last executing test programs: 23m43.728068293s ago: executing program 32 (id=66): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x3000) ftruncate(r1, 0x51a9497) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e26, 0x8, @remote, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000090, &(0x7f0000000380)}) dup2(r3, r0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) r6 = socket$can_raw(0x1d, 0x3, 0x1) epoll_create(0x3000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700", 0xd) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1) (async) memfd_secret(0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x3000) (async) ftruncate(r1, 0x51a9497) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e26, 0x8, @remote, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) (async) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000090, &(0x7f0000000380)}) (async) dup2(r3, r0) (async) socket$unix(0x1, 0x5, 0x0) (async) dup2(r4, r3) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) epoll_create(0x3000000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) (async) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700", 0xd) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) 23m26.584221974s ago: executing program 33 (id=174): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x6, 0x1000000000, 0x7, 0xfa11, 0x400006}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000f8b000/0x4000)=nil, 0x930, 0x0, 0x4010, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000f8b000/0x4000)=nil, 0x930, 0x0, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/14, 0xe}, 0x180}], 0x1, 0x60, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0x26c) (async) pwrite64(r5, 0x0, 0x0, 0x26c) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x2, 0x30, 0x0, 0xe}, &(0x7f0000000300)=0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000480)={0x1, 0x1, 0x0, 0xffffffffffffffff, 0x701a, 0x726dc14, 0x6b18024f, 0x3, 0x1ff, 0x1, 0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x2}, 0x94) 11m54.932549041s ago: executing program 0 (id=3991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7d0, 0x460, 0x700, 0x460, 0x570, 0x570, 0x700, 0x700, 0x700, 0x700, 0x700, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private=0xa010100, 0x31, 0x2f, 0x3}}}, {{@ipv6={@remote, @private2, [0xff, 0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'veth1_to_batadv\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x2, 0x18}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x3, {0x2}}}}, {{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@empty, 0x27, 0x18, 0x3f}}}, {{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffff00, 0xff000000], 'vlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x2b, 0x63, 0x1, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x2, "1cbd64e41401244792695a8fea12d7f84c855cb082eda0698105fd636ce1"}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x2e, 0xbb, 0x2, 0x9, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xa0ecf88e2d409e49], [0xffffffff, 0xffffffff, 0xff, 0xffffffff], 0x3, 0xc14}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x4, 0x7f, 0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x830) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x5, 0x7ff, 0x0, 0x2}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r11 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) socket$kcm(0x21, 0x2, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r12, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) 11m53.063379442s ago: executing program 0 (id=4002): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x0, 0x86, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x100, 0x6}}, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r5, 0x3}, 0x8) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000b06010200000000000000000300000205000100070000002c0007800c00148008fff9400a010102060004404e2000000c000180080001406401010005000700ff0000000900020073797a"], 0x54}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) 11m52.113015505s ago: executing program 0 (id=4005): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @multicast}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000003c00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 11m50.815193424s ago: executing program 0 (id=4013): mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r2, 0x0, 0x0) fsmount(r2, 0x0, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0xec5, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dde9377f81fce05e79bafb70573d03000a000000140000006c07010033d43afffec00000000000000000a38000000010ff020000000000f40000000000000001"], 0x340a) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/103, 0x67}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/159, 0x9f}], 0x3, &(0x7f0000000240)=""/146, 0x92}, 0x80010}], 0x1, 0x10142, 0x0) 11m46.373311803s ago: executing program 0 (id=4039): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 11m43.498356363s ago: executing program 0 (id=4046): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x94c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8082801, 0x5f7, 0x0, 0x1fe, 0x0, [{0x6d, 0xda, 0x9, '\x00', 0x6}, {0x5, 0xa, 0x6e, '\x00', 0xd}, {0xfe, 0x2, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x4, '\x00', 0x81}, {0xb, 0x50, 0x7f, '\x00', 0x20}, {0x0, 0x0, 0x4, '\x00', 0xc}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0x7, 0x7, 0xb, '\x00', 0x45}, {0x6, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x2, 0x35, '\x00', 0x7}, {0x40, 0x8, 0x0, '\x00', 0x1}, {0x8, 0x4, 0x1d, '\x00', 0x2}, {0x3, 0x87, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0xfe}, {0x4, 0x0, 0xd6, '\x00', 0x7}, {0xb, 0x0, 0x3, '\x00', 0x2}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x64, 0x1, 0x2, '\x00', 0x1}, {0x8, 0x9e, 0x5, '\x00', 0x2}, {0x3e, 0x48, 0x6, '\x00', 0x6}, {0x7, 0x9, 0x2, '\x00', 0x1}, {0x83, 0xa, 0x3, '\x00', 0x6}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x1, 0x7f, 0x8, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x8801, 0x3, 0x200, 0x9}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x4000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000140)) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0xd4, 0xffffffffffffffff) 11m28.386088914s ago: executing program 34 (id=4046): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x94c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8082801, 0x5f7, 0x0, 0x1fe, 0x0, [{0x6d, 0xda, 0x9, '\x00', 0x6}, {0x5, 0xa, 0x6e, '\x00', 0xd}, {0xfe, 0x2, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x4, '\x00', 0x81}, {0xb, 0x50, 0x7f, '\x00', 0x20}, {0x0, 0x0, 0x4, '\x00', 0xc}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0x7, 0x7, 0xb, '\x00', 0x45}, {0x6, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x2, 0x35, '\x00', 0x7}, {0x40, 0x8, 0x0, '\x00', 0x1}, {0x8, 0x4, 0x1d, '\x00', 0x2}, {0x3, 0x87, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0xfe}, {0x4, 0x0, 0xd6, '\x00', 0x7}, {0xb, 0x0, 0x3, '\x00', 0x2}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x64, 0x1, 0x2, '\x00', 0x1}, {0x8, 0x9e, 0x5, '\x00', 0x2}, {0x3e, 0x48, 0x6, '\x00', 0x6}, {0x7, 0x9, 0x2, '\x00', 0x1}, {0x83, 0xa, 0x3, '\x00', 0x6}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x1, 0x7f, 0x8, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x8801, 0x3, 0x200, 0x9}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x4000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000140)) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0xd4, 0xffffffffffffffff) 8m56.680755049s ago: executing program 5 (id=4908): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fanotify_init(0x202, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r4, 0x0, 0x2, 0x4, &(0x7f0000000240)="bdc95f8a", 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x2, 0x80805, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x2) epoll_create(0x1) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c00128009000100626f6e6400008005000100060000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@getneigh={0x14, 0x1e, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8000) openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) 8m55.928330616s ago: executing program 5 (id=4911): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x34, r3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x34}}, 0x40006) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080001de", @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf25070000000c00038008000300880200006400058008000100756470001c0002800800040001000000080001000700000008000300070000003c0002800800030004000000080001000c00000008000200ffffff7f08000200da000000080004000000807c080002000200000008000300050000002c00038008000200ff030000080002000800000008000100810000000800010007000000080002000500000024000680040002001c000300fa779a823c3e693d73abdf31c918df043d6a16066b6785c560000580080001006574680008000100756470003c00028008000400ff030000080003000104000008000400fa00000008000200060000000800030000000000080003000600000008000400feffffff080001006574680008000100657468001401068004000200080001000a0000000301030092d63d6323dcbee955e5ca4791d20c1bd5319979f852d20ce976c2b434654a90721535f072a88ab9e0b9c981110cc555386c2f52ea64e09f0ef542c50601fbc5dddbc3a7dea43b454213feb29c6db851bf8cf7f84d70b917224a18613b660c03b2468eb15563b7553a6b3b45fd40cfa94062243da3be4b0b6965e8d773fac594dc2cef3adad807ff99c5ba12ea81e9372d6a6ebc2206fd6dfadf1e605dfae8b9ba4a9bf2474f95fd74b5766995a5b5cd50266bf509963d58cdc096693bc32cfe24e2a0e2eaff8bb79421e33a0c70889db747425365493d5af4a9076c0df0b355627e527e8a90ec36cf81a287ad60d9f041a53cf038302f83b12238eff8d70e00"], 0x248}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000002ab001afc90800000008000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m55.436555302s ago: executing program 5 (id=4915): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) io_setup(0x9, &(0x7f0000000100)) (async) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0xfffffffe, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0xfffffffe, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_usb_connect(0x1, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xfe, 0xf, 0x18, 0x8, 0xccd, 0x10b2, 0x7cf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, "", [{{0x9, 0x4, 0xd1, 0x6, 0x0, 0x9a, 0x8b, 0x6b, 0x5}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x0, 0x14, 0x2, "1d85"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x0, 0x14, 0x2, "1d85"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x8c, &(0x7f0000000540)=ANY=[@ANYBLOB="12015002000000204e150e5040000102030109027a00030114cc03080b0204000000010130000a24010e1600070000000c240b030200ffffff0600000904010000010230000904810101010230000905010940000505050a2525060000000400000904020000010230000904020101010230000905820920001005070a252504000000080500000000000000"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0xe0, 0x9e, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x3, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x2, 0x1}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x81, 0xa6, 0x5, 0x8}, 0x5a, &(0x7f0000000340)={0x5, 0xf, 0x5a, 0x2, [@generic={0x41, 0x10, 0x1, "041fd20fb4b494243d270ccdca2a3310d758c1f0a8b72f64a85bad095cc536bd620349d6588d65e8f1b547b76d3b54371d7f28291caa1c9281ff3ea122a9"}, @ss_container_id={0x14, 0x10, 0x4, 0xe5, "8e1d75c047ae49dd745f22ab2ca8189c"}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000df3d44f84a1a9d86f7c0b8650983b9204deb0de96f8fb6c6f44a72f054df5755c3f3253ce097e5ce3af98651c416f34df03c7f07300891757d5d0440c06b4723d626d12a98a3827cd0a6806034bf8492e9a32390195267de97991421398cde09b72170b149a6f7c20c4be482d3d918a4e5ba710ad6d496fbadd075fcdb98f22a1a87b330c7c1"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x100, 0x40) 8m54.378767229s ago: executing program 5 (id=4923): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80005, 0x6, 0x20009c}, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[], 0x1c}], 0x1}, 0x0) 8m54.298127948s ago: executing program 5 (id=4924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 8m54.253944908s ago: executing program 5 (id=4925): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x4000000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x800000, 0xfffffffd}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) sendfile(r4, r4, 0x0, 0x7ff) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="01", 0x1}], 0x1, 0xe5b, 0xac, 0xb) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$snapshot(r8, 0x0, 0x0) writev(r8, &(0x7f0000001380)=[{&(0x7f0000000180)="b1", 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8m44.211019775s ago: executing program 2 (id=5001): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{&(0x7f0000000200)=@caif=@dbg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/242, 0xf2}], 0x3}, 0x7ff}, {{&(0x7f0000004980)=@alg, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/34, 0x22}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/211, 0xd3}, {&(0x7f0000000a40)=""/169, 0xa9}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/171, 0xab}, {&(0x7f0000000c00)=""/68, 0x44}, {&(0x7f0000000c80)=""/114, 0x72}], 0x8, &(0x7f0000000d80)=""/91, 0x5b}}, {{&(0x7f0000000e00)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/54, 0x36}, {&(0x7f0000000ec0)=""/98, 0x62}, {&(0x7f0000000f40)=""/146, 0x92}], 0x3, &(0x7f0000001040)=""/173, 0xad}, 0x3}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001100)=""/19, 0x13}, {&(0x7f0000001440)=""/219, 0xdb}, {&(0x7f0000001240)=""/4, 0x4}], 0x3, &(0x7f00000012c0)=""/228, 0xe4}, 0x4}, {{&(0x7f00000013c0)=@isdn, 0x80, &(0x7f00000027c0), 0x0, &(0x7f0000002840)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003840)=@un=@abs, 0x80, &(0x7f0000006000)=[{&(0x7f00000038c0)=""/4092, 0xffc}, {&(0x7f00000048c0)=""/150, 0x96}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x3, &(0x7f0000004a00)=""/182, 0xb6}, 0x1957}, {{&(0x7f0000006100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000006180)=""/43, 0x2b}, {&(0x7f00000061c0)=""/234, 0xea}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000500)=""/49, 0x31}, 0x5}, {{&(0x7f0000007340)=@caif=@dbg, 0x80, &(0x7f0000007680)=[{&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000007440)=""/127, 0x7f}, {&(0x7f0000007500)=""/72, 0x48}, {&(0x7f0000007580)=""/215, 0xd7}], 0x4, &(0x7f00000076c0)=""/214, 0xd6}, 0x9}, {{&(0x7f00000077c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007840)=""/46, 0x2e}, {&(0x7f0000007880)=""/13, 0xd}], 0x2}, 0x2000}], 0x9, 0x2101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000002, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) add_key(0x0, 0x0, &(0x7f0000000100)="00f0", 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @remote, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x201000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000000}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x5c, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4808000010b61de9fe0000fcdbff25f50080010100000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800022bebe05fd87c6c93af5e836e84d8788ee043c59e308a4f50ba0b6debeabf0c85cfe16614d5e989f16b55393f1859eea9d3c8ee493ae3d0a2bcfd66fbfb5a0044cea647dcfd6cede3809022c87051ae18f09c9231910a7b9c648f1025dc7714e0a4c259531b848fd9309a8e6e40957368e1957c76", @ANYRESDEC=r5, @ANYRES64, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x4850}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x6) accept4(r6, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) 8m43.291687517s ago: executing program 2 (id=5003): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fanotify_init(0x200, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000001200)) 8m43.29133106s ago: executing program 2 (id=5004): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf7\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 8m43.275900243s ago: executing program 2 (id=5005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000140)=""/39, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfff3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 8m43.248023921s ago: executing program 2 (id=5006): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x5, 0x67d, 0x7, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async, rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 32) 8m43.119598891s ago: executing program 2 (id=5007): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002300010322bd7002fadbdf650100000005abcce8bb8cc4c0d4dcd652a222ae861ccdc217e86c79de7c8dcba5906bf3015b6621d125c92caa69ab11c8c8ebfc4b652cced6ce00bd532cac1c2ff969345712b37e3e9207e6680f4e6d7b0d8add938f5940dbd0978ed81ce0c2de890fec0e8796b3e7cb8677bfade7483af0ff0ceebc98605fe0f16efcb9b3f9ca2697"], 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20048804}, 0x840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 8m39.183743345s ago: executing program 35 (id=4925): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x4000000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x800000, 0xfffffffd}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) sendfile(r4, r4, 0x0, 0x7ff) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="01", 0x1}], 0x1, 0xe5b, 0xac, 0xb) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$snapshot(r8, 0x0, 0x0) writev(r8, &(0x7f0000001380)=[{&(0x7f0000000180)="b1", 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8m28.053716839s ago: executing program 36 (id=5007): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002300010322bd7002fadbdf650100000005abcce8bb8cc4c0d4dcd652a222ae861ccdc217e86c79de7c8dcba5906bf3015b6621d125c92caa69ab11c8c8ebfc4b652cced6ce00bd532cac1c2ff969345712b37e3e9207e6680f4e6d7b0d8add938f5940dbd0978ed81ce0c2de890fec0e8796b3e7cb8677bfade7483af0ff0ceebc98605fe0f16efcb9b3f9ca2697"], 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20048804}, 0x840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 6m42.555614596s ago: executing program 9 (id=5529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x8000032, 0x5, 0x9, 0x11, 0x9, 0x7, 0xfd, 0x7, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7582}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6m37.850096354s ago: executing program 9 (id=5538): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000b24de0f300000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000001000000000b910000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000039c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000007000a000a010101000000000000000000000000ac1e0001000000000000000000000000ac141439000000000000000000000000ac1414340000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m37.703761855s ago: executing program 9 (id=5539): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m37.604416588s ago: executing program 9 (id=5541): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050001000000098d2fe25242e7833840aa28f127b304b7377a66e2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @remote, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r6, 0x0) (async) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r6, 0x0) mremap(&(0x7f000008e000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000540)={0x28, 0x5, r10, r10, 0x7, 0x7, 0x6}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x58) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r12, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m36.623731785s ago: executing program 9 (id=5547): r0 = syz_usb_connect$uac1(0x1, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000000003010902940003010040000904000000010103000a2401000000020102132406000006000000281ab0ab00000924030400000000000924050000f8211cfd0924030561000004000724050401"], 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r1, &(0x7f00000000c0)="a7a96c5a465315c81f0d51131cf90d056c26f9fbb61532bc6dbee9e4688070d97f50f7d9a557f6680000008003000000510db0c6f5b5fce4847f46eb3ef68724a9aecc6959182a360060ac10cbd90f18f7992a2b19da94b50e638d7f7e1d5ffaeb182e3a51eb1a3a57cc3919180d7481e62200c660b637e2681086b7d880391e9bdd7f12ec157fdb825f5ff6ab936e5607499c2191d4e52345cf159b301ec58835f2aefcc14010c32302750616f99b31345d00", 0xb3) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0, 0x0}, 0x0) 6m36.346880781s ago: executing program 9 (id=5550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000b24de0f300000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000001000000000b910000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000069c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000007000a000a010101000000000000000000000000ac1e0001000000000000000000000000ac141439000000000000000000000000ac1414340000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m36.012036988s ago: executing program 37 (id=5550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000b24de0f300000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000001000000000b910000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000069c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000007000a000a010101000000000000000000000000ac1e0001000000000000000000000000ac141439000000000000000000000000ac1414340000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m59.627717201s ago: executing program 8 (id=6647): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\xff\xff\xff\xfe\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 2m59.622826202s ago: executing program 8 (id=6648): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fanotify_init(0x202, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r0 = socket$inet(0x10, 0x4, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r3, 0x0, 0x2, 0x4, &(0x7f0000000240)="bdc95f8a", 0x4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x2, 0x80805, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x2) epoll_create(0x1) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x3b4fc1a99827d927) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @private2, 0x1}], 0x1c) chdir(&(0x7f0000000000)='./file0\x00') r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x9) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m57.89535008s ago: executing program 8 (id=6657): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) ptrace$setopts(0x4200, r0, 0x80, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000e2682, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='>', 0x1}], 0x1, 0x1c4, 0x286, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0x46) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m56.942938803s ago: executing program 8 (id=6665): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x35) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) renameat(r3, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000400)='./file0\x00') r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendfile(r0, r4, 0x0, 0x400) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac010000db611cf4ff35773555e7d9182874b97c17000100007866bca598ef1d71fa000000001000007f0000010000000000000000010000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff000000000000000700000000785d0929a546f8040d679e6690cb2486b0237bdf6f3fd344d648e61db46ca69d5cf15fdb3e455ab9d510aaf420caacc2d35b945b470a2e4f438688dfc63a01dca1280521f5734aa69d04f040dfe9afbec0b2e34bfc154148ad8bd3a5c3e21884df2d54673d9d8256fc300bb6d9d35f9a28ebd1bd8453790833", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1414bb000000000000000000000000053500000301f900090000020300000000020000"], 0x1ac}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x4000, 0x44, 0x2}, 0x18) syz_usb_control_io$hid(r6, 0x0, 0x0) fsmount(r1, 0x0, 0x88) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f7488dffc00"/21], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000440), 0xfffffffffffffffd, 0x42080) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f00000002c0)={0x1, 0x100, 0x0, 0x6, 0x10000000, 0xa02}) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x3d2280) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000002cc0)={0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r9 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES8=r8, @ANYRES8=r0], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="2006d50300005526024b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m54.938867641s ago: executing program 8 (id=6668): socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8001, 0xb, 0xf, 0x3, 0x4, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6, 0xfff2}, {0xf, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r10 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) read(r10, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r12 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_FS_INFO(r12, 0x8400941f, &(0x7f00000003c0)) setsockopt$inet_buf(r13, 0x0, 0x11, &(0x7f0000000040)="02d242", 0x3) 2m54.811311576s ago: executing program 8 (id=6669): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) brk(0x689d80000000) listen(r0, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) accept4$alg(r0, 0x7000000, 0x0, 0x80000) 2m54.56717178s ago: executing program 38 (id=6669): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) brk(0x689d80000000) listen(r0, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) accept4$alg(r0, 0x7000000, 0x0, 0x80000) 9.543794399s ago: executing program 1 (id=7674): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xf9ec32e8c5c393b5}}}, &(0x7f00000003c0)='GPL\x00', 0x400002}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4, r0, 'id1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40881}, 0x80) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x1, 0xa, 0x80, "110000000000000824cb2b880030ac329ee412f1542609f17eb3cdbf25e1e09d", 0xf5730875}) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 9.411686467s ago: executing program 1 (id=7675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010000304fcfffeff3d000000000000000d2e7a9a2f22373155b715583327e033c662109f316471f6e6e5c10d410b806823b2e33a54dbee72dd20a4a01331cb4b6e8cbfe7eb9d232fe5d2327194c46fc23d1fda1d437b101eb0ba61e61ff809f3b23515765e35aa4c8913b135530c32be38790bc563d4b6cc85ad95ac9e0cf99adcd7b04037f8a6782dfef2a3f71dd8d8109a0fb5d45003dba4fe136d464684fd84ede6b961dd616706965b8c8def989d78d0dd71a4ed70b911c1b955e78fa05d85759e94347486fb2f95a03f49201a0b285578043ad2a85ba2eda2a997d3e27a6df97d2b7ae6d5a5897452b5f3fba43bd7", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002c0012800b00010067656e657665007a23d5678005000c000100000005000d00010000000800010003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = eventfd2(0x9, 0x800) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, &(0x7f0000001240)=[{}], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103840) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'veth1\x00', 0x100}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x19, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) 7.35946727s ago: executing program 7 (id=7685): eventfd2(0x9, 0x800) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, &(0x7f0000001240)=[{}], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getpid() syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006410000004106a1c2a445e329fc25"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103840) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 6.578950851s ago: executing program 7 (id=7689): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f000000fa00)=0x9) sendmsg(r0, &(0x7f0000012900)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="2e41d16cd5f466b8220066baf80cb8c476228fef66bafc0c66ed467906f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x42}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="0fc7208ec00f0f4900a4f083569d13ba2000edf30f09660f388002baf80c66b81cdc418f66efbbfcff66ed26c80000f6f30fc774ae0f20d86635200000000f22d8", 0x41}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r8 = syz_open_pts(r7, 0x0) r9 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) readv(r7, &(0x7f0000000800)=[{&(0x7f0000000540)=""/50, 0x32}], 0x1) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r8, 0x540b, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x16) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r10 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvmsg(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x4}, 0x60002000) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f00000001c0)) 6.401656798s ago: executing program 1 (id=7692): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000002010b000000000000000001000009"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x40) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 5.21718821s ago: executing program 1 (id=7697): io_uring_enter(0xffffffffffffffff, 0x1226, 0x8b27, 0x2, &(0x7f0000000000)={[0x3ff]}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0), 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000010052314610e5145a924951f3e6b102da1a0000064f0000"], 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000064000000060a010400000000000000000100000008000b40000000003c00048024000180090001007866726d000000001400028005000300000000000800024000000002140001800d00010073796b98827be7b839106e70726f7879000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) syz_emit_ethernet(0x79, &(0x7f0000000500)={@link_local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6b, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @echo={0x8, 0x0, 0x0, 0x96, 0xfffb, "f2e7bc4572fbb408c1916e8a21ee98fbac5fe4b8feee34c11ae307fcc7ffda6c24269f97571639aed37eff6a9004de55b632405116b85e45c0c2b2d3ee28e02903a90918500cb9f043b3274609367f"}}}}}, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x4, 0xbf, 0x8}, {0x6, 0x7c, 0x5, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c4e17c28c3df9300700000fe892b000000c4c2c98c7a550f224766baa100b86ffc0000ef660f236466ba4300b009ee0f635a000fc7a801000000", 0x3a}], 0x1, 0x11, 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x200) ioctl$FE_READ_BER(r7, 0x80046f46, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x2, 0x1b0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0xffffffff) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 4.823598472s ago: executing program 7 (id=7701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000b24de0f300000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000001000000000b910000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a01010100000a0000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000007000a000a010101000000000000000000000000ac1e0001000000000000000000000000ac141439000000000000000000000000ac1414340000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.687880351s ago: executing program 7 (id=7703): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) unshare(0x20000400) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010027d752cbd92a66ac7538b3"], 0x0}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x7c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x2, 0x8b, 0x4, {0x6, @sdr={0x34324142, 0x7}}, 0x2}) 4.475811562s ago: executing program 6 (id=7707): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000002010b000000000000000001000009"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 4.291887501s ago: executing program 6 (id=7709): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 4.191631267s ago: executing program 6 (id=7710): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f804090581030000040000b506d0c05d534f"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0) mknod$loop(0x0, 0x4000, 0x1) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2c, 0x4, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108002734e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012008fa7686173683a6e65742c706f727400000081c285683cca439f8b2aa649e8e1dc52665974d4ad36a4b64dc695cfe1cf9ae928a222ab69c4d240aae92f09be31959bfddd64173246f70c66448594947027e46ac6bfd3539f29bdc471d3600971b94b69b743ce34b0ae0c21f16b5f5b15314e8cd0e8cf97e0fd9122422700"/197], 0x4c}}, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)={0x7, {{0x2, 0x0, @multicast2}}}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r9}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x202, 0x6064, 0x8, r9}, &(0x7f0000000100)=0x10) unshare(0x2040400) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r10}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={r10, 0x0, 0x0, 0x4}, 0x20) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) mmap(&(0x7f0000a40000/0x4000)=nil, 0x4000, 0x100000a, 0x28011, r2, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.575175362s ago: executing program 4 (id=7716): r0 = syz_open_dev$video(&(0x7f0000000140), 0x14, 0x20200) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000200)={0x3, r5}) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x2, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f026, 0x5}) (async) syz_clone(0x10008000, &(0x7f0000000940)="d3e45b788fcd360391a09194135eac513719a92961805341c85926d64a144b09fe3d1266691634b1522200a287ec926c646df73beb24237769007161ad15c629fac37fc6ffc1a919c1daf58a29432818f9f2a40c344c2c4f832a54b456e619ee94b3594f6bd9a86746ec9fda1012fb4cea7e37bfdc3371e705729dd463465478ae677e989d30fe169f06060873cdc7e8f30ebf39ee4118d966a3b4a5986ff52d64b968306065aadb6b7f4ba2be0f54cf6fe19f7b0d66c8c79e23d48c1c7e1b63f167ba8a04ac21f7f02035e5b88c5bcae949c21dce8fed91d761d7", 0xdb, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000b00)="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") (async) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x8022, 0x0) close(r2) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9b9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000800)={0x2cc, {{0x2, 0x0, @broadcast}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000012c0)={0xe, 0x1, 0x0, 0x80000}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 2.573756883s ago: executing program 4 (id=7717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0xb1a03, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000c14cdb579bb7b449", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000004}, 0x140000c4) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478", 0xd7}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x2, 0x20000044) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{}, 0x5, &(0x7f0000000280)=[0x7, 0x1, 0x40, 0x4, 0xba], 0x8, 0xe}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (rerun: 32) unshare(0x24060400) 2.483475302s ago: executing program 4 (id=7718): r0 = socket$inet_smc(0x2b, 0x1, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x15, 0x960e) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000680)=0x4) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000440)=ANY=[@ANYBLOB="21850000050000000787930009"]) r7 = syz_open_procfs(r2, &(0x7f0000000400)='net/fib_triestat\x00') write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1015], [0xd68a, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffff7, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0xb05f, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r6, 0x8010aebb, &(0x7f0000000700)={0xffffffff, 0x2000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="7c01000019000100000000000000000064010101000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000004002a0002000000000000001f0d00000a010102000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000030000000001000000000000040000002001000000000000000000000000000100000000ff0000000a000000fc0100000000000000000000000000000000000005"], 0x17c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r7) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r11, 0x107, 0x17, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r10, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r12 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000740)={0x10001, 0x7f}) execveat$binfmt(0xffffffffffffff9c, r12, 0x0, 0x0, 0x0) fgetxattr(r8, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)=""/121, 0x79) 2.405534022s ago: executing program 3 (id=7719): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000002010b000000000000000001000009"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 2.397297041s ago: executing program 4 (id=7720): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 2.319288999s ago: executing program 4 (id=7721): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100021de24a20830434128552010000010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0x4}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=@dellinkprop={0x100, 0x6d, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6a324}, [@IFLA_IFALIASn={0x4}, @IFLA_VF_PORTS={0x4}, @IFLA_VF_PORTS={0xd8, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\'@\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6c9e33c606e201585cc92ed208c12a08"}, @IFLA_PORT_PROFILE={0x7, 0x2, '^\x12\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0x6, 0x2, ':\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5e85449e5d3f3e4bde27b0ca4b46a74b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "07e516397b1ddda3f2859e0eb2b3b30c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a66c6a5d9d8462f3a76d92c79df60caa"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d25d35147a5aee21d31ad2705c3711be"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0116fd2dc9f44017a704f7ea99c1eb04"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3a}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x810}, 0x8000) 2.237534526s ago: executing program 3 (id=7722): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00 \x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 2.208106568s ago: executing program 3 (id=7723): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x63}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x73e, 0x79}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcd, 0x16}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x59}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x97, 0x3d}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xd1c}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'veth1\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0x0, @ah_ip4_spec={@local, @private=0xa010100, 0x5, 0x80}, @tcp_ip4_spec={@local, @remote, 0x4e24, 0x4e24, 0x4}, 0x3, 0x7f, 0x8001, 0x10001, 0xfffffffffffffffe}}}) (async) r5 = syz_open_dev$mouse(&(0x7f0000000380), 0x8, 0x101803) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f00000003c0)=0x6, 0x4) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x2, 0x4, 0xce9}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000480)={r6, 0x405}, 0x8) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x21}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0xe312}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f0000000600)=@ccm_128={{0x304}, "6a9c939db1a68524", "09b56fa5950139677df33730bc5ef0ee", "3305f597", "5eb870493fee884d"}, 0x28) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000080) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000780)={'team_slave_1\x00', {0x2, 0x4e23, @multicast1}}) (async, rerun: 32) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x29000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x300, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x21}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xfd, 0x0, "8f234d39e31e1df56d8f4c0cccb7125029665e9767537a962c578f3b9b6d515f8932699fcf930f5ab05b3f72611c20cb8bc0fdcfaa60f2b714074c222d0607d8cf01c0550a45d45a46776ebec754cb54c9ed7322457b021913ee02e724c6fdd409521b78ef52fdd2f547f842a4fed453e1fd4fbe630fb56c3aeb65d50eadee106c248cb860e00cdac885ac85461ba5718e56d87108e588c43ca6b8b64b89ac818cd1df6caa61864acd656ba44e38b76c122046151dbbefffbdfc08e6f3cb0441ae600ac0e6198d2d71800888c564c83b1544aa4227b863496a6b95ef1289910dc7915a28817d6458dcaedfdb74ce504e8cbe4d3e941746823a"}, @NL80211_BAND_6GHZ={0x54, 0x3, "45997ad3a71b2b0cddf118504c36c8a59ad5fabfe0d795c4a21aaa1b4a158126b7e52a9fc5145a8bab528b487e3ed82e85657fca4ba418f2c7cbfa9a2efaaf202760a62b9ae765717b14c4f87bd983f4"}, @NL80211_BAND_60GHZ={0xdb, 0x2, "321f3c5def1e5b0898c439e7f754575dded622fff421065a4d07dc49ddc091cff2eb68feb05e24bdee8e0fdcb982eb5a486e8a0db21886392fbef75b4d75af5fe8ba0555d864d14e631805467026104c05ac88b20f957642fa08639a664a01ba15ffbf60b0b678b1af94d2fc29310b64ffc6b44ce1b1708c11ecb0ca57767458cc97576af9cb9fa0bf25a2c27d1a41c3b9ae1b2f5d5ef5c33927dce1920b6782c09a911e2fbd2907d89569e3468fd2ce3976324aff33a314926b4880c1fc31d652ac9e431dcbc15f3e4860f50df20f2ea23c72618238cc"}, @NL80211_BAND_2GHZ={0x8c, 0x0, "c36174a8a152e2b867f506deea1aef2360144a03f866a4781227b4dfaa305b7087853a64746ca882c9a1d8367d84fe95be39e2f5278dcba9fbea121ae9eda0458fbcabd87402798f30bc74acad910fb37c8f25de4d9bc33d22c040ddb919cfd9882d4c4d0082925ad5458d40088ef81ba37ff43443017dc4972b2619b7e1f2ba926b8b4f1fbf77b5"}, @NL80211_BAND_6GHZ={0x16, 0x3, "b6b5de3a54b8e8f40759f35b76860275cf4c"}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 32) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x43, 0x10, 0xc, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x48e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xff, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x310, 0x8, 0x6, 0x6, 0xff, 0x3}, 0x77, &(0x7f0000000c00)={0x5, 0xf, 0x77, 0x5, [@generic={0x5a, 0x10, 0x2, "18965d6c1d6f60051ac0fb737093bdc814468bd5afc9821b50124fe07ab11470a0f09b1f9fc4ea539fd84612f04a61711fb498bc5107431c18f07647ad2d3f20e6a4667db0490595de2e523743de89a579b3b839f0f0dc"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x3, 0xfffb}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x7}]}, 0x5, [{0x3a, &(0x7f0000000c80)=@string={0x3a, 0x3, "d477ad1b043bec35847db018d975a83305786a1fadbeec9bb459c011bd6810302ea2c3d032a3b23dd89f4da505a760eef55ee6848450ba2f"}}, {0x25, &(0x7f0000000cc0)=@string={0x25, 0x3, "72cda3380b19f9c470b3363beb11b857dba17f4cb78a6680f5b7134e7fbe213570ee49"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x140c}}]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r7) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000e80)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x101, 0x7}, 0x90) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r5) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40850}, 0x40000) (async) syz_usb_connect$uac2(0x6, 0xb6, &(0x7f0000001080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x1d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0xf, 0x30, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x4, 0x15, 0x1}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x307, 0x5, 0x2, 0x10, 0xffff, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x16, 0xfc, 0x3, 0x2, 0x77, 0x1, 0xe7}, @as_header={0x10, 0x24, 0x1, 0x7, 0x4, 0x3, 0x0, 0x7, 0x0, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xef, 0x8, 0x0, 0xc1, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x27}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x8, 0xf, {0x8, 0x25, 0x1, 0x80, 0x0, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x7, 0x8, {0x8, 0x25, 0x1, 0x82, 0x28, 0x5, 0x5}}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x110, 0x8, 0x4, 0xa4, 0x8, 0xc}, 0x12a, &(0x7f0000001180)={0x5, 0xf, 0x12a, 0x4, [@generic={0xf6, 0x10, 0xb, "7fb206e964cfa2699250fd55f315b24f017c241ac7b1e2aeb1f4a828e1dafb1b6bca8961ef561e0e50672e4d433b3454b250eeee091229dfd22fb1f586017094fee6162d3ad342ceb2dd59f607be33db3377be285d014b549e06545132488e0de6b96593c939ef8a27cb6fa7b3fa92ba7690144c47f74aa02e1429dc6dba8f5470816a50d9fc03fe8c04a04589b402abf5d7410515261544b14bc78e57c3b6db4a7626ba75c8765b34bf42aa0c85a090d0a65f29ee63fcb42ce4c9b3255225b4705244cf19491180b71765e41b117936d92316651563097ed874c8cd160db7fb9491a01d5c2d4e721069f9ea6e9be5560de16b"}, @ss_container_id={0x14, 0x10, 0x4, 0x55, "c2177bf21404df7eac11f63ddbeb55c6"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1d5f2aae95ba0eef5e23f0d6de0880d6"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x8, 0x1}]}, 0x4, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x93, &(0x7f0000001300)=@string={0x93, 0x3, "f6bc1af293d28124a7719696e22484b642666fa5b94f0ef220de717e678078458ae7ff387c0ecc91823cd3a486e86c2f0ba65e7913f4bc79f1866cbb986c8443548abcb9660d94f3dab58a1605f2edea0c9545560f83c266a5b7e04bfe8c8c869e376d544298780885d73291a94099c4eb49e34c81488c62ddd3ad51c74db831305b38ce19a63da33c8b15046d0275124b"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x449}}]}) (async) lsetxattr$security_evm(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), &(0x7f0000001540)=@v2={0xcff3156f65a6b727, 0x0, 0xa, 0xfffffff7, 0x17, "02ceaed080446538371ee6de17114e8913e955efc940b7"}, 0x20, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000001580)={0x6, 'wg1\x00', {0x5}, 0x7032}) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000015c0)={r6, 0x2, 0x2, [0xf7, 0x17]}, &(0x7f0000001600)=0xc) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x83, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0xd3, 0x1, 0x7, 0x1, 0x1, 0x96, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0xb, 0x40}}}}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x310, 0x5, 0x43, 0x6, 0x40, 0x6}, 0x8d, &(0x7f00000016c0)={0x5, 0xf, 0x8d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "4a910f3cdb501ebae02f00e48cb0eb39"}, @ssp_cap={0x18, 0x10, 0xa, 0xb4, 0x3, 0xf, 0x0, 0x4, [0xff00cf, 0x30, 0xff3ff0]}, @generic={0x5c, 0x10, 0xb, "b28c179bfe5f73be211d3b4e5321bc1417a32e63da2822d1edef380a798ed60077804a3b96d9db41ed647129a7e42a952933b971c701d8f5adbf5766bb5c2a84ea11e77909f1e8c147a9e38ba566c9ddf34a697b5419849bb4"}]}, 0x1, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x416}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000001800)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, @in6={0xa, 0x4e20, 0x9, @empty, 0x140000}], 0x84) (async) ioctl$I2C_FUNCS(r5, 0x705, &(0x7f00000018c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x400, 0x0) 2.099339911s ago: executing program 3 (id=7724): syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x20, 0x7, 0x1b, 0xfe}, {0x9, 0x5, 0x4, 0x2, 0x0, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9, 0x30}}}}}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000004c0)) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) 2.082291796s ago: executing program 1 (id=7725): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_io_uring_setup(0x6d46, &(0x7f0000000380)={0x0, 0xec22, 0x3f9, 0x2, 0x4000032f}, 0x0, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getqdisc={0x30, 0x26, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xa}, {0x10, 0xf}, {0x4, 0xfff3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'tunl0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001100)) 2.008070079s ago: executing program 1 (id=7726): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x80, 0x800) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0xa, 0xf9, 0x57, 0x8, 0x694, 0x1, 0x6716, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xef, 0x40, 0xa, "", [{{0x9, 0x4, 0x39, 0x6, 0x0, 0x94, 0xbc, 0x3d}}]}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000b40)=""/130, 0x82, 0xb898) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) inotify_init() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010002000000fcdbdf258200000008000300", @ANYRES32=r9, @ANYBLOB="4218abe26e77084a6c876d3fac1f44a34a35c22ba65fb73917bac793"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 1.691277134s ago: executing program 4 (id=7727): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006240)={0x2020, 0x0, 0x0}, 0xffffffffffffffed) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') (async) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x3, 0xff) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) unshare(0xa000200) (async) semget$private(0x0, 0x4000, 0x0) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) (async) unshare(0x20060400) 1.669746117s ago: executing program 7 (id=7728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e2300030200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000004000000000000bb0000000032000000e00000010000000000000000000000000000000000000000000000000000000009000000000000000a0000000000000000000000004000000000000000000000000000000000003f4f0696072473edff000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000800000000200000028000000000000004c001200726640343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.460660468s ago: executing program 7 (id=7730): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}) io_uring_enter(r6, 0x3549, 0xeed, 0x1, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) write$sndseq(r11, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}], 0x38) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r12 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0xfffffffffffffee2, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0xf, 0x5}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r12, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1.107755421s ago: executing program 6 (id=7731): r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1012}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) socket$nl_generic(0x10, 0x3, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$unix(r1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1012}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) (async) 757.13033ms ago: executing program 6 (id=7732): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000002010b000000000000000001000009"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 288.292541ms ago: executing program 3 (id=7733): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00B\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 74.289223ms ago: executing program 3 (id=7734): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000100)=0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400f0100ad2430"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)=',\x00', 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="0009f3df4eb9"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 6 (id=7735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000040)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x3, 0x8, 0xf01, 0x1, 0x9, 0x7, 0x1, 0x9, 0x5}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): Only [ 1460.670572][T32161] 427071 pages reserved [ 1460.677023][T32161] 0 pages cma reserved [ 1460.765882][T20321] m920x_read = error: -19 [ 1460.781616][T20321] dvb-usb: error while querying for an remote control event. [ 1460.821606][T32171] FAULT_INJECTION: forcing a failure. [ 1460.821606][T32171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.859399][T32171] CPU: 1 UID: 0 PID: 32171 Comm: syz.7.7321 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.859429][T32171] Tainted: [L]=SOFTLOCKUP [ 1460.859437][T32171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1460.859448][T32171] Call Trace: [ 1460.859456][T32171] [ 1460.859464][T32171] dump_stack_lvl+0xe8/0x150 [ 1460.859493][T32171] should_fail_ex+0x412/0x560 [ 1460.859523][T32171] _copy_to_user+0x31/0xb0 [ 1460.859547][T32171] simple_read_from_buffer+0xe1/0x170 [ 1460.859577][T32171] proc_fail_nth_read+0x1bb/0x230 [ 1460.859605][T32171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.859652][T32171] ? rw_verify_area+0x2a6/0x4d0 [ 1460.859672][T32171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.859699][T32171] vfs_read+0x20c/0xa70 [ 1460.859717][T32171] ? fdget_pos+0x246/0x320 [ 1460.859737][T32171] ? __pfx___mutex_lock+0x10/0x10 [ 1460.859767][T32171] ? __pfx_vfs_read+0x10/0x10 [ 1460.859788][T32171] ? __fget_files+0x2a/0x420 [ 1460.859808][T32171] ? __fget_files+0x3a0/0x420 [ 1460.859823][T32171] ? __fget_files+0x2a/0x420 [ 1460.859850][T32171] ksys_read+0x150/0x270 [ 1460.859872][T32171] ? __pfx_ksys_read+0x10/0x10 [ 1460.859903][T32171] do_syscall_64+0x14d/0xf80 [ 1460.859924][T32171] ? trace_irq_disable+0x3b/0x150 [ 1460.859940][T32171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.859959][T32171] ? clear_bhb_loop+0x40/0x90 [ 1460.859981][T32171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.859999][T32171] RIP: 0033:0x7fd50b55d04e [ 1460.860017][T32171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1460.860033][T32171] RSP: 002b:00007fd50c434fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1460.860054][T32171] RAX: ffffffffffffffda RBX: 00007fd50c4356c0 RCX: 00007fd50b55d04e [ 1460.860068][T32171] RDX: 000000000000000f RSI: 00007fd50c4350a0 RDI: 0000000000000007 [ 1460.860080][T32171] RBP: 00007fd50c435090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.860091][T32171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.860104][T32171] R13: 00007fd50b816038 R14: 00007fd50b815fa0 R15: 00007fd50b93fa48 [ 1460.860134][T32171] [ 1461.085614][T20321] m920x_read = error: -19 [ 1461.090344][T20321] dvb-usb: error while querying for an remote control event. [ 1461.203661][T32185] fuse: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 1461.211410][T23737] m920x_read = error: -19 [ 1461.221747][T23737] dvb-usb: error while querying for an remote control event. [ 1461.233570][T32185] __nla_validate_parse: 55 callbacks suppressed [ 1461.233588][T32185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7326'. [ 1461.367051][T23737] m920x_read = error: -19 [ 1461.371403][T23737] dvb-usb: error while querying for an remote control event. [ 1461.485092][T20321] m920x_read = error: -19 [ 1461.489487][T20321] dvb-usb: error while querying for an remote control event. [ 1461.511715][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1461.533856][T32218] macvtap1: entered promiscuous mode [ 1461.540837][T32218] macvtap1: entered allmulticast mode [ 1461.552966][T32218] bridge0: entered allmulticast mode [ 1461.571841][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1461.595635][T32218] bridge0: left allmulticast mode [ 1461.615359][T20321] m920x_read = error: -19 [ 1461.619738][T20321] dvb-usb: error while querying for an remote control event. [ 1461.657318][T32225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.668541][T32225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.755119][T23737] m920x_read = error: -19 [ 1461.759492][T23737] dvb-usb: error while querying for an remote control event. [ 1461.875263][T23737] m920x_read = error: -19 [ 1461.879806][T23737] dvb-usb: error while querying for an remote control event. [ 1462.005206][ T797] m920x_read = error: -19 [ 1462.009583][ T797] dvb-usb: error while querying for an remote control event. [ 1462.125267][ T797] m920x_read = error: -19 [ 1462.129888][ T797] dvb-usb: error while querying for an remote control event. [ 1462.159250][T32239] syzkaller1: entered promiscuous mode [ 1462.164879][T32239] syzkaller1: entered allmulticast mode [ 1462.255056][T23737] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1462.262903][ T797] m920x_read = error: -19 [ 1462.267406][ T797] dvb-usb: error while querying for an remote control event. [ 1462.385393][ T797] m920x_read = error: -19 [ 1462.389747][ T797] dvb-usb: error while querying for an remote control event. [ 1462.438799][T23737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.459280][T23737] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1462.478516][T23737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.505969][T23737] usb 4-1: config 0 descriptor?? [ 1462.522852][T23737] pwc: Askey VC010 type 2 USB webcam detected. [ 1462.530739][ T797] m920x_read = error: -19 [ 1462.541254][ T797] dvb-usb: error while querying for an remote control event. [ 1462.675538][ T797] m920x_read = error: -19 [ 1462.683109][ T797] dvb-usb: error while querying for an remote control event. [ 1462.722533][T23737] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1462.740279][T23737] pwc: recv_control_msg error -32 req 02 val 2700 [ 1462.761591][T23737] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1462.805306][T20321] m920x_read = error: -19 [ 1462.810893][T20321] dvb-usb: error while querying for an remote control event. [ 1462.925415][ T797] m920x_read = error: -19 [ 1462.945431][ T797] dvb-usb: error while querying for an remote control event. [ 1462.995515][T23737] pwc: recv_control_msg error -71 req 04 val 1300 [ 1463.004253][T23737] pwc: recv_control_msg error -71 req 04 val 1400 [ 1463.015213][T23737] pwc: recv_control_msg error -71 req 02 val 2000 [ 1463.022444][T23737] pwc: recv_control_msg error -71 req 02 val 2100 [ 1463.030274][T23737] pwc: recv_control_msg error -71 req 04 val 1500 [ 1463.037386][T23737] pwc: recv_control_msg error -71 req 02 val 2500 [ 1463.044835][T23737] pwc: recv_control_msg error -71 req 02 val 2400 [ 1463.054230][T23737] pwc: recv_control_msg error -71 req 02 val 2600 [ 1463.061403][T23737] pwc: recv_control_msg error -71 req 02 val 2900 [ 1463.068615][ T797] m920x_read = error: -19 [ 1463.073128][ T797] dvb-usb: error while querying for an remote control event. [ 1463.081007][T23737] pwc: recv_control_msg error -71 req 02 val 2800 [ 1463.092023][T23737] pwc: recv_control_msg error -71 req 04 val 1100 [ 1463.100278][T23737] pwc: recv_control_msg error -71 req 04 val 1200 [ 1463.113330][T23737] pwc: Registered as video103. [ 1463.120756][T23737] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input117 [ 1463.186087][ T797] m920x_read = error: -19 [ 1463.190519][ T797] dvb-usb: error while querying for an remote control event. [ 1463.205243][T23737] usb 4-1: USB disconnect, device number 79 [ 1463.327113][ T797] m920x_read = error: -19 [ 1463.332474][ T797] dvb-usb: error while querying for an remote control event. [ 1463.362210][T32291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7343'. [ 1463.372775][T32291] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7343'. [ 1463.445088][ T797] m920x_read = error: -19 [ 1463.450266][ T797] dvb-usb: error while querying for an remote control event. [ 1463.565223][T23737] m920x_read = error: -19 [ 1463.676905][T23737] dvb-usb: error while querying for an remote control event. [ 1463.866035][T23737] m920x_read = error: -19 [ 1463.871370][T23737] dvb-usb: error while querying for an remote control event. [ 1464.000251][T23737] m920x_read = error: -19 [ 1464.007446][T23737] dvb-usb: error while querying for an remote control event. [ 1464.125195][T23737] m920x_read = error: -19 [ 1464.144519][T23737] dvb-usb: error while querying for an remote control event. [ 1464.320822][ T5837] m920x_read = error: -19 [ 1464.342283][ T5837] dvb-usb: error while querying for an remote control event. [ 1464.495069][T23737] m920x_read = error: -19 [ 1464.499516][T23737] dvb-usb: error while querying for an remote control event. [ 1464.645125][T23737] m920x_read = error: -19 [ 1464.655087][T23737] dvb-usb: error while querying for an remote control event. [ 1464.785024][T19109] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1464.794858][T23737] m920x_read = error: -19 [ 1464.805067][T23737] dvb-usb: error while querying for an remote control event. [ 1464.915342][T23737] m920x_read = error: -19 [ 1464.919734][T23737] dvb-usb: error while querying for an remote control event. [ 1464.955340][T19109] usb 4-1: Using ep0 maxpacket: 8 [ 1464.972103][T19109] usb 4-1: config 6 has an invalid interface number: 220 but max is 0 [ 1465.009121][T19109] usb 4-1: config 6 has no interface number 0 [ 1465.040542][T19109] usb 4-1: config 6 interface 220 has no altsetting 0 [ 1465.072118][T19109] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1465.085483][ T797] m920x_read = error: -19 [ 1465.089859][ T797] dvb-usb: error while querying for an remote control event. [ 1465.097480][T19109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.115211][T19109] usb 4-1: Product: syz [ 1465.125357][T19109] usb 4-1: Manufacturer: syz [ 1465.137080][T19109] usb 4-1: SerialNumber: syz [ 1465.228716][ T797] m920x_read = error: -19 [ 1465.234649][ T797] dvb-usb: error while querying for an remote control event. [ 1465.285042][T23737] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1465.346117][ T797] m920x_read = error: -19 [ 1465.350621][ T797] dvb-usb: error while querying for an remote control event. [ 1465.363337][T32334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.374088][T32334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.391172][T19109] uvcvideo 4-1:6.220: Found multiple Units with ID 4 [ 1465.416762][T19109] uvcvideo 4-1:6.220: Found Unit with invalid ID 0 [ 1465.423331][T19109] uvcvideo 4-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 1465.435363][T19109] uvcvideo 4-1:6.220: Entity type for entity Output 4 was not initialized! [ 1465.444022][T19109] uvcvideo 4-1:6.220: Failed to create links for entity 4 [ 1465.459793][T23737] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1465.465076][T19109] uvcvideo 4-1:6.220: Failed to register entities (-22). [ 1465.469333][T23737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.484204][ T5837] m920x_read = error: -19 [ 1465.496780][T19109] usb 4-1: USB disconnect, device number 80 [ 1465.497561][ T5837] dvb-usb: error while querying for an remote control event. [ 1465.516142][T23737] usb 2-1: config 0 descriptor?? [ 1465.525550][T32373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7353'. [ 1465.536716][T23737] cp210x 2-1:0.0: cp210x converter detected [ 1465.615143][ T797] m920x_read = error: -19 [ 1465.625047][ T797] dvb-usb: error while querying for an remote control event. [ 1465.746863][ T797] m920x_read = error: -19 [ 1465.751249][ T797] dvb-usb: error while querying for an remote control event. [ 1465.799145][T32389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.813297][T32389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.875199][ T797] m920x_read = error: -19 [ 1465.879797][ T797] dvb-usb: error while querying for an remote control event. [ 1466.005149][ T797] m920x_read = error: -19 [ 1466.010785][ T797] dvb-usb: error while querying for an remote control event. [ 1466.038934][T23737] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1466.050177][ T29] audit: type=1326 audit(1775827571.744:14793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.075582][ T29] audit: type=1326 audit(1775827571.744:14794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.100956][ T29] audit: type=1326 audit(1775827571.744:14795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.124823][ T29] audit: type=1326 audit(1775827571.744:14796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.149213][ T797] m920x_read = error: -19 [ 1466.153593][ T797] dvb-usb: error while querying for an remote control event. [ 1466.166836][ T29] audit: type=1326 audit(1775827571.744:14797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.190128][T23737] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1466.202677][ T29] audit: type=1326 audit(1775827571.744:14798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.225863][ T29] audit: type=1326 audit(1775827571.744:14799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.248862][ T29] audit: type=1326 audit(1775827571.744:14800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.271591][ T29] audit: type=1326 audit(1775827571.744:14801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.294702][T23737] m920x_read = error: -19 [ 1466.299285][T23737] dvb-usb: error while querying for an remote control event. [ 1466.306976][ T29] audit: type=1326 audit(1775827571.744:14802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32346 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c739c819 code=0x7ffc0000 [ 1466.415999][T23737] m920x_read = error: -19 [ 1466.420385][T23737] dvb-usb: error while querying for an remote control event. [ 1466.545223][T23737] m920x_read = error: -19 [ 1466.549606][T23737] dvb-usb: error while querying for an remote control event. [ 1466.665147][T23737] m920x_read = error: -19 [ 1466.669538][T23737] dvb-usb: error while querying for an remote control event. [ 1466.705834][T19109] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1466.785599][T23737] m920x_read = error: -19 [ 1466.793638][T23737] dvb-usb: error while querying for an remote control event. [ 1466.867833][T19109] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1466.868736][T19109] usb 4-1: config 13 has an invalid interface number: 177 but max is 0 [ 1466.868762][T19109] usb 4-1: config 13 has no interface number 0 [ 1466.868802][T19109] usb 4-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1466.868830][T19109] usb 4-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1466.868846][T19109] usb 4-1: config 13 interface 177 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1466.868861][T19109] usb 4-1: config 13 interface 177 has no altsetting 0 [ 1466.870685][T19109] usb 4-1: New USB device found, idVendor=15c2, idProduct=f142, bcdDevice=ef.b7 [ 1466.870714][T19109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.870735][T19109] usb 4-1: Product: syz [ 1466.870747][T19109] usb 4-1: Manufacturer: syz [ 1466.870756][T19109] usb 4-1: SerialNumber: syz [ 1466.880496][T24433] usb 2-1: USB disconnect, device number 37 [ 1466.891511][T24433] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1466.908460][T24433] cp210x 2-1:0.0: device disconnected [ 1466.915426][T23737] m920x_read = error: -19 [ 1466.915455][T23737] dvb-usb: error while querying for an remote control event. [ 1467.035118][ T5837] m920x_read = error: -19 [ 1467.035147][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.137194][T19109] usb 4-1: USB disconnect, device number 81 [ 1467.155899][ T5837] m920x_read = error: -19 [ 1467.155927][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.275156][ T5837] m920x_read = error: -19 [ 1467.279757][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.395107][ T5837] m920x_read = error: -19 [ 1467.399568][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.515264][ T5837] m920x_read = error: -19 [ 1467.522287][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.646259][ T5837] m920x_read = error: -19 [ 1467.656162][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.693614][T32475] binder: 32474:32475 ioctl c0306201 0 returned -14 [ 1467.795898][ T5837] m920x_read = error: -19 [ 1467.803263][ T5837] dvb-usb: error while querying for an remote control event. [ 1467.806169][T32488] netlink: 988 bytes leftover after parsing attributes in process `syz.3.7376'. [ 1467.925175][ T5837] m920x_read = error: -19 [ 1467.929622][ T5837] dvb-usb: error while querying for an remote control event. [ 1468.090076][ T797] m920x_read = error: -19 [ 1468.097710][ T797] dvb-usb: error while querying for an remote control event. [ 1468.235062][ T797] m920x_read = error: -19 [ 1468.251037][ T797] dvb-usb: error while querying for an remote control event. [ 1468.320151][T32510] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1468.375624][ T797] m920x_read = error: -19 [ 1468.403129][ T797] dvb-usb: error while querying for an remote control event. [ 1468.528899][ T797] m920x_read = error: -19 [ 1468.558198][ T797] dvb-usb: error while querying for an remote control event. [ 1468.725779][ T797] m920x_read = error: -19 [ 1468.749261][ T797] dvb-usb: error while querying for an remote control event. [ 1468.905080][ T797] m920x_read = error: -19 [ 1468.909475][ T797] dvb-usb: error while querying for an remote control event. [ 1469.055249][T23737] m920x_read = error: -19 [ 1469.074235][T23737] dvb-usb: error while querying for an remote control event. [ 1469.215129][T23737] m920x_read = error: -19 [ 1469.223703][T23737] dvb-usb: error while querying for an remote control event. [ 1469.365115][T23737] m920x_read = error: -19 [ 1469.374999][T23737] dvb-usb: error while querying for an remote control event. [ 1469.496445][T23737] m920x_read = error: -19 [ 1469.501031][T23737] dvb-usb: error while querying for an remote control event. [ 1469.647263][T23737] m920x_read = error: -19 [ 1469.651681][T23737] dvb-usb: error while querying for an remote control event. [ 1469.705015][T32535] openvswitch: netlink: Missing valid actions attribute. [ 1469.712220][T32535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1469.805758][T23737] m920x_read = error: -19 [ 1469.814135][T23737] dvb-usb: error while querying for an remote control event. [ 1469.933485][T32548] fuse: Unknown parameter 'user_„d' [ 1469.943608][T32548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.952423][T23737] m920x_read = error: -19 [ 1469.957599][T23737] dvb-usb: error while querying for an remote control event. [ 1469.966736][T32548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.028187][T32556] loop7: detected capacity change from 0 to 7 [ 1470.088493][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.098115][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.106366][ T5837] m920x_read = error: -19 [ 1470.111520][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.121098][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.144583][ T5837] dvb-usb: error while querying for an remote control event. [ 1470.153295][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.162887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.184972][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.194558][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.203645][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.213221][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.221586][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.231160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.239217][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.248815][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.256983][ T9100] ldm_validate_partition_table(): Disk read failed. [ 1470.263848][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.273456][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.284973][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.294556][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.302833][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1470.312509][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1470.312680][ T5837] m920x_read = error: -19 [ 1470.322045][ T9100] Dev loop7: unable to read RDB block 0 [ 1470.333542][ T5837] dvb-usb: error while querying for an remote control event. [ 1470.343199][ T9100] loop7: unable to read partition table [ 1470.355850][ T9100] loop7: partition table beyond EOD, truncated [ 1470.394707][T32556] ldm_validate_partition_table(): Disk read failed. [ 1470.419061][T32556] Dev loop7: unable to read RDB block 0 [ 1470.430822][T32556] loop7: unable to read partition table [ 1470.441407][T32556] loop7: partition table beyond EOD, truncated [ 1470.456092][T32556] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1470.485273][ T5837] m920x_read = error: -19 [ 1470.502675][ T5837] dvb-usb: error while querying for an remote control event. [ 1470.627016][ T5837] m920x_read = error: -19 [ 1470.654618][ T5837] dvb-usb: error while querying for an remote control event. [ 1470.785073][ T5837] m920x_read = error: -19 [ 1470.801727][ T5837] dvb-usb: error while querying for an remote control event. [ 1470.945288][ T5837] m920x_read = error: -19 [ 1470.957058][T32576] syzkaller1: entered promiscuous mode [ 1470.974092][ T5837] dvb-usb: error while querying for an remote control event. [ 1470.981627][T32576] syzkaller1: entered allmulticast mode [ 1471.125300][T23737] m920x_read = error: -19 [ 1471.130219][T23737] dvb-usb: error while querying for an remote control event. [ 1471.268776][T23737] m920x_read = error: -19 [ 1471.286058][T23737] dvb-usb: error while querying for an remote control event. [ 1471.439260][T23737] m920x_read = error: -19 [ 1471.461580][T23737] dvb-usb: error while querying for an remote control event. [ 1471.585436][T23737] m920x_read = error: -19 [ 1471.607290][T23737] dvb-usb: error while querying for an remote control event. [ 1471.755162][ T5837] m920x_read = error: -19 [ 1471.762639][ T5837] dvb-usb: error while querying for an remote control event. [ 1471.875854][ T5837] m920x_read = error: -19 [ 1471.915446][ T5837] dvb-usb: error while querying for an remote control event. [ 1471.986251][T32633] syz_tun: entered allmulticast mode [ 1472.045673][ T5837] m920x_read = error: -19 [ 1472.061156][T32633] dvmrp8: entered allmulticast mode [ 1472.073464][ T5837] dvb-usb: error while querying for an remote control event. [ 1472.102284][T32632] syz_tun: left allmulticast mode [ 1472.209579][T32650] netlink: 'syz.1.7406': attribute type 1 has an invalid length. [ 1472.220053][T23737] m920x_read = error: -19 [ 1472.224424][T23737] dvb-usb: error while querying for an remote control event. [ 1472.254066][T32650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1472.535240][T23737] m920x_read = error: -19 [ 1472.542274][T23737] dvb-usb: error while querying for an remote control event. [ 1472.627764][T32653] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1472.675131][T23737] m920x_read = error: -19 [ 1472.679736][T23737] dvb-usb: error while querying for an remote control event. [ 1472.714455][T32653] bond5 (unregistering): Released all slaves [ 1472.818088][ T5837] m920x_read = error: -19 [ 1472.822656][ T5837] dvb-usb: error while querying for an remote control event. [ 1472.848997][T32703] Attempt to restore checkpoint with obsolete wellknown handles [ 1472.975966][T23737] m920x_read = error: -19 [ 1472.984616][T23737] dvb-usb: error while querying for an remote control event. [ 1473.105722][T24132] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1473.135791][T23737] m920x_read = error: -19 [ 1473.140140][T23737] dvb-usb: error while querying for an remote control event. [ 1473.255408][ T5837] m920x_read = error: -19 [ 1473.259866][ T5837] dvb-usb: error while querying for an remote control event. [ 1473.286758][T24132] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1473.329649][T24132] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1473.351153][T24132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.376211][T24132] usb 4-1: Product: syz [ 1473.395139][T24132] usb 4-1: Manufacturer: syz [ 1473.400010][T24132] usb 4-1: SerialNumber: syz [ 1473.415102][ T5837] m920x_read = error: -19 [ 1473.419637][ T5837] dvb-usb: error while querying for an remote control event. [ 1473.453034][T24132] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1473.476285][T19109] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1473.595105][T23737] m920x_read = error: -19 [ 1473.600169][T23737] dvb-usb: error while querying for an remote control event. [ 1473.735578][T23737] m920x_read = error: -19 [ 1473.748058][T23737] dvb-usb: error while querying for an remote control event. [ 1473.789319][T32750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7415'. [ 1473.865525][T23737] m920x_read = error: -19 [ 1473.876237][T23737] dvb-usb: error while querying for an remote control event. [ 1473.911293][T32753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.945042][T32753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.035777][T23737] m920x_read = error: -19 [ 1474.041798][T23737] dvb-usb: error while querying for an remote control event. [ 1474.195527][T23737] m920x_read = error: -19 [ 1474.209807][T23737] dvb-usb: error while querying for an remote control event. [ 1474.335053][T23737] m920x_read = error: -19 [ 1474.354145][T23737] dvb-usb: error while querying for an remote control event. [ 1474.485304][T23737] m920x_read = error: -19 [ 1474.507860][T23737] dvb-usb: error while querying for an remote control event. [ 1474.540201][T19109] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1474.553461][T19109] ath9k_htc: Failed to initialize the device [ 1474.623602][T19109] usb 4-1: ath9k_htc: USB layer deinitialized [ 1474.635430][T23737] m920x_read = error: -19 [ 1474.660742][T23737] dvb-usb: error while querying for an remote control event. [ 1474.786815][T23737] m920x_read = error: -19 [ 1474.810567][T23737] dvb-usb: error while querying for an remote control event. [ 1474.967370][T23737] m920x_read = error: -19 [ 1474.993320][T23737] dvb-usb: error while querying for an remote control event. [ 1475.145301][T23737] m920x_read = error: -19 [ 1475.163313][T23737] dvb-usb: error while querying for an remote control event. [ 1475.315427][ T5837] m920x_read = error: -19 [ 1475.319813][ T5837] dvb-usb: error while querying for an remote control event. [ 1475.382302][ T326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7424'. [ 1475.475192][ T5837] m920x_read = error: -19 [ 1475.480137][ T5837] dvb-usb: error while querying for an remote control event. [ 1475.585176][T24132] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1475.616152][ T5837] m920x_read = error: -19 [ 1475.634307][ T5837] dvb-usb: error while querying for an remote control event. [ 1475.768529][T24132] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1475.786496][ T5837] m920x_read = error: -19 [ 1475.790940][ T5837] dvb-usb: error while querying for an remote control event. [ 1475.830394][T24132] usb 2-1: config 1 has no interface number 0 [ 1475.846388][T24132] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1475.873094][T24132] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1475.883714][T24132] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1475.922417][T24132] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 1475.935297][ T5837] m920x_read = error: -19 [ 1475.951295][ T5837] dvb-usb: error while querying for an remote control event. [ 1475.981967][T24132] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.037696][T24132] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1476.056606][T24132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.079948][T24132] usb 2-1: Product: syz [ 1476.091991][T24132] usb 2-1: Manufacturer: syz [ 1476.105122][ T5837] m920x_read = error: -19 [ 1476.111811][T24132] usb 2-1: SerialNumber: syz [ 1476.112446][ T5837] dvb-usb: error while querying for an remote control event. [ 1476.155450][ T318] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1476.160498][ T343] ip6gre1: entered allmulticast mode [ 1476.186005][T24132] usb 2-1: Error in usbnet_get_endpoints (-22) [ 1476.256686][ T5837] m920x_read = error: -19 [ 1476.261415][ T5837] dvb-usb: error while querying for an remote control event. [ 1476.287637][T24132] usb 4-1: USB disconnect, device number 82 [ 1476.395284][ T797] m920x_read = error: -19 [ 1476.399660][ T797] dvb-usb: error while querying for an remote control event. [ 1476.515257][ T797] m920x_read = error: -19 [ 1476.530125][ T797] dvb-usb: error while querying for an remote control event. [ 1476.677450][ T797] m920x_read = error: -19 [ 1476.685073][T24132] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1476.704444][ T797] dvb-usb: error while querying for an remote control event. [ 1476.846180][T24132] usb 4-1: Using ep0 maxpacket: 32 [ 1476.856816][T24132] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 1476.860706][ T797] m920x_read = error: -19 [ 1476.865113][T24132] usb 4-1: config 0 has no interface number 0 [ 1476.876165][ T797] dvb-usb: error while querying for an remote control event. [ 1476.876757][T24132] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1476.920354][T24132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.939708][T24132] usb 4-1: config 0 descriptor?? [ 1476.952127][ T797] usb 2-1: USB disconnect, device number 38 [ 1476.994130][ T5837] m920x_read = error: -19 [ 1477.009680][ T5837] dvb-usb: error while querying for an remote control event. [ 1477.145917][ T5837] m920x_read = error: -19 [ 1477.152798][ T5837] dvb-usb: error while querying for an remote control event. [ 1477.155788][T24132] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1477.212511][T24132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1477.228019][T24132] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1477.237806][T24132] usb 4-1: media controller created [ 1477.256163][T24132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.275358][ T797] m920x_read = error: -19 [ 1477.288814][ T797] dvb-usb: error while querying for an remote control event. [ 1477.356324][T24132] az6027: usb out operation failed. (-71) [ 1477.372846][T24132] az6027: usb out operation failed. (-71) [ 1477.381606][T24132] stb0899_attach: Driver disabled by Kconfig [ 1477.388047][T24132] az6027: no front-end attached [ 1477.388047][T24132] [ 1477.396018][T24132] az6027: usb out operation failed. (-71) [ 1477.401873][T24132] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1477.414397][T24132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input118 [ 1477.435242][ T5837] m920x_read = error: -19 [ 1477.443143][T24132] dvb-usb: schedule remote query interval to 400 msecs. [ 1477.445871][ T5837] dvb-usb: error while querying for an remote control event. [ 1477.460636][T24132] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1477.498760][T24132] usb 4-1: USB disconnect, device number 83 [ 1477.561433][T24132] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1477.603891][ T5837] m920x_read = error: -19 [ 1477.613491][ T5837] dvb-usb: error while querying for an remote control event. [ 1477.735311][ T5837] m920x_read = error: -19 [ 1477.739777][ T5837] dvb-usb: error while querying for an remote control event. [ 1477.865882][ T5837] m920x_read = error: -19 [ 1477.876170][ T5837] dvb-usb: error while querying for an remote control event. [ 1477.995879][ T5837] m920x_read = error: -19 [ 1478.004294][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.115294][ T5837] m920x_read = error: -19 [ 1478.121025][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.166474][ T460] netlink: 'syz.3.7440': attribute type 1 has an invalid length. [ 1478.255065][ T5837] m920x_read = error: -19 [ 1478.274459][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.425101][ T5837] m920x_read = error: -19 [ 1478.453256][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.527019][ T504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.570848][ T504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.586887][ T5837] m920x_read = error: -19 [ 1478.600261][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.735079][ T5837] m920x_read = error: -19 [ 1478.739468][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.876756][ T5837] m920x_read = error: -19 [ 1478.881225][ T5837] dvb-usb: error while querying for an remote control event. [ 1478.891453][ T518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1478.993468][ T527] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 1479.005237][ T5837] m920x_read = error: -19 [ 1479.010032][ T5837] dvb-usb: error while querying for an remote control event. [ 1479.127962][ T5837] m920x_read = error: -19 [ 1479.132576][ T5837] dvb-usb: error while querying for an remote control event. [ 1479.245583][ T5837] m920x_read = error: -19 [ 1479.251316][ T5837] dvb-usb: error while querying for an remote control event. [ 1479.368699][ T5837] m920x_read = error: -19 [ 1479.373610][ T5837] dvb-usb: error while querying for an remote control event. [ 1479.400164][ T549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1025 (2050 ns) > initial count (14 ns). Using initial count to start timer. [ 1479.439626][ T554] fuse: Bad value for 'fd' [ 1479.505877][T23737] m920x_read = error: -19 [ 1479.511421][T23737] dvb-usb: error while querying for an remote control event. [ 1479.555340][T19109] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1479.635720][T23737] m920x_read = error: -19 [ 1479.645009][T23737] dvb-usb: error while querying for an remote control event. [ 1479.685048][T19109] usb 4-1: device descriptor read/64, error -71 [ 1479.695117][ T5837] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1479.755102][T23737] m920x_read = error: -19 [ 1479.759549][T23737] dvb-usb: error while querying for an remote control event. [ 1479.849139][ T5837] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1479.872328][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.886465][T23737] m920x_read = error: -19 [ 1479.890825][T23737] dvb-usb: error while querying for an remote control event. [ 1479.916737][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1479.932813][ T5837] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1479.935889][T19109] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1479.945425][ T5837] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1479.960488][ T5837] usb 2-1: Manufacturer: syz [ 1479.975734][ T5837] usb 2-1: config 0 descriptor?? [ 1480.035143][T23737] m920x_read = error: -19 [ 1480.043131][T23737] dvb-usb: error while querying for an remote control event. [ 1480.090329][T19109] usb 4-1: device descriptor read/64, error -71 [ 1480.177494][T23737] m920x_read = error: -19 [ 1480.191921][T23737] dvb-usb: error while querying for an remote control event. [ 1480.216046][T19109] usb usb4-port1: attempt power cycle [ 1480.321123][T23737] m920x_read = error: -19 [ 1480.337428][T23737] dvb-usb: error while querying for an remote control event. [ 1480.398326][ T5837] appleir 0003:05AC:8243.004E: unknown main item tag 0x0 [ 1480.458476][ T5837] appleir 0003:05AC:8243.004E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1480.472362][ T797] m920x_read = error: -19 [ 1480.481135][ T797] dvb-usb: error while querying for an remote control event. [ 1480.585176][T19109] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1480.605141][ T5837] m920x_read = error: -19 [ 1480.609525][ T5837] dvb-usb: error while querying for an remote control event. [ 1480.669535][T19109] usb 4-1: device descriptor read/8, error -71 [ 1480.745572][ T5837] m920x_read = error: -19 [ 1480.758353][ T5837] dvb-usb: error while querying for an remote control event. [ 1480.834644][ T5837] usb 2-1: USB disconnect, device number 39 [ 1480.900592][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1480.909010][ T797] m920x_read = error: -19 [ 1480.913381][ T797] dvb-usb: error while querying for an remote control event. [ 1480.925271][T19109] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1480.926338][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1480.948819][T19109] usb 4-1: device descriptor read/8, error -71 [ 1480.955644][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1480.968067][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1480.976104][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1481.069267][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1481.085495][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1481.093948][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1481.103739][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1481.116346][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1481.116950][ T5837] m920x_read = error: -19 [ 1481.123620][T19109] usb usb4-port1: unable to enumerate USB device [ 1481.220948][ T5837] dvb-usb: error while querying for an remote control event. [ 1481.375963][ T5837] m920x_read = error: -19 [ 1481.388650][ T5837] dvb-usb: error while querying for an remote control event. [ 1481.554011][T23737] m920x_read = error: -19 [ 1481.581896][T23737] dvb-usb: error while querying for an remote control event. [ 1481.734057][T23737] m920x_read = error: -19 [ 1481.745104][ T720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7462'. [ 1481.754386][T23737] dvb-usb: error while querying for an remote control event. [ 1481.779933][ T720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7462'. [ 1481.885539][T23737] m920x_read = error: -19 [ 1481.889933][T23737] dvb-usb: error while querying for an remote control event. [ 1482.055606][T23737] m920x_read = error: -19 [ 1482.065077][T23737] dvb-usb: error while querying for an remote control event. [ 1482.081190][ T668] chnl_net:caif_netlink_parms(): no params data found [ 1482.182441][T23737] m920x_read = error: -19 [ 1482.192561][T23737] dvb-usb: error while querying for an remote control event. [ 1482.294440][T30599] bridge0: port 3(team0) entered disabled state [ 1482.329498][ T797] m920x_read = error: -19 [ 1482.333879][ T797] dvb-usb: error while querying for an remote control event. [ 1482.362973][T30599] bridge_slave_1: left allmulticast mode [ 1482.388446][T30599] bridge_slave_1: left promiscuous mode [ 1482.394200][T30599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.442655][T30599] bridge_slave_0: left allmulticast mode [ 1482.458505][T30599] bridge_slave_0: left promiscuous mode [ 1482.464244][T30599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.497541][ T5837] m920x_read = error: -19 [ 1482.501916][ T5837] dvb-usb: error while querying for an remote control event. [ 1482.583502][ T796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.620479][ T796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.635206][ T5837] m920x_read = error: -19 [ 1482.637383][ T796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.652169][ T796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.664998][ T5837] dvb-usb: error while querying for an remote control event. [ 1482.669236][ T796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.686036][T19109] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1482.713154][ T796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.777682][ T5837] m920x_read = error: -19 [ 1482.782077][ T5837] dvb-usb: error while querying for an remote control event. [ 1482.855114][T19109] usb 4-1: Using ep0 maxpacket: 16 [ 1482.864258][T19109] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1482.893985][T19109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.905146][ T5837] m920x_read = error: -19 [ 1482.918724][T19109] usb 4-1: Product: syz [ 1482.919821][ T5837] dvb-usb: error while querying for an remote control event. [ 1482.923424][T19109] usb 4-1: Manufacturer: syz [ 1482.937730][T19109] usb 4-1: SerialNumber: syz [ 1482.987596][T19109] usb 4-1: config 0 descriptor?? [ 1483.018625][T30599] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1483.125124][ T5837] m920x_read = error: -19 [ 1483.135204][ T5837] dvb-usb: error while querying for an remote control event. [ 1483.136999][ T815] misc userio: No port type given on /dev/userio [ 1483.241162][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.251642][ T5837] m920x_read = error: -19 [ 1483.256236][ T5834] Bluetooth: hci5: command tx timeout [ 1483.264784][ T5837] dvb-usb: error while querying for an remote control event. [ 1483.274252][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.289940][T19109] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1483.298822][T30599] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 1483.318595][T19109] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1483.338198][T30599] bridge2 (unregistering): left promiscuous mode [ 1483.356315][T19109] usb 4-1: USB disconnect, device number 88 [ 1483.390495][T30599] bond1 (unregistering): Released all slaves [ 1483.396354][ T797] m920x_read = error: -19 [ 1483.400866][ T797] dvb-usb: error while querying for an remote control event. [ 1483.407249][T30599] bond2 (unregistering): Released all slaves [ 1483.425869][T30599] bond0 (unregistering): Released all slaves [ 1483.447896][T30599] bond3 (unregistering): Released all slaves [ 1483.460832][T30599] bond4 (unregistering): Released all slaves [ 1483.524165][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.525927][T23737] m920x_read = error: -19 [ 1483.553044][ T831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.559116][T23737] dvb-usb: error while querying for an remote control event. [ 1483.563921][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.603599][ T831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.616175][ T668] bridge_slave_0: entered allmulticast mode [ 1483.658100][ T668] bridge_slave_0: entered promiscuous mode [ 1483.675077][T30599] tipc: Left network mode [ 1483.680505][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.700688][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.702927][T23737] m920x_read = error: -19 [ 1483.731494][ T668] bridge_slave_1: entered allmulticast mode [ 1483.743439][T23737] dvb-usb: error while querying for an remote control event. [ 1483.785772][T30599] IPVS: stopping backup sync thread 25721 ... [ 1483.792019][ T668] bridge_slave_1: entered promiscuous mode [ 1483.875212][T23737] m920x_read = error: -19 [ 1483.902630][T23737] dvb-usb: error while querying for an remote control event. [ 1484.026196][T23737] m920x_read = error: -19 [ 1484.030586][T23737] dvb-usb: error while querying for an remote control event. [ 1484.070118][ T668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.126398][ T668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.207865][ T886] syzkaller1: entered promiscuous mode [ 1484.215147][T23737] m920x_read = error: -19 [ 1484.219541][T23737] dvb-usb: error while querying for an remote control event. [ 1484.235841][ T886] syzkaller1: entered allmulticast mode [ 1484.367555][T23737] m920x_read = error: -19 [ 1484.371972][T23737] dvb-usb: error while querying for an remote control event. [ 1484.408485][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.425319][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.434224][ T668] team0: Port device team_slave_0 added [ 1484.483754][ T931] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7475'. [ 1484.510840][ T668] team0: Port device team_slave_1 added [ 1484.547618][T23737] m920x_read = error: -19 [ 1484.562232][T23737] dvb-usb: error while querying for an remote control event. [ 1484.694141][ T668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.695343][ T5837] m920x_read = error: -19 [ 1484.711871][ T668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.795012][ T668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.808885][ T5837] dvb-usb: error while querying for an remote control event. [ 1484.819944][ T668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.855251][ T668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.885077][ T668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.896654][T19109] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1484.955505][ T5837] m920x_read = error: -19 [ 1484.959881][ T5837] dvb-usb: error while querying for an remote control event. [ 1485.047094][ T668] hsr_slave_0: entered promiscuous mode [ 1485.064703][ T668] hsr_slave_1: entered promiscuous mode [ 1485.071882][T19109] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1485.105622][T19109] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1485.115553][ T668] debugfs: 'hsr0' already exists in 'hsr' [ 1485.121290][ T668] Cannot create hsr debugfs directory [ 1485.142662][T19109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.202825][T19109] usb 2-1: config 0 descriptor?? [ 1485.250889][ T5837] m920x_read = error: -19 [ 1485.289620][ T5837] dvb-usb: error while querying for an remote control event. [ 1485.344188][ T5834] Bluetooth: hci5: command tx timeout [ 1485.344205][ T1016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7479'. [ 1485.415348][ T5837] m920x_read = error: -19 [ 1485.435347][ T5837] dvb-usb: error while querying for an remote control event. [ 1485.479232][ T969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.503521][ T969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.575129][ T5837] m920x_read = error: -19 [ 1485.579520][ T5837] dvb-usb: error while querying for an remote control event. [ 1485.700035][ T5837] m920x_read = error: -19 [ 1485.724402][ T5837] dvb-usb: error while querying for an remote control event. [ 1485.747417][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1485.783099][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1485.821894][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1485.873310][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1485.885932][ T5837] m920x_read = error: -19 [ 1485.906803][ T5837] dvb-usb: error while querying for an remote control event. [ 1485.937846][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1485.987678][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1486.027887][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1486.070158][ T5837] m920x_read = error: -19 [ 1486.089799][ T5837] dvb-usb: error while querying for an remote control event. [ 1486.108163][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1486.156398][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1486.226580][T19109] hid_mf 0003:0079:1846.004F: unknown main item tag 0x0 [ 1486.245363][ T5837] m920x_read = error: -19 [ 1486.253899][ T5837] dvb-usb: error while querying for an remote control event. [ 1486.382977][T19109] hid_mf 0003:0079:1846.004F: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 1486.385383][ T5837] m920x_read = error: -19 [ 1486.431880][T19109] hid_mf 0003:0079:1846.004F: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1486.517986][T19109] usb 2-1: USB disconnect, device number 40 [ 1486.606358][ T5837] dvb-usb: error while querying for an remote control event. [ 1486.775619][T23737] m920x_read = error: -19 [ 1486.782607][ T1138] fido_id[1138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1486.797050][T23737] dvb-usb: error while querying for an remote control event. [ 1486.905359][T23737] m920x_read = error: -19 [ 1486.913898][T23737] dvb-usb: error while querying for an remote control event. [ 1486.952942][ T1164] team_slave_0: entered promiscuous mode [ 1486.958649][ T1164] team_slave_1: entered promiscuous mode [ 1486.972001][ T1164] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1486.982733][ T1164] team0: Device macvtap1 is already an upper device of the team interface [ 1486.993357][ T1164] team_slave_0: left promiscuous mode [ 1486.998801][ T1164] team_slave_1: left promiscuous mode [ 1487.055175][T23737] m920x_read = error: -19 [ 1487.059555][T23737] dvb-usb: error while querying for an remote control event. [ 1487.180910][T23737] m920x_read = error: -19 [ 1487.199939][T23737] dvb-usb: error while querying for an remote control event. [ 1487.319559][T23737] m920x_read = error: -19 [ 1487.323937][T23737] dvb-usb: error while querying for an remote control event. [ 1487.416047][ T5834] Bluetooth: hci5: command tx timeout [ 1487.465049][ T5837] m920x_read = error: -19 [ 1487.469446][ T5837] dvb-usb: error while querying for an remote control event. [ 1487.675256][ T5837] m920x_read = error: -19 [ 1487.680298][ T5837] dvb-usb: error while querying for an remote control event. [ 1487.689857][T23737] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1487.792527][T11544] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1487.798696][ T668] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1487.810916][ T1214] FAULT_INJECTION: forcing a failure. [ 1487.810916][ T1214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.836190][ T797] m920x_read = error: -19 [ 1487.840839][ T797] dvb-usb: error while querying for an remote control event. [ 1487.885970][ T1214] CPU: 0 UID: 0 PID: 1214 Comm: syz.6.7490 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.886000][ T1214] Tainted: [L]=SOFTLOCKUP [ 1487.886007][ T1214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1487.886025][ T1214] Call Trace: [ 1487.886033][ T1214] [ 1487.886039][ T1214] dump_stack_lvl+0xe8/0x150 [ 1487.886068][ T1214] should_fail_ex+0x412/0x560 [ 1487.886092][ T1214] strncpy_from_user+0x36/0x2b0 [ 1487.886114][ T1214] path_getxattrat+0x162/0x460 [ 1487.886134][ T1214] ? __pfx_path_getxattrat+0x10/0x10 [ 1487.886171][ T1214] ? __pfx_ksys_write+0x10/0x10 [ 1487.886193][ T1214] do_syscall_64+0x14d/0xf80 [ 1487.886211][ T1214] ? trace_irq_disable+0x3b/0x150 [ 1487.886223][ T1214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.886236][ T1214] ? clear_bhb_loop+0x40/0x90 [ 1487.886253][ T1214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.886268][ T1214] RIP: 0033:0x7fc1cdf9c819 [ 1487.886286][ T1214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.886300][ T1214] RSP: 002b:00007fc1cee78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 1487.886316][ T1214] RAX: ffffffffffffffda RBX: 00007fc1ce215fa0 RCX: 00007fc1cdf9c819 [ 1487.886327][ T1214] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 1487.886337][ T1214] RBP: 00007fc1cee78090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.886347][ T1214] R10: fffffffffffffd73 R11: 0000000000000246 R12: 0000000000000001 [ 1487.886357][ T1214] R13: 00007fc1ce216038 R14: 00007fc1ce215fa0 R15: 00007fc1ce33fa48 [ 1487.886383][ T1214] [ 1487.890068][T30599] hsr_slave_0: left promiscuous mode [ 1487.925489][T23737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.035040][T11544] usb 4-1: Using ep0 maxpacket: 8 [ 1488.043028][ T5837] m920x_read = error: -19 [ 1488.112793][T11544] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 1488.125948][ T5837] dvb-usb: error while querying for an remote control event. [ 1488.126302][T30599] hsr_slave_1: left promiscuous mode [ 1488.145180][T11544] usb 4-1: config 0 has no interface number 0 [ 1488.172811][T11544] usb 4-1: too many endpoints for config 0 interface 54 altsetting 32: 48, using maximum allowed: 30 [ 1488.180810][T23737] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1488.204800][T11544] usb 4-1: config 0 interface 54 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1488.235200][ T5837] m920x_read = error: -19 [ 1488.239604][ T5837] dvb-usb: error while querying for an remote control event. [ 1488.245163][T11544] usb 4-1: config 0 interface 54 has no altsetting 0 [ 1488.257135][T23737] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1488.289567][T23737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.308768][T11544] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1488.329088][T11544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.330047][T23737] usb 2-1: config 0 descriptor?? [ 1488.355067][T11544] usb 4-1: Product: syz [ 1488.364075][T11544] usb 4-1: Manufacturer: syz [ 1488.378015][ T5837] m920x_read = error: -19 [ 1488.378149][T11544] usb 4-1: SerialNumber: syz [ 1488.382384][ T5837] dvb-usb: error while querying for an remote control event. [ 1488.411820][T23737] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1488.430355][T11544] usb 4-1: config 0 descriptor?? [ 1488.462951][ T1253] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7495'. [ 1488.486052][T23737] m920x_read = error: -19 [ 1488.490555][T23737] dvb-usb: error while querying for an remote control event. [ 1488.605521][T23737] m920x_read = error: -19 [ 1488.615177][T23737] dvb-usb: error while querying for an remote control event. [ 1488.725880][T23737] m920x_read = error: -19 [ 1488.735632][T23737] dvb-usb: error while querying for an remote control event. [ 1488.865093][T23737] m920x_read = error: -19 [ 1488.871113][T23737] dvb-usb: error while querying for an remote control event. [ 1488.879892][ T1196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.897822][ T1196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.902158][T30599] team_slave_1 (unregistering): left promiscuous mode [ 1488.915511][T30599] team_slave_1 (unregistering): left allmulticast mode [ 1488.924186][T30599] team0 (unregistering): Port device team_slave_1 removed [ 1488.949356][T11544] gspca_main: se401-2.14.0 probing 047d:5003 [ 1488.989592][T30599] team_slave_0 (unregistering): left promiscuous mode [ 1489.001098][T30599] team_slave_0 (unregistering): left allmulticast mode [ 1489.005425][T23737] m920x_read = error: -19 [ 1489.015617][T23737] dvb-usb: error while querying for an remote control event. [ 1489.027999][T30599] team0 (unregistering): Port device team_slave_0 removed [ 1489.119125][T24132] usb 2-1: USB disconnect, device number 41 [ 1489.138288][T23737] m920x_read = error: -19 [ 1489.142684][T23737] dvb-usb: error while querying for an remote control event. [ 1489.247888][ T668] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1489.265499][T23737] m920x_read = error: -19 [ 1489.272879][ T668] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1489.280781][T23737] dvb-usb: error while querying for an remote control event. [ 1489.333616][ T668] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1489.401451][T23737] m920x_read = error: -19 [ 1489.415372][T23737] dvb-usb: error while querying for an remote control event. [ 1489.506634][ T5834] Bluetooth: hci5: command tx timeout [ 1489.594811][ T5837] m920x_read = error: -19 [ 1489.605531][ T5837] dvb-usb: error while querying for an remote control event. [ 1489.726048][ T5837] m920x_read = error: -19 [ 1489.730735][ T1310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7499'. [ 1489.746852][ T5837] dvb-usb: error while querying for an remote control event. [ 1489.754539][T11544] gspca_se401: read req failed req 0x06 error -19 [ 1489.821397][ T1309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7497'. [ 1489.841933][T11544] usb 4-1: USB disconnect, device number 89 [ 1489.885305][ T5837] m920x_read = error: -19 [ 1489.889662][ T5837] dvb-usb: error while querying for an remote control event. [ 1489.947247][ T668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.993017][ T668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.032156][T30591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.039536][T30591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.048077][T20321] m920x_read = error: -19 [ 1490.056064][T20321] dvb-usb: error while querying for an remote control event. [ 1490.069928][T30592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.077071][T30592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.147094][ T1317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7500'. [ 1490.165947][ T5837] m920x_read = error: -19 [ 1490.170977][ T5837] dvb-usb: error while querying for an remote control event. [ 1490.185424][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7502'. [ 1490.308736][ T668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.335101][ T5837] m920x_read = error: -19 [ 1490.361916][ T5837] dvb-usb: error while querying for an remote control event. [ 1490.463258][T30599] IPVS: stop unused estimator thread 0... [ 1490.525100][ T5837] m920x_read = error: -19 [ 1490.539762][ T5837] dvb-usb: error while querying for an remote control event. [ 1490.613546][ T1334] netlink: 'syz.3.7503': attribute type 25 has an invalid length. [ 1490.695504][ T5837] m920x_read = error: -19 [ 1490.710222][ T5837] dvb-usb: error while querying for an remote control event. [ 1490.722238][ T668] veth0_vlan: entered promiscuous mode [ 1490.772291][ T668] veth1_vlan: entered promiscuous mode [ 1490.825345][ T5894] m920x_read = error: -19 [ 1490.829703][ T5894] dvb-usb: error while querying for an remote control event. [ 1491.045152][ T5894] m920x_read = error: -19 [ 1491.080341][ T5894] dvb-usb: error while querying for an remote control event. [ 1491.111432][ T668] veth0_macvtap: entered promiscuous mode [ 1491.134437][ T668] veth1_macvtap: entered promiscuous mode [ 1491.186999][ T668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.214392][ T668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.221939][T20321] m920x_read = error: -19 [ 1491.226382][T20321] dvb-usb: error while querying for an remote control event. [ 1491.247466][T30599] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.258682][T30599] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.295660][T30599] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.324824][T30599] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.349889][T20321] m920x_read = error: -19 [ 1491.354424][T20321] dvb-usb: error while querying for an remote control event. [ 1491.425551][ T1351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7506'. [ 1491.469170][T20321] m920x_read = error: -19 [ 1491.479743][T20321] dvb-usb: error while querying for an remote control event. [ 1491.595513][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.607586][T20321] m920x_read = error: -19 [ 1491.626253][T20321] dvb-usb: error while querying for an remote control event. [ 1491.638103][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.698822][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.707642][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.765254][T20321] m920x_read = error: -19 [ 1491.769631][T20321] dvb-usb: error while querying for an remote control event. [ 1491.895664][T20321] m920x_read = error: -19 [ 1491.904056][T20321] dvb-usb: error while querying for an remote control event. [ 1492.035103][T20321] m920x_read = error: -19 [ 1492.040994][T20321] dvb-usb: error while querying for an remote control event. [ 1492.166577][T20321] m920x_read = error: -19 [ 1492.172615][T20321] dvb-usb: error while querying for an remote control event. [ 1492.315033][T20321] m920x_read = error: -19 [ 1492.319414][T20321] dvb-usb: error while querying for an remote control event. [ 1492.456375][T20321] m920x_read = error: -19 [ 1492.472760][T20321] dvb-usb: error while querying for an remote control event. [ 1492.625502][T20321] m920x_read = error: -19 [ 1492.640710][T20321] dvb-usb: error while querying for an remote control event. [ 1492.764895][ T1401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7512'. [ 1492.805191][T20321] m920x_read = error: -19 [ 1492.809545][T20321] dvb-usb: error while querying for an remote control event. [ 1492.886020][ T1403] loop9: detected capacity change from 0 to 524287936 [ 1492.936575][T20321] m920x_read = error: -19 [ 1492.964439][T20321] dvb-usb: error while querying for an remote control event. [ 1493.115179][T20321] m920x_read = error: -19 [ 1493.120958][T20321] dvb-usb: error while querying for an remote control event. [ 1493.137672][T11544] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1493.265099][T20321] m920x_read = error: -19 [ 1493.273327][T20321] dvb-usb: error while querying for an remote control event. [ 1493.340819][T11544] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.368683][T11544] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1493.407351][T20321] m920x_read = error: -19 [ 1493.420930][T20321] dvb-usb: error while querying for an remote control event. [ 1493.445074][T11544] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1493.463614][T11544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.494176][ T1417] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7516'. [ 1493.506748][T11544] usb 2-1: config 0 descriptor?? [ 1493.537920][T11544] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1493.555054][T23737] m920x_read = error: -19 [ 1493.559425][T23737] dvb-usb: error while querying for an remote control event. [ 1493.675850][T20321] m920x_read = error: -19 [ 1493.680233][T20321] dvb-usb: error while querying for an remote control event. [ 1493.826590][T20321] m920x_read = error: -19 [ 1493.834675][T20321] dvb-usb: error while querying for an remote control event. [ 1493.955074][T20321] m920x_read = error: -19 [ 1493.961296][T20321] dvb-usb: error while querying for an remote control event. [ 1494.075307][ T5837] m920x_read = error: -19 [ 1494.079697][ T5837] dvb-usb: error while querying for an remote control event. [ 1494.205297][ T5837] m920x_read = error: -19 [ 1494.210624][ T5837] dvb-usb: error while querying for an remote control event. [ 1494.239833][T11544] usb 2-1: USB disconnect, device number 42 [ 1494.325826][ T5837] m920x_read = error: -19 [ 1494.330688][ T5837] dvb-usb: error while querying for an remote control event. [ 1494.395024][T24132] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1494.445059][ T5837] m920x_read = error: -19 [ 1494.449524][ T5837] dvb-usb: error while querying for an remote control event. [ 1494.514616][ T1457] netlink: 51 bytes leftover after parsing attributes in process `syz.4.7522'. [ 1494.549352][T24132] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.567066][T20321] m920x_read = error: -19 [ 1494.571694][T20321] dvb-usb: error while querying for an remote control event. [ 1494.574139][T24132] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1494.593744][T24132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.602965][T24132] usb 4-1: Product: syz [ 1494.607625][T24132] usb 4-1: Manufacturer: syz [ 1494.612241][T24132] usb 4-1: SerialNumber: syz [ 1494.695627][ T5837] m920x_read = error: -19 [ 1494.700132][ T5837] dvb-usb: error while querying for an remote control event. [ 1494.712992][ T1494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1494.825187][T23737] m920x_read = error: -19 [ 1494.829563][T23737] dvb-usb: error while querying for an remote control event. [ 1494.862614][T24132] usb 4-1: selecting invalid altsetting 1 [ 1495.007333][T20321] m920x_read = error: -19 [ 1495.025391][T20321] dvb-usb: error while querying for an remote control event. [ 1495.065833][ T1442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7520'. [ 1495.091659][T24132] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1495.091778][T24132] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1495.158938][T20321] m920x_read = error: -19 [ 1495.164041][T20321] dvb-usb: error while querying for an remote control event. [ 1495.285051][T23737] m920x_read = error: -19 [ 1495.294884][T23737] dvb-usb: error while querying for an remote control event. [ 1495.331416][ T1528] Cannot find add_set index 0 as target [ 1495.331588][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.350241][ T1528] netdevsim netdevsim1: Direct firmware load for / [ 1495.350241][ T1528] failed with error -2 [ 1495.365500][ T1528] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 1495.365500][ T1528] [ 1495.416258][T23737] m920x_read = error: -19 [ 1495.420603][T23737] dvb-usb: error while querying for an remote control event. [ 1495.435393][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.555025][T23737] m920x_read = error: -19 [ 1495.560580][T23737] dvb-usb: error while querying for an remote control event. [ 1495.639761][ T1544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7520'. [ 1495.685372][T23737] m920x_read = error: -19 [ 1495.698270][T23737] dvb-usb: error while querying for an remote control event. [ 1495.815977][T20321] m920x_read = error: -19 [ 1495.822019][T20321] dvb-usb: error while querying for an remote control event. [ 1495.936263][T20321] m920x_read = error: -19 [ 1495.950012][T20321] dvb-usb: error while querying for an remote control event. [ 1496.105116][T20321] m920x_read = error: -19 [ 1496.116389][T20321] dvb-usb: error while querying for an remote control event. [ 1496.235040][T20321] m920x_read = error: -19 [ 1496.252925][T20321] dvb-usb: error while querying for an remote control event. [ 1496.377910][T20321] m920x_read = error: -19 [ 1496.384519][T20321] dvb-usb: error while querying for an remote control event. [ 1496.525074][T20321] m920x_read = error: -19 [ 1496.529518][T20321] dvb-usb: error while querying for an remote control event. [ 1496.645112][T23737] m920x_read = error: -19 [ 1496.649570][T23737] dvb-usb: error while querying for an remote control event. [ 1496.765781][T23737] m920x_read = error: -19 [ 1496.770364][T23737] dvb-usb: error while querying for an remote control event. [ 1496.885212][T23737] m920x_read = error: -19 [ 1496.890798][T23737] dvb-usb: error while querying for an remote control event. [ 1496.924232][ T1578] loop5: detected capacity change from 0 to 7 [ 1496.934342][ T9100] Dev loop5: unable to read RDB block 7 [ 1496.940282][ T9100] loop5: AHDI p1 [ 1496.944145][ T9100] loop5: partition table partially beyond EOD, truncated [ 1496.953424][ T1578] Dev loop5: unable to read RDB block 7 [ 1496.961153][ T1578] loop5: AHDI p1 [ 1496.964876][ T1578] loop5: partition table partially beyond EOD, truncated [ 1496.976061][ T1578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.991829][ T1578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.005119][T23737] m920x_read = error: -19 [ 1497.010709][T23737] dvb-usb: error while querying for an remote control event. [ 1497.135362][T23737] m920x_read = error: -19 [ 1497.139951][T23737] dvb-usb: error while querying for an remote control event. [ 1497.153707][T24132] usb 4-1: USB disconnect, device number 90 [ 1497.256548][T23737] m920x_read = error: -19 [ 1497.264249][T23737] dvb-usb: error while querying for an remote control event. [ 1497.395508][T23737] m920x_read = error: -19 [ 1497.410398][T23737] dvb-usb: error while querying for an remote control event. [ 1497.535104][T23737] m920x_read = error: -19 [ 1497.539507][T23737] dvb-usb: error while querying for an remote control event. [ 1497.656483][T23737] m920x_read = error: -19 [ 1497.660864][T23737] dvb-usb: error while querying for an remote control event. [ 1497.765012][ T1615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.783996][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1497.784013][ T29] audit: type=1800 audit(1775827603.474:14864): pid=1612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7542" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1497.812484][T23737] m920x_read = error: -19 [ 1497.815853][ T1615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.819268][T23737] dvb-usb: error while querying for an remote control event. [ 1497.946390][T23737] m920x_read = error: -19 [ 1497.951594][T23737] dvb-usb: error while querying for an remote control event. [ 1498.125404][T23737] m920x_read = error: -19 [ 1498.129835][T23737] dvb-usb: error while querying for an remote control event. [ 1498.256404][T23737] m920x_read = error: -19 [ 1498.272676][T23737] dvb-usb: error while querying for an remote control event. [ 1498.405312][T23737] m920x_read = error: -19 [ 1498.432524][T23737] dvb-usb: error while querying for an remote control event. [ 1498.517959][ T1626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.539590][ T1626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.575111][T23737] m920x_read = error: -19 [ 1498.580617][T23737] dvb-usb: error while querying for an remote control event. [ 1498.706678][ T5837] m920x_read = error: -19 [ 1498.711048][ T5837] dvb-usb: error while querying for an remote control event. [ 1498.825319][ T5837] m920x_read = error: -19 [ 1498.830670][ T5837] dvb-usb: error while querying for an remote control event. [ 1498.861193][ T1645] Attempt to restore checkpoint with obsolete wellknown handles [ 1498.941416][ T1651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7556'. [ 1498.952038][ T1649] xt_policy: output policy not valid in PREROUTING and INPUT [ 1498.965180][ T5837] m920x_read = error: -19 [ 1498.985098][ T5837] dvb-usb: error while querying for an remote control event. [ 1498.993497][ T1651] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1499.010658][ T1649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1499.095196][ T5837] m920x_read = error: -19 [ 1499.216665][T11544] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1499.300428][ T5837] dvb-usb: error while querying for an remote control event. [ 1499.419112][T11544] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1499.457446][T11544] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1499.501009][T11544] usb 2-1: config 0 has no interfaces? [ 1499.515098][ T5837] m920x_read = error: -19 [ 1499.524661][T11544] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1499.534465][ T5837] dvb-usb: error while querying for an remote control event. [ 1499.572205][T11544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.632837][T11544] usb 2-1: config 0 descriptor?? [ 1499.665469][ T5837] m920x_read = error: -19 [ 1499.683298][ T5837] dvb-usb: error while querying for an remote control event. [ 1499.735186][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1499.826817][ T5837] m920x_read = error: -19 [ 1499.854199][ T5837] dvb-usb: error while querying for an remote control event. [ 1499.865702][ T5837] usb 2-1: USB disconnect, device number 43 [ 1499.971152][T23737] m920x_read = error: -19 [ 1499.990887][ T1686] netlink: 'syz.4.7562': attribute type 8 has an invalid length. [ 1500.002167][T23737] dvb-usb: error while querying for an remote control event. [ 1500.021789][ T1686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1500.046353][ T1686] bond0: entered promiscuous mode [ 1500.051779][ T1686] bond_slave_0: entered promiscuous mode [ 1500.078472][ T1678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7561'. [ 1500.089645][ T1686] bond_slave_1: entered promiscuous mode [ 1500.100113][ T1686] gretap0: entered promiscuous mode [ 1500.147005][ T5837] m920x_read = error: -19 [ 1500.156823][ T1686] bond0: left promiscuous mode [ 1500.171406][ T5837] dvb-usb: error while querying for an remote control event. [ 1500.182276][ T1686] bond_slave_0: left promiscuous mode [ 1500.197763][ T1686] bond_slave_1: left promiscuous mode [ 1500.211790][ T1694] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1500.225063][ T1686] gretap0: left promiscuous mode [ 1500.306130][ T5837] m920x_read = error: -19 [ 1500.318073][ T5837] dvb-usb: error while querying for an remote control event. [ 1500.475109][ T5837] m920x_read = error: -19 [ 1500.484997][ T5837] dvb-usb: error while querying for an remote control event. [ 1500.595064][ T5837] m920x_read = error: -19 [ 1500.606991][ T5837] dvb-usb: error while querying for an remote control event. [ 1500.755066][ T5837] m920x_read = error: -19 [ 1500.759429][ T5837] dvb-usb: error while querying for an remote control event. [ 1500.955258][T20321] m920x_read = error: -19 [ 1500.977249][T20321] dvb-usb: error while querying for an remote control event. [ 1501.115455][T20321] m920x_read = error: -19 [ 1501.127694][T20321] dvb-usb: error while querying for an remote control event. [ 1501.285164][T20321] m920x_read = error: -19 [ 1501.305081][T20321] dvb-usb: error while querying for an remote control event. [ 1501.309962][ T1722] loop6: detected capacity change from 0 to 2640 [ 1501.350299][ T9100] buffer_io_error: 25 callbacks suppressed [ 1501.350318][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.377995][ T1726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.397388][ T1726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.410201][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.430162][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.445311][ T5837] m920x_read = error: -19 [ 1501.445716][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.457806][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.465700][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.473918][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.484613][ T5837] dvb-usb: error while querying for an remote control event. [ 1501.500302][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.535208][ T9100] ldm_validate_partition_table(): Disk read failed. [ 1501.562556][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.586482][ T9100] Buffer I/O error on dev loop6, logical block 0, async page read [ 1501.614352][ T9100] Dev loop6: unable to read RDB block 0 [ 1501.625071][ T5837] m920x_read = error: -19 [ 1501.629471][ T5837] dvb-usb: error while querying for an remote control event. [ 1501.641388][ T9100] loop6: unable to read partition table [ 1501.681345][ T1722] ldm_validate_partition_table(): Disk read failed. [ 1501.708668][ T1722] Dev loop6: unable to read RDB block 0 [ 1501.738908][T30582] wlan0: Trigger new scan to find an IBSS to join [ 1501.744862][ T1722] loop6: unable to read partition table [ 1501.747928][ T5837] m920x_read = error: -19 [ 1501.775044][ T1722] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1501.779330][ T5837] dvb-usb: error while querying for an remote control event. [ 1501.898725][ T5196] ldm_validate_partition_table(): Disk read failed. [ 1501.916043][ T5837] m920x_read = error: -19 [ 1501.917234][ T5196] Dev loop6: unable to read RDB block 0 [ 1501.929038][ T5837] dvb-usb: error while querying for an remote control event. [ 1501.946071][ T5196] loop6: unable to read partition table [ 1502.075857][ T5837] m920x_read = error: -19 [ 1502.095915][ T5837] dvb-usb: error while querying for an remote control event. [ 1502.245066][ T5837] m920x_read = error: -19 [ 1502.249453][ T5837] dvb-usb: error while querying for an remote control event. [ 1502.416117][ T5837] m920x_read = error: -19 [ 1502.426822][ T5837] dvb-usb: error while querying for an remote control event. [ 1502.535544][T23737] m920x_read = error: -19 [ 1502.554999][T23737] dvb-usb: error while querying for an remote control event. [ 1502.715237][T23737] m920x_read = error: -19 [ 1502.729830][T23737] dvb-usb: error while querying for an remote control event. [ 1502.865083][ T5837] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1502.908230][T20321] m920x_read = error: -19 [ 1502.908278][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 1502.955345][T20321] dvb-usb: error while querying for an remote control event. [ 1503.054371][ T5837] usb 2-1: device descriptor read/64, error -32 [ 1503.095225][T23737] m920x_read = error: -19 [ 1503.109907][T23737] dvb-usb: error while querying for an remote control event. [ 1503.235031][T23737] m920x_read = error: -19 [ 1503.239427][T23737] dvb-usb: error while querying for an remote control event. [ 1503.325033][ T5837] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1503.396675][T20321] m920x_read = error: -19 [ 1503.401082][T20321] dvb-usb: error while querying for an remote control event. [ 1503.486077][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 1503.545231][T23737] m920x_read = error: -19 [ 1503.549731][T23737] dvb-usb: error while querying for an remote control event. [ 1503.566981][ T1762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.599907][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1503.606717][ T1762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.619630][ T1761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.640232][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1503.650918][ T1761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.669035][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1503.689352][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1503.705105][T23737] m920x_read = error: -19 [ 1503.709509][T23737] dvb-usb: error while querying for an remote control event. [ 1503.730003][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1503.759840][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.836467][ T5894] m920x_read = error: -19 [ 1503.840872][ T5894] dvb-usb: error while querying for an remote control event. [ 1503.985027][ T5894] m920x_read = error: -19 [ 1503.989411][ T5894] dvb-usb: error while querying for an remote control event. [ 1504.123411][ T5894] m920x_read = error: -19 [ 1504.138209][ T5837] usb 2-1: GET_CAPABILITIES returned 0 [ 1504.143768][ T5837] usbtmc 2-1:16.0: can't read capabilities [ 1504.165042][ T5894] dvb-usb: error while querying for an remote control event. [ 1504.291729][ T1781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.303637][ T1781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.316050][ T5837] m920x_read = error: -19 [ 1504.320420][ T5837] dvb-usb: error while querying for an remote control event. [ 1504.445066][ T5837] m920x_read = error: -19 [ 1504.449443][ T5837] dvb-usb: error while querying for an remote control event. [ 1504.568480][ T5837] m920x_read = error: -19 [ 1504.573143][ T5837] dvb-usb: error while querying for an remote control event. [ 1504.685211][ T5837] m920x_read = error: -19 [ 1504.689604][ T5837] dvb-usb: error while querying for an remote control event. [ 1504.698616][T30599] wlan0: Trigger new scan to find an IBSS to join [ 1504.815321][ T5837] m920x_read = error: -19 [ 1504.829424][ T5837] dvb-usb: error while querying for an remote control event. [ 1504.953501][ T5837] m920x_read = error: -19 [ 1504.958986][ T5837] dvb-usb: error while querying for an remote control event. [ 1505.075259][ T5837] m920x_read = error: -19 [ 1505.082499][ T5837] dvb-usb: error while querying for an remote control event. [ 1505.215341][ T5837] m920x_read = error: -19 [ 1505.240951][ T5837] dvb-usb: error while querying for an remote control event. [ 1505.337646][ T1814] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7588'. [ 1505.395279][T20321] m920x_read = error: -19 [ 1505.423923][T20321] dvb-usb: error while querying for an remote control event. [ 1505.472720][T11544] usb 2-1: USB disconnect, device number 45 [ 1505.567784][T20321] m920x_read = error: -19 [ 1505.572165][T20321] dvb-usb: error while querying for an remote control event. [ 1505.595681][ T5837] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1505.619938][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.728816][T20321] m920x_read = error: -19 [ 1505.755017][T20321] dvb-usb: error while querying for an remote control event. [ 1505.775033][ T5837] usb 4-1: device descriptor read/64, error -71 [ 1505.895431][T23737] m920x_read = error: -19 [ 1505.902402][T23737] dvb-usb: error while querying for an remote control event. [ 1506.055180][ T5837] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1506.078728][T23737] m920x_read = error: -19 [ 1506.083210][T23737] dvb-usb: error while querying for an remote control event. [ 1506.206039][T20321] m920x_read = error: -19 [ 1506.212705][T20321] dvb-usb: error while querying for an remote control event. [ 1506.220886][ T5837] usb 4-1: device descriptor read/64, error -71 [ 1506.355523][ T5837] usb usb4-port1: attempt power cycle [ 1506.362765][T20321] m920x_read = error: -19 [ 1506.367765][T20321] dvb-usb: error while querying for an remote control event. [ 1506.485768][T20321] m920x_read = error: -19 [ 1506.490549][T20321] dvb-usb: error while querying for an remote control event. [ 1506.532698][ T29] audit: type=1326 audit(1775827612.224:14865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.563246][ T1884] fuse: Bad value for 'fd' [ 1506.580767][ T29] audit: type=1326 audit(1775827612.224:14866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.612098][T20321] m920x_read = error: -19 [ 1506.612121][T20321] dvb-usb: error while querying for an remote control event. [ 1506.634249][ T29] audit: type=1326 audit(1775827612.254:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634280][ T29] audit: type=1326 audit(1775827612.254:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634303][ T29] audit: type=1326 audit(1775827612.254:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634324][ T29] audit: type=1326 audit(1775827612.254:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634346][ T29] audit: type=1326 audit(1775827612.254:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634367][ T29] audit: type=1326 audit(1775827612.254:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634388][ T29] audit: type=1326 audit(1775827612.254:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.634410][ T29] audit: type=1326 audit(1775827612.254:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1883 comm="syz.4.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e9d9c819 code=0x7ffc0000 [ 1506.703018][ T5837] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1506.739290][T20321] m920x_read = error: -19 [ 1506.739310][T20321] dvb-usb: error while querying for an remote control event. [ 1506.739709][ T5837] usb 4-1: device descriptor read/8, error -71 [ 1506.792845][ T1889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.793228][ T1889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.863588][T20321] m920x_read = error: -19 [ 1506.863607][T20321] dvb-usb: error while querying for an remote control event. [ 1506.966338][T20321] m920x_read = error: -19 [ 1506.966356][T20321] dvb-usb: error while querying for an remote control event. [ 1506.995603][ T5837] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1507.019830][ T5837] usb 4-1: device descriptor read/8, error -71 [ 1507.075446][T20321] m920x_read = error: -19 [ 1507.079913][T20321] dvb-usb: error while querying for an remote control event. [ 1507.135165][ T5837] usb usb4-port1: unable to enumerate USB device [ 1507.195242][T20321] m920x_read = error: -19 [ 1507.201726][T20321] dvb-usb: error while querying for an remote control event. [ 1507.315383][ T5837] m920x_read = error: -19 [ 1507.319780][ T5837] dvb-usb: error while querying for an remote control event. [ 1507.455451][ T5837] m920x_read = error: -19 [ 1507.459932][ T5837] dvb-usb: error while querying for an remote control event. [ 1507.576137][ T5837] m920x_read = error: -19 [ 1507.581125][ T5837] dvb-usb: error while querying for an remote control event. [ 1507.621087][ T1904] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1507.695733][T20321] m920x_read = error: -19 [ 1507.700209][T20321] dvb-usb: error while querying for an remote control event. [ 1507.815732][T20321] m920x_read = error: -19 [ 1507.821830][T20321] dvb-usb: error while querying for an remote control event. [ 1507.945064][ T5837] m920x_read = error: -19 [ 1507.950447][ T5837] dvb-usb: error while querying for an remote control event. [ 1508.067810][T20321] m920x_read = error: -19 [ 1508.077574][T20321] dvb-usb: error while querying for an remote control event. [ 1508.195309][T20321] m920x_read = error: -19 [ 1508.199731][T20321] dvb-usb: error while querying for an remote control event. [ 1508.318097][T20321] m920x_read = error: -19 [ 1508.325571][T20321] dvb-usb: error while querying for an remote control event. [ 1508.464290][ T1927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.473062][T23737] m920x_read = error: -19 [ 1508.476566][ T1927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.480804][T23737] dvb-usb: error while querying for an remote control event. [ 1508.605137][T23737] m920x_read = error: -19 [ 1508.695977][T20321] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1508.715795][T23737] dvb-usb: error while querying for an remote control event. [ 1508.846760][ T5837] m920x_read = error: -19 [ 1508.885245][T20321] usb 4-1: Using ep0 maxpacket: 32 [ 1508.894220][ T5837] dvb-usb: error while querying for an remote control event. [ 1508.914956][ T1966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7613'. [ 1508.940989][T20321] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1509.075131][T19109] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1509.269170][T19109] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1509.278930][T20321] usb 4-1: config 0 has no interface number 0 [ 1509.286291][ T5837] m920x_read = error: -19 [ 1509.290667][ T5837] dvb-usb: error while querying for an remote control event. [ 1509.292064][T19109] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1509.334816][T19109] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1509.361529][T20321] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1509.375057][T19109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.398789][T19109] usb 2-1: Product: syz [ 1509.408036][T19109] usb 2-1: Manufacturer: syz [ 1509.419378][T19109] usb 2-1: SerialNumber: syz [ 1509.446657][T19109] usb 2-1: config 0 descriptor?? [ 1509.473636][T19109] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1509.601256][T20321] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1509.611636][T20321] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1509.622517][T20321] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1509.634296][T20321] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1509.645171][T20321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.653430][T20321] usb 4-1: Product: syz [ 1509.659529][T20321] usb 4-1: Manufacturer: syz [ 1509.664200][T20321] usb 4-1: SerialNumber: syz [ 1509.677423][T20321] usb 4-1: config 0 descriptor?? [ 1509.689858][ T5837] m920x_read = error: -19 [ 1509.694371][ T5837] dvb-usb: error while querying for an remote control event. [ 1509.706420][ T1920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1509.825114][ T5826] m920x_read = error: -19 [ 1509.829552][ T5826] dvb-usb: error while querying for an remote control event. [ 1509.955258][ T5826] m920x_read = error: -19 [ 1509.960255][ T5826] dvb-usb: error while querying for an remote control event. [ 1509.985323][T19109] gspca_sunplus: reg_r err -110 [ 1509.990496][T19109] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1510.095131][ T5826] m920x_read = error: -19 [ 1510.111183][ T5826] dvb-usb: error while querying for an remote control event. [ 1510.256105][ T5826] m920x_read = error: -19 [ 1510.261777][ T5826] dvb-usb: error while querying for an remote control event. [ 1510.375817][ T5837] m920x_read = error: -19 [ 1510.380203][ T5837] dvb-usb: error while querying for an remote control event. [ 1510.495290][ T5837] m920x_read = error: -19 [ 1510.523261][ T5837] dvb-usb: error while querying for an remote control event. [ 1510.665765][ T5837] m920x_read = error: -19 [ 1510.678129][ T5837] dvb-usb: error while querying for an remote control event. [ 1510.686628][ T1996] binder: 1995:1996 unknown command 0 [ 1510.695272][ T1996] binder: 1995:1996 ioctl c0306201 2000000003c0 returned -22 [ 1510.726205][ T1997] netlink: 140 bytes leftover after parsing attributes in process `syz.7.7618'. [ 1510.805281][ T5837] m920x_read = error: -19 [ 1510.812301][ T5837] dvb-usb: error while querying for an remote control event. [ 1510.925416][ T5837] m920x_read = error: -19 [ 1510.942987][ T5837] dvb-usb: error while querying for an remote control event. [ 1511.075094][ T5837] m920x_read = error: -19 [ 1511.083019][ T5837] dvb-usb: error while querying for an remote control event. [ 1511.206039][ T5837] m920x_read = error: -19 [ 1511.220731][ T5837] dvb-usb: error while querying for an remote control event. [ 1511.330509][T20321] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1511.363294][ T5837] m920x_read = error: -19 [ 1511.372288][T20321] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 1511.384085][ T5837] dvb-usb: error while querying for an remote control event. [ 1511.440617][T20321] usb 4-1: USB disconnect, device number 95 [ 1511.515075][ T5837] m920x_read = error: -19 [ 1511.543520][ T5837] dvb-usb: error while querying for an remote control event. [ 1511.637820][ T2012] Attempt to restore checkpoint with obsolete wellknown handles [ 1511.650996][ T5837] usb 2-1: USB disconnect, device number 46 [ 1511.665267][ T5894] m920x_read = error: -19 [ 1511.702687][ T5894] dvb-usb: error while querying for an remote control event. [ 1511.845197][ T5894] m920x_read = error: -19 [ 1511.849572][ T5894] dvb-usb: error while querying for an remote control event. [ 1511.861714][ T2026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7623'. [ 1512.025248][ T5894] m920x_read = error: -19 [ 1512.042395][ T5894] dvb-usb: error while querying for an remote control event. [ 1512.185387][ T5894] m920x_read = error: -19 [ 1512.190755][ T5894] dvb-usb: error while querying for an remote control event. [ 1512.319339][ T5894] m920x_read = error: -19 [ 1512.328416][ T5894] dvb-usb: error while querying for an remote control event. [ 1512.445107][ T5894] m920x_read = error: -19 [ 1512.453894][ T5894] dvb-usb: error while querying for an remote control event. [ 1512.597383][ T5894] m920x_read = error: -19 [ 1512.606364][ T5894] dvb-usb: error while querying for an remote control event. [ 1512.623844][ T2080] Attempt to restore checkpoint with obsolete wellknown handles [ 1512.703990][ T2085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1512.735329][ T5894] m920x_read = error: -19 [ 1512.739955][ T5894] dvb-usb: error while querying for an remote control event. [ 1512.789826][ T2100] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7635'. [ 1512.855115][ T5837] m920x_read = error: -19 [ 1512.862070][ T5837] dvb-usb: error while querying for an remote control event. [ 1513.005076][ T5894] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1513.021473][ T5837] m920x_read = error: -19 [ 1513.030542][ T5837] dvb-usb: error while querying for an remote control event. [ 1513.156295][ T5837] m920x_read = error: -19 [ 1513.160700][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1513.168762][ T5837] dvb-usb: error while querying for an remote control event. [ 1513.287044][ T5837] m920x_read = error: -19 [ 1513.297101][ T5837] dvb-usb: error while querying for an remote control event. [ 1513.415436][ T5894] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1513.438393][ T5837] m920x_read = error: -19 [ 1513.450668][ T5837] dvb-usb: error while querying for an remote control event. [ 1513.548105][ T2122] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7640'. [ 1513.577329][ T5826] m920x_read = error: -19 [ 1513.581696][ T5826] dvb-usb: error while querying for an remote control event. [ 1513.590257][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1513.598861][ T2124] binder: 2123:2124 ioctl 4018aebd 200000000080 returned -22 [ 1513.705260][ T5894] usb usb2-port1: attempt power cycle [ 1513.722368][ T5826] m920x_read = error: -19 [ 1513.731372][ T5826] dvb-usb: error while querying for an remote control event. [ 1513.861809][ T2143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.865357][T11544] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1513.870446][T20321] m920x_read = error: -19 [ 1513.870474][T20321] dvb-usb: error while querying for an remote control event. [ 1513.882999][ T2143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.985491][ T5826] m920x_read = error: -19 [ 1513.989884][ T5826] dvb-usb: error while querying for an remote control event. [ 1514.038150][T11544] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1514.047393][T11544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.055635][T11544] usb 4-1: Product: syz [ 1514.059910][T11544] usb 4-1: Manufacturer: syz [ 1514.064491][T11544] usb 4-1: SerialNumber: syz [ 1514.076609][T11544] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1514.077514][ T5894] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1514.106912][T19109] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1514.115078][ T5826] m920x_read = error: -19 [ 1514.120306][ T5826] dvb-usb: error while querying for an remote control event. [ 1514.141314][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1514.255134][ T5826] m920x_read = error: -19 [ 1514.259542][ T5826] dvb-usb: error while querying for an remote control event. [ 1514.375119][ T5837] m920x_read = error: -19 [ 1514.409169][T11544] usb 4-1: USB disconnect, device number 96 [ 1514.409532][ T5837] dvb-usb: error while querying for an remote control event. [ 1514.422739][ T5894] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1514.485675][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1514.556057][ T5837] m920x_read = error: -19 [ 1514.560450][ T5837] dvb-usb: error while querying for an remote control event. [ 1514.596376][ T5894] usb usb2-port1: unable to enumerate USB device [ 1514.685150][ T5894] m920x_read = error: -19 [ 1514.697447][ T5894] dvb-usb: error while querying for an remote control event. [ 1514.825808][ T5826] m920x_read = error: -19 [ 1514.830758][ T5826] dvb-usb: error while querying for an remote control event. [ 1514.945135][ T5826] m920x_read = error: -19 [ 1514.952233][ T5826] dvb-usb: error while querying for an remote control event. [ 1515.085050][ T5826] m920x_read = error: -19 [ 1515.090023][ T5826] dvb-usb: error while querying for an remote control event. [ 1515.177399][T19109] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1515.191467][T19109] ath9k_htc: Failed to initialize the device [ 1515.208150][T11544] usb 4-1: ath9k_htc: USB layer deinitialized [ 1515.215082][ T5826] m920x_read = error: -19 [ 1515.221727][ T5826] dvb-usb: error while querying for an remote control event. [ 1515.335512][ T5894] m920x_read = error: -19 [ 1515.339887][ T5894] dvb-usb: error while querying for an remote control event. [ 1515.455254][ T5894] m920x_read = error: -19 [ 1515.460294][ T5894] dvb-usb: error while querying for an remote control event. [ 1515.556235][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1515.556248][ T29] audit: type=1326 audit(1775827621.254:14934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2215 comm="syz.3.7655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b1059c819 code=0x0 [ 1515.598880][ T5894] m920x_read = error: -19 [ 1515.603242][ T5894] dvb-usb: error while querying for an remote control event. [ 1515.626016][ T2227] kvm: emulating exchange as write [ 1515.640037][ T2226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.672080][ T2226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.737711][ T5826] m920x_read = error: -19 [ 1515.742091][ T5826] dvb-usb: error while querying for an remote control event. [ 1515.885256][ T5894] m920x_read = error: -19 [ 1515.890727][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.015581][ T5894] m920x_read = error: -19 [ 1516.020253][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.135388][ T5894] m920x_read = error: -19 [ 1516.149874][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.164764][T19109] IPVS: starting estimator thread 0... [ 1516.188545][ T2254] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1516.255041][ T2280] IPVS: using max 37 ests per chain, 88800 per kthread [ 1516.275173][ T5894] m920x_read = error: -19 [ 1516.279553][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.342907][ T2282] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7660'. [ 1516.427489][ T5826] m920x_read = error: -19 [ 1516.442088][ T5826] dvb-usb: error while querying for an remote control event. [ 1516.565083][ T5894] m920x_read = error: -19 [ 1516.570698][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.695289][ T5894] m920x_read = error: -19 [ 1516.703204][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.825121][ T5894] m920x_read = error: -19 [ 1516.832879][ T5894] dvb-usb: error while querying for an remote control event. [ 1516.995378][ T5894] m920x_read = error: -19 [ 1517.000304][ T5894] dvb-usb: error while querying for an remote control event. [ 1517.126609][ T5837] m920x_read = error: -19 [ 1517.145889][ T5837] dvb-usb: error while querying for an remote control event. [ 1517.218740][ T29] audit: type=1800 audit(1775827622.884:14935): pid=2306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7663" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1517.285408][ T5837] m920x_read = error: -19 [ 1517.301318][ T5837] dvb-usb: error while querying for an remote control event. [ 1517.370090][ T3531] IPVS: stop unused estimator thread 0... [ 1517.425376][ T5837] m920x_read = error: -19 [ 1517.435268][ T5837] dvb-usb: error while querying for an remote control event. [ 1517.577664][ T5894] m920x_read = error: -19 [ 1517.582160][ T5894] dvb-usb: error while querying for an remote control event. [ 1517.715589][ T5837] m920x_read = error: -19 [ 1517.724665][ T5837] dvb-usb: error while querying for an remote control event. [ 1517.855065][ T5837] m920x_read = error: -19 [ 1517.867320][ T5837] dvb-usb: error while querying for an remote control event. [ 1518.005071][ T5837] m920x_read = error: -19 [ 1518.025177][ T5837] dvb-usb: error while querying for an remote control event. [ 1518.167390][ T5894] m920x_read = error: -19 [ 1518.193471][ T5894] dvb-usb: error while querying for an remote control event. [ 1518.316339][ T5894] m920x_read = error: -19 [ 1518.335898][ T5894] dvb-usb: error while querying for an remote control event. [ 1518.481020][ T5894] m920x_read = error: -19 [ 1518.495520][ T5894] dvb-usb: error while querying for an remote control event. [ 1518.625318][ T5894] m920x_read = error: -19 [ 1518.637813][ T5894] dvb-usb: error while querying for an remote control event. [ 1518.765081][ T5894] m920x_read = error: -19 [ 1518.775188][ T5894] dvb-usb: error while querying for an remote control event. [ 1518.775190][T19109] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1518.917320][ T5894] m920x_read = error: -19 [ 1518.926147][ T5894] dvb-usb: error while querying for an remote control event. [ 1518.938225][T19109] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 1518.963105][T19109] usb 4-1: config 0 has no interface number 0 [ 1518.970418][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1518.977405][T19109] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1518.987428][ T2359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1519.012248][T19109] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1519.012541][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1519.031872][T19109] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1519.035602][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1519.055758][ T5894] m920x_read = error: -19 [ 1519.060167][ T5894] dvb-usb: error while querying for an remote control event. [ 1519.067976][T19109] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1519.111891][T19109] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 1519.121359][T19109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.147369][T19109] usb 4-1: Product: syz [ 1519.156625][T19109] usb 4-1: Manufacturer: syz [ 1519.161256][T19109] usb 4-1: SerialNumber: syz [ 1519.183509][ T5894] m920x_read = error: -19 [ 1519.189816][ T5894] dvb-usb: error while querying for an remote control event. [ 1519.192660][T19109] usb 4-1: config 0 descriptor?? [ 1519.228121][T19109] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1519.247718][T19109] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input119 [ 1519.326012][ T5894] m920x_read = error: -19 [ 1519.330391][ T5894] dvb-usb: error while querying for an remote control event. [ 1519.409873][ T5826] usb 4-1: USB disconnect, device number 97 [ 1519.455076][ T5837] m920x_read = error: -19 [ 1519.459820][ T5837] dvb-usb: error while querying for an remote control event. [ 1519.576805][T20321] m920x_read = error: -19 [ 1519.581154][T20321] dvb-usb: error while querying for an remote control event. [ 1519.615081][ T5894] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1519.695170][ T5826] m920x_read = error: -19 [ 1519.699550][ T5826] dvb-usb: error while querying for an remote control event. [ 1519.735576][ T3531] wlan0: Trigger new scan to find an IBSS to join [ 1519.746250][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1519.815425][ T5826] m920x_read = error: -19 [ 1519.822111][ T5826] dvb-usb: error while querying for an remote control event. [ 1519.945169][ T5826] m920x_read = error: -19 [ 1519.949550][ T5826] dvb-usb: error while querying for an remote control event. [ 1519.985642][ T5894] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1520.065055][T20321] m920x_read = error: -19 [ 1520.065083][T20321] dvb-usb: error while querying for an remote control event. [ 1520.135055][ T5894] usb 2-1: device descriptor read/64, error -71 [ 1520.175804][T20321] m920x_read = error: -19 [ 1520.180186][T20321] dvb-usb: error while querying for an remote control event. [ 1520.245218][ T5894] usb usb2-port1: attempt power cycle [ 1520.296148][T20321] m920x_read = error: -19 [ 1520.300997][T20321] dvb-usb: error while querying for an remote control event. [ 1520.415646][T20321] m920x_read = error: -19 [ 1520.420020][T20321] dvb-usb: error while querying for an remote control event. [ 1520.536215][T20321] m920x_read = error: -19 [ 1520.540709][T20321] dvb-usb: error while querying for an remote control event. [ 1520.585285][ T5894] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1520.606847][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1520.655254][T20321] m920x_read = error: -19 [ 1520.659801][T20321] dvb-usb: error while querying for an remote control event. [ 1520.775704][T23737] m920x_read = error: -19 [ 1520.780553][T23737] dvb-usb: error while querying for an remote control event. [ 1520.845012][ T5894] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1520.865508][ T5894] usb 2-1: device descriptor read/8, error -71 [ 1520.895295][T23737] m920x_read = error: -19 [ 1520.899683][T23737] dvb-usb: error while querying for an remote control event. [ 1520.940685][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.952800][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.975411][ T5894] usb usb2-port1: unable to enumerate USB device [ 1521.015562][ T5894] m920x_read = error: -19 [ 1521.019968][ T5894] dvb-usb: error while querying for an remote control event. [ 1521.135112][ T5894] m920x_read = error: -19 [ 1521.139904][ T5894] dvb-usb: error while querying for an remote control event. [ 1521.256611][T23737] m920x_read = error: -19 [ 1521.263418][T23737] dvb-usb: error while querying for an remote control event. [ 1521.385238][T23737] m920x_read = error: -19 [ 1521.393604][T23737] dvb-usb: error while querying for an remote control event. [ 1521.535189][T23737] m920x_read = error: -19 [ 1521.560320][T23737] dvb-usb: error while querying for an remote control event. [ 1521.708919][T23737] m920x_read = error: -19 [ 1521.729598][T23737] dvb-usb: error while querying for an remote control event. [ 1521.875565][T23737] m920x_read = error: -19 [ 1521.895178][T23737] dvb-usb: error while querying for an remote control event. [ 1522.013568][ T2468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7688'. [ 1522.026618][ T5894] m920x_read = error: -19 [ 1522.049607][ T5894] dvb-usb: error while querying for an remote control event. [ 1522.185535][ T5894] m920x_read = error: -19 [ 1522.189975][ T5894] dvb-usb: error while querying for an remote control event. [ 1522.316086][ T5894] m920x_read = error: -19 [ 1522.323115][ T5894] dvb-usb: error while querying for an remote control event. [ 1522.455146][T20321] m920x_read = error: -19 [ 1522.461555][T20321] dvb-usb: error while querying for an remote control event. [ 1522.477227][ T2494] Attempt to restore checkpoint with obsolete wellknown handles [ 1522.595050][ T5894] m920x_read = error: -19 [ 1522.606806][ T5894] dvb-usb: error while querying for an remote control event. [ 1522.705388][ T3531] wlan0: Trigger new scan to find an IBSS to join [ 1523.211420][ T5894] m920x_read = error: -19 [ 1523.228519][ T5894] dvb-usb: error while querying for an remote control event. [ 1523.418381][ T5894] m920x_read = error: -19 [ 1523.422782][ T5894] dvb-usb: error while querying for an remote control event. [ 1523.460418][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.522218][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.585096][ T5894] m920x_read = error: -19 [ 1523.589492][ T5894] dvb-usb: error while querying for an remote control event. [ 1523.681002][ T5894] hid_parser_main: 28 callbacks suppressed [ 1523.681019][ T5894] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 1523.724336][ T5894] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1523.744471][ T5826] m920x_read = error: -19 [ 1523.749211][ T5826] dvb-usb: error while querying for an remote control event. [ 1523.879346][ T5826] m920x_read = error: -19 [ 1523.889990][ T5826] dvb-usb: error while querying for an remote control event. [ 1523.975048][T20321] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1524.005035][ T5894] m920x_read = error: -19 [ 1524.009524][ T5894] dvb-usb: error while querying for an remote control event. [ 1524.156992][ T5894] m920x_read = error: -19 [ 1524.165217][ T5894] dvb-usb: error while querying for an remote control event. [ 1524.178639][T20321] usb 2-1: config 0 has no interfaces? [ 1524.204507][T20321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1524.219086][T20321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1524.229941][T20321] usb 2-1: SerialNumber: syz [ 1524.249259][T20321] usb 2-1: config 0 descriptor?? [ 1524.255134][ T2574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7704'. [ 1524.306031][ T5826] m920x_read = error: -19 [ 1524.310560][ T5826] dvb-usb: error while querying for an remote control event. [ 1524.445094][T20321] m920x_read = error: -19 [ 1524.449549][T20321] dvb-usb: error while querying for an remote control event. [ 1524.536855][ T2596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7697'. [ 1524.586913][T20321] m920x_read = error: -19 [ 1524.592932][T20321] dvb-usb: error while querying for an remote control event. [ 1524.715138][T20321] m920x_read = error: -19 [ 1524.719666][T20321] dvb-usb: error while querying for an remote control event. [ 1524.837114][T20321] m920x_read = error: -19 [ 1524.841669][T20321] dvb-usb: error while querying for an remote control event. [ 1524.965140][T20321] m920x_read = error: -19 [ 1524.969549][T20321] dvb-usb: error while querying for an remote control event. [ 1525.085188][T20321] m920x_read = error: -19 [ 1525.089747][T20321] dvb-usb: error while querying for an remote control event. [ 1525.215651][T20321] m920x_read = error: -19 [ 1525.220175][T20321] dvb-usb: error while querying for an remote control event. [ 1525.337095][ T5826] m920x_read = error: -19 [ 1525.341532][ T5826] dvb-usb: error while querying for an remote control event. [ 1525.365078][T11544] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1525.477889][ T5826] m920x_read = error: -19 [ 1525.482414][ T5826] dvb-usb: error while querying for an remote control event. [ 1525.526993][T11544] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1525.538704][T11544] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.549214][T11544] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1525.565659][T11544] usb 4-1: string descriptor 0 read error: -22 [ 1525.571949][T11544] usb 4-1: New USB device found, idVendor=0944, idProduct=0204, bcdDevice= 0.40 [ 1525.592620][T11544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.601167][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.612112][ T5826] m920x_read = error: -19 [ 1525.617372][ T5826] dvb-usb: error while querying for an remote control event. [ 1525.625407][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.626023][T11544] usb 4-1: 0:1 : does not exist [ 1525.646443][T11544] usb 4-1: 0:2 : does not exist [ 1525.648634][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.663452][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.735694][ T5826] m920x_read = error: -19 [ 1525.740074][ T5826] dvb-usb: error while querying for an remote control event. [ 1525.748180][T30580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.814208][ T5826] usb 4-1: USB disconnect, device number 98 [ 1525.875715][ T5894] m920x_read = error: -19 [ 1525.880116][ T5894] dvb-usb: error while querying for an remote control event. [ 1525.995096][ T5894] m920x_read = error: -19 [ 1525.999591][ T5894] dvb-usb: error while querying for an remote control event. [ 1526.115668][ T5894] m920x_read = error: -19 [ 1526.120153][ T5894] dvb-usb: error while querying for an remote control event. [ 1526.235406][ T5894] m920x_read = error: -19 [ 1526.239780][ T5894] dvb-usb: error while querying for an remote control event. [ 1526.343851][ T2680] binder: 2679:2680 ioctl c0189371 2000000005c0 returned -22 [ 1526.352357][ T2680] binder: 2679:2680 ioctl 8008551c 200000000440 returned -22 [ 1526.365410][ T5894] m920x_read = error: -19 [ 1526.370680][ T5894] dvb-usb: error while querying for an remote control event. [ 1526.463681][ T2686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.478168][ T2686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.486261][T20321] m920x_read = error: -19 [ 1526.490648][T20321] dvb-usb: error while querying for an remote control event. [ 1526.615784][T20321] m920x_read = error: -19 [ 1526.620172][T20321] dvb-usb: error while querying for an remote control event. [ 1526.702638][T20321] usb 2-1: USB disconnect, device number 55 [ 1526.759929][ T2733] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.7725'. [ 1526.765046][ T5894] m920x_read = error: -19 [ 1526.773964][ T5894] dvb-usb: error while querying for an remote control event. [ 1526.885075][ T5894] m920x_read = error: -19 [ 1526.889496][ T5894] dvb-usb: error while querying for an remote control event. [ 1526.916791][T11544] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1527.025649][ T5894] m920x_read = error: -19 [ 1527.030036][ T5894] dvb-usb: error while querying for an remote control event. [ 1527.089460][ T2747] kAFS: unable to lookup cell 'Þ({^ú@' [ 1527.092026][T11544] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1527.168325][T11544] usb 4-1: config 1 has no interface number 0 [ 1527.174467][T11544] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1527.175150][ T5894] m920x_read = error: -19 [ 1527.194141][T19109] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1527.231351][T11544] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.243600][ T5894] dvb-usb: error while querying for an remote control event. [ 1527.244389][T11544] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1527.262791][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7728'. [ 1527.274741][T11544] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1527.296108][T11544] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.321628][T11544] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1527.357921][T11544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.385002][T19109] usb 2-1: Using ep0 maxpacket: 8 [ 1527.407905][T11544] usb 4-1: Product: syz [ 1527.417155][T24433] usb 5-1: USB disconnect, device number 19 [ 1527.445256][T20321] m920x_read = error: -19 [ 1527.446519][T11544] usb 4-1: Manufacturer: syz [ 1527.449998][T20321] dvb-usb: error while querying for an remote control event. [ 1527.469508][T19109] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1527.502755][T11544] usb 4-1: SerialNumber: syz [ 1527.538593][ T2717] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1527.569163][T19109] usb 2-1: config 6 has an invalid interface number: 57 but max is 0 [ 1527.579119][T11544] usb 4-1: Error in usbnet_get_endpoints (-22) [ 1527.601282][T19109] usb 2-1: config 6 has no interface number 0 [ 1527.631354][T19109] usb 2-1: config 6 interface 57 has no altsetting 0 [ 1527.676179][ T5894] m920x_read = error: -19 [ 1527.700947][ T5894] dvb-usb: error while querying for an remote control event. [ 1527.753705][T19109] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 1527.807332][T19109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.845458][T20321] usb 4-1: USB disconnect, device number 99 [ 1527.849395][T19109] usb 2-1: Product: syz [ 1527.875913][T19109] usb 2-1: Manufacturer: syz [ 1527.887289][T23737] m920x_read = error: -19 [ 1527.903388][T23737] dvb-usb: error while querying for an remote control event. [ 1527.915789][T19109] usb 2-1: SerialNumber: syz [ 1527.959443][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1527.972414][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1527.981892][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1527.990533][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1527.999112][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1528.065479][T23737] m920x_read = error: -19 [ 1528.085519][T23737] dvb-usb: error while querying for an remote control event. [ 1528.215163][T23737] m920x_read = error: -19 [ 1528.219536][T23737] dvb-usb: error while querying for an remote control event. [ 1528.333346][ T2740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7726'. [ 1528.342853][T23737] m920x_read = error: -19 [ 1528.353245][T23737] dvb-usb: error while querying for an remote control event. [ 1528.490912][T23737] m920x_read = error: -19 [ 1528.503758][ T2858] bridge0: port 3(hsr0) entered blocking state [ 1528.510404][T23737] dvb-usb: error while querying for an remote control event. [ 1528.530746][ T2858] bridge0: port 3(hsr0) entered disabled state [ 1528.556331][ T2858] hsr0: entered allmulticast mode [ 1528.561525][ T2858] hsr_slave_0: entered allmulticast mode [ 1528.595481][ T2858] hsr_slave_1: entered allmulticast mode [ 1528.645265][T23737] m920x_read = error: -19 [ 1528.655316][T23737] dvb-usb: error while querying for an remote control event. [ 1528.679691][ T2858] hsr0: entered promiscuous mode [ 1528.708277][ T2858] bridge0: port 3(hsr0) entered blocking state [ 1528.714605][ T2858] bridge0: port 3(hsr0) entered forwarding state [ 1528.808105][T20321] m920x_read = error: -19 [ 1528.812470][T20321] dvb-usb: error while querying for an remote control event. [ 1528.928656][T30587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.941681][T30587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.952218][T23737] m920x_read = error: -19 [ 1528.956955][T23737] dvb-usb: error while querying for an remote control event. [ 1529.081269][T23737] m920x_read = error: -19 [ 1529.096739][T23737] dvb-usb: error while querying for an remote control event. [ 1529.104744][T30587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.116701][T20321] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1529.141932][T30587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.258418][T23737] m920x_read = error: -19 [ 1529.262787][T23737] dvb-usb: error while querying for an remote control event. [ 1529.309053][T30587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.325558][T30587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.336782][T20321] usb 4-1: Using ep0 maxpacket: 16 [ 1529.362015][T20321] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1529.395057][ T5894] m920x_read = error: -19 [ 1529.400067][ T5894] dvb-usb: error while querying for an remote control event. [ 1529.403582][ T2804] chnl_net:caif_netlink_parms(): no params data found [ 1529.416488][T20321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1529.433424][T20321] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1529.443563][T20321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.457460][T20321] usb 4-1: Product: syz [ 1529.462073][T20321] usb 4-1: Manufacturer: syz [ 1529.471970][T20321] usb 4-1: SerialNumber: syz [ 1529.481215][T20321] usb 4-1: config 0 descriptor?? [ 1529.526080][T20321] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1529.536916][ T5894] m920x_read = error: -19 [ 1529.541426][ T5894] dvb-usb: error while querying for an remote control event. [ 1529.549630][T20321] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1529.558348][T30587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.589054][T30587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.666087][ T5894] m920x_read = error: -19 [ 1529.670475][ T5894] dvb-usb: error while querying for an remote control event. [ 1529.815277][ T5894] m920x_read = error: -19 [ 1529.819733][ T5894] dvb-usb: error while querying for an remote control event. [ 1529.853478][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.863206][ T2804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.874456][ T2804] bridge_slave_0: entered allmulticast mode [ 1529.882705][ T2804] bridge_slave_0: entered promiscuous mode [ 1529.935184][ T5894] m920x_read = error: -19 [ 1529.949177][ T5894] dvb-usb: error while querying for an remote control event. [ 1529.949413][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.975944][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.992053][ T2804] bridge_slave_1: entered allmulticast mode [ 1530.007329][ T2804] bridge_slave_1: entered promiscuous mode [ 1530.065444][ T5828] Bluetooth: hci3: command tx timeout [ 1530.075168][ T5894] m920x_read = error: -19 [ 1530.094716][ T5894] dvb-usb: error while querying for an remote control event. [ 1530.135173][ C1] [ 1530.137531][ C1] ============================================ [ 1530.143673][ C1] WARNING: possible recursive locking detected [ 1530.149849][ C1] syzkaller #0 Tainted: G L [ 1530.155826][ C1] -------------------------------------------- [ 1530.161969][ C1] syz.6.7735/2883 is trying to acquire lock: [ 1530.168034][ C1] ffff88804a658fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1530.177084][ C1] [ 1530.177084][ C1] but task is already holding lock: [ 1530.184434][ C1] ffff888064738fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1530.193316][T20321] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1530.194703][ C1] [ 1530.194703][ C1] other info that might help us debug this: [ 1530.203711][ T2804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.208706][ C1] Possible unsafe locking scenario: [ 1530.208706][ C1] [ 1530.208715][ C1] CPU0 [ 1530.208720][ C1] ---- [ 1530.208725][ C1] lock(&hsr->seqnr_lock); [ 1530.208743][ C1] lock(&hsr->seqnr_lock); [ 1530.240688][ C1] [ 1530.240688][ C1] *** DEADLOCK *** [ 1530.240688][ C1] [ 1530.248810][ C1] May be due to missing lock nesting notation [ 1530.248810][ C1] [ 1530.257130][ C1] 10 locks held by syz.6.7735/2883: [ 1530.262317][ C1] #0: ffff8880323e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1530.272247][ C1] #1: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 1530.281897][ C1] #2: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 1530.291885][ C1] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1530.301006][ C1] #4: ffff888064738fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1530.311682][ C1] #5: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1530.321687][ C1] #6: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1530.331592][ C1] #7: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 1530.340884][ C1] #8: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1530.350778][ C1] #9: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1530.359888][ C1] [ 1530.359888][ C1] stack backtrace: [ 1530.365790][ C1] CPU: 1 UID: 0 PID: 2883 Comm: syz.6.7735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1530.365807][ C1] Tainted: [L]=SOFTLOCKUP [ 1530.365811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1530.365818][ C1] Call Trace: [ 1530.365824][ C1] [ 1530.365830][ C1] dump_stack_lvl+0xe8/0x150 [ 1530.365847][ C1] print_deadlock_bug+0x279/0x290 [ 1530.365863][ C1] __lock_acquire+0x253f/0x2cf0 [ 1530.365878][ C1] ? skb_network_protocol+0x234/0x3f0 [ 1530.365893][ C1] ? netif_skb_features+0xdf0/0x1480 [ 1530.365907][ C1] lock_acquire+0xf0/0x2e0 [ 1530.365919][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1530.365930][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 1530.365944][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1530.365953][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1530.365966][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1530.365975][ C1] hsr_dev_xmit+0x237/0x360 [ 1530.365985][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1530.365994][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1530.366011][ C1] __dev_queue_xmit+0x16d1/0x3890 [ 1530.366026][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1530.366040][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1530.366053][ C1] ? ebt_do_table+0x2665/0x2830 [ 1530.366064][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1530.366078][ C1] ? ebt_do_table+0x2665/0x2830 [ 1530.366089][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1530.366107][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 1530.366125][ C1] br_dev_queue_push_xmit+0x370/0x4a0 [ 1530.366140][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1530.366154][ C1] NF_HOOK+0x360/0x3f0 [ 1530.366168][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1530.366181][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1530.366194][ C1] ? lock_acquire+0x20b/0x2e0 [ 1530.366207][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1530.366223][ C1] br_forward_finish+0xd3/0x130 [ 1530.366237][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1530.366251][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1530.366265][ C1] NF_HOOK+0x360/0x3f0 [ 1530.366279][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1530.366291][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1530.366305][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1530.366320][ C1] ? br_handle_vlan+0x3e7/0x530 [ 1530.366333][ C1] __br_forward+0x397/0x540 [ 1530.366346][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1530.366361][ C1] br_flood+0x6ee/0xb80 [ 1530.366377][ C1] ? br_dev_xmit+0x193/0x1980 [ 1530.366387][ C1] br_dev_xmit+0x12bd/0x1980 [ 1530.366398][ C1] ? br_dev_xmit+0x193/0x1980 [ 1530.366410][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 1530.366422][ C1] ? netdev_txq_to_tc+0x5c1/0x9d0 [ 1530.366436][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1530.366452][ C1] __dev_queue_xmit+0x16d1/0x3890 [ 1530.366465][ C1] ? handle_softirqs+0x22a/0x870 [ 1530.366478][ C1] ? lock_acquire+0x20b/0x2e0 [ 1530.366490][ C1] ? unwind_next_frame+0xc2/0x23c0 [ 1530.366505][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1530.366518][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 1530.366532][ C1] ? vma_alloc_folio_noprof+0xea/0x210 [ 1530.366545][ C1] ? handle_mm_fault+0x1520/0x3310 [ 1530.366560][ C1] ? do_user_addr_fault+0x75b/0x1340 [ 1530.366572][ C1] ? exc_page_fault+0x6a/0xc0 [ 1530.366584][ C1] ? asm_exc_page_fault+0x26/0x30 [ 1530.366594][ C1] ? __put_user_nocheck_4+0x3/0x10 [ 1530.366608][ C1] ? ____sys_recvmsg+0x2be/0x4a0 [ 1530.366621][ C1] ? ___sys_recvmsg+0x215/0x590 [ 1530.366633][ C1] ? do_recvmmsg+0x334/0x800 [ 1530.366657][ C1] ? do_syscall_64+0x14d/0xf80 [ 1530.366670][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.366681][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1530.366696][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1530.366710][ C1] ? __asan_memcpy+0x40/0x70 [ 1530.366720][ C1] ? __skb_clone+0x63/0x7a0 [ 1530.366733][ C1] ? __skb_clone+0x483/0x7a0 [ 1530.366745][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1530.366761][ C1] ? skb_clone+0x246/0x3a0 [ 1530.366774][ C1] hsr_forward_skb+0x157b/0x2860 [ 1530.366788][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 1530.366800][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1530.366811][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1530.366823][ C1] ? __asan_memset+0x22/0x50 [ 1530.366832][ C1] ? __skb_pad+0x405/0x610 [ 1530.366847][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 1530.366860][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1530.366871][ C1] hsr_announce+0x1db/0x370 [ 1530.366881][ C1] ? hsr_announce+0x89/0x370 [ 1530.366891][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1530.366902][ C1] call_timer_fn+0x192/0x640 [ 1530.366916][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1530.366925][ C1] ? call_timer_fn+0xd4/0x640 [ 1530.366938][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1530.366952][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1530.366962][ C1] __run_timer_base+0x652/0x8b0 [ 1530.366973][ C1] ? ktime_get+0x45/0x200 [ 1530.366985][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1530.366998][ C1] ? sched_clock_cpu+0x74/0x440 [ 1530.367012][ C1] run_timer_softirq+0xb7/0x170 [ 1530.367024][ C1] handle_softirqs+0x22a/0x870 [ 1530.367037][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1530.367051][ C1] __irq_exit_rcu+0x5f/0x150 [ 1530.367064][ C1] irq_exit_rcu+0x9/0x30 [ 1530.367076][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1530.367089][ C1] [ 1530.367093][ C1] [ 1530.367098][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1530.367110][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 1530.367124][ C1] Code: e9 30 ff ff ff e8 65 39 0e 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 26 7b 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 46 1f 11 0a cc 48 8d 3d 8e 93 73 [ 1530.367134][ C1] RSP: 0018:ffffc9000e4cea98 EFLAGS: 00000282 [ 1530.367144][ C1] RAX: 58b4b2e3fa148600 RBX: 0000000000000246 RCX: 0000000000000046 [ 1530.367152][ C1] RDX: 00000000b5c0162b RSI: ffffffff8e16c412 RDI: ffffffff8c27d580 [ 1530.367160][ C1] RBP: 0000000000000000 R08: ffffffff81768a55 R09: ffffffff8e75e5a0 [ 1530.367167][ C1] R10: ffffc9000e4cebf8 R11: ffffffff81b0dc10 R12: 0000000000000002 [ 1530.367175][ C1] R13: ffffffff8e75e5a0 R14: 0000000000000000 R15: 0000000000000000 [ 1530.367183][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1530.367195][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1530.367211][ C1] ? vma_alloc_folio_noprof+0xea/0x210 [ 1530.367224][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1530.367238][ C1] unwind_next_frame+0xc2/0x23c0 [ 1530.367252][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1530.367267][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1530.367281][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 1530.367293][ C1] ? vma_alloc_folio_noprof+0xea/0x210 [ 1530.367307][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1530.367318][ C1] arch_stack_walk+0x11b/0x150 [ 1530.367337][ C1] ? vma_alloc_folio_noprof+0xea/0x210 [ 1530.367351][ C1] stack_trace_save+0xa9/0x100 [ 1530.367361][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1530.367374][ C1] save_stack+0x122/0x230 [ 1530.367386][ C1] ? __pfx_save_stack+0x10/0x10 [ 1530.367396][ C1] ? post_alloc_hook+0x231/0x280 [ 1530.367406][ C1] ? get_page_from_freelist+0x24dc/0x2580 [ 1530.367419][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 1530.367431][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 1530.367444][ C1] ? vma_alloc_folio_noprof+0xea/0x210 [ 1530.367458][ C1] ? __rmqueue_pcplist+0x18fa/0x1c40 [ 1530.367471][ C1] __set_page_owner+0x8d/0x4c0 [ 1530.367483][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1530.367494][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1530.367505][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1530.367518][ C1] ? bad_range+0x8b/0x2c0 [ 1530.367527][ C1] post_alloc_hook+0x231/0x280 [ 1530.367539][ C1] get_page_from_freelist+0x24dc/0x2580 [ 1530.367553][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1530.367574][ C1] ? prepare_alloc_pages+0x35d/0x650 [ 1530.367587][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1530.367601][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1530.367615][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1530.367630][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1530.367648][ C1] vma_alloc_folio_noprof+0xea/0x210 [ 1530.367662][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1530.367677][ C1] do_wp_page+0x1204/0x5a00 [ 1530.367693][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1530.367707][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1530.367721][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1530.367731][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1530.367743][ C1] handle_mm_fault+0x1520/0x3310 [ 1530.367761][ C1] ? handle_mm_fault+0xee/0x3310 [ 1530.367777][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1530.367795][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 1530.367806][ C1] do_user_addr_fault+0x75b/0x1340 [ 1530.367822][ C1] exc_page_fault+0x6a/0xc0 [ 1530.367835][ C1] asm_exc_page_fault+0x26/0x30 [ 1530.367845][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1530.367859][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 51 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 1530.367868][ C1] RSP: 0018:ffffc9000e4cf8b8 EFLAGS: 00050202 [ 1530.367877][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000033d030 [ 1530.367884][ C1] RDX: ffff888040983d00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1530.367891][ C1] RBP: ffffc9000e4cfa30 R08: ffffc9000e4cf687 R09: 1ffff92001c99ed0 [ 1530.367899][ C1] R10: dffffc0000000000 R11: fffff52001c99ed1 R12: 1ffff92001c99f24 [ 1530.367906][ C1] R13: 0000000000000002 R14: 000020000033d000 R15: dffffc0000000000 [ 1530.367917][ C1] ____sys_recvmsg+0x2be/0x4a0 [ 1530.367932][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1530.367948][ C1] ? import_iovec+0x73/0xa0 [ 1530.367960][ C1] ___sys_recvmsg+0x215/0x590 [ 1530.367973][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1530.367986][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1530.368005][ C1] do_recvmmsg+0x334/0x800 [ 1530.368020][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1530.368038][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 1530.368052][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1530.368067][ C1] do_syscall_64+0x14d/0xf80 [ 1530.368080][ C1] ? trace_irq_disable+0x3b/0x150 [ 1530.368090][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.368100][ C1] ? clear_bhb_loop+0x40/0x90 [ 1530.368112][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.368122][ C1] RIP: 0033:0x7fc1cdf9c819 [ 1530.368133][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.368142][ C1] RSP: 002b:00007fc1cee57028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1530.368152][ C1] RAX: ffffffffffffffda RBX: 00007fc1ce216090 RCX: 00007fc1cdf9c819 [ 1530.368160][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1530.368167][ C1] RBP: 00007fc1ce032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1530.368173][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1530.368180][ C1] R13: 00007fc1ce216128 R14: 00007fc1ce216090 R15: 00007fc1ce33fa48 [ 1530.368190][ C1] [ 1531.465665][ T5894] m920x_read = error: -19 [ 1531.470043][ T5894] dvb-usb: error while querying for an remote control event. [ 1531.484056][T20321] em28xx 4-1:0.0: Config register raw data: 0xfffffffb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1531.723012][T19109] legousbtower 2-1:6.57: interrupt endpoints not found [ 1531.732041][T19109] usb 2-1: USB disconnect, device number 56 [ 1531.890229][T20321] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1531.954945][T20321] em28xx 4-1:0.0: No AC97 audio processor [ 1531.988680][T30587] bridge_slave_1: left allmulticast mode [ 1531.994546][T30587] bridge_slave_1: left promiscuous mode [ 1532.000455][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.000583][T20321] usb 4-1: USB disconnect, device number 100 [ 1532.057410][T20321] em28xx 4-1:0.0: Disconnecting em28xx [ 1532.063780][ T797] m920x_read = error: -19 [ 1532.094951][ T797] dvb-usb: error while querying for an remote control event. [ 1532.105387][T20321] em28xx 4-1:0.0: Freeing device [ 1532.135056][ T5828] Bluetooth: hci3: command tx timeout [ 1532.165497][T30587] bridge_slave_0: left allmulticast mode [ 1532.171165][T30587] bridge_slave_0: left promiscuous mode [ 1532.176905][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.205186][ T5894] m920x_read = error: -19 [ 1532.209546][ T5894] dvb-usb: error while querying for an remote control event. [ 1532.308375][T30587] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1532.385344][T20321] m920x_read = error: -19 [ 1532.389703][T20321] dvb-usb: error while querying for an remote control event. [ 1532.511705][T30587] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1532.554259][ T797] m920x_read = error: -19 [ 1532.561203][ T797] dvb-usb: error while querying for an remote control event. [ 1532.593735][T30587] dvmrp12 (unregistering): left allmulticast mode [ 1532.685515][ T797] m920x_read = error: -19 [ 1532.689879][ T797] dvb-usb: error while querying for an remote control event. [ 1532.797837][T30587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.806707][ T797] m920x_read = error: -19 [ 1532.811046][ T797] dvb-usb: error while querying for an remote control event. [ 1532.820410][T30587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.829897][T30587] bond0 (unregistering): Released all slaves [ 1532.838260][T30587] bond1 (unregistering): Released all slaves [ 1532.847189][T30587] bond2 (unregistering): Released all slaves [ 1532.873671][T31448] bond0: (slave syz_tun): Releasing backup interface [ 1532.935372][T23737] m920x_read = error: -19 [ 1532.939735][T23737] dvb-usb: error while querying for an remote control event. [ 1533.065290][T20321] m920x_read = error: -19 [ 1533.069669][T20321] dvb-usb: error while querying for an remote control event. [ 1533.215004][T20321] m920x_read = error: -19 [ 1533.236968][T20321] dvb-usb: error while querying for an remote control event. [ 1533.333913][T30587] hsr_slave_0: left promiscuous mode [ 1533.339800][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1533.347523][T20321] m920x_read = error: -19 [ 1533.351865][T20321] dvb-usb: error while querying for an remote control event. [ 1533.362178][T30587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.377916][T30587] veth1_macvtap: left promiscuous mode [ 1533.383420][T30587] veth0_macvtap: left promiscuous mode [ 1533.478356][T20321] m920x_read = error: -19 [ 1533.482727][T20321] dvb-usb: error while querying for an remote control event. [ 1533.503131][T30587] ` (unregistering): Port device team_slave_1 removed [ 1533.516445][T30587] ` (unregistering): Port device team_slave_0 removed [ 1533.605031][T20321] m920x_read = error: -19 [ 1533.609428][T20321] dvb-usb: error while querying for an remote control event. [ 1533.725224][T20321] m920x_read = error: -19 [ 1533.731419][T20321] dvb-usb: error while querying for an remote control event. [ 1533.855334][T20321] m920x_read = error: -19 [ 1533.867895][T20321] dvb-usb: error while querying for an remote control event. [ 1533.985012][T23737] m920x_read = error: -19 [ 1533.989390][T23737] dvb-usb: error while querying for an remote control event. [ 1533.999995][T30587] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.047720][T30587] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.095833][T30587] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.136243][T23737] m920x_read = error: -19 [ 1534.140634][T23737] dvb-usb: error while querying for an remote control event. [ 1534.157151][T30587] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.274995][T20321] m920x_read = error: -19 [ 1534.279714][T20321] dvb-usb: error while querying for an remote control event. [ 1534.298440][T30587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.330325][T30587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.387464][T30587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.415953][T20321] m920x_read = error: -19 [ 1534.420320][T20321] dvb-usb: error while querying for an remote control event. [ 1534.440192][T30587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.536834][T20321] m920x_read = error: -19 [ 1534.541228][T20321] dvb-usb: error while querying for an remote control event. [ 1534.556921][T30587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.624538][T30587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.655306][T20321] m920x_read = error: -19 [ 1534.660013][T20321] dvb-usb: error while querying for an remote control event. [ 1534.670158][T30587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.702431][T30587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.775016][ T797] m920x_read = error: -19 [ 1534.779389][ T797] dvb-usb: error while querying for an remote control event. [ 1534.846144][T30587] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.889534][T30587] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.905238][ T797] m920x_read = error: -19 [ 1534.909625][ T797] dvb-usb: error while querying for an remote control event. [ 1534.940900][T30587] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.025487][ T5894] m920x_read = error: -19 [ 1535.029863][ T5894] dvb-usb: error while querying for an remote control event. [ 1535.056714][T30587] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.145102][ T5894] m920x_read = error: -19 [ 1535.149510][ T5894] dvb-usb: error while querying for an remote control event. [ 1535.193108][T30587] bridge_slave_1: left allmulticast mode [ 1535.203694][T30587] bridge_slave_1: left promiscuous mode [ 1535.209535][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.218665][T30587] bridge_slave_0: left allmulticast mode [ 1535.224316][T30587] bridge_slave_0: left promiscuous mode [ 1535.230446][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.240444][T30587] bridge_slave_1: left allmulticast mode [ 1535.246182][T30587] bridge_slave_1: left promiscuous mode [ 1535.251796][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.260315][T30587] bridge_slave_0: left allmulticast mode [ 1535.266058][T30587] bridge_slave_0: left promiscuous mode [ 1535.271669][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.275335][ T5894] m920x_read = error: -19 [ 1535.283672][ T5894] dvb-usb: error while querying for an remote control event. [ 1535.292069][T30587] hsr0: left allmulticast mode [ 1535.297168][T30587] hsr_slave_0: left allmulticast mode [ 1535.302523][T30587] hsr_slave_1: left allmulticast mode [ 1535.308165][T30587] hsr0: left promiscuous mode [ 1535.312930][T30587] bridge0: port 3(hsr0) entered disabled state [ 1535.320103][T30587] bridge_slave_1: left allmulticast mode [ 1535.325822][T30587] bridge_slave_1: left promiscuous mode [ 1535.331628][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.340314][T30587] bridge_slave_0: left allmulticast mode [ 1535.346085][T30587] bridge_slave_0: left promiscuous mode [ 1535.351704][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.360671][T30587] bridge_slave_1: left allmulticast mode [ 1535.366363][T30587] bridge_slave_1: left promiscuous mode [ 1535.371964][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.380056][T30587] bridge_slave_0: left allmulticast mode [ 1535.386798][T30587] bridge_slave_0: left promiscuous mode [ 1535.392454][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.405026][T23737] m920x_read = error: -19 [ 1535.409384][T23737] dvb-usb: error while querying for an remote control event. [ 1535.417133][T30587] bond_slave_0: left promiscuous mode [ 1535.422687][T30587] bond_slave_1: left promiscuous mode [ 1535.525054][T23737] m920x_read = error: -19 [ 1535.529424][T23737] dvb-usb: error while querying for an remote control event. [ 1535.539456][T30587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.549315][T30587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.558787][T30587] bond0 (unregistering): Released all slaves [ 1535.597133][T30587] dvmrp8 (unregistering): left allmulticast mode [ 1535.610532][T30587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.626822][T30587] bond_slave_0: left promiscuous mode [ 1535.636785][T30587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.646026][T30587] bond_slave_1: left promiscuous mode [ 1535.652466][T30587] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1535.655083][T23737] m920x_read = error: -19 [ 1535.666627][T30587] macvlan2: left promiscuous mode [ 1535.666697][T23737] dvb-usb: error while querying for an remote control event. [ 1535.671966][T30587] team0: left promiscuous mode [ 1535.684060][T30587] team_slave_0: left promiscuous mode [ 1535.689649][T30587] team_slave_1: left promiscuous mode [ 1535.696742][T30587] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1535.705404][T30587] batadv0: left promiscuous mode [ 1535.710984][T30587] bond0 (unregistering): Released all slaves [ 1535.718895][T30587] bond1 (unregistering): Released all slaves [ 1535.786063][T23737] m920x_read = error: -19 [ 1535.790446][T23737] dvb-usb: error while querying for an remote control event. [ 1535.808964][T30587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.818524][T30587] bond0 (unregistering): Released all slaves [ 1535.828489][T30587] ip6gretap0 (unregistering): left promiscuous mode [ 1535.860708][T30587] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1535.873602][T30587] dvmrp0 (unregistering): left allmulticast mode [ 1535.888358][T30587] bridge0 (unregistering): left promiscuous mode [ 1535.905363][T23737] m920x_read = error: -19 [ 1535.909754][T23737] dvb-usb: error while querying for an remote control event. [ 1535.928905][T30587] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1535.997232][T30587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.007071][T30587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.016976][T30587] bond0 (unregistering): Released all slaves [ 1536.024706][T30587] bond1 (unregistering): Released all slaves [ 1536.035143][T23737] m920x_read = error: -19 [ 1536.039603][T23737] dvb-usb: error while querying for an remote control event. [ 1536.135158][T23737] m920x_read = error: -19 [ 1536.139564][T23737] dvb-usb: error while querying for an remote control event. [ 1536.217805][T30587] bond2 (unregistering): (slave macvlan3): Removing an active aggregator [ 1536.226631][T30587] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 1536.237485][T30587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.247126][T30587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.257725][T23737] m920x_read = error: -19 [ 1536.262079][T23737] dvb-usb: error while querying for an remote control event. [ 1536.271015][T30587] bond0 (unregistering): Released all slaves [ 1536.278721][T30587] bond1 (unregistering): Released all slaves [ 1536.287814][T30587] bond2 (unregistering): Released all slaves [ 1536.396417][T23737] m920x_read = error: -19 [ 1536.400789][T23737] dvb-usb: error while querying for an remote control event. [ 1536.423486][T30587] ‚#{6c: left promiscuous mode [ 1536.472566][T30587] tipc: Left network mode [ 1536.515679][T23737] m920x_read = error: -19 [ 1536.532510][T23737] dvb-usb: error while querying for an remote control event. [ 1536.645152][T23737] m920x_read = error: -19 [ 1536.649522][T23737] dvb-usb: error while querying for an remote control event. [ 1536.774992][T23737] m920x_read = error: -19 [ 1536.779352][T23737] dvb-usb: error while querying for an remote control event. [ 1536.907964][T23737] m920x_read = error: -19 [ 1536.912335][T23737] dvb-usb: error while querying for an remote control event. [ 1537.025122][T23737] m920x_read = error: -19 [ 1537.029529][T23737] dvb-usb: error while querying for an remote control event. [ 1537.056472][T30587] hsr_slave_0: left promiscuous mode [ 1537.062291][T30587] hsr_slave_1: left promiscuous mode [ 1537.070901][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.078435][T30587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.086090][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.093497][T30587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.103652][T30587] hsr_slave_0: left promiscuous mode [ 1537.109401][T30587] hsr_slave_1: left promiscuous mode [ 1537.115044][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.122413][T30587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.130508][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.138994][T30587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.148763][T30587] hsr_slave_0: left promiscuous mode [ 1537.154389][T30587] hsr_slave_1: left promiscuous mode [ 1537.155208][T23737] m920x_read = error: -19 [ 1537.160204][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.165761][T23737] dvb-usb: error while querying for an remote control event. [ 1537.171530][T30587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.186960][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.194331][T30587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.204137][T30587] hsr_slave_0: left promiscuous mode [ 1537.209772][T30587] hsr_slave_1: left promiscuous mode [ 1537.215585][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.222946][T30587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.231164][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.238588][T30587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.252940][T30587] veth1_macvtap: left promiscuous mode [ 1537.258519][T30587] veth0_macvtap: left promiscuous mode [ 1537.264007][T30587] veth1_vlan: left promiscuous mode [ 1537.269287][T30587] veth0_vlan: left promiscuous mode [ 1537.275913][T30587] veth1_macvtap: left promiscuous mode [ 1537.281389][T30587] veth0_macvtap: left promiscuous mode [ 1537.287406][T30587] veth1_vlan: left promiscuous mode [ 1537.292614][T30587] veth0_vlan: left promiscuous mode [ 1537.296540][T23737] m920x_read = error: -19 [ 1537.302292][T23737] dvb-usb: error while querying for an remote control event. [ 1537.310090][T30587] veth1_macvtap: left promiscuous mode [ 1537.315662][T30587] veth0_macvtap: left promiscuous mode [ 1537.321137][T30587] veth1_vlan: left promiscuous mode [ 1537.326692][T30587] veth0_vlan: left promiscuous mode [ 1537.332424][T30587] team_slave_0: left promiscuous mode [ 1537.337846][T30587] team_slave_1: left promiscuous mode [ 1537.343281][T30587] veth1_macvtap: left promiscuous mode [ 1537.348831][T30587] veth0_macvtap: left promiscuous mode [ 1537.354344][T30587] veth1_vlan: left promiscuous mode [ 1537.359775][T30587] veth0_vlan: left promiscuous mode [ 1537.415211][T23737] m920x_read = error: -19 [ 1537.419573][T23737] dvb-usb: error while querying for an remote control event. [ 1537.522455][T30587] team0 (unregistering): Port device team_slave_1 removed [ 1537.535037][T23737] m920x_read = error: -19 [ 1537.539404][T23737] dvb-usb: error while querying for an remote control event. [ 1537.552883][T30587] team0 (unregistering): Port device team_slave_0 removed [ 1537.643627][T30587] team0 (unregistering): Port device team_slave_1 removed [ 1537.653853][T30587] team0 (unregistering): Port device team_slave_0 removed [ 1537.661123][T23737] m920x_read = error: -19 [ 1537.684340][T23737] dvb-usb: error while querying for an remote control event. [ 1537.814800][T23737] m920x_read = error: -19 [ 1537.819305][T23737] dvb-usb: error while querying for an remote control event. [ 1537.840132][T30587] team0 (unregistering): Port device team_slave_1 removed [ 1537.850683][T30587] team0 (unregistering): Port device team_slave_0 removed [ 1537.948036][T30587] team0 (unregistering): Port device team_slave_1 removed [ 1537.955348][T23737] m920x_read = error: -19 [ 1537.959746][T23737] dvb-usb: error while querying for an remote control event. [ 1537.981733][T30587] team0 (unregistering): Port device team_slave_0 removed [ 1538.127317][ T3259] m920x_read = error: -19 [ 1538.131678][ T3259] dvb-usb: error while querying for an remote control event. [ 1538.265163][ T3259] m920x_read = error: -19 [ 1538.269566][ T3259] dvb-usb: error while querying for an remote control event. [ 1538.393134][ T3259] m920x_read = error: -19 [ 1538.398788][ T3259] dvb-usb: error while querying for an remote control event. [ 1538.525024][ T3259] m920x_read = error: -19 [ 1538.529393][ T3259] dvb-usb: error while querying for an remote control event. [ 1538.645333][ T3259] m920x_read = error: -19 [ 1538.649837][ T3259] dvb-usb: error while querying for an remote control event. [ 1538.767453][ T3259] m920x_read = error: -19 [ 1538.771825][ T3259] dvb-usb: error while querying for an remote control event. [ 1538.895073][ T3259] m920x_read = error: -19 [ 1538.899451][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.015475][ T3259] m920x_read = error: -19 [ 1539.019876][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.049842][T30587] IPVS: stop unused estimator thread 0... [ 1539.145114][ T3259] m920x_read = error: -19 [ 1539.149497][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.275092][ T3259] m920x_read = error: -19 [ 1539.279462][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.395103][ T3259] m920x_read = error: -19 [ 1539.399472][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.530058][ T3259] m920x_read = error: -19 [ 1539.534406][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.645079][ T3259] m920x_read = error: -19 [ 1539.649450][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.765311][ T3259] m920x_read = error: -19 [ 1539.771930][ T3259] dvb-usb: error while querying for an remote control event. [ 1539.897851][ T3259] m920x_read = error: -19 [ 1539.902229][ T3259] dvb-usb: error while querying for an remote control event. [ 1540.016048][ T3259] m920x_read = error: -19 [ 1540.020432][ T3259] dvb-usb: error while querying for an remote control event.