909.056879][T24605] m920x_read = error: -19 [ 1909.068253][T24605] dvb-usb: error while querying for an remote control event. [ 1909.076529][T24610] m920x_read = error: -19 [ 1909.127408][T24610] dvb-usb: error while querying for an remote control event. [ 1909.273951][T24610] m920x_read = error: -19 [ 1909.300002][T24610] dvb-usb: error while querying for an remote control event. [ 1909.325053][T24605] m920x_read = error: -19 [ 1909.341341][T24605] dvb-usb: error while querying for an remote control event. [ 1909.433415][T24605] m920x_read = error: -19 [ 1909.439988][T24605] dvb-usb: error while querying for an remote control event. [ 1909.467491][T24605] m920x_read = error: -19 [ 1909.472673][T24605] dvb-usb: error while querying for an remote control event. [ 1909.487579][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 1909.553356][T24605] m920x_read = error: -19 [ 1909.557926][T24605] dvb-usb: error while querying for an remote control event. [ 1909.591370][T24605] m920x_read = error: -19 [ 1909.597214][T24605] dvb-usb: error while querying for an remote control event. [ 1909.688557][T24605] m920x_read = error: -19 [ 1909.694192][T24605] dvb-usb: error while querying for an remote control event. [ 1909.715336][T24605] m920x_read = error: -19 [ 1909.719850][T24605] dvb-usb: error while querying for an remote control event. [ 1909.729502][T12423] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1909.820700][T24605] m920x_read = error: -19 [ 1909.825220][T24605] dvb-usb: error while querying for an remote control event. [ 1909.835699][T24605] m920x_read = error: -19 [ 1909.840140][T24605] dvb-usb: error while querying for an remote control event. [ 1909.926969][T12423] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1909.936290][T12423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.950215][T24605] m920x_read = error: -19 [ 1909.954733][T24605] dvb-usb: error while querying for an remote control event. [ 1909.963823][T24605] m920x_read = error: -19 [ 1909.968945][T24605] dvb-usb: error while querying for an remote control event. [ 1909.974996][T12423] usb 2-1: config 0 descriptor?? [ 1909.988200][T12423] cp210x 2-1:0.0: cp210x converter detected [ 1910.063492][T24605] m920x_read = error: -19 [ 1910.068003][T24605] dvb-usb: error while querying for an remote control event. [ 1910.131311][T24608] m920x_read = error: -19 [ 1910.135932][T24608] dvb-usb: error while querying for an remote control event. [ 1910.187380][T12423] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1910.196255][T12423] cp210x 2-1:0.0: querying part number failed [ 1910.215873][T24608] m920x_read = error: -19 [ 1910.220407][T24608] dvb-usb: error while querying for an remote control event. [ 1910.222706][T12423] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1910.260937][T24608] m920x_read = error: -19 [ 1910.270050][T24608] dvb-usb: error while querying for an remote control event. [ 1910.344762][T24608] m920x_read = error: -19 [ 1910.349926][T24608] dvb-usb: error while querying for an remote control event. [ 1910.391780][T24608] m920x_read = error: -19 [ 1910.396368][T24608] dvb-usb: error while querying for an remote control event. [ 1910.472392][T24608] m920x_read = error: -19 [ 1910.477173][T24608] dvb-usb: error while querying for an remote control event. [ 1910.504901][T24605] m920x_read = error: -19 [ 1910.509477][T24605] dvb-usb: error while querying for an remote control event. [ 1910.634450][T24605] m920x_read = error: -19 [ 1910.639545][T24605] dvb-usb: error while querying for an remote control event. [ 1910.647136][T24608] m920x_read = error: -19 [ 1910.651646][T24608] dvb-usb: error while querying for an remote control event. [ 1910.747306][T24608] m920x_read = error: -19 [ 1910.751888][T24608] dvb-usb: error while querying for an remote control event. [ 1910.780837][T24605] m920x_read = error: -19 [ 1910.785341][T26980] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 1910.792978][T24605] dvb-usb: error while querying for an remote control event. [ 1910.893317][T24605] m920x_read = error: -19 [ 1910.916517][T24605] dvb-usb: error while querying for an remote control event. [ 1910.924417][T24608] m920x_read = error: -19 [ 1910.928946][T24608] dvb-usb: error while querying for an remote control event. [ 1911.056225][T24608] m920x_read = error: -19 [ 1911.060758][T24608] dvb-usb: error while querying for an remote control event. [ 1911.068946][T24605] m920x_read = error: -19 [ 1911.073443][T24605] dvb-usb: error while querying for an remote control event. [ 1911.186592][T24605] m920x_read = error: -19 [ 1911.191097][T24605] dvb-usb: error while querying for an remote control event. [ 1911.198751][T24608] m920x_read = error: -19 [ 1911.203620][T24608] dvb-usb: error while querying for an remote control event. [ 1911.323361][T24608] m920x_read = error: -19 [ 1911.328027][T24608] dvb-usb: error while querying for an remote control event. [ 1911.335861][T24605] m920x_read = error: -19 [ 1911.340921][T24605] dvb-usb: error while querying for an remote control event. [ 1911.450149][T24605] m920x_read = error: -19 [ 1911.454945][T24605] dvb-usb: error while querying for an remote control event. [ 1911.464600][T24605] m920x_read = error: -19 [ 1911.485896][T24605] dvb-usb: error while querying for an remote control event. [ 1911.573374][T24605] m920x_read = error: -19 [ 1911.579681][T24605] dvb-usb: error while querying for an remote control event. [ 1911.634613][T24605] m920x_read = error: -19 [ 1911.639286][T24605] dvb-usb: error while querying for an remote control event. [ 1911.684886][T24605] m920x_read = error: -19 [ 1911.689412][T24605] dvb-usb: error while querying for an remote control event. [ 1911.783898][T24605] m920x_read = error: -19 [ 1911.799649][T24605] dvb-usb: error while querying for an remote control event. [ 1911.807491][T24608] m920x_read = error: -19 [ 1911.812921][T24608] dvb-usb: error while querying for an remote control event. [ 1911.963475][T24608] m920x_read = error: -19 [ 1911.968725][T24608] dvb-usb: error while querying for an remote control event. [ 1911.976333][T24605] m920x_read = error: -19 [ 1911.981322][T24605] dvb-usb: error while querying for an remote control event. [ 1912.073604][T24605] m920x_read = error: -19 [ 1912.078860][T24605] dvb-usb: error while querying for an remote control event. [ 1912.086493][T24608] m920x_read = error: -19 [ 1912.092459][T24608] dvb-usb: error while querying for an remote control event. [ 1912.183509][T24608] m920x_read = error: -19 [ 1912.188785][T24608] dvb-usb: error while querying for an remote control event. [ 1912.197356][T24605] m920x_read = error: -19 [ 1912.202258][T24605] dvb-usb: error while querying for an remote control event. [ 1912.294105][T24605] m920x_read = error: -19 [ 1912.313910][T24605] dvb-usb: error while querying for an remote control event. [ 1912.321600][T24605] m920x_read = error: -19 [ 1912.343587][T24605] dvb-usb: error while querying for an remote control event. [ 1912.433423][T24605] m920x_read = error: -19 [ 1912.437948][T24605] dvb-usb: error while querying for an remote control event. [ 1912.463614][T24605] m920x_read = error: -19 [ 1912.469610][T24605] dvb-usb: error while querying for an remote control event. [ 1912.544623][T24605] m920x_read = error: -19 [ 1912.549238][T24605] dvb-usb: error while querying for an remote control event. [ 1912.574296][T24605] m920x_read = error: -19 [ 1912.579109][T24605] dvb-usb: error while querying for an remote control event. [ 1912.673459][T24605] m920x_read = error: -19 [ 1912.678385][T24605] dvb-usb: error while querying for an remote control event. [ 1912.702068][T24608] m920x_read = error: -19 [ 1912.707183][T24608] dvb-usb: error while querying for an remote control event. [ 1912.836592][T24608] m920x_read = error: -19 [ 1912.841124][T24608] dvb-usb: error while querying for an remote control event. [ 1912.866863][T24605] m920x_read = error: -19 [ 1912.871329][T24605] dvb-usb: error while querying for an remote control event. [ 1913.001516][T24605] m920x_read = error: -19 [ 1913.006041][T24605] dvb-usb: error while querying for an remote control event. [ 1913.014162][T24608] m920x_read = error: -19 [ 1913.019425][T24608] dvb-usb: error while querying for an remote control event. [ 1913.109518][T24608] m920x_read = error: -19 [ 1913.114986][T24608] dvb-usb: error while querying for an remote control event. [ 1913.122528][T24608] m920x_read = error: -19 [ 1913.127249][T24608] dvb-usb: error while querying for an remote control event. [ 1913.243487][T24608] m920x_read = error: -19 [ 1913.247942][T24608] dvb-usb: error while querying for an remote control event. [ 1913.255545][T24605] m920x_read = error: -19 [ 1913.262323][T24605] dvb-usb: error while querying for an remote control event. [ 1913.363552][T24605] m920x_read = error: -19 [ 1913.368059][T24605] dvb-usb: error while querying for an remote control event. [ 1913.375722][T24608] m920x_read = error: -19 [ 1913.380716][T24608] dvb-usb: error while querying for an remote control event. [ 1913.499979][T24608] m920x_read = error: -19 [ 1913.504615][T24608] dvb-usb: error while querying for an remote control event. [ 1913.512153][T24608] m920x_read = error: -19 [ 1913.517139][T24608] dvb-usb: error while querying for an remote control event. [ 1913.624514][T24608] m920x_read = error: -19 [ 1913.628991][T24608] dvb-usb: error while querying for an remote control event. [ 1913.664132][T24608] m920x_read = error: -19 [ 1913.668612][T24608] dvb-usb: error while querying for an remote control event. [ 1913.731080][T24608] m920x_read = error: -19 [ 1913.735608][T24608] dvb-usb: error while querying for an remote control event. [ 1913.799135][T24608] m920x_read = error: -19 [ 1913.803788][T24608] dvb-usb: error while querying for an remote control event. [ 1913.852460][T24608] m920x_read = error: -19 [ 1913.857033][T24608] dvb-usb: error while querying for an remote control event. [ 1913.925818][T24608] m920x_read = error: -19 [ 1913.931049][T24608] dvb-usb: error while querying for an remote control event. [ 1914.017069][T24608] m920x_read = error: -19 [ 1914.021477][T24608] dvb-usb: error while querying for an remote control event. [ 1914.049191][T24605] m920x_read = error: -19 [ 1914.053698][T24605] dvb-usb: error while querying for an remote control event. [ 1914.140087][T24605] m920x_read = error: -19 [ 1914.144775][T24605] dvb-usb: error while querying for an remote control event. [ 1914.174087][T24605] m920x_read = error: -19 [ 1914.178950][T24605] dvb-usb: error while querying for an remote control event. [ 1914.302643][T24605] m920x_read = error: -19 [ 1914.308409][T24605] dvb-usb: error while querying for an remote control event. [ 1914.316341][T24608] m920x_read = error: -19 [ 1914.321174][T24608] dvb-usb: error while querying for an remote control event. [ 1914.432580][T24608] m920x_read = error: -19 [ 1914.437301][T24608] dvb-usb: error while querying for an remote control event. [ 1914.445453][T24605] m920x_read = error: -19 [ 1914.450344][T24605] dvb-usb: error while querying for an remote control event. [ 1914.553549][T24605] m920x_read = error: -19 [ 1914.567581][T24605] dvb-usb: error while querying for an remote control event. [ 1914.575433][T24608] m920x_read = error: -19 [ 1914.598588][T24608] dvb-usb: error while querying for an remote control event. [ 1914.733940][T24608] m920x_read = error: -19 [ 1914.738542][T24608] dvb-usb: error while querying for an remote control event. [ 1914.746879][T24605] m920x_read = error: -19 [ 1914.769640][T24605] dvb-usb: error while querying for an remote control event. [ 1914.886587][T24605] m920x_read = error: -19 [ 1914.891391][T24605] dvb-usb: error while querying for an remote control event. [ 1914.899316][T24608] m920x_read = error: -19 [ 1914.904518][T24608] dvb-usb: error while querying for an remote control event. [ 1914.948078][T12423] usb 2-1: USB disconnect, device number 54 [ 1914.956116][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.956177][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.032180][T12423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1915.044139][T24608] m920x_read = error: -19 [ 1915.067486][T24608] dvb-usb: error while querying for an remote control event. [ 1915.068749][T12423] cp210x 2-1:0.0: device disconnected [ 1915.075330][T24605] m920x_read = error: -19 [ 1915.114245][T24605] dvb-usb: error while querying for an remote control event. [ 1915.213468][T24608] m920x_read = error: -19 [ 1915.223786][T24608] dvb-usb: error while querying for an remote control event. [ 1915.257337][T24608] m920x_read = error: -19 [ 1915.266763][T24608] dvb-usb: error while querying for an remote control event. [ 1915.353623][T24608] m920x_read = error: -19 [ 1915.363497][T24608] dvb-usb: error while querying for an remote control event. [ 1915.385967][T24608] m920x_read = error: -19 [ 1915.392799][T24608] dvb-usb: error while querying for an remote control event. [ 1915.421083][T27002] syz.1.5644 (27002): drop_caches: 2 [ 1915.443331][T24605] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1915.483305][T24608] m920x_read = error: -19 [ 1915.492332][T24608] dvb-usb: error while querying for an remote control event. [ 1915.503494][T24610] m920x_read = error: -19 [ 1915.510880][T24610] dvb-usb: error while querying for an remote control event. [ 1915.607680][T27005] FAULT_INJECTION: forcing a failure. [ 1915.607680][T27005] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.619165][T24605] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.634930][T24610] m920x_read = error: -19 [ 1915.643757][T24610] dvb-usb: error while querying for an remote control event. [ 1915.651607][T27005] CPU: 0 UID: 0 PID: 27005 Comm: syz.1.5645 Tainted: G L syzkaller #0 PREEMPT(full) [ 1915.651638][T27005] Tainted: [L]=SOFTLOCKUP [ 1915.651646][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1915.651659][T27005] Call Trace: [ 1915.651667][T27005] [ 1915.651677][T27005] dump_stack_lvl+0xe8/0x150 [ 1915.651704][T27005] should_fail_ex+0x412/0x560 [ 1915.651735][T27005] should_failslab+0xa8/0x100 [ 1915.651768][T27005] __kmalloc_noprof+0xe8/0x760 [ 1915.651796][T27005] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1915.651833][T27005] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1915.651865][T27005] ? tomoyo_domain+0xd7/0x130 [ 1915.651899][T27005] ? tomoyo_path_number_perm+0x219/0x630 [ 1915.651925][T27005] tomoyo_path_number_perm+0x246/0x630 [ 1915.651955][T27005] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1915.651982][T27005] ? __lock_acquire+0x6b5/0x2cf0 [ 1915.652048][T27005] ? __fget_files+0x2a/0x420 [ 1915.652079][T27005] ? __fget_files+0x3a0/0x420 [ 1915.652126][T27005] ? __fget_files+0x2a/0x420 [ 1915.652153][T27005] security_file_ioctl_compat+0xc3/0x2a0 [ 1915.652197][T27005] __ia32_compat_sys_ioctl+0x139/0x950 [ 1915.652237][T27005] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1915.652277][T27005] ? __fget_files+0x3a0/0x420 [ 1915.652317][T27005] ? fput+0xa0/0xd0 [ 1915.652343][T27005] ? ksys_write+0x242/0x270 [ 1915.652385][T27005] __do_fast_syscall_32+0x229/0x6e0 [ 1915.652418][T27005] ? do_fast_syscall_32+0x33/0x70 [ 1915.652441][T27005] ? lockdep_hardirqs_on+0x7a/0x110 [ 1915.652462][T27005] ? asm_int80_emulation+0x1a/0x20 [ 1915.652484][T27005] ? do_int80_emulation+0x286/0x530 [ 1915.652507][T27005] ? trace_irq_disable+0x3b/0x140 [ 1915.652544][T27005] do_fast_syscall_32+0x33/0x70 [ 1915.652570][T27005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1915.652597][T27005] RIP: 0023:0xf702f01c [ 1915.652619][T27005] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1915.652639][T27005] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1915.652664][T27005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b4c [ 1915.652680][T27005] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1915.652694][T27005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1915.652708][T27005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1915.652722][T27005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1915.652757][T27005] [ 1915.652768][T27005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1915.666326][T24605] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1915.924223][T24610] m920x_read = error: -19 [ 1915.928626][T24610] dvb-usb: error while querying for an remote control event. [ 1915.938536][T24605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.948714][T24605] usb 3-1: Product: syz [ 1915.953069][T24605] usb 3-1: Manufacturer: syz [ 1915.962119][T24605] usb 3-1: SerialNumber: syz [ 1915.986260][T24605] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1916.033389][T24608] m920x_read = error: -19 [ 1916.037972][T24608] dvb-usb: error while querying for an remote control event. [ 1916.046614][T24610] m920x_read = error: -19 [ 1916.051151][T24610] dvb-usb: error while querying for an remote control event. [ 1916.077667][T26991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5640'. [ 1916.088222][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 1916.105684][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 1916.164768][T24608] m920x_read = error: -19 [ 1916.169746][T24608] dvb-usb: error while querying for an remote control event. [ 1916.179105][T20344] m920x_read = error: -19 [ 1916.206246][T20344] dvb-usb: error while querying for an remote control event. [ 1916.333751][T20344] m920x_read = error: -19 [ 1916.338240][T20344] dvb-usb: error while querying for an remote control event. [ 1916.345975][T24608] m920x_read = error: -19 [ 1916.350477][T24608] dvb-usb: error while querying for an remote control event. [ 1916.373481][T24610] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1916.473405][T24608] m920x_read = error: -19 [ 1916.477945][T24608] dvb-usb: error while querying for an remote control event. [ 1916.486148][T20344] m920x_read = error: -19 [ 1916.491328][T20344] dvb-usb: error while querying for an remote control event. [ 1916.507773][T24605] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1916.521936][T27013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5647'. [ 1916.532033][T24605] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1916.603297][T20344] m920x_read = error: -19 [ 1916.618883][T20344] dvb-usb: error while querying for an remote control event. [ 1916.626825][T24608] m920x_read = error: -19 [ 1916.633122][T24608] dvb-usb: error while querying for an remote control event. [ 1916.642244][T24605] usb 3-1: media controller created [ 1916.689999][T24605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1916.755691][T24608] m920x_read = error: -19 [ 1916.778408][T24608] dvb-usb: error while querying for an remote control event. [ 1916.786304][T20344] m920x_read = error: -19 [ 1916.801488][T20344] dvb-usb: error while querying for an remote control event. [ 1916.925164][T20344] m920x_read = error: -19 [ 1916.951437][T20344] dvb-usb: error while querying for an remote control event. [ 1916.960284][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5650'. [ 1916.970346][T24608] m920x_read = error: -19 [ 1916.983510][T24608] dvb-usb: error while querying for an remote control event. [ 1917.095766][T24608] m920x_read = error: -19 [ 1917.131061][T24608] dvb-usb: error while querying for an remote control event. [ 1917.138724][T20344] m920x_read = error: -19 [ 1917.151514][T20344] dvb-usb: error while querying for an remote control event. [ 1917.273565][T24605] m920x_read = error: -19 [ 1917.297808][T24605] dvb-usb: error while querying for an remote control event. [ 1917.309210][T20344] m920x_read = error: -19 [ 1917.323478][T20344] dvb-usb: error while querying for an remote control event. [ 1917.433701][T20344] m920x_read = error: -19 [ 1917.446813][T20344] dvb-usb: error while querying for an remote control event. [ 1917.454534][T24605] m920x_read = error: -19 [ 1917.469210][T24605] dvb-usb: error while querying for an remote control event. [ 1917.541318][T27033] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5652'. [ 1917.613426][T24605] m920x_read = error: -19 [ 1917.626123][T24605] dvb-usb: error while querying for an remote control event. [ 1917.639335][T20344] m920x_read = error: -19 [ 1917.655869][T20344] dvb-usb: error while querying for an remote control event. [ 1917.774582][T20344] m920x_read = error: -19 [ 1917.785549][T20344] dvb-usb: error while querying for an remote control event. [ 1917.824171][T20344] m920x_read = error: -19 [ 1917.830972][T20344] dvb-usb: error while querying for an remote control event. [ 1917.904295][T24610] m920x_read = error: -19 [ 1917.913200][T24610] dvb-usb: error while querying for an remote control event. [ 1917.944522][T24610] m920x_read = error: -19 [ 1917.954754][T24610] dvb-usb: error while querying for an remote control event. [ 1918.059001][T24610] m920x_read = error: -19 [ 1918.068053][T24610] dvb-usb: error while querying for an remote control event. [ 1918.077906][T20344] m920x_read = error: -19 [ 1918.091302][T20344] dvb-usb: error while querying for an remote control event. [ 1918.203554][T20344] m920x_read = error: -19 [ 1918.208752][T20344] dvb-usb: error while querying for an remote control event. [ 1918.216921][T24610] m920x_read = error: -19 [ 1918.225391][T24610] dvb-usb: error while querying for an remote control event. [ 1918.245774][T12423] usb 3-1: USB disconnect, device number 17 [ 1918.343433][T24610] m920x_read = error: -19 [ 1918.356492][T24610] dvb-usb: error while querying for an remote control event. [ 1918.365207][T20344] m920x_read = error: -19 [ 1918.378560][T20344] dvb-usb: error while querying for an remote control event. [ 1918.493348][T20344] m920x_read = error: -19 [ 1918.507420][T20344] dvb-usb: error while querying for an remote control event. [ 1918.518047][T24610] m920x_read = error: -19 [ 1918.528565][T24610] dvb-usb: error while querying for an remote control event. [ 1918.644946][T24610] m920x_read = error: -19 [ 1918.652974][T24610] dvb-usb: error while querying for an remote control event. [ 1918.663751][T24608] m920x_read = error: -19 [ 1918.680470][T24608] dvb-usb: error while querying for an remote control event. [ 1918.803330][T24608] m920x_read = error: -19 [ 1918.808886][T24608] dvb-usb: error while querying for an remote control event. [ 1918.816559][T20344] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1918.841073][T24610] m920x_read = error: -19 [ 1918.849655][T24610] dvb-usb: error while querying for an remote control event. [ 1918.893284][T24605] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1918.939708][T27046] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1918.953526][T24610] m920x_read = error: -19 [ 1919.003236][T24610] dvb-usb: error while querying for an remote control event. [ 1919.011778][T24610] m920x_read = error: -19 [ 1919.020252][T20344] usb 2-1: config 0 has no interfaces? [ 1919.028048][T20344] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1919.037352][T24610] dvb-usb: error while querying for an remote control event. [ 1919.053289][T20344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.072776][T20344] usb 2-1: config 0 descriptor?? [ 1919.085231][T24605] usb 4-1: config 0 has no interfaces? [ 1919.092531][T24605] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1919.108457][T24605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.117074][T20344] m920x_read = error: -19 [ 1919.127991][T20344] dvb-usb: error while querying for an remote control event. [ 1919.144464][T24605] usb 4-1: config 0 descriptor?? [ 1919.163402][T20344] m920x_read = error: -19 [ 1919.168173][T20344] dvb-usb: error while querying for an remote control event. [ 1919.254233][T20344] m920x_read = error: -19 [ 1919.259807][T20344] dvb-usb: error while querying for an remote control event. [ 1919.301582][T27040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.311672][T20344] m920x_read = error: -19 [ 1919.329884][T20344] dvb-usb: error while querying for an remote control event. [ 1919.344459][T27040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.373682][T24605] m920x_read = error: -19 [ 1919.382008][T24605] dvb-usb: error while querying for an remote control event. [ 1919.396495][T27042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.420693][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1919.430325][T27042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.447507][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1919.472730][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5656'. [ 1919.493421][T20344] m920x_read = error: -19 [ 1919.499188][T20344] dvb-usb: error while querying for an remote control event. [ 1919.506925][T24610] m920x_read = error: -19 [ 1919.511777][T24610] dvb-usb: error while querying for an remote control event. [ 1919.529290][T27040] syz_tun: left allmulticast mode [ 1919.536104][T27040] syz_tun: left promiscuous mode [ 1919.623456][T24605] m920x_read = error: -19 [ 1919.629750][T24605] dvb-usb: error while querying for an remote control event. [ 1919.643317][T24610] m920x_read = error: -19 [ 1919.653573][T27042] macvtap1: entered promiscuous mode [ 1919.676031][T24610] dvb-usb: error while querying for an remote control event. [ 1919.723099][T27042] syz_tun: entered promiscuous mode [ 1919.765217][T27042] macvtap1: entered allmulticast mode [ 1919.801408][T27042] syz_tun: entered allmulticast mode [ 1919.806951][T24610] m920x_read = error: -19 [ 1919.812238][T24610] dvb-usb: error while querying for an remote control event. [ 1919.843332][T24608] m920x_read = error: -19 [ 1919.849792][T24608] dvb-usb: error while querying for an remote control event. [ 1919.964115][T24608] m920x_read = error: -19 [ 1919.969284][T24608] dvb-usb: error while querying for an remote control event. [ 1919.994193][T24608] m920x_read = error: -19 [ 1920.001282][T24608] dvb-usb: error while querying for an remote control event. [ 1920.094031][T24608] m920x_read = error: -19 [ 1920.103947][T24608] dvb-usb: error while querying for an remote control event. [ 1920.123727][T24608] m920x_read = error: -19 [ 1920.136580][T24608] dvb-usb: error while querying for an remote control event. [ 1920.235036][T24608] m920x_read = error: -19 [ 1920.246833][T24608] dvb-usb: error while querying for an remote control event. [ 1920.263713][T24605] m920x_read = error: -19 [ 1920.273258][T24605] dvb-usb: error while querying for an remote control event. [ 1920.373090][T24605] usb 2-1: USB disconnect, device number 55 [ 1920.418432][T24608] m920x_read = error: -19 [ 1920.431619][T24608] dvb-usb: error while querying for an remote control event. [ 1920.443021][T20344] m920x_read = error: -19 [ 1920.467951][T20344] dvb-usb: error while querying for an remote control event. [ 1920.490939][T24610] usb 4-1: USB disconnect, device number 3 [ 1920.594504][T24605] m920x_read = error: -19 [ 1920.611550][T24605] dvb-usb: error while querying for an remote control event. [ 1920.620109][T20344] m920x_read = error: -19 [ 1920.638040][T20344] dvb-usb: error while querying for an remote control event. [ 1920.753732][T20344] m920x_read = error: -19 [ 1920.767542][T20344] dvb-usb: error while querying for an remote control event. [ 1920.783421][T24605] m920x_read = error: -19 [ 1920.793060][T24605] dvb-usb: error while querying for an remote control event. [ 1920.913710][T24605] m920x_read = error: -19 [ 1920.922307][T24605] dvb-usb: error while querying for an remote control event. [ 1920.935158][T20344] m920x_read = error: -19 [ 1920.948848][T20344] dvb-usb: error while querying for an remote control event. [ 1920.963474][T24610] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1921.063386][T20344] m920x_read = error: -19 [ 1921.084934][T20344] dvb-usb: error while querying for an remote control event. [ 1921.130116][T20344] m920x_read = error: -19 [ 1921.144211][T24610] usb 4-1: Using ep0 maxpacket: 8 [ 1921.158588][T20344] dvb-usb: error while querying for an remote control event. [ 1921.176546][T24610] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1921.199181][T24610] usb 4-1: config 0 has no interface number 0 [ 1921.212523][T24610] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1921.233299][T20344] m920x_read = error: -19 [ 1921.240345][T24610] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1921.255189][T27070] syz.1.5664 (27070): drop_caches: 2 [ 1921.262251][T20344] dvb-usb: error while querying for an remote control event. [ 1921.293519][T20344] m920x_read = error: -19 [ 1921.299711][T24610] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1921.315754][T20344] dvb-usb: error while querying for an remote control event. [ 1921.332198][T24610] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1921.344312][T24610] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1921.362097][T24610] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1921.381559][T24610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.393344][T20344] m920x_read = error: -19 [ 1921.398960][T20344] dvb-usb: error while querying for an remote control event. [ 1921.416652][T24610] usb 4-1: config 0 descriptor?? [ 1921.433916][T20344] m920x_read = error: -19 [ 1921.442709][T20344] dvb-usb: error while querying for an remote control event. [ 1921.465519][T24610] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1921.533323][T24610] m920x_read = error: -19 [ 1921.542319][T24610] dvb-usb: error while querying for an remote control event. [ 1921.597583][T24610] m920x_read = error: -19 [ 1921.607794][T24610] dvb-usb: error while querying for an remote control event. [ 1921.663362][T24610] m920x_read = error: -19 [ 1921.693237][T24610] dvb-usb: error while querying for an remote control event. [ 1921.706758][T27065] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1921.733313][T24610] m920x_read = error: -19 [ 1921.752923][T24610] dvb-usb: error while querying for an remote control event. [ 1921.834625][T24610] m920x_read = error: -19 [ 1921.851185][T24610] dvb-usb: error while querying for an remote control event. [ 1921.893708][T24610] m920x_read = error: -19 [ 1921.902746][T24610] dvb-usb: error while querying for an remote control event. [ 1921.973366][T12423] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1921.983684][T24610] m920x_read = error: -19 [ 1921.998695][T24610] dvb-usb: error while querying for an remote control event. [ 1922.037986][T24610] m920x_read = error: -19 [ 1922.048095][T24610] dvb-usb: error while querying for an remote control event. [ 1922.124602][T24610] m920x_read = error: -19 [ 1922.136600][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1922.156396][T24610] dvb-usb: error while querying for an remote control event. [ 1922.173851][T20344] m920x_read = error: -19 [ 1922.184533][T20344] dvb-usb: error while querying for an remote control event. [ 1922.219893][T12423] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1922.244978][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1922.254353][T12423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.293929][T20344] m920x_read = error: -19 [ 1922.301329][T20344] dvb-usb: error while querying for an remote control event. [ 1922.311247][T12423] usb 2-1: config 0 descriptor?? [ 1922.314221][T24610] m920x_read = error: -19 [ 1922.345801][T24610] dvb-usb: error while querying for an remote control event. [ 1922.359950][T12423] cp210x 2-1:0.0: cp210x converter detected [ 1922.412559][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1922.446089][T24610] m920x_read = error: -19 [ 1922.459397][T24610] dvb-usb: error while querying for an remote control event. [ 1922.515227][T24610] m920x_read = error: -19 [ 1922.523826][T24610] dvb-usb: error while querying for an remote control event. [ 1922.550734][T12423] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1922.583654][T24610] m920x_read = error: -19 [ 1922.591334][T24610] dvb-usb: error while querying for an remote control event. [ 1922.615015][T12423] cp210x 2-1:0.0: querying part number failed [ 1922.643385][T24610] m920x_read = error: -19 [ 1922.645428][T24592] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1922.666846][T12423] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1922.691399][T24610] dvb-usb: error while querying for an remote control event. [ 1922.735110][T24610] m920x_read = error: -19 [ 1922.756333][T24610] dvb-usb: error while querying for an remote control event. [ 1922.792057][T12423] usb 2-1: USB disconnect, device number 56 [ 1922.823485][T24610] m920x_read = error: -19 [ 1922.838211][T24610] dvb-usb: error while querying for an remote control event. [ 1922.894735][T24610] m920x_read = error: -19 [ 1922.907199][T12423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1922.918318][T24610] dvb-usb: error while querying for an remote control event. [ 1922.981893][T12423] cp210x 2-1:0.0: device disconnected [ 1922.983996][T24610] m920x_read = error: -19 [ 1923.012083][T24610] dvb-usb: error while querying for an remote control event. [ 1923.054357][T24610] m920x_read = error: -19 [ 1923.072346][T24610] dvb-usb: error while querying for an remote control event. [ 1923.156108][T24610] m920x_read = error: -19 [ 1923.187560][T24610] dvb-usb: error while querying for an remote control event. [ 1923.223907][T24610] m920x_read = error: -19 [ 1923.244834][T24610] dvb-usb: error while querying for an remote control event. [ 1923.324944][T24610] m920x_read = error: -19 [ 1923.349251][T24610] dvb-usb: error while querying for an remote control event. [ 1923.393572][T20344] m920x_read = error: -19 [ 1923.411249][T20344] dvb-usb: error while querying for an remote control event. [ 1923.504043][T20344] m920x_read = error: -19 [ 1923.522718][T20344] dvb-usb: error while querying for an remote control event. [ 1923.543433][T24610] m920x_read = error: -19 [ 1923.556135][T24610] dvb-usb: error while querying for an remote control event. [ 1923.673309][T24610] m920x_read = error: -19 [ 1923.687878][T24610] dvb-usb: error while querying for an remote control event. [ 1923.704222][T20344] m920x_read = error: -19 [ 1923.714086][T20344] dvb-usb: error while querying for an remote control event. [ 1923.834342][T20344] m920x_read = error: -19 [ 1923.851152][T20344] dvb-usb: error while querying for an remote control event. [ 1923.861223][T24610] m920x_read = error: -19 [ 1923.878771][T24610] dvb-usb: error while querying for an remote control event. [ 1923.894199][T24592] usb 6-1: device descriptor read/64, error -71 [ 1923.993431][T24610] m920x_read = error: -19 [ 1924.003450][T24610] dvb-usb: error while querying for an remote control event. [ 1924.033427][T24610] m920x_read = error: -19 [ 1924.045118][T24610] dvb-usb: error while querying for an remote control event. [ 1924.133396][T24610] m920x_read = error: -19 [ 1924.142173][T24610] dvb-usb: error while querying for an remote control event. [ 1924.165344][T24592] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1924.173738][T24610] m920x_read = error: -19 [ 1924.173767][T24610] dvb-usb: error while querying for an remote control event. [ 1924.273359][T24610] m920x_read = error: -19 [ 1924.289972][T24610] dvb-usb: error while querying for an remote control event. [ 1924.297678][T20344] m920x_read = error: -19 [ 1924.338080][T20344] dvb-usb: error while querying for an remote control event. [ 1924.371165][T27097] syzkaller0: entered promiscuous mode [ 1924.382251][T27095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5670'. [ 1924.399151][T27097] syzkaller0: entered allmulticast mode [ 1924.473447][T20344] m920x_read = error: -19 [ 1924.486941][T20344] dvb-usb: error while querying for an remote control event. [ 1924.497235][T24610] m920x_read = error: -19 [ 1924.507729][T24610] dvb-usb: error while querying for an remote control event. [ 1924.623436][T24610] m920x_read = error: -19 [ 1924.627965][T24610] dvb-usb: error while querying for an remote control event. [ 1924.635923][T20344] m920x_read = error: -19 [ 1924.640839][T20344] dvb-usb: error while querying for an remote control event. [ 1924.754617][T20344] m920x_read = error: -19 [ 1924.761843][T20344] dvb-usb: error while querying for an remote control event. [ 1924.769916][T24610] m920x_read = error: -19 [ 1924.782535][T24610] dvb-usb: error while querying for an remote control event. [ 1924.904051][T12423] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1924.912097][T24610] m920x_read = error: -19 [ 1924.922846][T24610] dvb-usb: error while querying for an remote control event. [ 1924.932477][T20344] m920x_read = error: -19 [ 1924.945824][T20344] dvb-usb: error while querying for an remote control event. [ 1924.960105][T24316] usb 4-1: USB disconnect, device number 4 [ 1925.021749][T24316] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1925.116346][T12423] usb 2-1: config 0 has no interfaces? [ 1925.128662][T12423] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1925.149169][T12423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.183323][T12423] usb 2-1: config 0 descriptor?? [ 1925.214233][T20344] m920x_read = error: -19 [ 1925.230752][T20344] dvb-usb: error while querying for an remote control event. [ 1925.241918][T24610] m920x_read = error: -19 [ 1925.251707][T24610] dvb-usb: error while querying for an remote control event. [ 1925.363454][T24610] m920x_read = error: -19 [ 1925.368401][T24610] dvb-usb: error while querying for an remote control event. [ 1925.376251][T20344] m920x_read = error: -19 [ 1925.383048][T20344] dvb-usb: error while querying for an remote control event. [ 1925.409757][T27100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.413427][T24597] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1925.430853][T27100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.447630][T27100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5672'. [ 1925.460434][T27100] syz_tun: entered allmulticast mode [ 1925.469095][T27100] syz_tun: entered promiscuous mode [ 1925.488846][T27100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5672'. [ 1925.503495][T20344] m920x_read = error: -19 [ 1925.503528][T24316] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1925.510621][T20344] dvb-usb: error while querying for an remote control event. [ 1925.525460][T24610] m920x_read = error: -19 [ 1925.541419][T24610] dvb-usb: error while querying for an remote control event. [ 1925.550135][T27100] syz_tun: left allmulticast mode [ 1925.561352][T27100] syz_tun: left promiscuous mode [ 1925.599709][T27116] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1925.627118][T24597] usb 3-1: Using ep0 maxpacket: 8 [ 1925.650290][T24597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1925.663448][T24610] m920x_read = error: -19 [ 1925.667125][T24597] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.668381][T24610] dvb-usb: error while querying for an remote control event. [ 1925.688154][T20344] m920x_read = error: -19 [ 1925.692621][T20344] dvb-usb: error while querying for an remote control event. [ 1925.707910][T24316] usb 6-1: Using ep0 maxpacket: 8 [ 1925.715275][T24597] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1925.734089][T24316] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1925.753469][T24597] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1925.770676][T24597] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1925.783828][T24316] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1925.793034][T24597] usb 3-1: Manufacturer: syz [ 1925.803363][T24610] m920x_read = error: -19 [ 1925.808117][T24610] dvb-usb: error while querying for an remote control event. [ 1925.816157][T24597] usb 3-1: SerialNumber: syz [ 1925.819648][T20344] m920x_read = error: -19 [ 1925.820953][T24316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.842721][T20344] dvb-usb: error while querying for an remote control event. [ 1925.853665][T24316] usb 6-1: Product: 줯Ꚍ旮ᩩ㟭Ⳑ擢璷趀ᠣಞ륧뗩蛚益飻⧁蜴童椁䏓䂏啕ᅓ䏩ﭱ仕珦쟱潕鳦靥ྙ葼ࠠ䰟ւ綈謟弁 [ 1925.894887][T24316] usb 6-1: Manufacturer: 㠈 [ 1925.905406][T24316] usb 6-1: SerialNumber: и [ 1925.953396][T20344] m920x_read = error: -19 [ 1925.958120][T20344] dvb-usb: error while querying for an remote control event. [ 1925.965886][T24605] m920x_read = error: -19 [ 1925.971122][T24605] dvb-usb: error while querying for an remote control event. [ 1926.049327][T27108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1926.066033][T27108] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1926.075715][T27108] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1926.086508][T24605] m920x_read = error: -19 [ 1926.092219][T24605] dvb-usb: error while querying for an remote control event. [ 1926.101247][T20344] m920x_read = error: -19 [ 1926.116666][T20344] dvb-usb: error while querying for an remote control event. [ 1926.190303][T20344] usb 2-1: USB disconnect, device number 57 [ 1926.217455][T27108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1926.244601][T24605] m920x_read = error: -19 [ 1926.266485][T24605] dvb-usb: error while querying for an remote control event. [ 1926.276252][T24610] m920x_read = error: -19 [ 1926.289289][T27108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1926.295450][T24610] dvb-usb: error while querying for an remote control event. [ 1926.356757][T27108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1926.379157][T27108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1926.390125][T24316] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1926.403398][T24605] m920x_read = error: -19 [ 1926.420086][T24605] dvb-usb: error while querying for an remote control event. [ 1926.435796][T20344] m920x_read = error: -19 [ 1926.445632][T20344] dvb-usb: error while querying for an remote control event. [ 1926.563401][T20344] m920x_read = error: -19 [ 1926.571893][T20344] dvb-usb: error while querying for an remote control event. [ 1926.579805][T24605] m920x_read = error: -19 [ 1926.597318][T24605] dvb-usb: error while querying for an remote control event. [ 1926.734259][T24605] m920x_read = error: -19 [ 1926.746122][T24316] usb 6-1: USB disconnect, device number 109 [ 1926.764241][T24605] dvb-usb: error while querying for an remote control event. [ 1926.796945][T24605] m920x_read = error: -19 [ 1926.815200][T24605] dvb-usb: error while querying for an remote control event. [ 1926.903748][T24605] m920x_read = error: -19 [ 1926.927765][T24605] dvb-usb: error while querying for an remote control event. [ 1926.963630][T24605] m920x_read = error: -19 [ 1926.972767][T24605] dvb-usb: error while querying for an remote control event. [ 1927.014494][T27125] udevd[27125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1927.063784][T24605] m920x_read = error: -19 [ 1927.088013][T24605] dvb-usb: error while querying for an remote control event. [ 1927.114876][T20344] m920x_read = error: -19 [ 1927.150854][T20344] dvb-usb: error while querying for an remote control event. [ 1927.273591][T20344] m920x_read = error: -19 [ 1927.294829][T20344] dvb-usb: error while querying for an remote control event. [ 1927.341148][T20344] m920x_read = error: -19 [ 1927.377792][T20344] dvb-usb: error while querying for an remote control event. [ 1927.443379][T20344] m920x_read = error: -19 [ 1927.463778][T20344] dvb-usb: error while querying for an remote control event. [ 1927.523347][T20344] m920x_read = error: -19 [ 1927.549150][T20344] dvb-usb: error while querying for an remote control event. [ 1927.603482][T20344] m920x_read = error: -19 [ 1927.623336][T20344] dvb-usb: error while querying for an remote control event. [ 1927.693380][T20344] m920x_read = error: -19 [ 1927.708047][T20344] dvb-usb: error while querying for an remote control event. [ 1927.735195][T20344] m920x_read = error: -19 [ 1927.749040][T20344] dvb-usb: error while querying for an remote control event. [ 1927.833290][T20344] m920x_read = error: -19 [ 1927.848903][T20344] dvb-usb: error while querying for an remote control event. [ 1927.883365][T24605] m920x_read = error: -19 [ 1927.898485][T24605] dvb-usb: error while querying for an remote control event. [ 1928.003810][T24605] m920x_read = error: -19 [ 1928.027709][T24605] dvb-usb: error while querying for an remote control event. [ 1928.044056][T20344] m920x_read = error: -19 [ 1928.063385][T20344] dvb-usb: error while querying for an remote control event. [ 1928.153502][ T9273] Bluetooth: hci0: command 0x0c1a tx timeout [ 1928.175986][T27129] syz.5.5680 (27129): drop_caches: 2 [ 1928.183491][T20344] m920x_read = error: -19 [ 1928.226057][T20344] dvb-usb: error while querying for an remote control event. [ 1928.254970][T24605] m920x_read = error: -19 [ 1928.281206][T24605] dvb-usb: error while querying for an remote control event. [ 1928.313273][ T9273] Bluetooth: hci2: command 0x0c1a tx timeout [ 1928.393380][ T9273] Bluetooth: hci1: command 0x0419 tx timeout [ 1928.395503][T24605] m920x_read = error: -19 [ 1928.399972][ T9273] Bluetooth: hci4: command 0x041b tx timeout [ 1928.426913][T24597] usb 3-1: USB disconnect, device number 18 [ 1928.442848][T24605] dvb-usb: error while querying for an remote control event. [ 1928.450696][T24610] m920x_read = error: -19 [ 1928.463511][T24610] dvb-usb: error while querying for an remote control event. [ 1928.585476][T24610] m920x_read = error: -19 [ 1928.603612][T24610] dvb-usb: error while querying for an remote control event. [ 1928.637323][T24610] m920x_read = error: -19 [ 1928.650665][T24610] dvb-usb: error while querying for an remote control event. [ 1928.689784][T27140] FAULT_INJECTION: forcing a failure. [ 1928.689784][T27140] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.705637][T27140] CPU: 0 UID: 0 PID: 27140 Comm: syz.2.5684 Tainted: G L syzkaller #0 PREEMPT(full) [ 1928.705673][T27140] Tainted: [L]=SOFTLOCKUP [ 1928.705682][T27140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1928.705696][T27140] Call Trace: [ 1928.705705][T27140] [ 1928.705715][T27140] dump_stack_lvl+0xe8/0x150 [ 1928.705747][T27140] should_fail_ex+0x412/0x560 [ 1928.705784][T27140] should_failslab+0xa8/0x100 [ 1928.705824][T27140] __kmalloc_noprof+0xe8/0x760 [ 1928.705858][T27140] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1928.705900][T27140] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1928.705936][T27140] ? tomoyo_domain+0xd7/0x130 [ 1928.705975][T27140] ? tomoyo_path_number_perm+0x219/0x630 [ 1928.706014][T27140] tomoyo_path_number_perm+0x246/0x630 [ 1928.706046][T27140] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1928.706075][T27140] ? __lock_acquire+0x6b5/0x2cf0 [ 1928.706141][T27140] ? __fget_files+0x2a/0x420 [ 1928.706175][T27140] ? __fget_files+0x3a0/0x420 [ 1928.706201][T27140] ? __fget_files+0x2a/0x420 [ 1928.706233][T27140] security_file_ioctl_compat+0xc3/0x2a0 [ 1928.706265][T27140] __ia32_compat_sys_ioctl+0x139/0x950 [ 1928.706304][T27140] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1928.706344][T27140] ? __fget_files+0x3a0/0x420 [ 1928.706377][T27140] ? fput+0xa0/0xd0 [ 1928.706404][T27140] ? ksys_write+0x242/0x270 [ 1928.706449][T27140] __do_fast_syscall_32+0x229/0x6e0 [ 1928.706475][T27140] ? do_fast_syscall_32+0x33/0x70 [ 1928.706499][T27140] ? lockdep_hardirqs_on+0x7a/0x110 [ 1928.706519][T27140] ? asm_int80_emulation+0x1a/0x20 [ 1928.706541][T27140] ? do_int80_emulation+0x286/0x530 [ 1928.706564][T27140] ? trace_irq_disable+0x3b/0x140 [ 1928.706602][T27140] do_fast_syscall_32+0x33/0x70 [ 1928.706627][T27140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1928.706654][T27140] RIP: 0023:0xf707f01c [ 1928.706674][T27140] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1928.706694][T27140] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1928.706718][T27140] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040a0ae49 [ 1928.706734][T27140] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1928.706748][T27140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1928.706762][T27140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1928.706776][T27140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1928.706809][T27140] [ 1928.706819][T27140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1928.744497][T24610] m920x_read = error: -19 [ 1928.755608][T24316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1928.792052][T24605] m920x_read = error: -19 [ 1928.943470][T24592] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 1928.954234][T24610] dvb-usb: error while querying for an remote control event. [ 1929.006050][T24316] usb 4-1: config 0 has no interfaces? [ 1929.020840][T24605] dvb-usb: error while querying for an remote control event. [ 1929.022315][T24316] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1929.096142][T24316] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1929.123809][T24316] usb 4-1: Product: syz [ 1929.124634][T24605] m920x_read = error: -19 [ 1929.128593][T24316] usb 4-1: SerialNumber: syz [ 1929.132436][T24605] dvb-usb: error while querying for an remote control event. [ 1929.153365][T24592] usb 6-1: device descriptor read/64, error -71 [ 1929.161150][T24316] usb 4-1: config 0 descriptor?? [ 1929.193383][T24605] m920x_read = error: -19 [ 1929.199394][T24605] dvb-usb: error while querying for an remote control event. [ 1929.273365][T24605] m920x_read = error: -19 [ 1929.283353][T24605] dvb-usb: error while querying for an remote control event. [ 1929.323501][T24605] m920x_read = error: -19 [ 1929.329052][T24605] dvb-usb: error while querying for an remote control event. [ 1929.366566][T27121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1929.375667][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1929.384952][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1929.396217][T27134] nfs: Unknown parameter ' ' [ 1929.403724][T24592] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 1929.413420][T24605] m920x_read = error: -19 [ 1929.423348][T24605] dvb-usb: error while querying for an remote control event. [ 1929.441610][T24316] usb 4-1: USB disconnect, device number 5 [ 1929.443778][T24605] m920x_read = error: -19 [ 1929.451870][T24605] dvb-usb: error while querying for an remote control event. [ 1929.553316][T24605] m920x_read = error: -19 [ 1929.553413][T24592] usb 6-1: device descriptor read/64, error -71 [ 1929.558070][T24605] dvb-usb: error while querying for an remote control event. [ 1929.583362][T24610] m920x_read = error: -19 [ 1929.587822][T24610] dvb-usb: error while querying for an remote control event. [ 1929.683713][T24592] usb usb6-port1: attempt power cycle [ 1929.703442][T24605] m920x_read = error: -19 [ 1929.723311][T24605] dvb-usb: error while querying for an remote control event. [ 1929.738272][T24605] m920x_read = error: -19 [ 1929.753305][T24605] dvb-usb: error while querying for an remote control event. [ 1929.807688][T27149] [ 1929.810092][T27149] ===================================================== [ 1929.817053][T27149] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1929.824571][T27149] syzkaller #0 Tainted: G L [ 1929.830581][T27149] ----------------------------------------------------- [ 1929.837521][T27149] syz.6.5688/27149 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1929.845251][T27149] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1929.853988][T27149] [ 1929.853988][T27149] and this task is already holding: [ 1929.861364][T27149] ffff88807b5b6820 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1929.870098][T27149] which would create a new lock dependency: [ 1929.875995][T27149] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1929.883598][T27149] [ 1929.883598][T27149] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1929.893073][T27149] (&dev->event_lock#2){..-.}-{3:3} [ 1929.893107][T27149] [ 1929.893107][T27149] ... which became SOFTIRQ-irq-safe at: [ 1929.906048][T27149] lock_acquire+0x106/0x350 [ 1929.910667][T27149] _raw_spin_lock_irqsave+0x40/0x60 [ 1929.915986][T27149] input_inject_event+0xa4/0x330 [ 1929.921038][T27149] led_trigger_event+0x138/0x210 [ 1929.926076][T27149] kbd_bh+0x1c6/0x2e0 [ 1929.930158][T27149] tasklet_action_common+0x2da/0x4b0 [ 1929.935553][T27149] handle_softirqs+0x22a/0x840 [ 1929.940423][T27149] __irq_exit_rcu+0xca/0x220 [ 1929.945113][T27149] irq_exit_rcu+0x9/0x30 [ 1929.949453][T27149] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1929.955194][T27149] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1929.961291][T27149] _raw_spin_unlock_irq+0x29/0x50 [ 1929.966434][T27149] n_tty_ioctl_helper+0x38a/0x4d0 [ 1929.971584][T27149] tty_ioctl+0x9c5/0xde0 [ 1929.975938][T27149] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1929.981511][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1929.986814][T27149] do_fast_syscall_32+0x33/0x70 [ 1929.991776][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1929.998214][T27149] [ 1929.998214][T27149] to a SOFTIRQ-irq-unsafe lock: [ 1930.005244][T27149] (tasklist_lock){.+.+}-{3:3} [ 1930.005272][T27149] [ 1930.005272][T27149] ... which became SOFTIRQ-irq-unsafe at: [ 1930.017935][T27149] ... [ 1930.017945][T27149] lock_acquire+0x106/0x350 [ 1930.025153][T27149] _raw_read_lock+0x36/0x50 [ 1930.029773][T27149] __do_wait+0xde/0x740 [ 1930.034043][T27149] do_wait+0x1e7/0x510 [ 1930.038218][T27149] kernel_wait+0xd6/0x1c0 [ 1930.042656][T27149] call_usermodehelper_exec_work+0xbe/0x230 [ 1930.048649][T27149] process_scheduled_works+0xb5d/0x1860 [ 1930.054293][T27149] worker_thread+0xa53/0xfc0 [ 1930.058984][T27149] kthread+0x389/0x470 [ 1930.063166][T27149] ret_from_fork+0x514/0xb70 [ 1930.067877][T27149] ret_from_fork_asm+0x1a/0x30 [ 1930.072757][T27149] [ 1930.072757][T27149] other info that might help us debug this: [ 1930.072757][T27149] [ 1930.083005][T27149] Chain exists of: [ 1930.083005][T27149] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1930.083005][T27149] [ 1930.096073][T27149] Possible interrupt unsafe locking scenario: [ 1930.096073][T27149] [ 1930.104405][T27149] CPU0 CPU1 [ 1930.109786][T27149] ---- ---- [ 1930.115171][T27149] lock(tasklist_lock); [ 1930.119441][T27149] local_irq_disable(); [ 1930.126209][T27149] lock(&dev->event_lock#2); [ 1930.133447][T27149] lock(&f_owner->lock); [ 1930.140398][T27149] [ 1930.143885][T27149] lock(&dev->event_lock#2); [ 1930.148761][T27149] [ 1930.148761][T27149] *** DEADLOCK *** [ 1930.148761][T27149] [ 1930.156913][T27149] 2 locks held by syz.6.5688/27149: [ 1930.162126][T27149] #0: ffff88802b62fdd0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1930.170683][T27149] #1: ffff88807b5b6820 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1930.179890][T27149] [ 1930.179890][T27149] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1930.190310][T27149] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1930.196070][T27149] IN-SOFTIRQ-W at: [ 1930.200242][T27149] lock_acquire+0x106/0x350 [ 1930.206768][T27149] _raw_spin_lock_irqsave+0x40/0x60 [ 1930.213990][T27149] input_inject_event+0xa4/0x330 [ 1930.220968][T27149] led_trigger_event+0x138/0x210 [ 1930.227918][T27149] kbd_bh+0x1c6/0x2e0 [ 1930.233927][T27149] tasklet_action_common+0x2da/0x4b0 [ 1930.241235][T27149] handle_softirqs+0x22a/0x840 [ 1930.248011][T27149] __irq_exit_rcu+0xca/0x220 [ 1930.254612][T27149] irq_exit_rcu+0x9/0x30 [ 1930.260886][T27149] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1930.268551][T27149] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1930.276555][T27149] _raw_spin_unlock_irq+0x29/0x50 [ 1930.283607][T27149] n_tty_ioctl_helper+0x38a/0x4d0 [ 1930.290655][T27149] tty_ioctl+0x9c5/0xde0 [ 1930.296911][T27149] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1930.304397][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1930.311711][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.318575][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.326929][T27149] INITIAL USE at: [ 1930.331019][T27149] lock_acquire+0x106/0x350 [ 1930.337462][T27149] _raw_spin_lock_irqsave+0x40/0x60 [ 1930.344595][T27149] input_inject_event+0xa4/0x330 [ 1930.351473][T27149] kbd_led_trigger_activate+0xbc/0x100 [ 1930.358873][T27149] led_trigger_set+0x535/0x960 [ 1930.365610][T27149] led_trigger_set_default+0x260/0x2a0 [ 1930.372999][T27149] led_classdev_register_ext+0x787/0x9c0 [ 1930.380572][T27149] input_leds_connect+0x517/0x790 [ 1930.387542][T27149] input_register_device+0xce0/0x1140 [ 1930.394855][T27149] atkbd_connect+0x71e/0xa10 [ 1930.401385][T27149] serio_driver_probe+0x82/0xb0 [ 1930.408180][T27149] really_probe+0x267/0xaf0 [ 1930.414629][T27149] __driver_probe_device+0x1ef/0x380 [ 1930.421852][T27149] driver_probe_device+0x4f/0x240 [ 1930.428820][T27149] __driver_attach+0x34c/0x640 [ 1930.435531][T27149] bus_for_each_dev+0x23b/0x2c0 [ 1930.442311][T27149] serio_handle_event+0x1af/0xf80 [ 1930.449261][T27149] process_scheduled_works+0xb5d/0x1860 [ 1930.456732][T27149] worker_thread+0xa53/0xfc0 [ 1930.463247][T27149] kthread+0x389/0x470 [ 1930.469249][T27149] ret_from_fork+0x514/0xb70 [ 1930.475760][T27149] ret_from_fork_asm+0x1a/0x30 [ 1930.482455][T27149] } [ 1930.485142][T27149] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1930.494369][T27149] -> (&new->fa_lock){....}-{3:3} { [ 1930.499601][T27149] INITIAL USE at: [ 1930.503597][T27149] lock_acquire+0x106/0x350 [ 1930.509949][T27149] _raw_write_lock_irq+0x3d/0x50 [ 1930.516648][T27149] fasync_insert_entry+0xc3/0x270 [ 1930.523434][T27149] fasync_helper+0x52/0xb0 [ 1930.529624][T27149] pipe_fasync+0xa9/0x1e0 [ 1930.535715][T27149] do_fcntl+0x1201/0x1a20 [ 1930.541896][T27149] do_compat_fcntl64+0x51e/0x7e0 [ 1930.548592][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1930.555635][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.562338][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.570420][T27149] INITIAL READ USE at: [ 1930.574856][T27149] lock_acquire+0x106/0x350 [ 1930.581559][T27149] _raw_read_lock_irqsave+0x48/0x60 [ 1930.589050][T27149] kill_fasync+0x199/0x4d0 [ 1930.595670][T27149] pipe_release+0x19c/0x330 [ 1930.602367][T27149] __fput+0x44f/0xa60 [ 1930.608538][T27149] task_work_run+0x1d9/0x270 [ 1930.615323][T27149] exit_to_user_mode_loop+0xf3/0x4d0 [ 1930.622970][T27149] __do_fast_syscall_32+0x446/0x6e0 [ 1930.630359][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.637395][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.645905][T27149] } [ 1930.648494][T27149] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1930.657271][T27149] ... acquired at: [ 1930.661170][T27149] _raw_read_lock_irqsave+0x48/0x60 [ 1930.666577][T27149] kill_fasync+0x199/0x4d0 [ 1930.671189][T27149] mousedev_notify_readers+0x6f1/0xc00 [ 1930.676873][T27149] mousedev_event+0x602/0x1320 [ 1930.681838][T27149] input_handle_events_default+0xd4/0x1a0 [ 1930.687754][T27149] input_pass_values+0x288/0x890 [ 1930.692990][T27149] input_event_dispose+0x330/0x6b0 [ 1930.698306][T27149] input_inject_event+0x1dc/0x330 [ 1930.703543][T27149] evdev_write+0x325/0x4c0 [ 1930.708252][T27149] vfs_write+0x29a/0xb90 [ 1930.712698][T27149] ksys_write+0x150/0x270 [ 1930.717229][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1930.722620][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.727656][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.734183][T27149] [ 1930.736530][T27149] -> (&f_owner->lock){....}-{3:3} { [ 1930.741774][T27149] INITIAL USE at: [ 1930.745677][T27149] lock_acquire+0x106/0x350 [ 1930.751777][T27149] _raw_write_lock_irq+0x3d/0x50 [ 1930.758303][T27149] __f_setown+0x67/0x370 [ 1930.764131][T27149] do_fcntl+0x171c/0x1a20 [ 1930.770048][T27149] do_compat_fcntl64+0x51e/0x7e0 [ 1930.776572][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1930.783442][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.789872][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.797788][T27149] INITIAL READ USE at: [ 1930.802216][T27149] lock_acquire+0x106/0x350 [ 1930.808735][T27149] _raw_read_lock_irqsave+0x48/0x60 [ 1930.815953][T27149] send_sigio+0x38/0x370 [ 1930.822213][T27149] kill_fasync+0x24d/0x4d0 [ 1930.828655][T27149] lease_break_callback+0x26/0x30 [ 1930.835727][T27149] __break_lease+0x81f/0x1ea0 [ 1930.842424][T27149] try_break_deleg+0xfc/0x180 [ 1930.849110][T27149] notify_change+0xb5a/0xf40 [ 1930.855726][T27149] chmod_common+0x273/0x4a0 [ 1930.862249][T27149] __ia32_sys_fchmod+0xf5/0x160 [ 1930.869115][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1930.876327][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.883186][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.891529][T27149] } [ 1930.894040][T27149] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1930.902912][T27149] ... acquired at: [ 1930.906726][T27149] _raw_read_lock_irqsave+0x48/0x60 [ 1930.912127][T27149] send_sigio+0x38/0x370 [ 1930.916566][T27149] kill_fasync+0x24d/0x4d0 [ 1930.921178][T27149] lease_break_callback+0x26/0x30 [ 1930.926396][T27149] __break_lease+0x81f/0x1ea0 [ 1930.931289][T27149] try_break_deleg+0xfc/0x180 [ 1930.936156][T27149] notify_change+0xb5a/0xf40 [ 1930.940938][T27149] chmod_common+0x273/0x4a0 [ 1930.945627][T27149] __ia32_sys_fchmod+0xf5/0x160 [ 1930.950680][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1930.956085][T27149] do_fast_syscall_32+0x33/0x70 [ 1930.961127][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.967647][T27149] [ 1930.969981][T27149] [ 1930.969981][T27149] the dependencies between the lock to be acquired [ 1930.969991][T27149] and SOFTIRQ-irq-unsafe lock: [ 1930.983553][T27149] -> (tasklist_lock){.+.+}-{3:3} { [ 1930.988697][T27149] HARDIRQ-ON-R at: [ 1930.992706][T27149] lock_acquire+0x106/0x350 [ 1930.998897][T27149] _raw_read_lock+0x36/0x50 [ 1931.005108][T27149] __do_wait+0xde/0x740 [ 1931.010961][T27149] do_wait+0x1e7/0x510 [ 1931.016717][T27149] kernel_wait+0xd6/0x1c0 [ 1931.022719][T27149] call_usermodehelper_exec_work+0xbe/0x230 [ 1931.030277][T27149] process_scheduled_works+0xb5d/0x1860 [ 1931.037488][T27149] worker_thread+0xa53/0xfc0 [ 1931.043762][T27149] kthread+0x389/0x470 [ 1931.049501][T27149] ret_from_fork+0x514/0xb70 [ 1931.055757][T27149] ret_from_fork_asm+0x1a/0x30 [ 1931.062194][T27149] SOFTIRQ-ON-R at: [ 1931.066189][T27149] lock_acquire+0x106/0x350 [ 1931.072355][T27149] _raw_read_lock+0x36/0x50 [ 1931.078536][T27149] __do_wait+0xde/0x740 [ 1931.084367][T27149] do_wait+0x1e7/0x510 [ 1931.090111][T27149] kernel_wait+0xd6/0x1c0 [ 1931.096117][T27149] call_usermodehelper_exec_work+0xbe/0x230 [ 1931.103682][T27149] process_scheduled_works+0xb5d/0x1860 [ 1931.110894][T27149] worker_thread+0xa53/0xfc0 [ 1931.117153][T27149] kthread+0x389/0x470 [ 1931.122922][T27149] ret_from_fork+0x514/0xb70 [ 1931.129176][T27149] ret_from_fork_asm+0x1a/0x30 [ 1931.135610][T27149] INITIAL USE at: [ 1931.139525][T27149] lock_acquire+0x106/0x350 [ 1931.145625][T27149] _raw_write_lock_irq+0x3d/0x50 [ 1931.152162][T27149] copy_process+0x2b4c/0x4440 [ 1931.158413][T27149] kernel_clone+0x284/0x8f0 [ 1931.164511][T27149] user_mode_thread+0x110/0x180 [ 1931.170947][T27149] rest_init+0x23/0x300 [ 1931.176681][T27149] start_kernel+0x38a/0x3e0 [ 1931.182774][T27149] x86_64_start_reservations+0x24/0x30 [ 1931.189823][T27149] x86_64_start_kernel+0x143/0x1c0 [ 1931.196522][T27149] common_startup_64+0x13e/0x147 [ 1931.203048][T27149] INITIAL READ USE at: [ 1931.207392][T27149] lock_acquire+0x106/0x350 [ 1931.213917][T27149] _raw_read_lock+0x36/0x50 [ 1931.220440][T27149] __do_wait+0xde/0x740 [ 1931.226616][T27149] do_wait+0x1e7/0x510 [ 1931.232710][T27149] kernel_wait+0xd6/0x1c0 [ 1931.239083][T27149] call_usermodehelper_exec_work+0xbe/0x230 [ 1931.247000][T27149] process_scheduled_works+0xb5d/0x1860 [ 1931.254571][T27149] worker_thread+0xa53/0xfc0 [ 1931.261186][T27149] kthread+0x389/0x470 [ 1931.267270][T27149] ret_from_fork+0x514/0xb70 [ 1931.273872][T27149] ret_from_fork_asm+0x1a/0x30 [ 1931.280660][T27149] } [ 1931.283171][T27149] ... key at: [] tasklist_lock+0x18/0x40 [ 1931.290928][T27149] ... acquired at: [ 1931.294746][T27149] _raw_read_lock+0x36/0x50 [ 1931.299448][T27149] send_sigurg+0x12b/0x420 [ 1931.304068][T27149] sk_send_sigurg+0x6c/0x2e0 [ 1931.308858][T27149] queue_oob+0x42c/0x4f0 [ 1931.313305][T27149] unix_stream_sendmsg+0xcb1/0xe80 [ 1931.318804][T27149] ____sys_sendmsg+0x972/0x9f0 [ 1931.323782][T27149] ___sys_sendmsg+0x2a5/0x360 [ 1931.328662][T27149] __sys_sendmmsg+0x2e7/0x4e0 [ 1931.333530][T27149] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1931.339355][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1931.344759][T27149] do_fast_syscall_32+0x33/0x70 [ 1931.349805][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1931.356338][T27149] [ 1931.358677][T27149] [ 1931.358677][T27149] stack backtrace: [ 1931.364595][T27149] CPU: 0 UID: 0 PID: 27149 Comm: syz.6.5688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.364622][T27149] Tainted: [L]=SOFTLOCKUP [ 1931.364629][T27149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1931.364641][T27149] Call Trace: [ 1931.364650][T27149] [ 1931.364658][T27149] dump_stack_lvl+0xe8/0x150 [ 1931.364680][T27149] __lock_acquire+0x2a94/0x2cf0 [ 1931.364709][T27149] ? send_sigurg+0x12b/0x420 [ 1931.364734][T27149] lock_acquire+0x106/0x350 [ 1931.364752][T27149] ? send_sigurg+0x12b/0x420 [ 1931.364782][T27149] _raw_read_lock+0x36/0x50 [ 1931.364807][T27149] ? send_sigurg+0x12b/0x420 [ 1931.364836][T27149] send_sigurg+0x12b/0x420 [ 1931.364862][T27149] sk_send_sigurg+0x6c/0x2e0 [ 1931.364885][T27149] queue_oob+0x42c/0x4f0 [ 1931.364910][T27149] ? __pfx_queue_oob+0x10/0x10 [ 1931.364932][T27149] ? __lock_acquire+0x6b5/0x2cf0 [ 1931.364951][T27149] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1931.364979][T27149] unix_stream_sendmsg+0xcb1/0xe80 [ 1931.365004][T27149] ? rcu_is_watching+0x15/0xb0 [ 1931.365025][T27149] ? trace_sched_exit_tp+0x3a/0x130 [ 1931.365044][T27149] ? __might_fault+0xaf/0x130 [ 1931.365066][T27149] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1931.365090][T27149] ? __import_iovec+0x5d4/0x7e0 [ 1931.365118][T27149] ? aa_sock_msg_perm+0xda/0x1b0 [ 1931.365143][T27149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1931.365168][T27149] ____sys_sendmsg+0x972/0x9f0 [ 1931.365200][T27149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1931.365230][T27149] ? futex_unqueue+0x22/0x240 [ 1931.365252][T27149] ___sys_sendmsg+0x2a5/0x360 [ 1931.365279][T27149] ? __lock_acquire+0x6b5/0x2cf0 [ 1931.365299][T27149] ? __pfx____sys_sendmsg+0x10/0x10 [ 1931.365327][T27149] ? __pfx___futex_wait+0x10/0x10 [ 1931.365364][T27149] ? __fget_files+0x2a/0x420 [ 1931.365385][T27149] ? __fget_files+0x3a0/0x420 [ 1931.365409][T27149] __sys_sendmmsg+0x2e7/0x4e0 [ 1931.365428][T27149] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1931.365447][T27149] ? __pfx_do_futex+0x10/0x10 [ 1931.365467][T27149] ? do_compat_fcntl64+0x77a/0x7e0 [ 1931.365499][T27149] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1931.365522][T27149] ? rcu_is_watching+0x15/0xb0 [ 1931.365545][T27149] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1931.365565][T27149] __do_fast_syscall_32+0x229/0x6e0 [ 1931.365584][T27149] ? do_fast_syscall_32+0x33/0x70 [ 1931.365603][T27149] ? irqentry_exit+0x10f/0x760 [ 1931.365618][T27149] ? trace_irq_disable+0x3b/0x140 [ 1931.365647][T27149] do_fast_syscall_32+0x33/0x70 [ 1931.365665][T27149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1931.365688][T27149] RIP: 0023:0xf7fe301c [ 1931.365716][T27149] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1931.365731][T27149] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1931.365750][T27149] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080006c40 [ 1931.365763][T27149] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 1931.365773][T27149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1931.365784][T27149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1931.365795][T27149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1931.365812][T27149] [ 1931.692403][T24605] m920x_read = error: -19 [ 1931.696838][T24605] dvb-usb: error while querying for an remote control event. [ 1931.704365][T24605] m920x_read = error: -19 [ 1931.708730][T24605] dvb-usb: error while querying for an remote control event. [ 1931.815617][T24605] m920x_read = error: -19 [ 1931.820112][T24605] dvb-usb: error while querying for an remote control event. [ 1931.827627][T20344] m920x_read = error: -19 [ 1931.832001][T20344] dvb-usb: error while querying for an remote control event. [ 1931.914872][T24592] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 1931.953295][T24605] m920x_read = error: -19 [ 1931.957853][T24605] dvb-usb: error while querying for an remote control event. [ 1931.965840][T20344] m920x_read = error: -19 [ 1931.970297][T20344] dvb-usb: error while querying for an remote control event. [ 1932.023225][T24610] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1932.073598][T20344] m920x_read = error: -19 [ 1932.078152][T20344] dvb-usb: error while querying for an remote control event. [ 1932.085711][T24605] m920x_read = error: -19 [ 1932.090467][T24605] dvb-usb: error while querying for an remote control event. [ 1932.133221][T24592] usb 6-1: device not accepting address 112, error -71 [ 1932.174508][T24610] usb 3-1: config 0 has no interfaces? [ 1932.180173][T24610] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1932.189306][T24610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.197414][T24605] m920x_read = error: -19 [ 1932.202362][T24605] dvb-usb: error while querying for an remote control event. [ 1932.210502][T24610] usb 3-1: config 0 descriptor?? [ 1932.215602][T20344] m920x_read = error: -19 [ 1932.220090][T20344] dvb-usb: error while querying for an remote control event. [ 1932.343287][T20344] m920x_read = error: -19 [ 1932.347836][T20344] dvb-usb: error while querying for an remote control event. [ 1932.355439][T24610] m920x_read = error: -19 [ 1932.359856][T24610] dvb-usb: error while querying for an remote control event. [ 1932.433380][T27155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.442291][T27155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.451906][T27155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1932.463277][T24610] m920x_read = error: -19 [ 1932.468428][T24610] dvb-usb: error while querying for an remote control event. [ 1932.476073][T20344] m920x_read = error: -19 [ 1932.481681][T27155] macvtap1: entered promiscuous mode [ 1932.487188][T20344] dvb-usb: error while querying for an remote control event. [ 1932.494852][T27155] syz_tun: entered promiscuous mode [ 1932.500262][T27155] macvtap1: entered allmulticast mode [ 1932.603351][T20344] m920x_read = error: -19 [ 1932.607810][T20344] dvb-usb: error while querying for an remote control event. [ 1932.615413][T20344] m920x_read = error: -19 [ 1932.619835][T20344] dvb-usb: error while querying for an remote control event. [ 1932.723528][T20344] m920x_read = error: -19 [ 1932.727918][T20344] dvb-usb: error while querying for an remote control event. [ 1932.735478][T24605] m920x_read = error: -19 [ 1932.739886][T24605] dvb-usb: error while querying for an remote control event. [ 1932.843335][T24605] m920x_read = error: -19 [ 1932.847748][T24605] dvb-usb: error while querying for an remote control event. [ 1932.855324][T20344] m920x_read = error: -19 [ 1932.859732][T20344] dvb-usb: error while querying for an remote control event. [ 1932.963254][T20344] m920x_read = error: -19 [ 1932.967767][T20344] dvb-usb: error while querying for an remote control event. [ 1932.975343][T24605] m920x_read = error: -19 [ 1932.980270][T24605] dvb-usb: error while querying for an remote control event. [ 1933.021625][T24605] usb 3-1: USB disconnect, device number 19 [ 1933.083255][T20344] m920x_read = error: -19 [ 1933.087687][T20344] dvb-usb: error while querying for an remote control event. [ 1933.095313][T24610] m920x_read = error: -19 [ 1933.099842][T24610] dvb-usb: error while querying for an remote control event. [ 1933.213401][T24605] m920x_read = error: -19 [ 1933.217886][T24605] dvb-usb: error while querying for an remote control event. [ 1933.225466][T24610] m920x_read = error: -19 [ 1933.229869][T24610] dvb-usb: error while querying for an remote control event. [ 1933.333326][T24610] m920x_read = error: -19 [ 1933.337824][T24610] dvb-usb: error while querying for an remote control event. [ 1933.345440][T24605] m920x_read = error: -19 [ 1933.349858][T24605] dvb-usb: error while querying for an remote control event. [ 1933.463377][T24605] m920x_read = error: -19 [ 1933.467884][T24605] dvb-usb: error while querying for an remote control event. [ 1933.475524][T24610] m920x_read = error: -19 [ 1933.479939][T24610] dvb-usb: error while querying for an remote control event. [ 1933.593374][T24610] m920x_read = error: -19 [ 1933.597806][T24610] dvb-usb: error while querying for an remote control event. [ 1933.605490][T24605] m920x_read = error: -19 [ 1933.609878][T24605] dvb-usb: error while querying for an remote control event. [ 1933.723337][T24605] m920x_read = error: -19 [ 1933.727775][T24605] dvb-usb: error while querying for an remote control event. [ 1933.735328][T24610] m920x_read = error: -19 [ 1933.739733][T24610] dvb-usb: error while querying for an remote control event. [ 1933.853351][T24610] m920x_read = error: -19 [ 1933.857807][T24610] dvb-usb: error while querying for an remote control event. [ 1933.865333][T24605] m920x_read = error: -19 [ 1933.869724][T24605] dvb-usb: error while querying for an remote control event. [ 1933.983916][T24605] m920x_read = error: -19 [ 1933.988381][T24605] dvb-usb: error while querying for an remote control event. [ 1933.995949][T24610] m920x_read = error: -19 [ 1934.000347][T24610] dvb-usb: error while querying for an remote control event. [ 1934.113379][T24610] m920x_read = error: -19 [ 1934.117775][T24610] dvb-usb: error while querying for an remote control event. [ 1934.125427][T24605] m920x_read = error: -19 [ 1934.129822][T24605] dvb-usb: error while querying for an remote control event. [ 1934.243361][T24605] m920x_read = error: -19 [ 1934.247759][T24605] dvb-usb: error while querying for an remote control event. [ 1934.255377][T24610] m920x_read = error: -19 [ 1934.259768][T24610] dvb-usb: error while querying for an remote control event. [ 1934.373427][T24610] m920x_read = error: -19 [ 1934.377886][T24610] dvb-usb: error while querying for an remote control event. [ 1934.385431][T24605] m920x_read = error: -19 [ 1934.389837][T24605] dvb-usb: error while querying for an remote control event. [ 1934.503693][T24605] m920x_read = error: -19 [ 1934.508146][T24605] dvb-usb: error while querying for an remote control event. [ 1934.516158][T24610] m920x_read = error: -19 [ 1934.520581][T24610] dvb-usb: error while querying for an remote control event. [ 1934.633516][T24610] m920x_read = error: -19 [ 1934.637960][T24610] dvb-usb: error while querying for an remote control event. [ 1934.645511][T24605] m920x_read = error: -19 [ 1934.650039][T24605] dvb-usb: error while querying for an remote control event. [ 1934.763353][T24605] m920x_read = error: -19 [ 1934.767758][T24605] dvb-usb: error while querying for an remote control event. [ 1934.775366][T24610] m920x_read = error: -19 [ 1934.779951][T24610] dvb-usb: error while querying for an remote control event. [ 1934.883284][T24610] m920x_read = error: -19 [ 1934.889566][T24610] dvb-usb: error while querying for an remote control event. [ 1934.897181][T24605] m920x_read = error: -19 [ 1934.901611][T24605] dvb-usb: error while querying for an remote control event. [ 1935.003685][T24605] m920x_read = error: -19 [ 1935.008141][T24605] dvb-usb: error while querying for an remote control event. [ 1935.015736][T24610] m920x_read = error: -19 [ 1935.020204][T24610] dvb-usb: error while querying for an remote control event. [ 1935.123309][T24610] m920x_read = error: -19 [ 1935.128158][T24610] dvb-usb: error while querying for an remote control event. [ 1935.135824][T24605] m920x_read = error: -19 [ 1935.140238][T24605] dvb-usb: error while querying for an remote control event. [ 1935.253601][T24605] m920x_read = error: -19 [ 1935.258016][T24605] dvb-usb: error while querying for an remote control event. [ 1935.265587][T24610] m920x_read = error: -19 [ 1935.269972][T24610] dvb-usb: error while querying for an remote control event. [ 1935.383350][T24610] m920x_read = error: -19 [ 1935.387791][T24610] dvb-usb: error while querying for an remote control event. [ 1935.395373][T24605] m920x_read = error: -19 [ 1935.399763][T24605] dvb-usb: error while querying for an remote control event. [ 1935.513412][T24605] m920x_read = error: -19 [ 1935.517821][T24605] dvb-usb: error while querying for an remote control event. [ 1935.525380][T24610] m920x_read = error: -19 [ 1935.529942][T24610] dvb-usb: error while querying for an remote control event. [ 1935.643455][T24610] m920x_read = error: -19 [ 1935.647858][T24610] dvb-usb: error while querying for an remote control event. [ 1935.655389][T24605] m920x_read = error: -19 [ 1935.659817][T24605] dvb-usb: error while querying for an remote control event. [ 1935.763523][T24605] m920x_read = error: -19 [ 1935.767961][T24605] dvb-usb: error while querying for an remote control event. [ 1935.775682][T24610] m920x_read = error: -19 [ 1935.780110][T24610] dvb-usb: error while querying for an remote control event. [ 1935.883298][T24610] m920x_read = error: -19 [ 1935.887701][T24610] dvb-usb: error while querying for an remote control event. [ 1935.895271][T24605] m920x_read = error: -19 [ 1935.899718][T24605] dvb-usb: error while querying for an remote control event. [ 1936.003290][T24605] m920x_read = error: -19 [ 1936.007725][T24605] dvb-usb: error while querying for an remote control event. [ 1936.015347][T24610] m920x_read = error: -19 [ 1936.019975][T24610] dvb-usb: error while querying for an remote control event. [ 1936.123376][T24610] m920x_read = error: -19 [ 1936.127960][T24610] dvb-usb: error while querying for an remote control event. [ 1936.135663][T24605] m920x_read = error: -19 [ 1936.140162][T24605] dvb-usb: error while querying for an remote control event. [ 1936.243291][T24605] m920x_read = error: -19 [ 1936.247676][T24605] dvb-usb: error while querying for an remote control event. [ 1936.255676][T24610] m920x_read = error: -19 [ 1936.260100][T24610] dvb-usb: error while querying for an remote control event. [ 1936.363315][T24610] m920x_read = error: -19 [ 1936.367767][T24610] dvb-usb: error while querying for an remote control event. [ 1936.375349][T24605] m920x_read = error: -19 [ 1936.379767][T24605] dvb-usb: error while querying for an remote control event. [ 1936.483471][T24605] m920x_read = error: -19 [ 1936.487910][T24605] dvb-usb: error while querying for an remote control event. [ 1936.495510][T24610] m920x_read = error: -19 [ 1936.499952][T24610] dvb-usb: error while querying for an remote control event. [ 1936.603281][T24610] m920x_read = error: -19 [ 1936.607728][T24610] dvb-usb: error while querying for an remote control event. [ 1936.615329][T24605] m920x_read = error: -19 [ 1936.620032][T24605] dvb-usb: error while querying for an remote control event. [ 1936.723536][T24605] m920x_read = error: -19 [ 1936.727938][T24605] dvb-usb: error while querying for an remote control event. [ 1936.735816][T24610] m920x_read = error: -19 [ 1936.740238][T24610] dvb-usb: error while querying for an remote control event. [ 1936.853462][T24610] m920x_read = error: -19 [ 1936.858157][T24610] dvb-usb: error while querying for an remote control event. [ 1936.865656][T24605] m920x_read = error: -19 [ 1936.870534][T24605] dvb-usb: error while querying for an remote control event. [ 1936.983339][T24605] m920x_read = error: -19 [ 1936.987808][T24605] dvb-usb: error while querying for an remote control event. [ 1936.995299][T24610] m920x_read = error: -19 [ 1936.999688][T24610] dvb-usb: error while querying for an remote control event. [ 1937.113489][T24610] m920x_read = error: -19 [ 1937.117992][T24610] dvb-usb: error while querying for an remote control event. [ 1937.125502][T24605] m920x_read = error: -19 [ 1937.129872][T24605] dvb-usb: error while querying for an remote control event. [ 1937.243405][T24605] m920x_read = error: -19 [ 1937.247839][T24605] dvb-usb: error while querying for an remote control event. [ 1937.255431][T24610] m920x_read = error: -19 [ 1937.259808][T24610] dvb-usb: error while querying for an remote control event. [ 1937.373396][T24610] m920x_read = error: -19 [ 1937.377906][T24610] dvb-usb: error while querying for an remote control event. [ 1937.385638][T24605] m920x_read = error: -19 [ 1937.390260][T24605] dvb-usb: error while querying for an remote control event. [ 1937.503526][T24605] m920x_read = error: -19 [ 1937.508042][T24605] dvb-usb: error while querying for an remote control event. [ 1937.515651][T24610] m920x_read = error: -19 [ 1937.520032][T24610] dvb-usb: error while querying for an remote control event. [ 1937.633370][T24610] m920x_read = error: -19 [ 1937.637806][T24610] dvb-usb: error while querying for an remote control event. [ 1937.645357][T24605] m920x_read = error: -19 [ 1937.649756][T24605] dvb-usb: error while querying for an remote control event. [ 1937.763378][T24605] m920x_read = error: -19 [ 1937.767902][T24605] dvb-usb: error while querying for an remote control event. [ 1937.775426][T24610] m920x_read = error: -19 [ 1937.779854][T24610] dvb-usb: error while querying for an remote control event. [ 1937.883410][T24610] m920x_read = error: -19 [ 1937.887805][T24610] dvb-usb: error while querying for an remote control event. [ 1937.895879][T24605] m920x_read = error: -19 [ 1937.900293][T24605] dvb-usb: error while querying for an remote control event. [ 1938.003380][T24605] m920x_read = error: -19 [ 1938.007815][T24605] dvb-usb: error while querying for an remote control event. [ 1938.015452][T24610] m920x_read = error: -19 [ 1938.019854][T24610] dvb-usb: error while querying for an remote control event. [ 1938.123475][T24610] m920x_read = error: -19 [ 1938.127911][T24610] dvb-usb: error while querying for an remote control event. [ 1938.135575][T24605] m920x_read = error: -19 [ 1938.139999][T24605] dvb-usb: error while querying for an remote control event. [ 1938.243298][T24605] m920x_read = error: -19 [ 1938.247839][T24605] dvb-usb: error while querying for an remote control event. [ 1938.255455][T24610] m920x_read = error: -19 [ 1938.260066][T24610] dvb-usb: error while querying for an remote control event. [ 1938.363335][T24610] m920x_read = error: -19 [ 1938.367886][T24610] dvb-usb: error while querying for an remote control event. [ 1938.375494][T24605] m920x_read = error: -19 [ 1938.380066][T24605] dvb-usb: error while querying for an remote control event. [ 1938.483586][T24605] m920x_read = error: -19 [ 1938.488138][T24605] dvb-usb: error while querying for an remote control event. [ 1938.495744][T24610] m920x_read = error: -19 [ 1938.500168][T24610] dvb-usb: error while querying for an remote control event. [ 1938.603403][T24610] m920x_read = error: -19 [ 1938.608021][T24610] dvb-usb: error while querying for an remote control event. [ 1938.616155][T24605] m920x_read = error: -19 [ 1938.620562][T24605] dvb-usb: error while querying for an remote control event. [ 1938.723293][T24605] m920x_read = error: -19 [ 1938.727727][T24605] dvb-usb: error while querying for an remote control event. [ 1938.735306][T24610] m920x_read = error: -19 [ 1938.739703][T24610] dvb-usb: error while querying for an remote control event. [ 1938.843314][T24610] m920x_read = error: -19 [ 1938.847752][T24610] dvb-usb: error while querying for an remote control event. [ 1938.855362][T24605] m920x_read = error: -19 [ 1938.859916][T24605] dvb-usb: error while querying for an remote control event. [ 1938.963256][T24605] m920x_read = error: -19 [ 1938.967673][T24605] dvb-usb: error while querying for an remote control event. [ 1938.975274][T24610] m920x_read = error: -19 [ 1938.979712][T24610] dvb-usb: error while querying for an remote control event. [ 1939.083284][T24610] m920x_read = error: -19 [ 1939.087734][T24610] dvb-usb: error while querying for an remote control event. [ 1939.095338][T24605] m920x_read = error: -19 [ 1939.099744][T24605] dvb-usb: error while querying for an remote control event. [ 1939.203544][T24605] m920x_read = error: -19 [ 1939.208026][T24605] dvb-usb: error while querying for an remote control event. [ 1939.215617][T24610] m920x_read = error: -19 [ 1939.220048][T24610] dvb-usb: error while querying for an remote control event. [ 1939.323486][T24610] m920x_read = error: -19 [ 1939.328244][T24610] dvb-usb: error while querying for an remote control event. [ 1939.335929][T24605] m920x_read = error: -19 [ 1939.340360][T24605] dvb-usb: error while querying for an remote control event. [ 1939.443856][T24605] m920x_read = error: -19 [ 1939.448280][T24605] dvb-usb: error while querying for an remote control event. [ 1939.455900][T24610] m920x_read = error: -19 [ 1939.460713][T24610] dvb-usb: error while querying for an remote control event. [ 1939.563309][T24610] m920x_read = error: -19 [ 1939.567737][T24610] dvb-usb: error while querying for an remote control event. [ 1939.575345][T24605] m920x_read = error: -19 [ 1939.579770][T24605] dvb-usb: error while querying for an remote control event. [ 1939.683256][T24605] m920x_read = error: -19 [ 1939.687734][T24605] dvb-usb: error while querying for an remote control event. [ 1939.695745][T24610] m920x_read = error: -19 [ 1939.700161][T24610] dvb-usb: error while querying for an remote control event.