last executing test programs:

33m59.505454856s ago: executing program 32 (id=2623):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

29m23.721843217s ago: executing program 3 (id=3617):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0xc, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000240), 0x80601)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000280))
socket$can_bcm(0x1d, 0x2, 0x2)
syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0xd6eb, 0x4000, 0x2000003, 0x3ce}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\b\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000005276147fd700004761"], 0x50)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e3295cc8f8504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee25083fccdddc90d7af35c528df8000000d8d79c79ddca066d2cea2cb3d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6f815654486fe42cf2f676cdbb91f7582a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0xc201})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000180)={0x2})
pwrite64(0xffffffffffffffff, &(0x7f0000000040)="a6", 0x1, 0xa)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
close_range(r1, r6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000608000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

29m22.323098319s ago: executing program 3 (id=3623):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
syz_usb_connect$cdc_ecm(0x2, 0x143, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x131, 0x1, 0x1, 0x8, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, 'p'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x2, 0xff}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xd, 0x1000}, @mdlm_detail={0xc0, 0x24, 0x13, 0x7, "628f700af749fab13c215268b40169c97452dd96da2d3772e82e27fe91810902bbb5d2c961de1dbc198f234848cde7fc90e687ddc8e4dff3b371b041709b6784dbedc11de2376ab8a712d641f5ef970b8b06939447358b262d5eabfeec1220ee3545b17b395836ed29a0d35b0831c9218951d9b405a964641a790f98a1b3f60d0894d84d41af62ff1b0c885a8ea417444a26f97659e83556649b1966f727393ed6a854fc0cccdfdffc9f68c346a4e9ed284311a96751bb559421edef"}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x3, 0x1, 0x2, 0x0, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x55, 0x5, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0xe2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x0, 0xce}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x0, 0x6, 0x7, 0x10, 0x5}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xe, 0x1, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0xf, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x0, 0x4}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}]})
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="376fb37e3a9ae2b8c0e07372036f8bb1c58550d7fa5e3823a23741fc1a2dfee239e7ea2cb899850ee72840e313829eed3f218204836ee66e01bca10c3cab2981e26dd4b2e759a66021abaf9ad631f7a8f588cff386049f1e8073a3b98d543d4c83ead03a40904e4f5b94ef40eb2f2d742378f32023d50358be1cdc09c5dbe9ccab0c055bac18ca117c99de357d30a71023218f07a9d3bf2bc74f33287619ff273d26f5ae6fa14f10b38a6ceaa0e53586a9d2184518fd8b8454bb567936c47119b231c56843ff1dfb29efb03845d8f300aeec58647425aec9745838b142325d50d8a5fdb5f5f713760f709a86d9a6e004730cdb3c8f4eef34ef94a02c85415e8e9c889c29b0a50b733c463ce642e5853360d31615aefc70bb71285f4dfeefce4257de9186845123ab3dd080154680c2073a58c3b89d2437a6de410a795b66e6", 0x13f}, {&(0x7f0000000700)="ab", 0x1}], 0x2}}], 0x1, 0x0)

29m21.594980683s ago: executing program 3 (id=3628):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x488a, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

29m21.431772181s ago: executing program 3 (id=3629):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0xf8d9, 0x59565955, 0x9, 0x6, [{0x0, 0xffffffff}, {0x0, 0x9}, {}, {0xfffffffe}, {0x0, 0xe}, {0x0, 0x1}, {0x800001, 0x3}, {0x1000}], 0x0, 0x0, 0x4, 0x0, 0x3}}) (async, rerun: 64)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x1a) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)=""/4096, 0x2b, 0x1000, 0x1, 0x4, 0x10000, @value=r1}, 0x28)
fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000300)={0x98, "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"})
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x7, 0x2000001, 0x57f8d57c, 0x8, 0x1b7da84ba51d4f24, r1, 0x6, '\x00', 0x0, r3, 0x2, 0x4, 0xffffffff, 0x0, @void, @value, @value=r5}, 0x50) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
r9 = open_tree(r8, &(0x7f0000000040)='./file0\x00', 0x81001)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (rerun: 32)
umount2(&(0x7f0000002240)='./file0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

29m20.451090744s ago: executing program 3 (id=3635):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000080)=0x4d)
syz_emit_ethernet(0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400383a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900003300fc010000000000000000000000000000ff0000000000000000000000000000003300000000000000d0386b25b77d9d6e92fdebe6e7622a40018372ced5d0842c60dacd25c87e2cc36027f749ffc5adb0606c8af064be991c3bd80939a670b80902d5a1dfbd8ffc11e3cf1e"], 0x0)

29m20.233197076s ago: executing program 3 (id=3636):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x29)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)

29m19.745601271s ago: executing program 33 (id=3636):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x29)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)

23m40.217017859s ago: executing program 0 (id=5066):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6971a52c5b479cf4cf1543ea6406ef"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_SSID={0x21, 0x34, @random="f0074d01c76ca54cb1f9efa1ebb9e0059f4b874cba14ed496e04be235e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK={0x14, 0xfe, "ad52eb6422d3844e878019cf7508d8b9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40080)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
fanotify_init(0x4, 0x1800)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r1, 0x6000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r2 = inotify_init()
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8)
fcntl$notify(r3, 0x402, 0x8000003b)
inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x420008c9)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

23m36.211975414s ago: executing program 0 (id=5080):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x67c541, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x10, 0x0, 0x8000000000000005}, {0x10, 0x0, 0x1}]})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001900e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)

23m32.990077856s ago: executing program 0 (id=5090):
unshare(0x2a020480)
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x10f, 0x1f, 0x0, 0x0)

23m32.948533541s ago: executing program 0 (id=5092):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c05, r3)
dup2(r2, r0)

23m32.702792126s ago: executing program 0 (id=5096):
prctl$PR_SET_IO_FLUSHER(0x34, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0xf})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x6, 0x0, [{0x890, 0x0, 0x8}, {0x90e, 0x0, 0x1}, {0x313, 0x0, 0x7}, {0x2dc, 0x0, 0xe4f5}, {0x649, 0x0, 0x29f}, {0x9c0, 0x0, 0xfffffffffffffffb}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x188}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x214, 0x1e, 0x109, 0x100, 0x0, {}, [{0xe0, 0x1, [@m_ctinfo={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xac, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x120, 0x1, [@m_connmark={0x11c, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x1, 0x7, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200000, 0x2, 0x4, 0x400, 0x9}, 0x4}}]}, {0xb4, 0x6, "9c0663ab5c836e1391f89043030182ba65173e9c449b97cc9460faae360d3464a0730fa96d0f7deb5f720ad4e2c5c34964fe0c24072db789abfe8e47d727bf6cc31e79d43a060515f2fde0f701e3ab6b917c09ea5fe4620344de417ae8ecfe2aa88a0a7f805c32d0c2c6e24340429007536d317d889426605d6aa261aa20f303ad7b9e31c10d544b9bff881d37925180a63a835d6151442aa593d33277c5743a61b6d39f0c4330ead540ff0016f34d49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x214}, 0x1, 0x2b1e}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="90000000100003042cbd70000400000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000800006800128009000100766c616e000002005800028006000100020000004c0004800c0011ff01010000040000000c00010009a22cef000000000c00010002000000040000000c00010063380000090000000c00010000800000020000000c00010004000000030000000800050040b19f4c851ab5c0a15bf702ed8fd0a93eb0b4b198fd06dcc6dcfc27659e6fd7c023b7b3a81165f8c13e874e248ba1e8b0c4bbe604a60f70eec5eb9dbf8f269746fe0c80a2081de1", @ANYRES32=r6, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
add_key(&(0x7f00000004c0)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r8 = io_uring_setup(0xe60, &(0x7f0000000000)={0x0, 0x6b7b, 0x1000, 0x0, 0x1bd})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
splice(r10, 0x0, r9, 0x0, 0x5, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d1c020301090224000100000000090400000221efb0000905020200000000ff0905820200"], 0x0)

23m31.829260287s ago: executing program 0 (id=5098):
r0 = syz_usb_connect(0x2, 0x1aa, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_disconnect(r0)

23m31.213810521s ago: executing program 34 (id=5098):
r0 = syz_usb_connect(0x2, 0x1aa, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_disconnect(r0)

23m24.775383463s ago: executing program 6 (id=5115):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(0x4)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

23m23.31828228s ago: executing program 6 (id=5118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000fcff001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

23m20.059186123s ago: executing program 6 (id=5122):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

23m19.777380524s ago: executing program 6 (id=5124):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0x3, 0x0, 0x1, &(0x7f0000000380)="f3"}], 0x1})

23m16.554334029s ago: executing program 6 (id=5130):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0x3, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sysfs$1(0x1, &(0x7f0000000100)='((@]\\\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xfe2, &(0x7f0000001840)=""/4066, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000806}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x4000, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async)
syz_extract_tcp_res(&(0x7f0000000040)={<r6=>0x41424344}, 0xac, 0xd)
write$tun(r3, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x36, 0x4, 0x1, 0x5, 0x14e, 0x66, 0x0, 0x70, 0x6, 0x0, @private=0xa010102, @remote, {[@ssrr={0x89, 0x27, 0x49, [@loopback, @local, @remote, @loopback, @broadcast, @local, @loopback, @remote, @remote]}, @ssrr={0x89, 0xb, 0x4f, [@rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0x13, 0x6f, [@multicast2, @multicast1, @broadcast, @rand_addr=0x64010102]}, @generic={0x94, 0x10, "c3f11c411dfb0719576129dfab17"}, @lsrr={0x83, 0x17, 0x65, [@broadcast, @loopback, @local, @remote, @remote]}, @lsrr={0x83, 0x13, 0x31, [@rand_addr=0x64010102, @loopback, @multicast2, @multicast1]}, @generic={0x83, 0xc, "3ca639c0e88b05f73d93"}, @cipso={0x86, 0x38, 0x1, [{0x1, 0x4, "80b9"}, {0x6, 0x9, "440572c32e3446"}, {0x2, 0xf, "cc33d2f6dc3b7abf71a00b112a"}, {0x4919fa68b1d731ee, 0x4, 'N\a'}, {0x7, 0x12, "3a5dd2fac459fd12de3f1fe75ae2b796"}]}]}}, {{0x4e20, 0x4e21, r6, 0x41424344, 0x1, 0x0, 0x9, 0x20, 0x0, 0x0, 0x6, {[@fastopen={0x22, 0x10, "e06825a1113f2d8f1c1e40799b9c"}]}}, {"e5c58f157e39d9d3b38bcdf13f46612d4afe8d55aecf16ecc6913360910442f38f52bc91b9cac59268d574481f719ae38af664a962f9a278c7d3051043d57f77a7aa8fdc6d215f1460865b312057e7182920"}}}}, 0x15c)

23m16.275396308s ago: executing program 6 (id=5133):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x410000)
ioctl$RTC_AIE_OFF(r0, 0x7002)
unshare(0x2a020480)
r1 = socket(0x1e, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc8c, 0x181301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x4, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', <r3=>0x0, 0x7800, 0x8, 0x4, 0x2, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @private=0xa010100, {[@noop, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x4, 0x4a, 0x3, 0x6, 0x8, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000, 0x1, 0x2, 0x500}})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x10f, 0x1f, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

23m1.105330597s ago: executing program 35 (id=5133):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x410000)
ioctl$RTC_AIE_OFF(r0, 0x7002)
unshare(0x2a020480)
r1 = socket(0x1e, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc8c, 0x181301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x4, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', <r3=>0x0, 0x7800, 0x8, 0x4, 0x2, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @private=0xa010100, {[@noop, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x4, 0x4a, 0x3, 0x6, 0x8, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000, 0x1, 0x2, 0x500}})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x10f, 0x1f, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

18m55.391194322s ago: executing program 2 (id=6083):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x90)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
r7 = syz_io_uring_setup(0x49a, &(0x7f00000032c0)={0x0, 0x79b2, 0x3180, 0x1, 0x2dd}, 0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0)
r8 = timerfd_create(0x0, 0x0)
r9 = syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r8, 0x2, &(0x7f00000005c0), 0x0)
io_uring_enter(r9, 0x1f82, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'geneve1\x00', 0x1})

18m54.290911126s ago: executing program 2 (id=6089):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
gettid()
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$vbi(0x0, 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x4}]}, &(0x7f0000001340)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000001080))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x90fd0000}, 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48)

18m53.374408358s ago: executing program 2 (id=6094):
syz_usb_connect(0x3, 0x67, &(0x7f0000008040)=ANY=[@ANYBLOB="12015002143dfdce1e889516da3b010203010902120001a001b00a0904da9100b1e3800e"], &(0x7f00000087c0)={0x0, 0x0, 0xff72, 0x0, 0xad})

18m52.353510064s ago: executing program 2 (id=6099):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004fc000/0x2000)=nil, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x6, 0x0, 0x0, &(0x7f00004fa000/0x2000)=nil, 0x2000, 0x2})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, &(0x7f00004f9000/0x2000)=nil, 0x2000, 0x8})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000500)="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", 0x11a, 0x7b})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, 0x0, 0x0, &(0x7f00004fb000/0x2000)=nil, 0x2000, 0x9})
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000200)={0xd, @capture={0x0, 0x1, {0x800, 0x9000}, 0x6, 0x800}})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x1000}}, './file0\x00'})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
sendto(r4, &(0x7f0000000300)="89fbb6d5797ff2a5f170beccea79265ac29c5ca49578c5529a3ebffea27c5180e8f56beec47703323fd1615114dc2c3026d789a6b5100ea72bccf18ed355953c2076bff52c32e6e4099b2ac999efb2c174563eae0c8ee384b3bff61abcdec6704d07d6f687f0722a20925043e7b4bf9c03067857fa9f235818e1b9ce210706f1f928f3a478536b821d78caa58236439a40b9f4d1ecebca57d714e1eeacb3c3ed6aa3596edb996c0630e615e7ab2e72d17bc8ec56f0945f43b42f7b4eb5ee8646c5dca1945aa84151200312a07c79d6c70dfebea56f3d419c5e6101b0c4a7d523cccc5d47248fb42039d5199d", 0xec, 0x4000, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r8=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000006c0)=@assoc_value={<r9=>0x0}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r9, 0x6}, &(0x7f0000000080)=0x8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r11}, &(0x7f0000000280), 0x0}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
fsetxattr$security_capability(r12, &(0x7f0000000400), &(0x7f0000000440)=@v1={0x1000000, [{0x8}]}, 0xc, 0x2)
setsockopt$sock_timeval(r10, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0xea60}, 0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r8, 0x400, 0x10, 0xf9c, 0x8}, &(0x7f0000000140)=0x18)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)

18m51.253642084s ago: executing program 2 (id=6103):
socket$alg(0x26, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\x1b\xbc\t\xe5\x94\xe4\xd2\xce\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1JS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14', 0x5)
pwrite64(r0, 0x0, 0x0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x20, &(0x7f0000001840)=""/4066, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

18m50.968174041s ago: executing program 2 (id=6105):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x5, 0x29a}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x5, 0xb}, {0xfff3, 0xfffe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r10 = dup2(r1, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000380)=0x1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r11 = syz_open_dev$sg(&(0x7f0000002100), 0x0, 0x40)
ioctl$SG_IO(r11, 0x2285, &(0x7f00000034c0)={0x53, 0xfffffffffffffffe, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000002440)="b7b249ee5ed0", 0x0, 0x2, 0x2, 0x3, 0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1})

18m35.26013144s ago: executing program 36 (id=6105):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x5, 0x29a}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x5, 0xb}, {0xfff3, 0xfffe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r10 = dup2(r1, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000380)=0x1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r11 = syz_open_dev$sg(&(0x7f0000002100), 0x0, 0x40)
ioctl$SG_IO(r11, 0x2285, &(0x7f00000034c0)={0x53, 0xfffffffffffffffe, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000002440)="b7b249ee5ed0", 0x0, 0x2, 0x2, 0x3, 0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1})

16m47.758161911s ago: executing program 9 (id=6539):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000001000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

16m47.568723827s ago: executing program 9 (id=6541):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0xfa11, 0xffffffff}, 0x0)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0x2c2)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000400)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0xc1, 0xf0, 0x3, 0x2, "1cec7fe1"}, 0x5, 0x2, {&(0x7f0000000380)=[{0x6, 0x8000, {&(0x7f00000001c0)}, 0x62}, {0x9, 0x1, {0x0}, 0x5}]}, 0x2, 0x0, <r6=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
openat$urandom(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000a, 0x11, r6, 0xd6bc9000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/123, 0x9e, 0xc8)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)

16m46.226212291s ago: executing program 9 (id=6549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_SSID={0x10, 0x34, @random="f0074d01c76ca54cb1f9efa1"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x40080)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
fanotify_init(0x4, 0x1800)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r2, 0x6000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r3 = inotify_init()
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8)
fcntl$notify(r4, 0x402, 0x8000003b)
inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x420008c9)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

16m46.073182601s ago: executing program 9 (id=6550):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000806f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r5, &(0x7f0000006a40)={&(0x7f0000004480)={0xa, 0x4e20, 0x1, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="70000000000000002900000004000000000a000000000000c910fe8800000000000000000000000000010001000001000738000000000c0104000600000000000000ffff0000000000007f00000000000000010000000000000026000000000000000500000000000000000000000000a0000000000000002900000004"], 0x280}, 0x4000)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x64, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x1, 0x0, 0x0)

16m45.073334575s ago: executing program 9 (id=6555):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
gettid()
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$vbi(0x0, 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x4}]}, &(0x7f0000001340)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000001080))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x19}, 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48)

16m44.692696676s ago: executing program 9 (id=6556):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x3, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000004000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r6, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5)

16m44.038012347s ago: executing program 37 (id=6556):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x3, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000004000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r6, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5)

9.506645596s ago: executing program 8 (id=10063):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)="af0305d9fb67f76c47fe19631c0060d03176f67ef2ec8410e68feeb330127ea182d2f5e83a59ad021b92fd6112eabb591801d0a23cd617546cbc82dcc30ab43ff5a07f91057702769c5ee3a2fcfc91321e27", 0x52}], 0x1}}, {{&(0x7f0000000340)=@file={0x3, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)="4f33f1cf8ec83edf58d37d52d43c1037", 0x10}], 0x1, &(0x7f0000000880)=[@cred={{0xffffffffffffff5c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r1, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x80, 0x800}}, {{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000980)="d719fd6f70bf826a2fef334f1ffc904908b04ca60e24cc3a6543701b79da2cb2a0c610d364f4b2ce13b7ce3c5c28f3c1dc55c9a6595edc866566decbcc538f762592ac8888a54b582949c49156e696577bbd6ba9afbef6380928a5b5d57dd2c21a3f7e53201ddd6e191a684d2d3dd6c1a4dcbaec53991e829785b6eaa5fc5c1214dc3c12885c9dbfb0ec2ac5f219b9097aeebdc1b2910400"/163, 0xa3}, {&(0x7f0000000a40)="9315d33312315f8fab95a95cb47871d8c64458dd58", 0x15}, {&(0x7f0000000a80)="541519ae4474ff082b34399bccaa69ce7713ad0bb795c251d21ba1c453b42662952c9a93586e671658a9f0a8363ea5bf6e24d423838f84ccf24db86ba6260052122e85f22a69a611c9c51739218a3b92924c9e9c602b2a0a55b86b8b1d0739f4810e2590e6ae5135859776ecc5621016a4c21f7d3c39e647c7bef3ef1bf5fe9c1bfe95cfc59f00df3df85fc2f6ce81aa23848c46d65bf0a58f8326b4c3331ca8d4a575063fdebfbb2b9fc6a52523b801cfa0c6bef59f1ccf05828b080f2f9fd1f8ac6fc7908f7d58fb628578b71be50df2c85b0fad56af53f669e57d03f119a64b2eee52c5ccfb7c2b84263d0ae30fe25ec6aed44ad0", 0xf6}, {&(0x7f0000000b80)="431a303878616a308b5e8b06fc1bab8e61d6abd77c9a4ccd7865de2c7ed94a9aedc2548a90512edb3a244fcf97e73f8de64c051b78124a55a9ea34c203", 0x3d}, {&(0x7f0000000bc0)="af1a7c14f69185818f53be187d6ec82afa921cc63d77f2fdc3089bd6cce902a385a63c16361bf16964957e3f8fcfda7c0b398e6433de3f9fa792e22b6cf19f0367af326eff483b88ce89a6b250281da04ef0b9ac39a1", 0x56}, {&(0x7f0000000540)="756f4944b0fa8b65d1aa3fd4705a4dfb9e89b6461b7210bf735a03e230acf1dd56c1ac4d038bf691e337c19ffe97e0ad8bb321132d9fe4b36f66d7915993ce9d18395a44", 0x44}, {&(0x7f0000000c80)="92d502396ee9ed5ade60c96444846e7484185a079835fcfbac1fb2aa0e59d8affec6eb59fb758bf2b535accbf3e061e2a478062d286beebc5e565e837d65b5372bd56819775a95392d26e68c957c79f75ee255a2f0b4db76094adaed197da90b375529e110822967a211e0d0ea846e39c4b706efcdb619b6b029e32cad74853c1a2bec07368955350d82d7eb657e33cb0717", 0x92}], 0x7, 0x0, 0x0, 0x8d0}}], 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x145, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000804)
sched_setattr(0x0, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x9})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x44140, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f000047a000/0x3000)=nil, 0x3000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r8=>0x0, 0x0)
syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0})

8.474428239s ago: executing program 8 (id=10067):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

7.142505888s ago: executing program 5 (id=10071):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYRES8=r2], 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newchain={0x8c, 0x64, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x6}, {0x0, 0x2}, {0xffe0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @TCA_RATE={0x6, 0x5, {0x1}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x29}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_TCP_FLAGS={0x4, 0x47, 0x4}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000400)=@abs, 0x6e) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x16f, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
write$snddsp(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000140)=0xfff) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
epoll_create(0x208202) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xffff43a0, 0x1, 0xfffffffe, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x9004) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

6.7798932s ago: executing program 8 (id=10072):
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000000, 0xfa0e, 0xffffffff}, 0x0)
open(0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x1, 0x8000)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000180)='A')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
openat(0xffffffffffffff9c, 0x0, 0x515001, 0x488)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
socket$inet6(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

5.095786799s ago: executing program 4 (id=10079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000340012800b0001006970766c616e00002400028006000100010000000600010001000000060002000300000006c302000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

4.962052417s ago: executing program 1 (id=10081):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x48000)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000003c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}})
io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
sendmsg$nl_route_sched(r2, 0x0, 0x4008000)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x2}, {0x8}}}, 0x24}}, 0x40004)

4.757079179s ago: executing program 4 (id=10082):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

4.232018767s ago: executing program 8 (id=10084):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x5, 0x0, [{}, {}, {}, {}, {}]}}}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)
r5 = userfaultfd(0x80001) (async)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
syz_io_uring_setup(0x1318, &(0x7f0000000bc0)={0x0, 0x511b, 0x20, 0x1, 0x2f}, &(0x7f0000000c40)=<r6=>0x0, &(0x7f0000000c80)) (async)
r7 = mmap$IORING_OFF_SQES(&(0x7f00001fe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, 0xffffffffffffffff, 0x10000000) (async)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000d00)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x989680}, 0x1, 0x10, 0xa0254eeefb4686bd, {0x0, r8}}) (async, rerun: 64)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (rerun: 64)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000})

4.094100163s ago: executing program 1 (id=10085):
prctl$PR_GET_FP_MODE(0x2e)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0)

3.829756585s ago: executing program 5 (id=10086):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0xfffffffffffffdb9)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdb6}, 0x1, 0x0, 0x0, 0x20000040}, 0x200008c1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110}}], 0x18, 0x4c00}, 0x810)

3.708480305s ago: executing program 1 (id=10087):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x4008032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x0, 0x86)
fchdir(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0)
shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) (async)
r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r6 = fsopen(0x0, 0x0)
fsmount(r6, 0x0, 0xffba49b406bd3a93)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
syz_emit_ethernet(0x6e, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

3.617992753s ago: executing program 8 (id=10088):
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{0x3, 0x3, 0x8001, 0x0, 0x400c}, 0x400, 0x1, 0x6})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f000001d600)=@delchain={0xef0, 0x65, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0xeb0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0xffea}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xd48e, 0x1}, {0x10, 0x0, 0x4c}, 0x32, 0x8, 0x7}}, @TCA_RSVP_ACT={0xe84, 0x6, [@m_pedit={0xe80, 0x8, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x3, 0x8, 0x4, 0xa5f8}, 0x6, 0x7, [{0x9, 0x2, 0x7fffffff, 0x0, 0x6, 0x509}, {0x1, 0x8, 0xff, 0xfffffffe, 0x3, 0x3}]}, [{0x6, 0x7, 0x4, 0x3, 0x5d, 0xd1}, {0x1, 0x80000001, 0x0, 0x5, 0xf24, 0x9}, {0x6, 0x8, 0x955, 0x101, 0xffff0001, 0x306d}, {0xff, 0x101, 0x40, 0x9, 0x401, 0x80}, {0x101, 0x101, 0x9, 0x8, 0x8, 0x5}, {0x80, 0x2, 0x8, 0x8, 0x40, 0xec13}, {0x8, 0x3000000, 0xad2, 0x10001, 0x1, 0xfffffffd}, {0x7, 0x9, 0x3d, 0xf, 0x8, 0x1000000}, {0x0, 0x7, 0x3, 0x100000, 0x7ff, 0x8f56}, {0x4, 0xaef, 0x3, 0x1, 0x32b, 0x9}, {0x7fff, 0x9, 0x1, 0x80000000, 0x6529, 0x5fbd}, {0x10, 0x3, 0x2, 0x7, 0x880, 0x3}, {0x394, 0xfffffffd, 0x3ae, 0x5, 0xf, 0x4}, {0x7fffffff, 0x0, 0x3, 0x53f, 0x2, 0x1}, {0xd, 0x80000000, 0x7e1, 0x6, 0xb, 0x1}, {0x2, 0x0, 0x8, 0x9, 0x9, 0x4}, {0x7fff, 0x4, 0x9, 0x3, 0xe, 0x15}, {0x141, 0x9, 0x1, 0x1, 0x6, 0x8fc1}, {0xc41d, 0x9, 0x644a, 0x4, 0x7, 0x10001}, {0x6, 0x3, 0x6, 0xe, 0x5, 0x9}, {0xfffffeff, 0x800, 0x100, 0x7, 0x7, 0x4}, {0x9, 0x5, 0x2fc4, 0x10, 0x2, 0x9}, {0x66d, 0x5, 0x4, 0x8, 0x5, 0x5aa}, {0x10000, 0x8, 0x6, 0x1, 0x1, 0x1}, {0x7, 0x2, 0x7, 0xfff, 0x8, 0x6}, {0x7, 0x8648, 0x2, 0x3, 0x5c3d, 0x6}, {0x81, 0x200, 0x3, 0x7, 0x5, 0x71f}, {0x0, 0xffffffff, 0xffff, 0x0, 0x7, 0x2}, {0x4, 0x8, 0x401, 0x3, 0x0, 0xd0}, {0xf5c7, 0x69c78be9, 0x8, 0x9, 0x1}, {0x7ff, 0x2, 0x6, 0x3, 0x5db86d36, 0x4}, {0x1, 0x4, 0x1, 0xffffff81, 0x7fff, 0x9}, {0x100, 0x8, 0x6, 0x2, 0x80000001, 0x7}, {0x400, 0x3, 0x2380, 0x90, 0x27e, 0x7}, {0x50000, 0x3, 0x6, 0x7f, 0x2cb4, 0x1}, {0xd, 0x460, 0x0, 0x8, 0x694, 0xfffffffc}, {0x32a, 0x4d3, 0x9, 0x1, 0x7}, {0x1000, 0x9, 0x7, 0x329b, 0x3, 0xc0}, {0x81, 0x4, 0x2, 0x8, 0x35b, 0x4}, {0x30, 0x55be, 0x1ff, 0x6, 0x0, 0x7}, {0x7f, 0x84be, 0x4, 0xcd, 0x7fffffff, 0x4}, {0x0, 0x97, 0x2, 0x1, 0x7f, 0x6}, {0x6, 0x7, 0x1f16, 0xaa2b, 0xb5, 0xc23}, {0x10000, 0x8000, 0xc000, 0x2, 0x454, 0x55}, {0x1, 0x6, 0x2, 0x0, 0x18e7, 0x7}, {0xc7f5, 0x6, 0x10001, 0x0, 0x1, 0xffffffff}, {0x6, 0x9, 0x800, 0x5, 0x1, 0x2}, {0x0, 0x4, 0x200, 0x2, 0x6, 0x1}, {0x4, 0xe1, 0x5, 0x0, 0x9, 0xeae}, {0x1, 0x4, 0xfffffffa, 0xfffffffb, 0x80000000, 0x3ff}, {0x7, 0x13e2, 0x1000, 0x6, 0xc5de, 0x8}, {0x9b6, 0x9, 0x8, 0x6, 0x5, 0x8}, {0x7fffffff, 0x9, 0xfbe, 0x4, 0x1, 0x5}, {0x2, 0x2, 0x10000, 0x9, 0x3}, {0x10, 0x7, 0x3, 0xd, 0x401, 0x2}, {0x400, 0x0, 0x8, 0x7, 0x8001, 0xc60}, {0x6, 0x1, 0x7, 0x525, 0x6, 0xb9}, {0x0, 0x0, 0x7, 0x400, 0x9, 0x4}, {0x23c2aae1, 0xfff, 0x4, 0x3, 0x80000000, 0x5}, {0x23, 0x18, 0x1ff, 0x3ff, 0x0, 0x2}, {0x10001, 0x9, 0xe0a, 0x0, 0x722c, 0x75}, {0x7, 0x9, 0x5, 0x100, 0xffff1f5e, 0x3}, {0x2, 0x3, 0x6, 0x2c0000, 0x8, 0x7}, {0x3, 0x1, 0x3, 0x7d8, 0x1, 0xa5}, {0x7, 0xfffffffa, 0x2, 0xc43, 0x6, 0x6}, {0x0, 0xd, 0x7f, 0x7549, 0x5, 0x9}, {0x309, 0x7b2, 0x0, 0x0, 0x6, 0x4}, {0x2, 0x9, 0x32d, 0x15, 0x1, 0x6}, {0x1, 0x3, 0x80000001, 0x7, 0x4}, {0x7, 0x1, 0x8, 0x9, 0x3, 0x7}, {0x780, 0x40, 0x2, 0x9, 0x0, 0x4}, {0x6, 0x7ff, 0x7949b5c7, 0xbd35, 0x7, 0x9}, {0x9, 0x2, 0xfff, 0x8d5f, 0x5, 0x1}, {0x0, 0xfffffff9, 0x9, 0x4, 0x5, 0x9}, {0x1, 0x0, 0x8000, 0x3, 0x2, 0x80000001}, {0x2, 0x1, 0x9, 0x2400, 0x8}, {0x3, 0x0, 0x6, 0x9, 0xc, 0x13e}, {0x1000, 0x441, 0x4, 0x1, 0x1000, 0x4dc}, {0x1ff, 0x800, 0xe4, 0x3, 0x4436648, 0x7}, {0x1, 0x9, 0x9, 0x40, 0x7, 0xffffffff}, {0xfffffff9, 0x3, 0x5, 0xc, 0x1, 0x1}, {0x6, 0x7, 0x1, 0xfff, 0x7, 0x80000000}, {0x4, 0x0, 0x10, 0x6, 0x9, 0x2}, {0x7, 0x7, 0xa, 0x6880ac29, 0x5, 0x7ff}, {0x0, 0x8, 0xc5a, 0x9, 0xe, 0x102f}, {0xfffffe00, 0x3, 0x5, 0x7ff, 0xa, 0x80000001}, {0x2, 0x0, 0x7, 0x10001, 0x6, 0x4}, {0xfffffff9, 0xe7e, 0xffff8000, 0x7, 0x8, 0x8}, {0x3, 0xc4f, 0x9aa, 0xfffffffe, 0x1, 0x5}, {0x5, 0x200, 0x8, 0xf606, 0x80, 0x2}, {0x7, 0xcfb9, 0xa2, 0x7, 0xfffff67e, 0x80000001}, {0x8, 0x5, 0x1, 0x8, 0x1}, {0x0, 0x5, 0x6, 0x4, 0x200, 0x7}, {0x0, 0x5f1, 0x73fe, 0x3, 0xfffff642, 0xd9e}, {0x7f, 0x688, 0x6, 0x7, 0x3, 0x1}, {0x710, 0x816, 0x77de, 0x4, 0x7fff}, {0x7, 0x0, 0x5, 0x8276, 0x3, 0x1}, {0x3, 0xa, 0x0, 0xb, 0x2, 0x7d}, {0x0, 0xffff0000, 0x1, 0xd, 0x3, 0x8}, {0x0, 0x3, 0x7e60308, 0xad, 0xe, 0xa91}, {0x6, 0x8, 0x5, 0xffffffff, 0x10, 0x9c}, {0x3ff, 0x8, 0x4, 0x9, 0x5, 0x1000}, {0xffff, 0x1, 0x4749, 0x5, 0x3, 0x6}, {0x6, 0x7, 0x1, 0xcf, 0x80000000, 0x2}, {0x5, 0x5164, 0x7ff, 0xfffffff7, 0x80, 0x4}, {0xc1, 0x1, 0x200, 0x3, 0x5, 0x694}, {0x9, 0xe, 0x4, 0x0, 0x5, 0x2}, {0x6, 0x4, 0xffffffff, 0xcc5, 0xb6b, 0x5}, {0x8000, 0x6, 0x1, 0x0, 0x1, 0x8}, {0x0, 0x2, 0x2, 0x0, 0x4, 0x8}, {0x9, 0x7fffffff, 0x3, 0x7911, 0x1c7, 0x8}, {0x1, 0x2ba4, 0xa13, 0x4b, 0x8, 0xce6}, {0x47, 0xc, 0x9, 0x6, 0x0, 0x200}, {0x7, 0x2, 0xffffff44, 0x9, 0x9, 0x6}, {0x32d7, 0x6, 0x29f8, 0x1d1b00c1, 0x9, 0xdf}, {0x9, 0x10, 0x1, 0x637, 0x1a92, 0x2}, {0x0, 0x3, 0xdaa, 0x1, 0x5}, {0x7fff, 0x6, 0x7, 0x8, 0x3, 0x78000000}, {0xb6fd, 0x0, 0x2, 0x7, 0xffffffff, 0xbe}, {0x80, 0x8000, 0xf7c5, 0x78, 0x3ff}, {0x81, 0x7, 0x196, 0xf76, 0x0, 0x8}, {0xfffffff9, 0x3, 0xd091, 0x0, 0xd}, {0x752, 0x3ff, 0x200, 0x1, 0xffff4aa4, 0x1000}, {0xfc9, 0x6, 0x3, 0x4, 0x3, 0x2}, {0x2, 0x5, 0x9, 0x1, 0x4}, {0x8, 0x0, 0x6, 0x3691dd76, 0x2, 0x40}, {0x6, 0x1b, 0x6, 0xfffffff8, 0xc}, {0x3, 0x3, 0x7ff, 0xd, 0xfff, 0x1}], [{0x4}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x23fb582d6c16be0e}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x64eeb04b61763f36}, {0x3, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5e37d50cf01ef25c, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0xbc71f49a5b71a7a2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x570e89c7575c360a, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xef0}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x5fb1, &(0x7f0000000040)={0x0, 0xc472, 0x4000, 0x0, 0x256}, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x33565348, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
unshare(0x2000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})

3.493263904s ago: executing program 1 (id=10089):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x2404c004)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000000))
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/softlockup_count', 0x1, 0x10) (async)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="730000000000bf5f"], 0x8)
close(r2) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
unlinkat(r2, &(0x7f00000029c0)='./file0\x00', 0x0) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000002a00)={0xc1fc, 0x8}) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2) (async, rerun: 32)
io_destroy(0x0) (rerun: 32)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) (async)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r5)
connect$inet(r6, 0x0, 0x0) (async)
sendto$inet(r6, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)

3.409029497s ago: executing program 1 (id=10090):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000480)=[@enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x61, {"0f20c035000000400f22c06764f3450f6f94c2b80f4a71f4c403fd7cd7f866ba430066b8f3ff66ef66baf80cb89023de80ef66bafc0cb893000000ef0f01f80f017ec636654d0fc76800f366420f01f8"}}], 0x91})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2000000000200002)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x0, 0x50000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$usbfs(&(0x7f0000000140), 0x204, 0x802)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x40000000000ac5)
syz_clone3(&(0x7f0000000900)={0x223810100, &(0x7f00000001c0), 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600))
pipe2(&(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$TIOCMGET(r5, 0x5415, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0)
add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000700)="eee8844b6f41d7630cd7cee0bbc3fdf3d5c9ab12de86e0c385b085982cc91d5d7e0b2f51e55c40bf6f9907981e91a6c3fb3400795e425fa8e53311e36b69f721074eabce4f22010b2978269e", 0x4c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

2.781296426s ago: executing program 5 (id=10092):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/207, 0xcf}], 0x2}, 0x7fffffff}], 0x1, 0x2022, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) (fail_nth: 6)

2.745597714s ago: executing program 7 (id=10093):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r1=>0x0})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r3 = epoll_create1(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1634a2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)

2.298552218s ago: executing program 7 (id=10094):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = syz_open_dev$video(&(0x7f0000002140), 0x1ad, 0x0)
ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000002180))
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800674405c57e0a99819f2ca68aa335d"], 0x2c}}, 0x80)

2.085288098s ago: executing program 5 (id=10095):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x5}}}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4008000)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x100)
fchmodat(r8, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004)

2.050292118s ago: executing program 4 (id=10096):
r0 = syz_usb_connect(0x6, 0x16, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x99, 0xf2, 0x10, 0x10c4, 0x8281, 0xca3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x0, 0xc7, 0x45, 0x93}}]}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

1.869333572s ago: executing program 7 (id=10097):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x141582)
ioctl$VIDIOC_S_STD(r3, 0xc0405626, &(0x7f00000000c0)=0x3200e0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {0x0, 0xffe0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008849}, 0x80)

1.773911405s ago: executing program 1 (id=10098):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xff}, 0xff}, 0x18)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e44785ae9d7ff67347c3819271408a4975a52c1ab9b8b4db3945d10328f51895d704dc33a47d3a158da988456d30026b4cf186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf153871fb0d60047868b361ca6aa84dcd0b157653c5e892962c8000000000000000", 0x70}], 0x1, 0x0, 0x0, 0xfacd05679e69b95}], 0x1, 0x30040803)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0})
pipe(&(0x7f0000000140))
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r7)
pipe(&(0x7f0000000340))
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000000)

1.35018054s ago: executing program 7 (id=10099):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2])
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

1.298088256s ago: executing program 4 (id=10100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000004a0000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e"], 0x90}, 0x1, 0xff00000000000000, 0x0, 0x20000044}, 0x8044)

1.157997065s ago: executing program 5 (id=10101):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x6, 0x8, 0x40, @mcast1, @remote, 0x700, 0x1, 0x6, 0x4003}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x44}}, 0x400c810)

804.397684ms ago: executing program 7 (id=10102):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000055aa00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

797.460481ms ago: executing program 4 (id=10103):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00')
r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc})
umount2(&(0x7f0000000440)='./file0\x00', 0xb)

729.509162ms ago: executing program 5 (id=10104):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000100c8a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002000000090503020002000000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

160.633909ms ago: executing program 8 (id=10105):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x1400000, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
unshare(0x8040480)
r1 = socket$unix(0x1, 0x1, 0x0)
cachestat(r1, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>r2, 0x80000})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
mmap(&(0x7f0000065000/0x2000)=nil, 0x2000, 0x4, 0x13, r4, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x40c280, 0x1)
fcntl$setlease(r5, 0x400, 0x1)
fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r6 = socket(0x1e, 0x5, 0x7)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
write(r9, &(0x7f0000000900)="0ad7", 0x2)

100.626634ms ago: executing program 7 (id=10106):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

0s ago: executing program 4 (id=10107):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\v'], 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2639.532522][ T5824] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2639.552156][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9743'.
[ 2639.567966][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9743'.
[ 2639.582910][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2639.591624][ T5894] m920x_read = error: -19
[ 2639.599623][T31346] vhci_hcd vhci_hcd.5: vhci_device speed not set
[ 2639.607768][ T5894] dvb-usb: error while querying for an remote control event.
[ 2639.727267][ T5824] usb 6-1: config 0 descriptor??
[ 2639.826387][ T5894] m920x_read = error: -19
[ 2639.844121][ T5894] dvb-usb: error while querying for an remote control event.
[ 2639.966564][ T5894] m920x_read = error: -19
[ 2639.971014][ T5894] dvb-usb: error while querying for an remote control event.
[ 2640.140277][ T5894] m920x_read = error: -19
[ 2640.156885][ T5894] dvb-usb: error while querying for an remote control event.
[ 2640.171255][ T5824] hid_parser_main: 28 callbacks suppressed
[ 2640.171272][ T5824] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0
[ 2640.231112][ T5824] cp2112 0003:10C4:EA90.0075: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[ 2640.297092][ T6919] usb 5-1: USB disconnect, device number 25
[ 2640.316378][ T5894] m920x_read = error: -19
[ 2640.320792][ T5894] dvb-usb: error while querying for an remote control event.
[ 2640.367894][ T5824] cp2112 0003:10C4:EA90.0075: Part Number: 0x82 Device Version: 0xFE
[ 2640.456295][ T5894] m920x_read = error: -19
[ 2640.495609][ T5894] dvb-usb: error while querying for an remote control event.
[ 2640.724270][ T5894] m920x_read = error: -19
[ 2640.752149][ T5894] dvb-usb: error while querying for an remote control event.
[ 2640.886574][T31346] m920x_read = error: -19
[ 2640.891885][T31346] dvb-usb: error while querying for an remote control event.
[ 2640.990387][ T5824] cp2112 0003:10C4:EA90.0075: error reading lock byte: -71
[ 2641.016281][ T5894] m920x_read = error: -19
[ 2641.020978][ T5894] dvb-usb: error while querying for an remote control event.
[ 2641.039135][ T5824] usb 6-1: USB disconnect, device number 64
[ 2641.168577][ T5894] m920x_read = error: -19
[ 2641.173134][ T5894] dvb-usb: error while querying for an remote control event.
[ 2641.316355][ T5894] m920x_read = error: -19
[ 2641.326267][ T5894] dvb-usb: error while querying for an remote control event.
[ 2641.526613][ T5894] m920x_read = error: -19
[ 2641.531349][ T5894] dvb-usb: error while querying for an remote control event.
[ 2641.686095][ T5894] m920x_read = error: -19
[ 2641.691634][ T5894] dvb-usb: error while querying for an remote control event.
[ 2641.816432][ T5894] m920x_read = error: -19
[ 2641.820928][ T5894] dvb-usb: error while querying for an remote control event.
[ 2641.896075][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 2642.006459][ T5894] m920x_read = error: -19
[ 2642.014774][ T5894] dvb-usb: error while querying for an remote control event.
[ 2642.146401][ T5894] m920x_read = error: -19
[ 2642.153262][ T5894] dvb-usb: error while querying for an remote control event.
[ 2642.346254][T31346] m920x_read = error: -19
[ 2642.350717][T31346] dvb-usb: error while querying for an remote control event.
[ 2642.496305][T31346] m920x_read = error: -19
[ 2642.500853][T31346] dvb-usb: error while querying for an remote control event.
[ 2642.616215][ T5894] m920x_read = error: -19
[ 2642.623022][ T5894] dvb-usb: error while querying for an remote control event.
[ 2642.803989][ T5894] m920x_read = error: -19
[ 2642.831906][ T5894] dvb-usb: error while querying for an remote control event.
[ 2642.932682][T10753] loop5: detected capacity change from 0 to 7
[ 2642.940153][T10753] Dev loop5: unable to read RDB block 7
[ 2642.947034][T10753]  loop5: AHDI p1
[ 2642.951018][T10753] loop5: partition table partially beyond EOD, truncated
[ 2642.986634][ T5894] m920x_read = error: -19
[ 2642.999871][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.146037][ T5894] m920x_read = error: -19
[ 2643.150457][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.286158][ T5894] m920x_read = error: -19
[ 2643.290673][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.416544][ T5894] m920x_read = error: -19
[ 2643.436178][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.566767][ T5894] m920x_read = error: -19
[ 2643.580252][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.696524][T29212] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 2643.696724][ T5894] m920x_read = error: -19
[ 2643.734014][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.856370][T29212] usb 6-1: device descriptor read/64, error -71
[ 2643.856574][ T5894] m920x_read = error: -19
[ 2643.874001][ T5894] dvb-usb: error while querying for an remote control event.
[ 2643.998519][ T5894] m920x_read = error: -19
[ 2644.008718][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.095954][T29212] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 2644.109981][T10780] kvm: kvm [10778]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2000000
[ 2644.144119][T10779] syzkaller0: entered promiscuous mode
[ 2644.150080][T10779] syzkaller0: entered allmulticast mode
[ 2644.156069][ T5894] m920x_read = error: -19
[ 2644.160632][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.257422][T29212] usb 6-1: device descriptor read/64, error -71
[ 2644.286077][ T5894] m920x_read = error: -19
[ 2644.290478][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.324422][T10788] loop5: detected capacity change from 0 to 7
[ 2644.335768][ T9733] Dev loop5: unable to read RDB block 7
[ 2644.341764][ T9733]  loop5: AHDI p1
[ 2644.345474][ T9733] loop5: partition table partially beyond EOD, truncated
[ 2644.357718][T10788] Dev loop5: unable to read RDB block 7
[ 2644.367507][T10788]  loop5: AHDI p1
[ 2644.372102][T10788] loop5: partition table partially beyond EOD, truncated
[ 2644.386367][T29212] usb usb6-port1: attempt power cycle
[ 2644.426060][ T5894] m920x_read = error: -19
[ 2644.448965][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.577008][ T5894] m920x_read = error: -19
[ 2644.581697][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.698799][ T5894] m920x_read = error: -19
[ 2644.704468][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.768406][T29212] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 2644.799819][T29212] usb 6-1: device descriptor read/8, error -71
[ 2644.840482][ T5894] m920x_read = error: -19
[ 2644.844936][ T5894] dvb-usb: error while querying for an remote control event.
[ 2644.961573][T31346] m920x_read = error: -19
[ 2644.966222][T31346] dvb-usb: error while querying for an remote control event.
[ 2645.056093][T29212] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 2645.084504][T29212] usb 6-1: device descriptor read/8, error -71
[ 2645.090816][T31346] m920x_read = error: -19
[ 2645.090848][T31346] dvb-usb: error while querying for an remote control event.
[ 2645.208080][T31346] m920x_read = error: -19
[ 2645.212463][T31346] dvb-usb: error while querying for an remote control event.
[ 2645.227556][T29212] usb usb6-port1: unable to enumerate USB device
[ 2645.414911][T31346] m920x_read = error: -19
[ 2645.426553][T31346] dvb-usb: error while querying for an remote control event.
[ 2645.725153][T31346] m920x_read = error: -19
[ 2645.730139][T31346] dvb-usb: error while querying for an remote control event.
[ 2645.856473][T31346] m920x_read = error: -19
[ 2645.860974][T31346] dvb-usb: error while querying for an remote control event.
[ 2645.992511][T31346] m920x_read = error: -19
[ 2645.997507][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.120975][T31346] m920x_read = error: -19
[ 2646.125411][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.246521][T31346] m920x_read = error: -19
[ 2646.251312][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.376080][T31346] m920x_read = error: -19
[ 2646.380498][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.496599][T31346] m920x_read = error: -19
[ 2646.500995][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.559722][T10801] m920x_read = error: -19
[ 2646.650516][T31346] m920x_read = error: -19
[ 2646.654880][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.776555][T31346] m920x_read = error: -19
[ 2646.780962][T31346] dvb-usb: error while querying for an remote control event.
[ 2646.927204][T31346] m920x_read = error: -19
[ 2646.931639][T31346] dvb-usb: error while querying for an remote control event.
[ 2647.057129][T31346] m920x_read = error: -19
[ 2647.063918][T31346] dvb-usb: error while querying for an remote control event.
[ 2647.216351][T31346] m920x_read = error: -19
[ 2647.220776][T31346] dvb-usb: error while querying for an remote control event.
[ 2647.346077][T31346] m920x_read = error: -19
[ 2647.350682][T31346] dvb-usb: error while querying for an remote control event.
[ 2647.514461][T31346] m920x_read = error: -19
[ 2647.525987][T31346] dvb-usb: error while querying for an remote control event.
[ 2647.764542][T31346] m920x_read = error: -19
[ 2647.784854][T31346] dvb-usb: error while querying for an remote control event.
[ 2647.921898][T31346] m920x_read = error: -19
[ 2647.959832][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.076119][T31346] m920x_read = error: -19
[ 2648.080572][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.236783][T31346] m920x_read = error: -19
[ 2648.241278][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.379172][T31346] m920x_read = error: -19
[ 2648.383621][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.497504][T31346] m920x_read = error: -19
[ 2648.501935][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.616051][T31346] m920x_read = error: -19
[ 2648.620496][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.738586][T31346] m920x_read = error: -19
[ 2648.743065][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.867575][T31346] m920x_read = error: -19
[ 2648.872838][T31346] dvb-usb: error while querying for an remote control event.
[ 2648.996377][T31346] m920x_read = error: -19
[ 2649.001188][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.122089][T31346] m920x_read = error: -19
[ 2649.127152][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.242557][T31346] m920x_read = error: -19
[ 2649.247315][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.378481][T31346] m920x_read = error: -19
[ 2649.382903][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.501255][T31346] m920x_read = error: -19
[ 2649.505663][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.617753][T31346] m920x_read = error: -19
[ 2649.622285][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.736287][T31346] m920x_read = error: -19
[ 2649.740969][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.870111][T31346] m920x_read = error: -19
[ 2649.875388][T31346] dvb-usb: error while querying for an remote control event.
[ 2649.986276][T31346] m920x_read = error: -19
[ 2649.990800][T31346] dvb-usb: error while querying for an remote control event.
[ 2650.109304][T31346] m920x_read = error: -19
[ 2650.113768][T31346] dvb-usb: error while querying for an remote control event.
[ 2650.129530][T10793] 0ªî{X¹¦: left allmulticast mode
[ 2650.152200][T10793] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[ 2650.162218][T10793] vti0: left allmulticast mode
[ 2650.169237][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2650.182413][T10793] geneve2: left allmulticast mode
[ 2650.195249][T10793] bridge1: left allmulticast mode
[ 2650.200972][T10793] bond3: left allmulticast mode
[ 2650.226863][ T5824] m920x_read = error: -19
[ 2650.231271][ T5824] dvb-usb: error while querying for an remote control event.
[ 2650.376112][ T5824] m920x_read = error: -19
[ 2650.382863][ T5824] dvb-usb: error while querying for an remote control event.
[ 2650.419833][T10826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2650.475710][T10826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2650.507290][ T5824] m920x_read = error: -19
[ 2650.511702][ T5824] dvb-usb: error while querying for an remote control event.
[ 2650.621792][T10833] loop5: detected capacity change from 0 to 7
[ 2650.648533][ T5824] m920x_read = error: -19
[ 2650.654008][T10833] Dev loop5: unable to read RDB block 7
[ 2650.666111][ T5824] dvb-usb: error while querying for an remote control event.
[ 2650.667003][T10833]  loop5: AHDI p1
[ 2650.696049][T10833] loop5: partition table partially beyond EOD, truncated
[ 2650.748653][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9780'.
[ 2651.212629][ T5824] m920x_read = error: -19
[ 2651.226842][ T5824] dvb-usb: error while querying for an remote control event.
[ 2651.251408][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2651.336210][ T5824] m920x_read = error: -19
[ 2651.340585][ T5824] dvb-usb: error while querying for an remote control event.
[ 2651.498089][ T5824] m920x_read = error: -19
[ 2651.504797][ T5824] dvb-usb: error while querying for an remote control event.
[ 2651.636032][ T5824] m920x_read = error: -19
[ 2651.640437][ T5824] dvb-usb: error while querying for an remote control event.
[ 2651.936238][ T5824] m920x_read = error: -19
[ 2651.942908][ T5824] dvb-usb: error while querying for an remote control event.
[ 2652.138470][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.145261][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2652.283986][ T5824] m920x_read = error: -19
[ 2652.292991][ T5824] dvb-usb: error while querying for an remote control event.
[ 2652.718230][ T5824] m920x_read = error: -19
[ 2652.722604][ T5824] dvb-usb: error while querying for an remote control event.
[ 2652.856043][ T5824] m920x_read = error: -19
[ 2652.870327][ T5824] dvb-usb: error while querying for an remote control event.
[ 2653.006051][T29212] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[ 2653.032992][ T5824] m920x_read = error: -19
[ 2653.061391][ T5824] dvb-usb: error while querying for an remote control event.
[ 2653.135991][T29212] usb 6-1: device descriptor read/64, error -71
[ 2653.186083][ T5824] m920x_read = error: -19
[ 2653.190552][ T5824] dvb-usb: error while querying for an remote control event.
[ 2653.367172][ T5824] m920x_read = error: -19
[ 2653.381718][ T5824] dvb-usb: error while querying for an remote control event.
[ 2653.387983][T29212] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[ 2653.526040][T29212] usb 6-1: device descriptor read/64, error -71
[ 2653.526085][ T5824] m920x_read = error: -19
[ 2653.526113][ T5824] dvb-usb: error while querying for an remote control event.
[ 2653.643547][T29212] usb usb6-port1: attempt power cycle
[ 2653.661541][ T5824] m920x_read = error: -19
[ 2653.667923][ T5824] dvb-usb: error while querying for an remote control event.
[ 2653.858349][ T5824] m920x_read = error: -19
[ 2653.866444][ T5824] dvb-usb: error while querying for an remote control event.
[ 2654.302294][T29212] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[ 2654.336375][ T5824] m920x_read = error: -19
[ 2654.340794][ T5824] dvb-usb: error while querying for an remote control event.
[ 2654.346164][T29212] usb 6-1: device descriptor read/8, error -71
[ 2654.576315][ T5824] m920x_read = error: -19
[ 2654.580947][ T5824] dvb-usb: error while querying for an remote control event.
[ 2654.635993][T29212] usb 6-1: new full-speed USB device number 72 using dummy_hcd
[ 2654.656780][T29212] usb 6-1: device descriptor read/8, error -71
[ 2654.736133][ T5824] m920x_read = error: -19
[ 2654.740538][ T5824] dvb-usb: error while querying for an remote control event.
[ 2654.776513][T29212] usb usb6-port1: unable to enumerate USB device
[ 2654.807312][T23674] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2654.866027][ T5824] m920x_read = error: -19
[ 2654.870551][ T5824] dvb-usb: error while querying for an remote control event.
[ 2654.986670][ T5824] m920x_read = error: -19
[ 2654.988751][T23674] usb 5-1: Using ep0 maxpacket: 32
[ 2654.991077][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.014522][T23674] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2655.023658][T10889] loop5: detected capacity change from 0 to 7
[ 2655.036768][T10889] Dev loop5: unable to read RDB block 7
[ 2655.042976][T23674] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[ 2655.054996][T10889]  loop5: AHDI p1
[ 2655.059595][T10889] loop5: partition table partially beyond EOD, truncated
[ 2655.077102][T23674] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20
[ 2655.118891][ T5824] m920x_read = error: -19
[ 2655.123418][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.134936][T23674] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2655.173606][T23674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2655.216916][T23674] usb 5-1: SerialNumber: syz
[ 2655.236136][ T5824] m920x_read = error: -19
[ 2655.241278][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.273133][T10879] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2655.302975][T23674] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[ 2655.377854][ T5824] m920x_read = error: -19
[ 2655.382441][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.445986][T29212] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 2655.528170][ T5824] m920x_read = error: -19
[ 2655.532584][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.548613][T23674] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[ 2655.616397][T23674] usb 5-1: USB disconnect, device number 26
[ 2655.646367][T29212] usb 2-1: Using ep0 maxpacket: 8
[ 2655.686103][ T5824] m920x_read = error: -19
[ 2655.690533][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.716911][T29212] usb 2-1: config 9 has an invalid interface number: 128 but max is 3
[ 2655.725156][T29212] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping
[ 2655.748339][T29212] usb 2-1: config 9 has an invalid interface number: 56 but max is 3
[ 2655.786149][T29212] usb 2-1: config 9 has an invalid interface number: 104 but max is 3
[ 2655.826562][T29212] usb 2-1: config 9 has an invalid interface number: 220 but max is 3
[ 2655.854587][ T5824] m920x_read = error: -19
[ 2655.876143][ T5824] dvb-usb: error while querying for an remote control event.
[ 2655.912801][T29212] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[ 2655.931524][T29212] usb 2-1: config 9 has an invalid descriptor of length 151, skipping remainder of the config
[ 2655.954609][T29212] usb 2-1: config 9 has 5 interfaces, different from the descriptor's value: 4
[ 2655.972026][T29212] usb 2-1: config 9 has no interface number 0
[ 2655.993096][T29212] usb 2-1: config 9 has no interface number 2
[ 2656.018354][T29212] usb 2-1: config 9 has no interface number 3
[ 2656.020089][ T5824] m920x_read = error: -19
[ 2656.024665][T29212] usb 2-1: config 9 has no interface number 4
[ 2656.140735][T29212] usb 2-1: config 9 interface 128 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 2656.141771][ T5824] dvb-usb: error while querying for an remote control event.
[ 2656.286167][ T5824] m920x_read = error: -19
[ 2656.298919][ T5824] dvb-usb: error while querying for an remote control event.
[ 2656.332291][T29212] usb 2-1: config 9 interface 128 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 16
[ 2656.447343][ T5824] m920x_read = error: -19
[ 2656.454282][ T5824] dvb-usb: error while querying for an remote control event.
[ 2656.460026][T29212] usb 2-1: too many endpoints for config 9 interface 56 altsetting 230: 49, using maximum allowed: 30
[ 2656.525996][T29212] usb 2-1: config 9 interface 56 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[ 2656.551107][T29212] usb 2-1: config 9 interface 56 altsetting 230 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2656.573067][T29212] usb 2-1: config 9 interface 56 altsetting 230 has a duplicate endpoint with address 0x5, skipping
[ 2656.581577][ T5824] m920x_read = error: -19
[ 2656.584117][T29212] usb 2-1: config 9 interface 56 altsetting 230 has a duplicate endpoint with address 0x1, skipping
[ 2656.607322][ T5824] dvb-usb: error while querying for an remote control event.
[ 2656.614870][T29212] usb 2-1: config 9 interface 56 altsetting 230 has a duplicate endpoint with address 0x1, skipping
[ 2656.694159][ T5824] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0
[ 2656.714782][ T5824] hid-generic 0000:0000:0000.0076: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2656.785979][T29212] usb 2-1: config 9 interface 56 altsetting 230 bulk endpoint 0xF has invalid maxpacket 64
[ 2656.786028][ T5894] m920x_read = error: -19
[ 2656.822183][ T5894] dvb-usb: error while querying for an remote control event.
[ 2656.836195][T29212] usb 2-1: config 9 interface 56 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[ 2656.892363][T29212] usb 2-1: config 9 interface 56 altsetting 230 has a duplicate endpoint with address 0x4, skipping
[ 2656.946009][ T5894] m920x_read = error: -19
[ 2656.950723][ T5894] dvb-usb: error while querying for an remote control event.
[ 2656.960836][T29212] usb 2-1: config 9 interface 56 altsetting 230 has 12 endpoint descriptors, different from the interface descriptor's value: 49
[ 2657.024528][T29212] usb 2-1: config 9 interface 1 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 2657.069512][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2657.078321][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2657.087259][ T5894] m920x_read = error: -19
[ 2657.092920][ T5894] dvb-usb: error while querying for an remote control event.
[ 2657.136055][T29212] usb 2-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[ 2657.167756][T29212] usb 2-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[ 2657.196160][T29212] usb 2-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[ 2657.218141][T29212] usb 2-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x4, skipping
[ 2657.219574][ T5894] m920x_read = error: -19
[ 2657.245915][ T5894] dvb-usb: error while querying for an remote control event.
[ 2657.260685][T29212] usb 2-1: config 9 interface 104 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 2657.292304][T29212] usb 2-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[ 2657.316078][T29212] usb 2-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x4, skipping
[ 2657.349689][T29212] usb 2-1: config 9 interface 104 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[ 2657.385966][T29212] usb 2-1: config 9 interface 220 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 2657.416060][ T5894] m920x_read = error: -19
[ 2657.429507][ T5894] dvb-usb: error while querying for an remote control event.
[ 2657.463053][T29212] usb 2-1: config 9 interface 56 has no altsetting 0
[ 2657.480328][T29212] usb 2-1: config 9 interface 1 has no altsetting 0
[ 2657.512848][T29212] usb 2-1: config 9 interface 104 has no altsetting 0
[ 2657.530898][T29212] usb 2-1: config 9 interface 220 has no altsetting 0
[ 2657.561152][T29212] usb 2-1: New USB device found, idVendor=19d2, idProduct=0076, bcdDevice=6b.1d
[ 2657.574050][T29212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2657.582278][ T5894] m920x_read = error: -19
[ 2657.582312][ T5894] dvb-usb: error while querying for an remote control event.
[ 2657.596376][T29212] usb 2-1: Product: 쉡�뻰뀎쀿ᑻ现鴃˒⬌姱㋋뀵壢㦻��⣠듒캭㙭낛뢖�箙鶰ໆର㡞䩄뤟鿊浣�៱䈑ᴮ⧬嚕�餼꾿�ᣕ�뚅ࠖ�谺ഹ꨸�樽�鄥⡹�촞艟ϟ籔ឳ挎牔僿ⶂ깤ᗯ臘ആꕔ�굪╠�櫬ᵖ䗬��ﺅ睊猆劒�ⶔ��妺説⋯�☗�㽽ᣯ勇㖭껇
[ 2657.637967][T29212] usb 2-1: Manufacturer: й
[ 2657.642647][T29212] usb 2-1: SerialNumber: à°�
[ 2657.653735][T10892] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 2657.686080][ T5894] m920x_read = error: -19
[ 2657.690510][ T5894] dvb-usb: error while querying for an remote control event.
[ 2657.810028][ T5894] m920x_read = error: -19
[ 2657.816280][ T5894] dvb-usb: error while querying for an remote control event.
[ 2657.940022][ T5894] m920x_read = error: -19
[ 2657.954693][ T5894] dvb-usb: error while querying for an remote control event.
[ 2658.193527][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2658.202100][ T5894] m920x_read = error: -19
[ 2658.261042][ T5894] dvb-usb: error while querying for an remote control event.
[ 2658.352526][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2658.403106][T29212] option 2-1:9.128: GSM modem (1-port) converter detected
[ 2658.416084][ T5894] m920x_read = error: -19
[ 2658.420818][ T5894] dvb-usb: error while querying for an remote control event.
[ 2658.543956][T29212] usb 2-1: USB disconnect, device number 37
[ 2658.556406][T31346] m920x_read = error: -19
[ 2658.561216][T31346] dvb-usb: error while querying for an remote control event.
[ 2658.568076][T29212] option 2-1:9.128: device disconnected
[ 2658.686006][ T5894] m920x_read = error: -19
[ 2658.721942][ T5894] dvb-usb: error while querying for an remote control event.
[ 2658.795948][T31346] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 2658.846729][ T5894] m920x_read = error: -19
[ 2658.851249][ T5894] dvb-usb: error while querying for an remote control event.
[ 2658.948124][T31346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2658.959520][T31346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2658.969663][ T5894] m920x_read = error: -19
[ 2658.984898][ T5894] dvb-usb: error while querying for an remote control event.
[ 2658.992997][T31346] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 2659.011916][T31346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.035265][T31346] usb 5-1: config 0 descriptor??
[ 2659.129058][ T5894] m920x_read = error: -19
[ 2659.133545][ T5894] dvb-usb: error while querying for an remote control event.
[ 2659.276147][ T5894] m920x_read = error: -19
[ 2659.290950][ T5894] dvb-usb: error while querying for an remote control event.
[ 2659.436121][ T5894] m920x_read = error: -19
[ 2659.445108][ T5894] dvb-usb: error while querying for an remote control event.
[ 2659.471065][T31346] hid-thrustmaster 0003:044F:B65D.0077: unknown main item tag 0x0
[ 2659.500787][T31346] hid-thrustmaster 0003:044F:B65D.0077: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[ 2659.520365][T31346] hid-thrustmaster 0003:044F:B65D.0077: Wrong number of endpoints?
[ 2659.587498][T31346] m920x_read = error: -19
[ 2659.603181][T31346] dvb-usb: error while querying for an remote control event.
[ 2659.732161][ T5894] m920x_read = error: -19
[ 2659.748307][ T5894] dvb-usb: error while querying for an remote control event.
[ 2659.896200][ T5894] m920x_read = error: -19
[ 2659.901529][ T5894] dvb-usb: error while querying for an remote control event.
[ 2660.056406][T31346] m920x_read = error: -19
[ 2660.084120][    C1] hid-thrustmaster 0003:044F:B65D.0077: URB to get model id failed with error -71
[ 2660.105313][T31346] dvb-usb: error while querying for an remote control event.
[ 2660.115617][ T5824] usb 5-1: USB disconnect, device number 27
[ 2660.155953][ T5894] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 2660.223607][T10954] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9812'.
[ 2660.238241][T10955] syzkaller0: entered promiscuous mode
[ 2660.243971][T10955] syzkaller0: entered allmulticast mode
[ 2660.249921][T31346] m920x_read = error: -19
[ 2660.255238][T31346] dvb-usb: error while querying for an remote control event.
[ 2660.316283][ T5894] usb 6-1: Using ep0 maxpacket: 8
[ 2660.323176][ T5894] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 2660.331640][ T5894] usb 6-1: config 0 has no interface number 0
[ 2660.342623][ T5894] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2660.366187][ T5894] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2660.378523][ T5824] m920x_read = error: -19
[ 2660.383368][ T5824] dvb-usb: error while querying for an remote control event.
[ 2660.391488][ T5894] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2660.404460][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9814'.
[ 2660.419114][ T5894] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2660.445247][T10962] FAULT_INJECTION: forcing a failure.
[ 2660.445247][T10962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2660.452677][ T5894] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2660.461286][T10962] CPU: 0 UID: 0 PID: 10962 Comm: syz.1.9815 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2660.461316][T10962] Tainted: [L]=SOFTLOCKUP
[ 2660.461323][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2660.461333][T10962] Call Trace:
[ 2660.461341][T10962]  <TASK>
[ 2660.461348][T10962]  dump_stack_lvl+0xe8/0x150
[ 2660.461377][T10962]  should_fail_ex+0x412/0x560
[ 2660.461403][T10962]  _copy_to_user+0x31/0xb0
[ 2660.461430][T10962]  video_usercopy+0xe0a/0x1400
[ 2660.461462][T10962]  ? __pfx___video_do_ioctl+0x10/0x10
[ 2660.461485][T10962]  ? __pfx_video_usercopy+0x10/0x10
[ 2660.461516][T10962]  ? __fget_files+0x2a/0x420
[ 2660.461539][T10962]  ? __fget_files+0x2a/0x420
[ 2660.461556][T10962]  ? __fget_files+0x3a0/0x420
[ 2660.461577][T10962]  v4l2_ioctl+0x18d/0x1e0
[ 2660.461600][T10962]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 2660.461620][T10962]  __se_sys_ioctl+0xfc/0x170
[ 2660.461647][T10962]  do_syscall_64+0xe2/0xf80
[ 2660.461666][T10962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2660.461683][T10962]  ? trace_irq_disable+0x37/0x100
[ 2660.461699][T10962]  ? clear_bhb_loop+0x60/0xb0
[ 2660.461720][T10962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2660.461737][T10962] RIP: 0033:0x7fad9bb9aeb9
[ 2660.461754][T10962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2660.461769][T10962] RSP: 002b:00007fad9ca21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2660.461789][T10962] RAX: ffffffffffffffda RBX: 00007fad9be15fa0 RCX: 00007fad9bb9aeb9
[ 2660.461802][T10962] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003
[ 2660.461814][T10962] RBP: 00007fad9ca21090 R08: 0000000000000000 R09: 0000000000000000
[ 2660.461825][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2660.461836][T10962] R13: 00007fad9be16038 R14: 00007fad9be15fa0 R15: 00007fad9bf3fa48
[ 2660.461865][T10962]  </TASK>
[ 2660.553807][T10964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2660.557246][ T5824] m920x_read = error: -19
[ 2660.604878][T10964] syzkaller0: entered allmulticast mode
[ 2660.619436][ T5824] dvb-usb: error while querying for an remote control event.
[ 2660.726133][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9816'.
[ 2660.742733][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9816'.
[ 2660.773889][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2660.794482][T10967] syzkaller0: entered promiscuous mode
[ 2660.800191][T10967] syzkaller0: entered allmulticast mode
[ 2660.812974][ T5894] usb 6-1: config 0 descriptor??
[ 2660.866324][ T5894] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2660.883910][T10970] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 2660.940004][T10964] tipc: Resetting bearer <eth:syzkaller0>
[ 2660.947653][T10970] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9819'.
[ 2660.963397][T10970] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 2660.976091][ T5894] m920x_read = error: -19
[ 2660.980566][ T5894] dvb-usb: error while querying for an remote control event.
[ 2661.283690][ T5894] m920x_read = error: -19
[ 2661.309009][ T5894] dvb-usb: error while querying for an remote control event.
[ 2661.665926][ T5824] tipc: Node number set to 3641334144
[ 2661.799722][ T5894] m920x_read = error: -19
[ 2661.805488][ T5894] dvb-usb: error while querying for an remote control event.
[ 2661.899350][T10963] tipc: Disabling bearer <eth:syzkaller0>
[ 2661.916658][ T5894] m920x_read = error: -19
[ 2661.921156][ T5894] dvb-usb: error while querying for an remote control event.
[ 2661.947674][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9821'.
[ 2662.046462][ T5894] m920x_read = error: -19
[ 2662.052870][ T5894] dvb-usb: error while querying for an remote control event.
[ 2662.237936][ T5894] m920x_read = error: -19
[ 2662.246757][ T5894] dvb-usb: error while querying for an remote control event.
[ 2663.012429][ T5894] m920x_read = error: -19
[ 2663.020158][ T5894] dvb-usb: error while querying for an remote control event.
[ 2663.109678][ T5894] usb 6-1: USB disconnect, device number 73
[ 2663.140162][ T5894] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 2663.155994][T31346] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2663.208915][ T5824] m920x_read = error: -19
[ 2663.213801][ T5824] dvb-usb: error while querying for an remote control event.
[ 2663.336076][T31346] usb 5-1: Using ep0 maxpacket: 16
[ 2663.366590][ T5824] m920x_read = error: -19
[ 2663.376040][T31346] usb 5-1: config 0 has no interfaces?
[ 2663.384731][ T5824] dvb-usb: error while querying for an remote control event.
[ 2663.436428][T31346] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2663.465995][T31346] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2663.474190][T31346] usb 5-1: Manufacturer: syz
[ 2663.531866][T11002] FAULT_INJECTION: forcing a failure.
[ 2663.531866][T11002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2663.538068][ T5894] m920x_read = error: -19
[ 2663.557199][T31346] usb 5-1: config 0 descriptor??
[ 2663.583225][ T5894] dvb-usb: error while querying for an remote control event.
[ 2663.610338][T11002] CPU: 0 UID: 0 PID: 11002 Comm: syz.1.9826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2663.610371][T11002] Tainted: [L]=SOFTLOCKUP
[ 2663.610379][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2663.610390][T11002] Call Trace:
[ 2663.610398][T11002]  <TASK>
[ 2663.610407][T11002]  dump_stack_lvl+0xe8/0x150
[ 2663.610440][T11002]  should_fail_ex+0x412/0x560
[ 2663.610469][T11002]  _copy_to_user+0x31/0xb0
[ 2663.610525][T11002]  simple_read_from_buffer+0xe1/0x170
[ 2663.610553][T11002]  proc_fail_nth_read+0x1bb/0x230
[ 2663.610585][T11002]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2663.610616][T11002]  ? rw_verify_area+0x2a6/0x4d0
[ 2663.610642][T11002]  ? kfree+0x4d/0x650
[ 2663.610666][T11002]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2663.610695][T11002]  vfs_read+0x20c/0xa70
[ 2663.610727][T11002]  ? fdget_pos+0x246/0x320
[ 2663.610763][T11002]  ? __pfx___mutex_lock+0x10/0x10
[ 2663.610786][T11002]  ? __pfx_vfs_read+0x10/0x10
[ 2663.610815][T11002]  ? __fget_files+0x2a/0x420
[ 2663.610841][T11002]  ? __fget_files+0x3a0/0x420
[ 2663.610868][T11002]  ? __fget_files+0x2a/0x420
[ 2663.610899][T11002]  ksys_read+0x150/0x270
[ 2663.610930][T11002]  ? __pfx_ksys_read+0x10/0x10
[ 2663.610956][T11002]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 2663.610992][T11002]  do_syscall_64+0xe2/0xf80
[ 2663.611013][T11002]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2663.611032][T11002]  ? trace_irq_disable+0x37/0x100
[ 2663.611051][T11002]  ? clear_bhb_loop+0x60/0xb0
[ 2663.611075][T11002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2663.611094][T11002] RIP: 0033:0x7fad9bb5b78e
[ 2663.611112][T11002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2663.611130][T11002] RSP: 002b:00007fad9ca20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2663.611152][T11002] RAX: ffffffffffffffda RBX: 00007fad9ca216c0 RCX: 00007fad9bb5b78e
[ 2663.611168][T11002] RDX: 000000000000000f RSI: 00007fad9ca210a0 RDI: 0000000000000004
[ 2663.611181][T11002] RBP: 00007fad9ca21090 R08: 0000000000000000 R09: 0000000000000000
[ 2663.611193][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2663.611205][T11002] R13: 00007fad9be16038 R14: 00007fad9be15fa0 R15: 00007fad9bf3fa48
[ 2663.611239][T11002]  </TASK>
[ 2663.846094][ T5894] m920x_read = error: -19
[ 2663.855973][ T5894] dvb-usb: error while querying for an remote control event.
[ 2664.015544][ T5894] m920x_read = error: -19
[ 2664.095941][ T5894] dvb-usb: error while querying for an remote control event.
[ 2664.215049][T31346] m920x_read = error: -19
[ 2664.225918][T31346] dvb-usb: error while querying for an remote control event.
[ 2664.281338][T11007] pim6reg: entered allmulticast mode
[ 2664.334886][T11013] pim6reg: left allmulticast mode
[ 2664.371556][T31346] m920x_read = error: -19
[ 2664.399144][T31346] dvb-usb: error while querying for an remote control event.
[ 2664.527025][ T5894] m920x_read = error: -19
[ 2664.535052][ T5894] dvb-usb: error while querying for an remote control event.
[ 2664.666002][ T5894] m920x_read = error: -19
[ 2664.670640][ T5894] dvb-usb: error while querying for an remote control event.
[ 2664.824800][T31346] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 2664.853486][ T5894] m920x_read = error: -19
[ 2664.859511][ T5894] dvb-usb: error while querying for an remote control event.
[ 2664.986596][ T5894] m920x_read = error: -19
[ 2665.001371][ T5894] dvb-usb: error while querying for an remote control event.
[ 2665.011639][T31346] usb 6-1: Using ep0 maxpacket: 16
[ 2665.156669][ T5894] m920x_read = error: -19
[ 2665.161117][ T5894] dvb-usb: error while querying for an remote control event.
[ 2665.267290][T31346] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2665.361219][T31346] usb 6-1: can't read configurations, error -61
[ 2665.368548][ T5824] usb 5-1: USB disconnect, device number 28
[ 2665.376285][ T5894] m920x_read = error: -19
[ 2665.380702][ T5894] dvb-usb: error while querying for an remote control event.
[ 2665.519831][ T5894] m920x_read = error: -19
[ 2665.534501][ T5894] dvb-usb: error while querying for an remote control event.
[ 2665.544397][T31346] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 2665.686395][ T5894] m920x_read = error: -19
[ 2665.699596][ T5894] dvb-usb: error while querying for an remote control event.
[ 2665.786045][T31346] usb 6-1: Using ep0 maxpacket: 16
[ 2665.926506][T31346] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2665.956003][T31346] usb 6-1: can't read configurations, error -61
[ 2665.966590][ T5894] m920x_read = error: -19
[ 2665.970985][ T5894] dvb-usb: error while querying for an remote control event.
[ 2666.005946][T31346] usb usb6-port1: attempt power cycle
[ 2666.136304][ T5894] m920x_read = error: -19
[ 2666.140861][ T5894] dvb-usb: error while querying for an remote control event.
[ 2666.288779][ T5894] m920x_read = error: -19
[ 2666.293165][ T5894] dvb-usb: error while querying for an remote control event.
[ 2666.400213][T31346] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2666.465308][T31346] usb 6-1: Using ep0 maxpacket: 16
[ 2666.481550][ T5894] m920x_read = error: -19
[ 2666.499482][ T5894] dvb-usb: error while querying for an remote control event.
[ 2666.509800][T31346] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2666.540443][T31346] usb 6-1: can't read configurations, error -61
[ 2667.089368][ T5894] m920x_read = error: -19
[ 2667.093743][ T5894] dvb-usb: error while querying for an remote control event.
[ 2667.188406][T31346] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 2667.228564][T31346] usb 6-1: Using ep0 maxpacket: 16
[ 2667.294323][ T5894] m920x_read = error: -19
[ 2667.305792][ T5894] dvb-usb: error while querying for an remote control event.
[ 2667.359990][T31346] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 2667.367654][T31346] usb 6-1: can't read configurations, error -61
[ 2667.386749][T31346] usb usb6-port1: unable to enumerate USB device
[ 2667.472845][T31346] m920x_read = error: -19
[ 2667.480338][T31346] dvb-usb: error while querying for an remote control event.
[ 2667.646201][ T5894] m920x_read = error: -19
[ 2667.666351][ T5894] dvb-usb: error while querying for an remote control event.
[ 2667.787807][T31346] m920x_read = error: -19
[ 2667.792176][T31346] dvb-usb: error while querying for an remote control event.
[ 2667.875991][ T5894] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2667.947245][ T5824] m920x_read = error: -19
[ 2667.962036][ T5824] dvb-usb: error while querying for an remote control event.
[ 2668.076236][ T5894] usb 2-1: Using ep0 maxpacket: 16
[ 2668.114700][ T5894] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[ 2668.134498][ T5894] usb 2-1: config 254 has no interface number 0
[ 2668.146942][T31346] m920x_read = error: -19
[ 2668.151783][T31346] dvb-usb: error while querying for an remote control event.
[ 2668.175661][ T5894] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[ 2668.216245][ T5894] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82
[ 2668.484300][ T5824] m920x_read = error: -19
[ 2668.488816][ T5894] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2668.502187][ T5824] dvb-usb: error while querying for an remote control event.
[ 2668.531733][ T5894] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2668.583577][ T5894] usb 2-1: config 254 interface 235 has no altsetting 0
[ 2668.659876][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[ 2668.670846][T31346] m920x_read = error: -19
[ 2668.679394][T31346] dvb-usb: error while querying for an remote control event.
[ 2668.746220][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2668.791384][ T5894] usb 2-1: Product: syz
[ 2668.804096][ T5894] usb 2-1: Manufacturer: syz
[ 2668.831574][ T5894] usb 2-1: SerialNumber: syz
[ 2669.048171][T29391] m920x_read = error: -19
[ 2669.052619][T29391] dvb-usb: error while querying for an remote control event.
[ 2669.068658][T11048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2669.206131][T29391] m920x_read = error: -19
[ 2669.210736][T29391] dvb-usb: error while querying for an remote control event.
[ 2669.295038][T11071] binder: 11070:11071 ioctl 400c620e 0 returned -14
[ 2669.303942][T11048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2669.328337][ T5894] usbtest 2-1:254.235: Linux gadget zero
[ 2669.334163][ T5894] usbtest 2-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt)
[ 2669.346090][T29391] m920x_read = error: -19
[ 2669.356147][T29391] dvb-usb: error while querying for an remote control event.
[ 2669.363909][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2669.374193][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2669.464628][T11071] netlink: 88 bytes leftover after parsing attributes in process `syz.8.9847'.
[ 2669.492780][ T5894] m920x_read = error: -19
[ 2669.499641][ T5894] dvb-usb: error while querying for an remote control event.
[ 2669.646131][T31346] m920x_read = error: -19
[ 2669.650707][T31346] dvb-usb: error while querying for an remote control event.
[ 2669.786008][T31346] m920x_read = error: -19
[ 2669.811863][T31346] dvb-usb: error while querying for an remote control event.
[ 2669.871116][ T5894] usb 2-1: USB disconnect, device number 38
[ 2669.990954][T31346] m920x_read = error: -19
[ 2669.995370][T31346] dvb-usb: error while querying for an remote control event.
[ 2670.156039][ T5894] m920x_read = error: -19
[ 2670.160488][ T5894] dvb-usb: error while querying for an remote control event.
[ 2670.343586][ T5894] m920x_read = error: -19
[ 2670.350606][ T5894] dvb-usb: error while querying for an remote control event.
[ 2670.476830][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2670.555830][ T5894] m920x_read = error: -19
[ 2670.584144][ T5894] dvb-usb: error while querying for an remote control event.
[ 2670.691888][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2670.726922][ T5894] m920x_read = error: -19
[ 2670.736626][ T5894] dvb-usb: error while querying for an remote control event.
[ 2670.988824][ T5894] m920x_read = error: -19
[ 2670.993309][ T5894] dvb-usb: error while querying for an remote control event.
[ 2671.115990][T31346] m920x_read = error: -19
[ 2671.120397][T31346] dvb-usb: error while querying for an remote control event.
[ 2671.156131][T29391] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2671.236083][T31346] m920x_read = error: -19
[ 2671.240592][T31346] dvb-usb: error while querying for an remote control event.
[ 2671.392874][T29391] usb 2-1: config 127 has an invalid interface number: 226 but max is 2
[ 2671.406215][T29391] usb 2-1: config 127 has an invalid interface number: 222 but max is 2
[ 2671.486201][T29391] usb 2-1: config 127 has an invalid interface number: 4 but max is 2
[ 2671.495496][T29391] usb 2-1: config 127 has no interface number 0
[ 2671.502724][T29391] usb 2-1: config 127 has no interface number 1
[ 2671.526100][T31346] m920x_read = error: -19
[ 2671.530510][T31346] dvb-usb: error while querying for an remote control event.
[ 2671.595814][T29391] usb 2-1: config 127 has no interface number 2
[ 2671.666018][T31346] m920x_read = error: -19
[ 2671.670498][T31346] dvb-usb: error while querying for an remote control event.
[ 2671.716448][T29391] usb 2-1: config 127 interface 226 altsetting 237 endpoint 0xB has invalid maxpacket 1024, setting to 64
[ 2671.770445][T29391] usb 2-1: config 127 interface 222 altsetting 16 has an endpoint descriptor with address 0x38, changing to 0x8
[ 2671.806062][T29391] usb 2-1: config 127 interface 222 altsetting 16 has a duplicate endpoint with address 0x8, skipping
[ 2671.837815][T29212] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0
[ 2671.841812][T29391] usb 2-1: config 127 interface 222 altsetting 16 has a duplicate endpoint with address 0xB, skipping
[ 2671.857576][T31346] m920x_read = error: -19
[ 2671.865946][T31346] dvb-usb: error while querying for an remote control event.
[ 2671.899792][T29212] hid-generic 0000:0000:0000.0078: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2671.933031][T29391] usb 2-1: config 127 interface 222 altsetting 16 bulk endpoint 0xF has invalid maxpacket 1024
[ 2671.995932][T29391] usb 2-1: config 127 interface 222 altsetting 16 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[ 2672.026017][T31346] m920x_read = error: -19
[ 2672.139807][T29391] usb 2-1: config 127 interface 222 altsetting 16 has a duplicate endpoint with address 0x3, skipping
[ 2672.200597][T31346] dvb-usb: error while querying for an remote control event.
[ 2672.232822][T29391] usb 2-1: config 127 interface 222 altsetting 16 has a duplicate endpoint with address 0x3, skipping
[ 2672.295506][T29391] usb 2-1: config 127 interface 222 altsetting 16 has a duplicate endpoint with address 0x5, skipping
[ 2672.339369][T31346] m920x_read = error: -19
[ 2672.347704][T31346] dvb-usb: error while querying for an remote control event.
[ 2672.359723][T29391] usb 2-1: config 127 interface 4 altsetting 64 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2672.382163][T29391] usb 2-1: config 127 interface 4 altsetting 64 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 2672.403003][T29391] usb 2-1: config 127 interface 4 altsetting 64 has a duplicate endpoint with address 0x3, skipping
[ 2672.426032][T29391] usb 2-1: config 127 interface 4 altsetting 64 has an endpoint descriptor with address 0x35, changing to 0x5
[ 2672.463741][T29391] usb 2-1: config 127 interface 4 altsetting 64 has a duplicate endpoint with address 0x5, skipping
[ 2672.475060][T29391] usb 2-1: config 127 interface 4 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[ 2672.487577][T31346] m920x_read = error: -19
[ 2672.491981][T31346] dvb-usb: error while querying for an remote control event.
[ 2672.505020][T29391] usb 2-1: config 127 interface 4 altsetting 64 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2672.514312][T11124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2672.517151][T29391] usb 2-1: config 127 interface 4 altsetting 64 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 2672.541803][T29391] usb 2-1: config 127 interface 4 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[ 2672.556948][T11124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2672.559079][T29391] usb 2-1: config 127 interface 4 altsetting 64 has a duplicate endpoint with address 0x4, skipping
[ 2672.579937][T29391] usb 2-1: config 127 interface 4 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[ 2672.590290][T29391] usb 2-1: config 127 interface 4 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[ 2672.607697][T31346] m920x_read = error: -19
[ 2672.612419][T31346] dvb-usb: error while querying for an remote control event.
[ 2672.621214][T29391] usb 2-1: config 127 interface 4 altsetting 64 has a duplicate endpoint with address 0x7, skipping
[ 2672.632767][T29391] usb 2-1: config 127 interface 4 altsetting 64 has a duplicate endpoint with address 0x2, skipping
[ 2672.649385][T29391] usb 2-1: config 127 interface 4 altsetting 64 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[ 2672.691636][T29391] usb 2-1: config 127 interface 226 has no altsetting 0
[ 2672.714299][T29391] usb 2-1: config 127 interface 222 has no altsetting 0
[ 2672.722290][T29391] usb 2-1: config 127 interface 4 has no altsetting 0
[ 2672.730403][T31346] m920x_read = error: -19
[ 2672.735457][T31346] dvb-usb: error while querying for an remote control event.
[ 2672.754617][T29391] usb 2-1: New USB device found, idVendor=19d2, idProduct=0013, bcdDevice=88.22
[ 2672.764228][T29391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2672.776094][T29391] usb 2-1: Product: à¡¡
[ 2672.780394][T29391] usb 2-1: Manufacturer: 亟쥹椑쯤�踡꩚墌뗜힪㈩ꋖᧅ彴䤠儋㙊渱��Ä�ḣ셾ዒ�孚�ꄭ宸騘焽ロ侼�츀斚ꩌ‛�ᛗﻛ氛໕攀倂훯瀦�솄꠱µ⎥繧羽蠛㭪�㒘믧軙ण陪苂볂�饜⯊畓槳祂㸭쇊̣��뼴鈥ﶈ軇䉦ዚ㓔㫕
[ 2672.856079][ T5894] m920x_read = error: -19
[ 2672.860451][ T5894] dvb-usb: error while querying for an remote control event.
[ 2672.895923][T29391] usb 2-1: SerialNumber: syz
[ 2672.996516][ T5894] m920x_read = error: -19
[ 2673.002139][ T5894] dvb-usb: error while querying for an remote control event.
[ 2673.136053][ T5894] m920x_read = error: -19
[ 2673.140466][ T5894] dvb-usb: error while querying for an remote control event.
[ 2673.213559][T29391] option 2-1:127.226: GSM modem (1-port) converter detected
[ 2673.286437][ T5894] m920x_read = error: -19
[ 2673.290855][ T5894] dvb-usb: error while querying for an remote control event.
[ 2673.382922][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2673.406240][T29212] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2673.486808][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2673.506322][ T5894] m920x_read = error: -19
[ 2673.518460][ T5894] dvb-usb: error while querying for an remote control event.
[ 2673.576604][T29391] usb 2-1: USB disconnect, device number 39
[ 2673.645337][T11135] fuse: Bad value for 'group_id'
[ 2673.654953][T29391] option 2-1:127.226: device disconnected
[ 2673.660929][T29212] usb 5-1: Using ep0 maxpacket: 16
[ 2673.666802][T29212] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2673.686258][ T5894] m920x_read = error: -19
[ 2673.706732][ T5894] dvb-usb: error while querying for an remote control event.
[ 2673.735975][T11135] fuse: Bad value for 'group_id'
[ 2673.745241][T29212] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2673.792276][T29212] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2673.832234][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2673.886178][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 2673.897570][T29212] usb 5-1: config 0 descriptor??
[ 2673.916421][T31346] m920x_read = error: -19
[ 2673.920838][T31346] dvb-usb: error while querying for an remote control event.
[ 2674.086750][T31346] m920x_read = error: -19
[ 2674.094850][T31346] dvb-usb: error while querying for an remote control event.
[ 2674.255979][T31346] m920x_read = error: -19
[ 2674.278073][T31346] dvb-usb: error while querying for an remote control event.
[ 2674.386717][T31346] m920x_read = error: -19
[ 2674.391303][T31346] dvb-usb: error while querying for an remote control event.
[ 2674.393572][T29212] nzxt-smart2 0003:1E71:2009.0079: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[ 2674.597379][T31346] m920x_read = error: -19
[ 2674.725973][T31346] dvb-usb: error while querying for an remote control event.
[ 2674.938654][ T6919] usb 5-1: USB disconnect, device number 29
[ 2674.956294][T29391] m920x_read = error: -19
[ 2674.960698][T29391] dvb-usb: error while querying for an remote control event.
[ 2675.136215][T29391] m920x_read = error: -19
[ 2675.140615][T29391] dvb-usb: error while querying for an remote control event.
[ 2675.338699][T11159] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 2675.432288][T29391] m920x_read = error: -19
[ 2675.506068][T29391] dvb-usb: error while querying for an remote control event.
[ 2675.817412][T31346] m920x_read = error: -19
[ 2675.821990][T31346] dvb-usb: error while querying for an remote control event.
[ 2676.336884][T31346] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0
[ 2676.471273][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9866'.
[ 2676.522198][T31346] hid-generic 0000:0000:0000.007A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2676.544643][T29391] m920x_read = error: -19
[ 2676.554416][T29391] dvb-usb: error while querying for an remote control event.
[ 2676.766002][ T5894] m920x_read = error: -19
[ 2676.770459][ T5894] dvb-usb: error while querying for an remote control event.
[ 2676.930280][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9874'.
[ 2676.946107][ T5894] m920x_read = error: -19
[ 2676.947866][T11175] netlink: 'syz.7.9874': attribute type 19 has an invalid length.
[ 2676.990590][ T5894] dvb-usb: error while querying for an remote control event.
[ 2677.094290][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9874'.
[ 2677.125797][ T1337] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2677.136944][ T5894] m920x_read = error: -19
[ 2677.141281][ T5894] dvb-usb: error while querying for an remote control event.
[ 2677.153410][ T1337] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2677.218885][ T1337] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2677.281105][ T1337] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2677.290068][ T5894] m920x_read = error: -19
[ 2677.294846][ T5894] dvb-usb: error while querying for an remote control event.
[ 2677.506851][ T5894] m920x_read = error: -19
[ 2677.530297][ T5894] dvb-usb: error while querying for an remote control event.
[ 2677.760389][ T5894] m920x_read = error: -19
[ 2677.764887][ T5894] dvb-usb: error while querying for an remote control event.
[ 2677.906090][ T5894] m920x_read = error: -19
[ 2677.951820][ T5894] dvb-usb: error while querying for an remote control event.
[ 2678.101709][ T5894] m920x_read = error: -19
[ 2678.157884][ T5894] dvb-usb: error while querying for an remote control event.
[ 2678.316413][ T5894] m920x_read = error: -19
[ 2678.332444][ T5894] dvb-usb: error while querying for an remote control event.
[ 2678.588462][ T5894] m920x_read = error: -19
[ 2678.600596][T11199] fuse: Bad value for 'group_id'
[ 2678.666051][ T5894] dvb-usb: error while querying for an remote control event.
[ 2678.959555][ T5894] m920x_read = error: -19
[ 2678.964104][ T5894] dvb-usb: error while querying for an remote control event.
[ 2679.039761][   T30] audit: type=1326 audit(1770193859.632:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2679.062474][T11199] fuse: Bad value for 'group_id'
[ 2679.078273][ T5894] m920x_read = error: -19
[ 2679.090283][ T5894] dvb-usb: error while querying for an remote control event.
[ 2679.247914][ T5894] m920x_read = error: -19
[ 2679.253960][ T5894] dvb-usb: error while querying for an remote control event.
[ 2679.312638][   T30] audit: type=1326 audit(1770193859.632:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2679.476089][ T5894] m920x_read = error: -19
[ 2679.480494][ T5894] dvb-usb: error while querying for an remote control event.
[ 2679.510054][   T30] audit: type=1326 audit(1770193859.632:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2679.596516][ T5894] m920x_read = error: -19
[ 2679.600924][ T5894] dvb-usb: error while querying for an remote control event.
[ 2679.665185][   T30] audit: type=1326 audit(1770193859.632:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2679.769399][T29391] m920x_read = error: -19
[ 2679.793270][T29391] dvb-usb: error while querying for an remote control event.
[ 2679.823188][   T30] audit: type=1326 audit(1770193859.632:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2679.936165][T29391] m920x_read = error: -19
[ 2679.940983][T29391] dvb-usb: error while querying for an remote control event.
[ 2679.960565][   T30] audit: type=1326 audit(1770193859.632:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2680.084805][   T30] audit: type=1326 audit(1770193859.632:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2680.116724][T31346] m920x_read = error: -19
[ 2680.152147][T31346] dvb-usb: error while querying for an remote control event.
[ 2680.196496][T29391] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2680.273354][   T30] audit: type=1326 audit(1770193859.632:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2680.332658][T31346] m920x_read = error: -19
[ 2680.355147][T31346] dvb-usb: error while querying for an remote control event.
[ 2680.380403][T29391] usb 6-1: device descriptor read/64, error -71
[ 2680.406375][   T30] audit: type=1326 audit(1770193859.632:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2680.498530][   T30] audit: type=1326 audit(1770193859.632:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.8.9879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370bb9aeb9 code=0x7ffc0000
[ 2680.526072][T31346] m920x_read = error: -19
[ 2680.530450][T31346] dvb-usb: error while querying for an remote control event.
[ 2680.715979][T29391] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 2680.749284][T31346] m920x_read = error: -19
[ 2680.766311][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9887'.
[ 2680.805763][T31346] dvb-usb: error while querying for an remote control event.
[ 2680.832477][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9887'.
[ 2680.906406][T29391] usb 6-1: device descriptor read/64, error -71
[ 2680.926255][T31346] m920x_read = error: -19
[ 2680.954126][T31346] dvb-usb: error while querying for an remote control event.
[ 2681.028369][T29391] usb usb6-port1: attempt power cycle
[ 2681.118977][T31346] m920x_read = error: -19
[ 2681.349912][T31346] dvb-usb: error while querying for an remote control event.
[ 2681.553758][ T7617] m920x_read = error: -19
[ 2681.606656][ T7617] dvb-usb: error while querying for an remote control event.
[ 2681.665944][T29391] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 2681.719389][T29391] usb 6-1: device descriptor read/8, error -71
[ 2681.726434][ T7617] m920x_read = error: -19
[ 2681.734714][ T7617] dvb-usb: error while querying for an remote control event.
[ 2681.926150][ T7617] m920x_read = error: -19
[ 2681.931960][ T7617] dvb-usb: error while querying for an remote control event.
[ 2682.107774][T29391] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 2682.188124][ T7617] m920x_read = error: -19
[ 2682.192554][ T7617] dvb-usb: error while querying for an remote control event.
[ 2682.216580][T29391] usb 6-1: device descriptor read/8, error -71
[ 2682.341244][T29391] usb usb6-port1: unable to enumerate USB device
[ 2682.386896][ T7617] m920x_read = error: -19
[ 2682.391298][ T7617] dvb-usb: error while querying for an remote control event.
[ 2682.537965][ T7617] m920x_read = error: -19
[ 2682.543527][ T7617] dvb-usb: error while querying for an remote control event.
[ 2682.696284][ T7617] m920x_read = error: -19
[ 2682.701695][ T7617] dvb-usb: error while querying for an remote control event.
[ 2682.847601][ T7617] m920x_read = error: -19
[ 2682.870570][ T7617] dvb-usb: error while querying for an remote control event.
[ 2683.026019][ T7617] m920x_read = error: -19
[ 2683.030439][ T7617] dvb-usb: error while querying for an remote control event.
[ 2683.167530][ T7617] m920x_read = error: -19
[ 2683.184193][ T7617] dvb-usb: error while querying for an remote control event.
[ 2683.215300][T11258] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 2683.416846][ T7617] m920x_read = error: -19
[ 2683.433939][ T7617] dvb-usb: error while querying for an remote control event.
[ 2683.597696][ T7617] m920x_read = error: -19
[ 2683.650591][ T7617] dvb-usb: error while querying for an remote control event.
[ 2683.936531][ T7617] m920x_read = error: -19
[ 2683.945936][ T7617] dvb-usb: error while querying for an remote control event.
[ 2684.104054][ T7617] m920x_read = error: -19
[ 2684.121578][ T7617] dvb-usb: error while querying for an remote control event.
[ 2684.248713][ T7617] m920x_read = error: -19
[ 2684.257236][ T7617] dvb-usb: error while querying for an remote control event.
[ 2684.388065][ T7617] m920x_read = error: -19
[ 2684.392630][ T7617] dvb-usb: error while querying for an remote control event.
[ 2684.571930][ T7617] m920x_read = error: -19
[ 2684.596463][ T7617] dvb-usb: error while querying for an remote control event.
[ 2684.619354][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9901'.
[ 2684.736283][ T7617] m920x_read = error: -19
[ 2684.759831][ T7617] dvb-usb: error while querying for an remote control event.
[ 2684.924101][ T7617] m920x_read = error: -19
[ 2684.935912][ T7617] dvb-usb: error while querying for an remote control event.
[ 2685.086534][ T7617] m920x_read = error: -19
[ 2685.096156][ T7617] dvb-usb: error while querying for an remote control event.
[ 2685.206362][ T7617] m920x_read = error: -19
[ 2685.210769][ T7617] dvb-usb: error while querying for an remote control event.
[ 2685.340488][T11284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2685.359543][ T7617] m920x_read = error: -19
[ 2685.363985][ T7617] dvb-usb: error while querying for an remote control event.
[ 2685.367541][T11284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2685.487822][T29391] m920x_read = error: -19
[ 2685.493134][T29391] dvb-usb: error while querying for an remote control event.
[ 2685.576485][T23674] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2685.625026][T29391] m920x_read = error: -19
[ 2685.629678][T29391] dvb-usb: error while querying for an remote control event.
[ 2685.737821][T29212] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2685.746142][T29391] m920x_read = error: -19
[ 2685.755954][T29391] dvb-usb: error while querying for an remote control event.
[ 2685.766022][T23674] usb 5-1: Using ep0 maxpacket: 8
[ 2685.781698][T23674] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2685.836524][T23674] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 2685.845709][T23674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2685.872244][T23674] usb 5-1: config 0 descriptor??
[ 2685.897691][T29212] usb 2-1: Using ep0 maxpacket: 16
[ 2685.906404][T29391] m920x_read = error: -19
[ 2685.911546][T29391] dvb-usb: error while querying for an remote control event.
[ 2685.922036][T23674] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 2685.966812][T29212] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2685.989913][T29212] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2686.002742][T29212] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2686.027528][T29212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2686.049367][T29391] m920x_read = error: -19
[ 2686.055477][T29391] dvb-usb: error while querying for an remote control event.
[ 2686.076928][T29212] usb 2-1: config 0 descriptor??
[ 2686.166023][T29391] m920x_read = error: -19
[ 2686.170536][T29391] dvb-usb: error while querying for an remote control event.
[ 2686.286812][T29391] m920x_read = error: -19
[ 2686.291369][T29391] dvb-usb: error while querying for an remote control event.
[ 2686.446480][T29391] m920x_read = error: -19
[ 2686.450888][T29391] dvb-usb: error while querying for an remote control event.
[ 2686.562724][T29212] nzxt-smart2 0003:1E71:2009.007B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 2686.576107][ T7617] m920x_read = error: -19
[ 2686.587732][ T7617] dvb-usb: error while querying for an remote control event.
[ 2686.806188][T23674] gspca_vc032x: reg_r err -110
[ 2686.811285][T23674] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[ 2686.830443][ T7617] m920x_read = error: -19
[ 2686.835436][ T7617] dvb-usb: error while querying for an remote control event.
[ 2686.959173][ T7617] m920x_read = error: -19
[ 2686.964105][ T7617] dvb-usb: error while querying for an remote control event.
[ 2686.977432][T23674] usb 2-1: USB disconnect, device number 40
[ 2687.095998][ T7617] m920x_read = error: -19
[ 2687.104549][ T7617] dvb-usb: error while querying for an remote control event.
[ 2687.236022][ T7617] m920x_read = error: -19
[ 2687.242061][ T7617] dvb-usb: error while querying for an remote control event.
[ 2687.363821][ T7617] m920x_read = error: -19
[ 2687.369653][ T7617] dvb-usb: error while querying for an remote control event.
[ 2687.517154][ T7617] m920x_read = error: -19
[ 2687.521616][ T7617] dvb-usb: error while querying for an remote control event.
[ 2687.637804][T29391] m920x_read = error: -19
[ 2687.642492][T29391] dvb-usb: error while querying for an remote control event.
[ 2687.756327][T29391] m920x_read = error: -19
[ 2687.767545][T29391] dvb-usb: error while querying for an remote control event.
[ 2687.897350][T29391] m920x_read = error: -19
[ 2687.901935][T29391] dvb-usb: error while querying for an remote control event.
[ 2688.025993][T29391] m920x_read = error: -19
[ 2688.030407][T29391] dvb-usb: error while querying for an remote control event.
[ 2688.157034][T29391] m920x_read = error: -19
[ 2688.162341][T29391] dvb-usb: error while querying for an remote control event.
[ 2688.165206][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9915'.
[ 2688.304048][T29391] m920x_read = error: -19
[ 2688.311138][T29391] dvb-usb: error while querying for an remote control event.
[ 2688.352768][T29391] usb 5-1: USB disconnect, device number 30
[ 2688.463645][ T7617] m920x_read = error: -19
[ 2688.472913][ T7617] dvb-usb: error while querying for an remote control event.
[ 2688.644853][ T7617] m920x_read = error: -19
[ 2688.644905][ T7617] dvb-usb: error while querying for an remote control event.
[ 2688.756411][ T5894] m920x_read = error: -19
[ 2688.756447][ T5894] dvb-usb: error while querying for an remote control event.
[ 2688.896214][T29391] m920x_read = error: -19
[ 2688.900628][T29391] dvb-usb: error while querying for an remote control event.
[ 2689.029356][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9919'.
[ 2689.038984][T29391] m920x_read = error: -19
[ 2689.043405][T29391] dvb-usb: error while querying for an remote control event.
[ 2689.179375][T29391] m920x_read = error: -19
[ 2689.186737][T29391] dvb-usb: error while querying for an remote control event.
[ 2689.383450][T11351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9921'.
[ 2689.394791][T11351] netlink: 388 bytes leftover after parsing attributes in process `syz.1.9921'.
[ 2689.453459][T29391] m920x_read = error: -19
[ 2689.499857][T29391] dvb-usb: error while querying for an remote control event.
[ 2689.708546][T29391] m920x_read = error: -19
[ 2689.716313][T29391] dvb-usb: error while querying for an remote control event.
[ 2689.836059][T29212] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 2689.836336][T29391] m920x_read = error: -19
[ 2689.864090][T29391] dvb-usb: error while querying for an remote control event.
[ 2690.006831][T29212] usb 5-1: Using ep0 maxpacket: 16
[ 2690.011024][T29391] m920x_read = error: -19
[ 2690.029095][T29212] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2690.042867][T29212] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2690.050724][T29391] dvb-usb: error while querying for an remote control event.
[ 2690.055243][T29212] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2690.145614][T11348] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[ 2690.230449][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2690.414270][T29391] m920x_read = error: -19
[ 2690.425965][T29391] dvb-usb: error while querying for an remote control event.
[ 2690.475111][T29212] usb 5-1: config 0 descriptor??
[ 2690.556310][T29391] m920x_read = error: -19
[ 2690.562302][T29391] dvb-usb: error while querying for an remote control event.
[ 2690.717057][T29391] m920x_read = error: -19
[ 2690.739025][T29391] dvb-usb: error while querying for an remote control event.
[ 2690.943568][T29391] m920x_read = error: -19
[ 2690.969347][T29391] dvb-usb: error while querying for an remote control event.
[ 2691.022921][T29212] nzxt-smart2 0003:1E71:2009.007C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[ 2691.106017][ T5894] m920x_read = error: -19
[ 2691.110515][ T5894] dvb-usb: error while querying for an remote control event.
[ 2691.246075][ T5894] m920x_read = error: -19
[ 2691.250465][ T5894] dvb-usb: error while querying for an remote control event.
[ 2691.428676][ T5894] m920x_read = error: -19
[ 2691.435769][T29212] usb 5-1: USB disconnect, device number 31
[ 2691.445741][ T5894] dvb-usb: error while querying for an remote control event.
[ 2691.618058][T11367] fido_id[11367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 2691.650437][ T5894] m920x_read = error: -19
[ 2691.654836][ T5894] dvb-usb: error while querying for an remote control event.
[ 2691.846063][ T5894] m920x_read = error: -19
[ 2691.891276][ T5894] dvb-usb: error while querying for an remote control event.
[ 2692.036013][ T5894] m920x_read = error: -19
[ 2692.045313][ T5894] dvb-usb: error while querying for an remote control event.
[ 2692.062176][T11373] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9926'.
[ 2692.149128][T11375] tc_dump_action: action bad kind
[ 2692.342495][ T5894] m920x_read = error: -19
[ 2692.353019][ T5894] dvb-usb: error while querying for an remote control event.
[ 2692.521831][ T5894] m920x_read = error: -19
[ 2692.521937][ T5894] dvb-usb: error while querying for an remote control event.
[ 2692.591523][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9926'.
[ 2692.641131][ T5894] m920x_read = error: -19
[ 2692.641165][ T5894] dvb-usb: error while querying for an remote control event.
[ 2692.703785][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9929'.
[ 2692.746338][ T5894] m920x_read = error: -19
[ 2692.746374][ T5894] dvb-usb: error while querying for an remote control event.
[ 2692.857887][T29391] m920x_read = error: -19
[ 2692.857910][T29391] dvb-usb: error while querying for an remote control event.
[ 2692.976646][ T5894] m920x_read = error: -19
[ 2692.981025][ T5894] dvb-usb: error while querying for an remote control event.
[ 2693.080779][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2693.092787][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2693.152035][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2693.160880][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2693.166018][ T5894] m920x_read = error: -19
[ 2693.173523][ T5894] dvb-usb: error while querying for an remote control event.
[ 2693.298108][ T5894] m920x_read = error: -19
[ 2693.306102][ T5894] dvb-usb: error while querying for an remote control event.
[ 2693.442711][ T5894] m920x_read = error: -19
[ 2693.459587][ T5894] dvb-usb: error while querying for an remote control event.
[ 2693.517946][T11395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2693.520386][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9932'.
[ 2693.531502][T11395] tipc: Resetting bearer <eth:syzkaller0>
[ 2693.556442][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9932'.
[ 2693.581868][T11394] tipc: Disabling bearer <eth:syzkaller0>
[ 2693.606356][ T5894] m920x_read = error: -19
[ 2693.612083][ T5894] dvb-usb: error while querying for an remote control event.
[ 2693.736006][ T5894] m920x_read = error: -19
[ 2693.740436][ T5894] dvb-usb: error while querying for an remote control event.
[ 2693.887430][ T5894] m920x_read = error: -19
[ 2693.892425][ T5894] dvb-usb: error while querying for an remote control event.
[ 2694.016003][ T5894] m920x_read = error: -19
[ 2694.031757][ T5894] dvb-usb: error while querying for an remote control event.
[ 2694.146527][ T5894] m920x_read = error: -19
[ 2694.150943][ T5894] dvb-usb: error while querying for an remote control event.
[ 2694.276053][ T5894] m920x_read = error: -19
[ 2694.281647][ T5894] dvb-usb: error while querying for an remote control event.
[ 2694.416901][ T5894] m920x_read = error: -19
[ 2694.423300][ T5894] dvb-usb: error while querying for an remote control event.
[ 2694.466616][T11418] FAULT_INJECTION: forcing a failure.
[ 2694.466616][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2694.484561][T11418] CPU: 0 UID: 0 PID: 11418 Comm: syz.1.9940 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2694.484584][T11418] Tainted: [L]=SOFTLOCKUP
[ 2694.484589][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2694.484595][T11418] Call Trace:
[ 2694.484601][T11418]  <TASK>
[ 2694.484606][T11418]  dump_stack_lvl+0xe8/0x150
[ 2694.484628][T11418]  should_fail_ex+0x412/0x560
[ 2694.484645][T11418]  _copy_to_user+0x31/0xb0
[ 2694.484672][T11418]  simple_read_from_buffer+0xe1/0x170
[ 2694.484687][T11418]  proc_fail_nth_read+0x1bb/0x230
[ 2694.484706][T11418]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2694.484725][T11418]  ? rw_verify_area+0x2a6/0x4d0
[ 2694.484741][T11418]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2694.484765][T11418]  vfs_read+0x20c/0xa70
[ 2694.484798][T11418]  ? __pfx_vfs_read+0x10/0x10
[ 2694.484842][T11418]  ksys_read+0x150/0x270
[ 2694.484869][T11418]  ? __pfx_ksys_read+0x10/0x10
[ 2694.484904][T11418]  do_syscall_64+0xe2/0xf80
[ 2694.484924][T11418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2694.484936][T11418]  ? trace_irq_disable+0x37/0x100
[ 2694.484947][T11418]  ? clear_bhb_loop+0x60/0xb0
[ 2694.484962][T11418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2694.484973][T11418] RIP: 0033:0x7fad9bb5b78e
[ 2694.484985][T11418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2694.484995][T11418] RSP: 002b:00007fad9ca20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2694.485010][T11418] RAX: ffffffffffffffda RBX: 00007fad9ca216c0 RCX: 00007fad9bb5b78e
[ 2694.485019][T11418] RDX: 000000000000000f RSI: 00007fad9ca210a0 RDI: 0000000000000004
[ 2694.485026][T11418] RBP: 00007fad9ca21090 R08: 0000000000000000 R09: 0000000000000000
[ 2694.485033][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2694.485041][T11418] R13: 00007fad9be16038 R14: 00007fad9be15fa0 R15: 00007fad9bf3fa48
[ 2694.485058][T11418]  </TASK>
[ 2694.680447][ T5894] m920x_read = error: -19
[ 2694.684960][ T5894] dvb-usb: error while querying for an remote control event.
[ 2694.926156][T29212] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 2694.942105][ T7617] m920x_read = error: -19
[ 2694.955706][ T7617] dvb-usb: error while querying for an remote control event.
[ 2695.076515][ T7617] m920x_read = error: -19
[ 2695.081447][ T7617] dvb-usb: error while querying for an remote control event.
[ 2695.096014][T29212] usb 5-1: Using ep0 maxpacket: 16
[ 2695.106316][T29212] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2695.169278][T29212] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2695.178634][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9942'.
[ 2695.202296][T29212] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2695.216427][ T7617] m920x_read = error: -19
[ 2695.220909][ T7617] dvb-usb: error while querying for an remote control event.
[ 2695.256879][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2695.293356][T29212] usb 5-1: config 0 descriptor??
[ 2695.379832][ T7617] m920x_read = error: -19
[ 2695.385942][ T7617] dvb-usb: error while querying for an remote control event.
[ 2695.514199][T11402] syz.5.9936 (11402): drop_caches: 1
[ 2695.571971][ T7617] m920x_read = error: -19
[ 2695.578898][ T7617] dvb-usb: error while querying for an remote control event.
[ 2695.642537][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9946'.
[ 2695.769099][T11402] syz.5.9936 (11402): drop_caches: 1
[ 2695.774969][ T7617] m920x_read = error: -19
[ 2695.784870][ T7617] dvb-usb: error while querying for an remote control event.
[ 2695.796016][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9946'.
[ 2695.855625][T29212] nzxt-smart2 0003:1E71:2009.007D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[ 2695.896307][ T7617] m920x_read = error: -19
[ 2695.900774][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.017684][ T7617] m920x_read = error: -19
[ 2696.034715][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.175996][ T7617] m920x_read = error: -19
[ 2696.181803][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.229413][T11443] binder: 11442:11443 ioctl 4018620d 0 returned -22
[ 2696.305449][T29212] usb 5-1: USB disconnect, device number 32
[ 2696.347722][ T7617] m920x_read = error: -19
[ 2696.372908][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.401059][T11447] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.9950'.
[ 2696.421065][T11436] fido_id[11436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 2696.495987][ T7617] m920x_read = error: -19
[ 2696.500390][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.626069][ T7617] m920x_read = error: -19
[ 2696.630469][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.746037][ T7617] m920x_read = error: -19
[ 2696.753691][ T7617] dvb-usb: error while querying for an remote control event.
[ 2696.876310][ T7617] m920x_read = error: -19
[ 2696.894220][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.026013][ T7617] m920x_read = error: -19
[ 2697.032851][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.156256][ T7617] m920x_read = error: -19
[ 2697.160798][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.207711][T11466] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9954'.
[ 2697.217757][T11466] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9954'.
[ 2697.286541][ T7617] m920x_read = error: -19
[ 2697.295983][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.421113][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9957'.
[ 2697.430601][ T7617] m920x_read = error: -19
[ 2697.440527][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.564858][ T7617] m920x_read = error: -19
[ 2697.577989][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.582266][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9957'.
[ 2697.617055][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 2697.617077][   T30] audit: type=1326 audit(1770193878.232:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.9956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1cfb9aeb9 code=0x0
[ 2697.756053][ T7617] m920x_read = error: -19
[ 2697.760811][ T7617] dvb-usb: error while querying for an remote control event.
[ 2697.939146][ T7617] m920x_read = error: -19
[ 2697.943687][ T7617] dvb-usb: error while querying for an remote control event.
[ 2698.056245][ T5894] m920x_read = error: -19
[ 2698.060972][ T5894] dvb-usb: error while querying for an remote control event.
[ 2698.235958][ T5894] m920x_read = error: -19
[ 2698.240386][ T5894] dvb-usb: error while querying for an remote control event.
[ 2698.376056][ T5894] m920x_read = error: -19
[ 2698.380751][ T5894] dvb-usb: error while querying for an remote control event.
[ 2698.520245][ T5894] m920x_read = error: -19
[ 2698.538757][ T5894] dvb-usb: error while querying for an remote control event.
[ 2698.676676][ T5894] m920x_read = error: -19
[ 2698.712277][ T5894] dvb-usb: error while querying for an remote control event.
[ 2698.839174][ T5894] m920x_read = error: -19
[ 2698.846240][ T5894] dvb-usb: error while querying for an remote control event.
[ 2699.024789][ T5894] m920x_read = error: -19
[ 2699.045134][ T5894] dvb-usb: error while querying for an remote control event.
[ 2699.084004][T11499] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 2699.226461][ T7617] m920x_read = error: -19
[ 2699.230894][ T7617] dvb-usb: error while querying for an remote control event.
[ 2699.325632][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9968'.
[ 2699.364516][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9968'.
[ 2699.373881][ T7617] m920x_read = error: -19
[ 2699.385715][ T7617] dvb-usb: error while querying for an remote control event.
[ 2699.536321][ T5894] m920x_read = error: -19
[ 2699.545077][ T5894] dvb-usb: error while querying for an remote control event.
[ 2699.686088][ T7617] m920x_read = error: -19
[ 2699.690598][ T7617] dvb-usb: error while querying for an remote control event.
[ 2699.818575][ T7617] m920x_read = error: -19
[ 2699.831537][ T7617] dvb-usb: error while querying for an remote control event.
[ 2699.986037][ T7617] m920x_read = error: -19
[ 2699.990550][ T7617] dvb-usb: error while querying for an remote control event.
[ 2700.121161][T29212] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 2700.126864][ T7617] m920x_read = error: -19
[ 2700.136429][ T5894] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2700.146571][ T7617] dvb-usb: error while querying for an remote control event.
[ 2700.261981][ T7617] m920x_read = error: -19
[ 2700.278316][ T7617] dvb-usb: error while querying for an remote control event.
[ 2700.316686][ T5894] usb 2-1: too many configurations: 101, using maximum allowed: 8
[ 2700.335743][ T5894] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 2700.347666][ T5894] usb 2-1: can't read configurations, error -22
[ 2700.349183][T29212] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2700.381834][T29212] usb 5-1: config 0 has no interface number 0
[ 2700.402803][T29212] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2700.427576][ T7617] m920x_read = error: -19
[ 2700.432776][T29212] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2700.434210][ T7617] dvb-usb: error while querying for an remote control event.
[ 2700.466161][T29212] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 2700.478271][ T5894] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 2700.495983][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2700.509296][T29212] usb 5-1: config 0 descriptor??
[ 2700.576089][T29391] m920x_read = error: -19
[ 2700.591092][T29391] dvb-usb: error while querying for an remote control event.
[ 2700.625994][ T7617] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 2700.676896][ T5894] usb 2-1: too many configurations: 101, using maximum allowed: 8
[ 2700.691846][T11527] fuse: Bad value for 'rootmode'
[ 2700.697007][ T5894] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 2700.697048][ T5894] usb 2-1: can't read configurations, error -22
[ 2700.697381][ T5894] usb usb2-port1: attempt power cycle
[ 2700.718291][T29391] m920x_read = error: -19
[ 2700.722850][T29391] dvb-usb: error while querying for an remote control event.
[ 2700.815968][ T7617] usb 6-1: Using ep0 maxpacket: 32
[ 2700.849215][T29391] m920x_read = error: -19
[ 2700.854881][ T7617] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2700.864666][T29391] dvb-usb: error while querying for an remote control event.
[ 2700.897821][ T7617] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[ 2700.915932][ T7617] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 2700.927704][ T7617] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 2700.939681][ T7617] usb 6-1: config 128 has no interface number 0
[ 2700.941938][T29212] prodikeys 0003:041E:2801.007E: unknown main item tag 0x0
[ 2700.966320][ T7617] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2700.973870][T29212] prodikeys 0003:041E:2801.007E: unknown main item tag 0x0
[ 2700.984355][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2701.002469][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2701.015432][ T7617] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2701.026235][T29212] prodikeys 0003:041E:2801.007E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1
[ 2701.036011][T29391] m920x_read = error: -19
[ 2701.042201][T29391] dvb-usb: error while querying for an remote control event.
[ 2701.061500][T29212] hid_prodikeys: hid-prodikeys: failed to find output report
[ 2701.061500][T29212] 
[ 2701.072364][ T7617] usb 6-1: config 128 interface 127 has no altsetting 0
[ 2701.111603][ T7617] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 2701.122187][ T5894] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 2701.136107][ T7617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2701.152405][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2701.166931][ T7617] usb 6-1: Product: syz
[ 2701.171679][ T7617] usb 6-1: Manufacturer: syz
[ 2701.171682][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2701.200501][ T5894] usb 2-1: too many configurations: 101, using maximum allowed: 8
[ 2701.208777][T31346] m920x_read = error: -19
[ 2701.213259][T31346] dvb-usb: error while querying for an remote control event.
[ 2701.227518][ T7617] usb 6-1: SerialNumber: syz
[ 2701.234726][ T5894] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 2701.254452][ T5894] usb 2-1: can't read configurations, error -22
[ 2701.337815][T29391] m920x_read = error: -19
[ 2701.342294][T29391] dvb-usb: error while querying for an remote control event.
[ 2701.416276][ T5894] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 2701.456092][T31346] m920x_read = error: -19
[ 2701.460545][T31346] dvb-usb: error while querying for an remote control event.
[ 2701.470080][ T5894] usb 2-1: too many configurations: 101, using maximum allowed: 8
[ 2701.480539][ T5894] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[ 2701.488789][ T5894] usb 2-1: can't read configurations, error -22
[ 2701.495550][ T5894] usb usb2-port1: unable to enumerate USB device
[ 2701.576369][ T5894] m920x_read = error: -19
[ 2701.581975][ T5894] dvb-usb: error while querying for an remote control event.
[ 2701.696543][ T5894] m920x_read = error: -19
[ 2701.701033][ T5894] dvb-usb: error while querying for an remote control event.
[ 2701.817281][ T5894] m920x_read = error: -19
[ 2701.821694][ T5894] dvb-usb: error while querying for an remote control event.
[ 2701.936240][ T5894] m920x_read = error: -19
[ 2701.939008][T11537] program syz.8.9980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2701.951723][ T5894] dvb-usb: error while querying for an remote control event.
[ 2701.959876][T11537] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2702.009739][T11537] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2702.051980][ T7617] usb 6-1: USB disconnect, device number 82
[ 2702.083154][ T5894] m920x_read = error: -19
[ 2702.083175][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.111737][ T9733] udevd[9733]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2702.186058][ T5894] m920x_read = error: -19
[ 2702.186090][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.296508][ T5894] m920x_read = error: -19
[ 2702.296541][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.415507][ T5894] m920x_read = error: -19
[ 2702.415530][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.516673][ T5894] m920x_read = error: -19
[ 2702.516708][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.626369][ T5894] m920x_read = error: -19
[ 2702.626405][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.676132][ T5915] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 2702.736382][ T5894] m920x_read = error: -19
[ 2702.736419][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.825911][ T5915] usb 6-1: Using ep0 maxpacket: 16
[ 2702.828539][ T5915] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[ 2702.829905][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2702.829927][ T5915] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2702.829941][ T5915] usb 6-1: Manufacturer: syz
[ 2702.831752][ T5915] usb 6-1: config 0 descriptor??
[ 2702.856469][ T5894] m920x_read = error: -19
[ 2702.856501][ T5894] dvb-usb: error while querying for an remote control event.
[ 2702.913958][ T5915] usb 5-1: USB disconnect, device number 33
[ 2702.966765][ T5894] m920x_read = error: -19
[ 2702.966800][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.086563][ T5894] m920x_read = error: -19
[ 2703.086596][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.200243][ T5894] m920x_read = error: -19
[ 2703.200278][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.306176][ T7617] m920x_read = error: -19
[ 2703.306198][ T7617] dvb-usb: error while querying for an remote control event.
[ 2703.364625][T11561] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 2703.366153][T11561] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2703.423179][ T5894] m920x_read = error: -19
[ 2703.423202][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.431478][T11561] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 2703.526267][ T5894] m920x_read = error: -19
[ 2703.526290][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.636398][ T5894] m920x_read = error: -19
[ 2703.636431][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.668043][T11565] fuse: Bad value for 'rootmode'
[ 2703.746294][ T5894] m920x_read = error: -19
[ 2703.752034][ T5894] dvb-usb: error while querying for an remote control event.
[ 2703.927678][ T5894] m920x_read = error: -19
[ 2703.933405][ T5894] dvb-usb: error while querying for an remote control event.
[ 2704.061974][ T5894] m920x_read = error: -19
[ 2704.216076][ T5894] dvb-usb: error while querying for an remote control event.
[ 2704.373953][ T5894] m920x_read = error: -19
[ 2704.381280][ T5894] dvb-usb: error while querying for an remote control event.
[ 2704.506507][ T5894] m920x_read = error: -19
[ 2704.515005][ T5894] dvb-usb: error while querying for an remote control event.
[ 2704.646043][ T5894] m920x_read = error: -19
[ 2704.646229][T11576] loop5: detected capacity change from 0 to 7
[ 2704.666076][T11576] Dev loop5: unable to read RDB block 7
[ 2704.674341][T11576]  loop5: unable to read partition table
[ 2704.688563][ T5894] dvb-usb: error while querying for an remote control event.
[ 2704.696355][T11576] loop5: partition table beyond EOD, truncated
[ 2704.718856][T11576] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2704.836079][ T5894] m920x_read = error: -19
[ 2704.842265][ T5894] dvb-usb: error while querying for an remote control event.
[ 2704.976227][ T5894] m920x_read = error: -19
[ 2704.980632][ T5894] dvb-usb: error while querying for an remote control event.
[ 2705.046334][T23674] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 2705.096194][ T5894] m920x_read = error: -19
[ 2705.100777][ T5894] dvb-usb: error while querying for an remote control event.
[ 2705.241286][T29391] m920x_read = error: -19
[ 2705.241453][T23674] usb 2-1: Using ep0 maxpacket: 16
[ 2705.245686][T29391] dvb-usb: error while querying for an remote control event.
[ 2705.321034][T23674] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2705.346055][T23674] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2705.393061][T29391] usb 6-1: USB disconnect, device number 83
[ 2705.403482][ T5894] m920x_read = error: -19
[ 2705.409012][ T5894] dvb-usb: error while querying for an remote control event.
[ 2705.467317][T23674] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2705.503655][T23674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2705.526606][T31346] m920x_read = error: -19
[ 2705.531019][T31346] dvb-usb: error while querying for an remote control event.
[ 2705.548425][T23674] usb 2-1: config 0 descriptor??
[ 2705.666326][T29391] m920x_read = error: -19
[ 2705.676124][T29391] dvb-usb: error while querying for an remote control event.
[ 2705.896080][T29391] m920x_read = error: -19
[ 2705.904383][T11595] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[ 2705.922003][T29391] dvb-usb: error while querying for an remote control event.
[ 2705.977144][T23674] nzxt-smart2 0003:1E71:2009.007F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 2706.026257][T29391] m920x_read = error: -19
[ 2706.129307][T29391] dvb-usb: error while querying for an remote control event.
[ 2706.189194][T11604] fuse: Bad value for 'rootmode'
[ 2706.280682][T29391] m920x_read = error: -19
[ 2706.285131][T29391] dvb-usb: error while querying for an remote control event.
[ 2706.382422][T29391] usb 2-1: USB disconnect, device number 45
[ 2706.426245][ T5894] m920x_read = error: -19
[ 2706.430801][ T5894] dvb-usb: error while querying for an remote control event.
[ 2706.565111][T11606] IPv6: addrconf: prefix option has invalid lifetime
[ 2706.575261][T31346] m920x_read = error: -19
[ 2706.580343][T31346] dvb-usb: error while querying for an remote control event.
[ 2706.696465][T29391] m920x_read = error: -19
[ 2706.701018][T29391] dvb-usb: error while querying for an remote control event.
[ 2706.779629][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2706.836295][T29391] m920x_read = error: -19
[ 2706.840794][T29391] dvb-usb: error while querying for an remote control event.
[ 2706.852038][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2706.894645][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2706.923766][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2706.987845][T29391] m920x_read = error: -19
[ 2706.992291][T29391] dvb-usb: error while querying for an remote control event.
[ 2707.238979][T29391] m920x_read = error: -19
[ 2707.244882][T29391] dvb-usb: error while querying for an remote control event.
[ 2707.352172][T11620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2707.363985][T29391] m920x_read = error: -19
[ 2707.368552][T29391] dvb-usb: error while querying for an remote control event.
[ 2707.394511][T11622] loop5: detected capacity change from 0 to 7
[ 2707.404917][ T9733] Dev loop5: unable to read RDB block 7
[ 2707.412561][ T9733]  loop5: unable to read partition table
[ 2707.419337][ T9733] loop5: partition table beyond EOD, truncated
[ 2707.435729][T11622] Dev loop5: unable to read RDB block 7
[ 2707.453002][T11622]  loop5: unable to read partition table
[ 2707.487422][T29391] m920x_read = error: -19
[ 2707.492167][T29391] dvb-usb: error while querying for an remote control event.
[ 2707.505814][T11622] loop5: partition table beyond EOD, truncated
[ 2707.517580][T11622] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2707.606081][T31346] m920x_read = error: -19
[ 2707.610669][T31346] dvb-usb: error while querying for an remote control event.
[ 2707.704477][T11627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2707.844146][T31346] m920x_read = error: -19
[ 2707.886152][T11627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2707.906918][T31346] dvb-usb: error while querying for an remote control event.
[ 2708.028871][T31346] m920x_read = error: -19
[ 2708.033282][T31346] dvb-usb: error while querying for an remote control event.
[ 2708.202505][T29391] m920x_read = error: -19
[ 2708.207948][T29391] dvb-usb: error while querying for an remote control event.
[ 2708.275973][T31346] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2708.328025][T11638] fuse: Unknown parameter 'use00000000000000000000'
[ 2708.367686][T29391] m920x_read = error: -19
[ 2708.372243][T29391] dvb-usb: error while querying for an remote control event.
[ 2708.572528][T29391] m920x_read = error: -19
[ 2708.578560][T29391] dvb-usb: error while querying for an remote control event.
[ 2708.615689][T31346] usb 2-1: config 0 has an invalid interface number: 190 but max is 0
[ 2708.624184][T31346] usb 2-1: config 0 has no interface number 0
[ 2708.632753][T31346] usb 2-1: New USB device found, idVendor=9a9f, idProduct=18d2, bcdDevice=33.58
[ 2708.643557][T31346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2708.652464][T31346] usb 2-1: Product: syz
[ 2708.656985][T31346] usb 2-1: Manufacturer: syz
[ 2708.661734][T31346] usb 2-1: SerialNumber: syz
[ 2708.670394][T31346] usb 2-1: config 0 descriptor??
[ 2708.727582][T29391] m920x_read = error: -19
[ 2708.732100][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.108416][T29391] m920x_read = error: -19
[ 2709.112898][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.186740][T31346] rndis_host 2-1:0.190: skipping garbage
[ 2709.200708][T31346] usb 2-1: bad CDC descriptors
[ 2709.254189][T31346] usb 2-1: USB disconnect, device number 46
[ 2709.320106][T29391] m920x_read = error: -19
[ 2709.333695][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.456375][T29391] m920x_read = error: -19
[ 2709.468214][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.626950][T29391] m920x_read = error: -19
[ 2709.636507][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.786146][T29391] m920x_read = error: -19
[ 2709.790568][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.907306][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10018'.
[ 2709.928913][T11664] netlink: 'syz.1.10018': attribute type 7 has an invalid length.
[ 2709.946039][T29391] m920x_read = error: -19
[ 2709.950575][T29391] dvb-usb: error while querying for an remote control event.
[ 2709.958350][T11664] netlink: 'syz.1.10018': attribute type 8 has an invalid length.
[ 2710.094243][T29391] m920x_read = error: -19
[ 2710.104116][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10018'.
[ 2710.105930][T29391] dvb-usb: error while querying for an remote control event.
[ 2710.638662][T29391] m920x_read = error: -19
[ 2710.643510][T29391] dvb-usb: error while querying for an remote control event.
[ 2710.690515][T11676] FAULT_INJECTION: forcing a failure.
[ 2710.690515][T11676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2710.693380][T11641] Bluetooth: hci4: command 0x0406 tx timeout
[ 2710.766109][T29391] m920x_read = error: -19
[ 2710.785910][T29391] dvb-usb: error while querying for an remote control event.
[ 2710.807236][T11676] CPU: 1 UID: 0 PID: 11676 Comm: syz.7.10019 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2710.807272][T11676] Tainted: [L]=SOFTLOCKUP
[ 2710.807281][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2710.807293][T11676] Call Trace:
[ 2710.807302][T11676]  <TASK>
[ 2710.807312][T11676]  dump_stack_lvl+0xe8/0x150
[ 2710.807344][T11676]  should_fail_ex+0x412/0x560
[ 2710.807374][T11676]  _copy_from_user+0x2d/0xb0
[ 2710.807404][T11676]  ___sys_recvmsg+0x175/0x590
[ 2710.807437][T11676]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2710.807467][T11676]  ? __fget_files+0x2a/0x420
[ 2710.807506][T11676]  ? __fget_files+0x3a0/0x420
[ 2710.807538][T11676]  do_recvmmsg+0x334/0x800
[ 2710.807573][T11676]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2710.807611][T11676]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2710.807652][T11676]  __x64_sys_recvmmsg+0x198/0x250
[ 2710.807681][T11676]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2710.807731][T11676]  do_syscall_64+0xe2/0xf80
[ 2710.807751][T11676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2710.807769][T11676]  ? trace_irq_disable+0x37/0x100
[ 2710.807789][T11676]  ? clear_bhb_loop+0x60/0xb0
[ 2710.807813][T11676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2710.807832][T11676] RIP: 0033:0x7f73f199aeb9
[ 2710.807851][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2710.807868][T11676] RSP: 002b:00007f73f279a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2710.807891][T11676] RAX: ffffffffffffffda RBX: 00007f73f1c15fa0 RCX: 00007f73f199aeb9
[ 2710.807906][T11676] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000003
[ 2710.807920][T11676] RBP: 00007f73f279a090 R08: 0000000000000000 R09: 0000000000000000
[ 2710.807933][T11676] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[ 2710.807946][T11676] R13: 00007f73f1c16038 R14: 00007f73f1c15fa0 R15: 00007f73f1d3fa48
[ 2710.807978][T11676]  </TASK>
[ 2711.118254][T31346] m920x_read = error: -19
[ 2711.122714][T31346] dvb-usb: error while querying for an remote control event.
[ 2711.236101][T31346] m920x_read = error: -19
[ 2711.240524][T31346] dvb-usb: error while querying for an remote control event.
[ 2711.417454][T31346] m920x_read = error: -19
[ 2711.442772][T31346] dvb-usb: error while querying for an remote control event.
[ 2711.616572][T31346] m920x_read = error: -19
[ 2711.623486][T31346] dvb-usb: error while querying for an remote control event.
[ 2711.809162][T31346] m920x_read = error: -19
[ 2711.816591][T31346] dvb-usb: error while querying for an remote control event.
[ 2711.981380][T29391] m920x_read = error: -19
[ 2711.993153][T29391] dvb-usb: error while querying for an remote control event.
[ 2712.106156][T31346] m920x_read = error: -19
[ 2712.171510][T31346] dvb-usb: error while querying for an remote control event.
[ 2712.296910][T31346] m920x_read = error: -19
[ 2712.307374][T31346] dvb-usb: error while querying for an remote control event.
[ 2712.466222][T31346] m920x_read = error: -19
[ 2712.470868][T31346] dvb-usb: error while querying for an remote control event.
[ 2712.636014][T31346] m920x_read = error: -19
[ 2712.644356][T31346] dvb-usb: error while querying for an remote control event.
[ 2712.807222][T31346] m920x_read = error: -19
[ 2712.811696][T31346] dvb-usb: error while querying for an remote control event.
[ 2713.151231][T29391] m920x_read = error: -19
[ 2713.155718][T29391] dvb-usb: error while querying for an remote control event.
[ 2713.276990][T29391] m920x_read = error: -19
[ 2713.281443][T29391] dvb-usb: error while querying for an remote control event.
[ 2713.406021][T29391] m920x_read = error: -19
[ 2713.410420][T29391] dvb-usb: error while querying for an remote control event.
[ 2713.585627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.595204][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2713.606758][T29391] m920x_read = error: -19
[ 2713.611156][T29391] dvb-usb: error while querying for an remote control event.
[ 2713.786928][T29391] m920x_read = error: -19
[ 2713.791309][T29391] dvb-usb: error while querying for an remote control event.
[ 2713.823340][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10025'.
[ 2713.879904][T11701] fuse: Unknown parameter 'use00000000000000000000'
[ 2713.947627][T29391] m920x_read = error: -19
[ 2713.978045][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.106635][T29391] m920x_read = error: -19
[ 2714.112565][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.256465][T29391] m920x_read = error: -19
[ 2714.270458][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.396003][T29391] m920x_read = error: -19
[ 2714.400549][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.558102][T29391] m920x_read = error: -19
[ 2714.582676][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.671813][T11715] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 2714.727160][T29391] m920x_read = error: -19
[ 2714.733502][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.846664][T29391] m920x_read = error: -19
[ 2714.851101][T29391] dvb-usb: error while querying for an remote control event.
[ 2714.966109][T29391] m920x_read = error: -19
[ 2714.970627][T29391] dvb-usb: error while querying for an remote control event.
[ 2715.187595][T29391] m920x_read = error: -19
[ 2715.209542][T29391] dvb-usb: error while querying for an remote control event.
[ 2715.284182][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10032'.
[ 2715.380007][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10032'.
[ 2715.389626][T29391] m920x_read = error: -19
[ 2715.394595][T29391] dvb-usb: error while querying for an remote control event.
[ 2715.506211][T29391] m920x_read = error: -19
[ 2715.513834][T29391] dvb-usb: error while querying for an remote control event.
[ 2715.629866][T29391] m920x_read = error: -19
[ 2715.640761][T29391] dvb-usb: error while querying for an remote control event.
[ 2715.762004][T29391] m920x_read = error: -19
[ 2715.786344][T29391] dvb-usb: error while querying for an remote control event.
[ 2715.926932][T29391] m920x_read = error: -19
[ 2715.942941][T29391] dvb-usb: error while querying for an remote control event.
[ 2716.116776][T29391] m920x_read = error: -19
[ 2716.121196][T29391] dvb-usb: error while querying for an remote control event.
[ 2716.224388][T11746] fuse: Unknown parameter 'use00000000000000000000'
[ 2716.270302][ T7617] m920x_read = error: -19
[ 2716.274715][ T7617] dvb-usb: error while querying for an remote control event.
[ 2716.415991][ T7617] m920x_read = error: -19
[ 2716.420880][ T7617] dvb-usb: error while querying for an remote control event.
[ 2716.571971][ T5894] m920x_read = error: -19
[ 2716.579658][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10038'.
[ 2716.603236][ T5894] dvb-usb: error while querying for an remote control event.
[ 2716.736042][ T7617] m920x_read = error: -19
[ 2716.740456][ T7617] dvb-usb: error while querying for an remote control event.
[ 2716.942971][ T7617] m920x_read = error: -19
[ 2716.947560][ T7617] dvb-usb: error while querying for an remote control event.
[ 2717.099808][ T7617] m920x_read = error: -19
[ 2717.258073][ T7617] dvb-usb: error while querying for an remote control event.
[ 2717.386007][ T5894] m920x_read = error: -19
[ 2717.392789][ T5894] dvb-usb: error while querying for an remote control event.
[ 2717.426870][T11765] openvswitch: netlink: Key type 70 is out of range max 32
[ 2717.526990][ T5894] m920x_read = error: -19
[ 2717.531530][ T5894] dvb-usb: error while querying for an remote control event.
[ 2717.648123][ T5894] m920x_read = error: -19
[ 2717.653367][ T5894] dvb-usb: error while querying for an remote control event.
[ 2717.830798][ T5894] m920x_read = error: -19
[ 2717.835353][ T5894] dvb-usb: error while querying for an remote control event.
[ 2718.170102][ T5894] m920x_read = error: -19
[ 2718.174510][ T5894] dvb-usb: error while querying for an remote control event.
[ 2718.296463][ T5894] m920x_read = error: -19
[ 2718.300881][ T5894] dvb-usb: error while querying for an remote control event.
[ 2718.436440][T29391] m920x_read = error: -19
[ 2718.440858][T29391] dvb-usb: error while querying for an remote control event.
[ 2718.566004][T29391] m920x_read = error: -19
[ 2718.575300][T29391] dvb-usb: error while querying for an remote control event.
[ 2718.688366][T29391] m920x_read = error: -19
[ 2718.693347][T29391] dvb-usb: error while querying for an remote control event.
[ 2718.818677][T29391] m920x_read = error: -19
[ 2718.826008][T29391] dvb-usb: error while querying for an remote control event.
[ 2718.928807][T11802] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2719.021559][T29391] m920x_read = error: -19
[ 2719.025988][T29391] dvb-usb: error while querying for an remote control event.
[ 2719.156395][T29391] m920x_read = error: -19
[ 2719.161060][T29391] dvb-usb: error while querying for an remote control event.
[ 2719.316027][T29391] m920x_read = error: -19
[ 2719.320488][T29391] dvb-usb: error while querying for an remote control event.
[ 2719.476021][T29391] m920x_read = error: -19
[ 2719.492115][T29391] dvb-usb: error while querying for an remote control event.
[ 2719.646084][T29391] m920x_read = error: -19
[ 2719.665888][T29391] dvb-usb: error while querying for an remote control event.
[ 2719.826312][T29391] m920x_read = error: -19
[ 2719.851258][T29391] dvb-usb: error while querying for an remote control event.
[ 2720.086000][T29391] m920x_read = error: -19
[ 2720.090562][T29391] dvb-usb: error while querying for an remote control event.
[ 2720.216826][T29391] m920x_read = error: -19
[ 2720.221245][T29391] dvb-usb: error while querying for an remote control event.
[ 2720.385982][T29391] m920x_read = error: -19
[ 2720.396029][T29391] dvb-usb: error while querying for an remote control event.
[ 2720.550348][T29391] m920x_read = error: -19
[ 2720.557628][T29391] dvb-usb: error while querying for an remote control event.
[ 2720.716089][ T5894] m920x_read = error: -19
[ 2720.720554][ T5894] dvb-usb: error while querying for an remote control event.
[ 2720.746327][T29391] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2720.866265][ T5894] m920x_read = error: -19
[ 2720.870687][ T5894] dvb-usb: error while querying for an remote control event.
[ 2720.927281][T29391] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[ 2720.943662][T29391] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[ 2720.986367][ T5894] m920x_read = error: -19
[ 2720.990869][ T5894] dvb-usb: error while querying for an remote control event.
[ 2721.008634][T29391] usb 2-1: config 0 has no interfaces?
[ 2721.034434][T29391] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 2721.061011][T29391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2721.107830][ T5894] m920x_read = error: -19
[ 2721.114856][ T5894] dvb-usb: error while querying for an remote control event.
[ 2721.122897][T29391] usb 2-1: config 0 descriptor??
[ 2721.255991][T29391] m920x_read = error: -19
[ 2721.260542][T29391] dvb-usb: error while querying for an remote control event.
[ 2721.368963][T29391] usb 2-1: USB disconnect, device number 47
[ 2721.404679][ T5894] m920x_read = error: -19
[ 2721.410500][ T5894] dvb-usb: error while querying for an remote control event.
[ 2721.556083][ T7617] m920x_read = error: -19
[ 2721.560945][ T7617] dvb-usb: error while querying for an remote control event.
[ 2721.676211][ T7617] m920x_read = error: -19
[ 2721.690065][ T7617] dvb-usb: error while querying for an remote control event.
[ 2721.827015][T11847] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2721.856326][ T7617] m920x_read = error: -19
[ 2721.860756][ T7617] dvb-usb: error while querying for an remote control event.
[ 2722.036323][ T7617] m920x_read = error: -19
[ 2722.063175][ T7617] dvb-usb: error while querying for an remote control event.
[ 2722.306094][ T7617] m920x_read = error: -19
[ 2722.310514][ T7617] dvb-usb: error while querying for an remote control event.
[ 2722.561495][ T7617] m920x_read = error: -19
[ 2722.573287][ T7617] dvb-usb: error while querying for an remote control event.
[ 2722.682030][T11863] sctp: [Deprecated]: syz.5.10068 (pid 11863) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2722.682030][T11863] Use struct sctp_sack_info instead
[ 2722.745986][ T7617] m920x_read = error: -19
[ 2722.751369][ T7617] dvb-usb: error while querying for an remote control event.
[ 2723.150697][ T7617] m920x_read = error: -19
[ 2723.155324][ T7617] dvb-usb: error while querying for an remote control event.
[ 2723.277039][ T7617] m920x_read = error: -19
[ 2723.301642][ T7617] dvb-usb: error while querying for an remote control event.
[ 2723.466016][ T5894] m920x_read = error: -19
[ 2723.470515][ T5894] dvb-usb: error while querying for an remote control event.
[ 2723.666110][ T5894] m920x_read = error: -19
[ 2723.675478][ T5894] dvb-usb: error while querying for an remote control event.
[ 2723.815989][ T7617] m920x_read = error: -19
[ 2723.820479][ T7617] dvb-usb: error while querying for an remote control event.
[ 2723.936244][ T7617] m920x_read = error: -19
[ 2723.941026][ T5894] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 2723.949877][ T7617] dvb-usb: error while querying for an remote control event.
[ 2724.086494][ T7617] m920x_read = error: -19
[ 2724.095467][ T7617] dvb-usb: error while querying for an remote control event.
[ 2724.116079][ T5894] usb 6-1: device descriptor read/64, error -71
[ 2724.135115][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2724.200348][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2724.226008][ T7617] m920x_read = error: -19
[ 2724.230589][ T7617] dvb-usb: error while querying for an remote control event.
[ 2724.417643][ T7617] m920x_read = error: -19
[ 2724.425508][ T5894] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 2724.448186][ T7617] dvb-usb: error while querying for an remote control event.
[ 2724.616416][ T7617] m920x_read = error: -19
[ 2724.644660][ T5894] usb 6-1: device descriptor read/64, error -71
[ 2724.651109][ T7617] dvb-usb: error while querying for an remote control event.
[ 2724.765053][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10074'.
[ 2724.796109][ T7617] m920x_read = error: -19
[ 2724.800546][ T7617] dvb-usb: error while querying for an remote control event.
[ 2724.808572][ T5894] usb usb6-port1: attempt power cycle
[ 2724.946022][ T7617] m920x_read = error: -19
[ 2724.955006][ T7617] dvb-usb: error while querying for an remote control event.
[ 2725.096000][ T7617] m920x_read = error: -19
[ 2725.103232][ T7617] dvb-usb: error while querying for an remote control event.
[ 2725.175932][ T5894] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 2725.217759][ T5894] usb 6-1: device descriptor read/8, error -71
[ 2725.241311][ T7617] m920x_read = error: -19
[ 2725.249051][ T7617] dvb-usb: error while querying for an remote control event.
[ 2725.383630][T11894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10077'.
[ 2725.406801][ T7617] m920x_read = error: -19
[ 2725.416083][ T7617] dvb-usb: error while querying for an remote control event.
[ 2725.435613][T11894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10077'.
[ 2725.466002][ T5894] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 2725.478600][T11897] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2725.507478][ T5894] usb 6-1: device descriptor read/8, error -71
[ 2725.556309][ T7617] m920x_read = error: -19
[ 2725.560804][ T7617] dvb-usb: error while querying for an remote control event.
[ 2725.636893][ T5894] usb usb6-port1: unable to enumerate USB device
[ 2725.696254][ T7617] m920x_read = error: -19
[ 2725.720678][ T7617] dvb-usb: error while querying for an remote control event.
[ 2725.801976][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10079'.
[ 2725.840498][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10079'.
[ 2725.883326][ T5894] m920x_read = error: -19
[ 2725.889949][ T5894] dvb-usb: error while querying for an remote control event.
[ 2726.041197][ T5894] m920x_read = error: -19
[ 2726.046356][ T5894] dvb-usb: error while querying for an remote control event.
[ 2726.216286][ T5894] m920x_read = error: -19
[ 2726.230860][ T5894] dvb-usb: error while querying for an remote control event.
[ 2726.407031][ T5894] m920x_read = error: -19
[ 2726.416052][ T5894] dvb-usb: error while querying for an remote control event.
[ 2726.576304][ T5894] m920x_read = error: -19
[ 2726.584939][ T5894] dvb-usb: error while querying for an remote control event.
[ 2726.731227][ T5894] m920x_read = error: -19
[ 2726.737820][ T5894] dvb-usb: error while querying for an remote control event.
[ 2726.860291][ T5894] m920x_read = error: -19
[ 2726.864816][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.028510][ T5894] m920x_read = error: -19
[ 2727.033828][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.166106][ T5894] m920x_read = error: -19
[ 2727.170552][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.291655][ T5894] m920x_read = error: -19
[ 2727.335984][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.456065][ T5894] m920x_read = error: -19
[ 2727.462175][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.515165][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2727.573739][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2727.611268][ T5894] m920x_read = error: -19
[ 2727.622085][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.659885][T11946] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2727.767087][ T5894] m920x_read = error: -19
[ 2727.771546][ T5894] dvb-usb: error while querying for an remote control event.
[ 2727.888594][T29391] m920x_read = error: -19
[ 2727.900883][T29391] dvb-usb: error while querying for an remote control event.
[ 2728.017793][T29391] m920x_read = error: -19
[ 2728.026740][T29391] dvb-usb: error while querying for an remote control event.
[ 2728.079973][T11950] FAULT_INJECTION: forcing a failure.
[ 2728.079973][T11950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2728.084545][T11951] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10093'.
[ 2728.156288][T29391] m920x_read = error: -19
[ 2728.160813][T29391] dvb-usb: error while querying for an remote control event.
[ 2728.173729][T11950] CPU: 0 UID: 0 PID: 11950 Comm: syz.5.10092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2728.173763][T11950] Tainted: [L]=SOFTLOCKUP
[ 2728.173771][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2728.173784][T11950] Call Trace:
[ 2728.173792][T11950]  <TASK>
[ 2728.173802][T11950]  dump_stack_lvl+0xe8/0x150
[ 2728.173834][T11950]  should_fail_ex+0x412/0x560
[ 2728.173860][T11950]  _copy_from_user+0x2d/0xb0
[ 2728.173888][T11950]  ___sys_recvmsg+0x175/0x590
[ 2728.173919][T11950]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2728.173951][T11950]  ? __fget_files+0x2a/0x420
[ 2728.174002][T11950]  do_recvmmsg+0x334/0x800
[ 2728.174038][T11950]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2728.174078][T11950]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2728.174118][T11950]  __x64_sys_recvmmsg+0x198/0x250
[ 2728.174149][T11950]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2728.174188][T11950]  do_syscall_64+0xe2/0xf80
[ 2728.174209][T11950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2728.174228][T11950]  ? trace_irq_disable+0x37/0x100
[ 2728.174246][T11950]  ? clear_bhb_loop+0x60/0xb0
[ 2728.174269][T11950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2728.174288][T11950] RIP: 0033:0x7f175139aeb9
[ 2728.174306][T11950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2728.174322][T11950] RSP: 002b:00007f17522d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2728.174344][T11950] RAX: ffffffffffffffda RBX: 00007f1751615fa0 RCX: 00007f175139aeb9
[ 2728.174359][T11950] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000003
[ 2728.174373][T11950] RBP: 00007f17522d7090 R08: 0000000000000000 R09: 0000000000000000
[ 2728.174386][T11950] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[ 2728.174398][T11950] R13: 00007f1751616038 R14: 00007f1751615fa0 R15: 00007f175173fa48
[ 2728.174431][T11950]  </TASK>
[ 2728.492032][T29391] m920x_read = error: -19
[ 2728.560089][T29391] dvb-usb: error while querying for an remote control event.
[ 2728.746481][T29391] m920x_read = error: -19
[ 2728.752872][T29391] dvb-usb: error while querying for an remote control event.
[ 2728.843375][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10095'.
[ 2728.889113][T29391] m920x_read = error: -19
[ 2728.895777][T29391] dvb-usb: error while querying for an remote control event.
[ 2729.022147][ T5894] m920x_read = error: -19
[ 2729.032179][ T5894] dvb-usb: error while querying for an remote control event.
[ 2729.288342][T29391] m920x_read = error: -19
[ 2729.292755][T29391] dvb-usb: error while querying for an remote control event.
[ 2729.529051][ T5894] m920x_read = error: -19
[ 2729.548709][ T5894] dvb-usb: error while querying for an remote control event.
[ 2729.583504][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10100'.
[ 2729.603932][T11972] program syz.7.10099 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2729.619500][T11968] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10100'.
[ 2729.768816][T29391] m920x_read = error: -19
[ 2729.801631][T29391] dvb-usb: error while querying for an remote control event.
[ 2729.821812][T11968] bridge1: entered allmulticast mode
[ 2729.960545][T29391] m920x_read = error: -19
[ 2729.980615][T29391] dvb-usb: error while querying for an remote control event.
[ 2730.295977][T29391] m920x_read = error: -19
[ 2730.300352][T29391] dvb-usb: error while querying for an remote control event.
[ 2730.372473][T11974] loop5: detected capacity change from 0 to 7
[ 2730.438578][ T5894] m920x_read = error: -19
[ 2730.445015][T11974] Dev loop5: unable to read RDB block 7
[ 2730.451177][ T5894] dvb-usb: error while querying for an remote control event.
[ 2730.476025][T11974]  loop5: AHDI p1
[ 2730.480986][T11974] loop5: partition table partially beyond EOD, truncated
[ 2730.495231][T11979] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2730.596417][ T5894] m920x_read = error: -19
[ 2730.601223][ T5894] dvb-usb: error while querying for an remote control event.
[ 2730.719698][ T5894] m920x_read = error: -19
[ 2730.726138][ T5915] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 2730.729367][ T5894] dvb-usb: error while querying for an remote control event.
[ 2730.812425][T11987] ------------[ cut here ]------------
[ 2730.818026][T11987] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002)
[ 2730.818049][T11987] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.8.10105/11987
[ 2730.838058][T11987] Modules linked in:
[ 2730.843213][T11987] CPU: 1 UID: 0 PID: 11987 Comm: syz.8.10105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2730.854602][T11987] Tainted: [L]=SOFTLOCKUP
[ 2730.859336][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2730.869468][ T5915] usb 6-1: device descriptor read/64, error -71
[ 2730.878006][T11987] RIP: 0010:path_noexec+0x1af/0x200
[ 2730.883265][T11987] Code: 02 31 ff 48 89 de e8 80 f2 83 ff d1 eb eb 07 e8 97 ed 83 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 98 69 59 09 cc e8 82 ed 83 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[ 2730.902998][T11987] RSP: 0018:ffffc9000d51fbd8 EFLAGS: 00010283
[ 2730.909207][T11987] RAX: ffffffff824089ce RBX: ffff888069bb2240 RCX: 0000000000080000
[ 2730.917299][T11987] RDX: ffffc90012cc5000 RSI: 0000000000000072 RDI: 0000000000000073
[ 2730.925404][T11987] RBP: 0000000000080000 R08: ffff8880251a3d00 R09: 0000000000000003
[ 2730.933967][T11987] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001
[ 2730.942287][T11987] R13: 1ffff92001aa3f90 R14: 0000000000000000 R15: dffffc0000000000
[ 2730.950469][T11987] FS:  00007f370ca526c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000
[ 2730.959556][T11987] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2730.966628][T11987] CR2: 0000000000000000 CR3: 00000000802ee000 CR4: 00000000003526f0
[ 2730.974631][T11987] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 000000007a08253c
[ 2730.983139][T11987] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2730.991343][T11987] Call Trace:
[ 2730.994664][T11987]  <TASK>
[ 2730.997694][T11987]  do_mmap+0xa32/0x10c0
[ 2731.001908][T11987]  ? __pfx_do_mmap+0x10/0x10
[ 2731.006939][T11987]  ? down_write_killable+0x180/0x240
[ 2731.012354][T11987]  ? __pfx_down_write_killable+0x10/0x10
[ 2731.018074][T11987]  ? apparmor_mmap_file+0x23e/0x2b0
[ 2731.023356][T11987]  vm_mmap_pgoff+0x2c9/0x4f0
[ 2731.028034][T11987]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 2731.033192][T11987]  ? __fget_files+0x2a/0x420
[ 2731.037946][T11987]  ? __fget_files+0x3a0/0x420
[ 2731.042694][T11987]  ? __fget_files+0x2a/0x420
[ 2731.047397][T11987]  ksys_mmap_pgoff+0x51e/0x760
[ 2731.052214][T11987]  do_syscall_64+0xe2/0xf80
[ 2731.056949][T11987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2731.063049][T11987]  ? trace_irq_disable+0x37/0x100
[ 2731.068549][T11987]  ? clear_bhb_loop+0x60/0xb0
[ 2731.073242][T11987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2731.079673][T11987] RIP: 0033:0x7f370bb9aeb9
[ 2731.084122][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2731.104072][T11987] RSP: 002b:00007f370ca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2731.112585][T11987] RAX: ffffffffffffffda RBX: 00007f370be16090 RCX: 00007f370bb9aeb9
[ 2731.120631][T11987] RDX: 0000000000000004 RSI: 0000000000002000 RDI: 0000200000065000
[ 2731.128673][T11987] RBP: 00007f370bc08c1f R08: 0000000000000008 R09: 0000000000000000
[ 2731.136681][T11987] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000
[ 2731.144669][T11987] R13: 00007f370be16128 R14: 00007f370be16090 R15: 00007f370bf3fa48
[ 2731.152714][T11987]  </TASK>
[ 2731.155753][T11987] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2731.163138][T11987] CPU: 1 UID: 0 PID: 11987 Comm: syz.8.10105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2731.174183][T11987] Tainted: [L]=SOFTLOCKUP
[ 2731.178506][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2731.188562][T11987] Call Trace:
[ 2731.191843][T11987]  <TASK>
[ 2731.194776][T11987]  vpanic+0x1e0/0x670
[ 2731.198782][T11987]  panic+0xc5/0xd0
[ 2731.202591][T11987]  ? __pfx_panic+0x10/0x10
[ 2731.207016][T11987]  __warn+0x315/0x4a0
[ 2731.211065][T11987]  ? path_noexec+0x1af/0x200
[ 2731.215678][T11987]  ? path_noexec+0x1af/0x200
[ 2731.220336][T11987]  __report_bug+0x29a/0x540
[ 2731.224889][T11987]  ? path_noexec+0x1af/0x200
[ 2731.229485][T11987]  ? __pfx___report_bug+0x10/0x10
[ 2731.234526][T11987]  ? arch_get_unmapped_area_topdown+0x264/0xb60
[ 2731.240944][T11987]  ? path_noexec+0x1af/0x200
[ 2731.245643][T11987]  report_bug+0x16a/0x220
[ 2731.249994][T11987]  ? path_noexec+0x1af/0x200
[ 2731.254611][T11987]  ? path_noexec+0x1b1/0x200
[ 2731.259207][T11987]  handle_bug+0x98/0x200
[ 2731.263537][T11987]  exc_invalid_op+0x1a/0x50
[ 2731.268122][T11987]  asm_exc_invalid_op+0x1a/0x20
[ 2731.272975][T11987] RIP: 0010:path_noexec+0x1af/0x200
[ 2731.278183][T11987] Code: 02 31 ff 48 89 de e8 80 f2 83 ff d1 eb eb 07 e8 97 ed 83 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 98 69 59 09 cc e8 82 ed 83 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[ 2731.297906][T11987] RSP: 0018:ffffc9000d51fbd8 EFLAGS: 00010283
[ 2731.303972][T11987] RAX: ffffffff824089ce RBX: ffff888069bb2240 RCX: 0000000000080000
[ 2731.311940][T11987] RDX: ffffc90012cc5000 RSI: 0000000000000072 RDI: 0000000000000073
[ 2731.319913][T11987] RBP: 0000000000080000 R08: ffff8880251a3d00 R09: 0000000000000003
[ 2731.327892][T11987] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001
[ 2731.335879][T11987] R13: 1ffff92001aa3f90 R14: 0000000000000000 R15: dffffc0000000000
[ 2731.343885][T11987]  ? path_noexec+0x1ae/0x200
[ 2731.348572][T11987]  ? path_noexec+0x1ae/0x200
[ 2731.353162][T11987]  do_mmap+0xa32/0x10c0
[ 2731.357329][T11987]  ? __pfx_do_mmap+0x10/0x10
[ 2731.362004][T11987]  ? down_write_killable+0x180/0x240
[ 2731.367377][T11987]  ? __pfx_down_write_killable+0x10/0x10
[ 2731.373009][T11987]  ? apparmor_mmap_file+0x23e/0x2b0
[ 2731.378221][T11987]  vm_mmap_pgoff+0x2c9/0x4f0
[ 2731.382909][T11987]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 2731.388016][T11987]  ? __fget_files+0x2a/0x420
[ 2731.392626][T11987]  ? __fget_files+0x3a0/0x420
[ 2731.397382][T11987]  ? __fget_files+0x2a/0x420
[ 2731.401968][T11987]  ksys_mmap_pgoff+0x51e/0x760
[ 2731.406839][T11987]  do_syscall_64+0xe2/0xf80
[ 2731.411384][T11987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2731.417884][T11987]  ? trace_irq_disable+0x37/0x100
[ 2731.422902][T11987]  ? clear_bhb_loop+0x60/0xb0
[ 2731.427579][T11987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2731.433577][T11987] RIP: 0033:0x7f370bb9aeb9
[ 2731.437993][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2731.457682][T11987] RSP: 002b:00007f370ca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2731.466186][T11987] RAX: ffffffffffffffda RBX: 00007f370be16090 RCX: 00007f370bb9aeb9
[ 2731.474178][T11987] RDX: 0000000000000004 RSI: 0000000000002000 RDI: 0000200000065000
[ 2731.482149][T11987] RBP: 00007f370bc08c1f R08: 0000000000000008 R09: 0000000000000000
[ 2731.490481][T11987] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000
[ 2731.498487][T11987] R13: 00007f370be16128 R14: 00007f370be16090 R15: 00007f370bf3fa48
[ 2731.506472][T11987]  </TASK>
[ 2731.509927][T11987] Kernel Offset: disabled
[ 2731.514247][T11987] Rebooting in 86400 seconds..