last executing test programs: 10m13.866941376s ago: executing program 0 (id=628): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x70bd24, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x4}]}]}, 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) eventfd2(0x0, 0x100001) r7 = socket(0x840000000002, 0x3, 0xfa) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000000)={r6}) getsockname$inet(r7, 0x0, &(0x7f0000002280)) 10m13.722454878s ago: executing program 0 (id=629): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100000012abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="08000000c0100600080035e26f5617ecba234fa8761bf7771068e6e69b2055", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000884}, 0x4008040) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040b8100000020000000040000000800040001000000", 0x24) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0a8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5b9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x44040}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 10m12.269085583s ago: executing program 0 (id=635): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) r2 = gettid() getpriority(0x1, r2) timer_create(0x4, &(0x7f0000000080)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x40000001, 0x10000, 0x4, 0x400002}) 10m11.337658809s ago: executing program 0 (id=639): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) landlock_restrict_self(r3, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 10m9.187167345s ago: executing program 0 (id=648): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={@local}}) 10m8.989837326s ago: executing program 0 (id=649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_io_uring_setup(0x83d, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x41, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0x2400c043, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 10m7.092476017s ago: executing program 32 (id=649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_io_uring_setup(0x83d, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x41, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0x2400c043, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m52.161689543s ago: executing program 4 (id=1906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) (async) r2 = io_uring_setup(0x653, 0x0) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1064, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x1034, 0x2, [@TCA_TCINDEX_ACT={0x1030, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x81, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1064}, 0x1, 0x0, 0x0, 0x810}, 0x41) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xf, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r7, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmsg$netlink(r6, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbf9, 0x4}, 0xc, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000480)=ANY=[], 0x38}], 0x2, 0x0, 0x0, 0x2000c815}, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) (rerun: 32) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 4m50.72011737s ago: executing program 4 (id=1911): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x83, &(0x7f00000008c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80004d1101fc000000000000000000000000000000ff020000000000000000000000000001fff54e22004d9078f7a8080887faa66d31ff"], 0x0) 4m50.54680108s ago: executing program 4 (id=1912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000b00)=""/4, 0x4, 0x2101, &(0x7f0000000b40)=@isdn={0x22, 0x6, 0x6, 0xff, 0x9}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_usb_connect$uac1(0x3, 0xa1, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x5, 0x70, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x17}, [@processing_unit={0xd, 0x24, 0x7, 0x5, 0x3, 0x1, "fd57bec720d7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x7, 0x7, {0x7, 0x25, 0x1, 0x4, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x200, 0x7, "6f2860f7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xf, 0x4, 0x9, 0xb7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x1, "9e", "3e89d9"}]}, {{0x9, 0x5, 0x82, 0x9, 0xcc6985ed6bdcde84, 0x6, 0x80, 0xc, {0x7, 0x25, 0x1, 0xc, 0x5}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x8, 0x5, 0x14, 0xff, 0x6}, 0x109, &(0x7f0000000640)={0x5, 0xf, 0x109, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x8, 0x6b3}, @generic={0xfd, 0x10, 0x3, "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"}]}, 0x9, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x427}}, {0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="05bc9ddedd"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x180c}}, {0x29, &(0x7f0000000780)=@string={0x29, 0x3, "b3666ab76cd5646529702efd1be9eb8a62d7eb3d14de58b859a64a807eef857d7bd8fde34ac651"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xb9, &(0x7f0000000800)=@string={0xb9, 0x3, "76e72aaf5214318bbd444a8a0db67538546e7dd6b0aa6ec0d7c1ed29bdee9cd02d30f3dad90e788f2fd00f9481961c34c36b4541f9da9623468e4924c75e89502e0748b807cec681655f8da4b017e9d19bae84c263e9bf6f83579e9a86b3c49f657be02a19e5a286e6fa324257c927cc2b82f3eb23f4d68dc6a434822074173390ee72a3f35524d18e77a4cebcf5fddc97f10c754b6c87f57a1e2f9e7beb98ebfec3d12a2cc2ff54ff41f244a0043131db322526a3403b"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x53}}, {0x33, &(0x7f0000000940)=@string={0x33, 0x3, "9f06d3c65e0a10b42169ba64d66d293559f05b9e8dc9d2c07bd4284984c444558ec34a976c3c13f6d66b839d9a05832bb8"}}, {0xfb, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r1]}]}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="c36a0d34e85dc31029704c4d4b38120690c5ca2f9988a2aa46e83a53abaacf70800ec81e8be10748135fdf4fd2972f9c82c819b10960ee6ea7d26c3251ce66a8b9e0708cfb9f0dee6b10cb11848f9c808d7159cc43c4cb141f51ca382cc10b3fdb6b25a8f8b32946d97ff0afd92470645894dce0e6634cc4d88aaf9245242965e5e205ffa56a10162d6eb9e0ab7a7a7c15f55c2c66bcded0e406d203a540714fdc00b305ae248a80195039957265e69fa080130c6bfcdacc8e66b52d8cd78dab0f7098994b220e181c9095f2ca44584f37a803d50e02e7176add7f6882d2e51eca172dcf924189151de96067c015567c19f7ffae0b0c", 0xf6}, {&(0x7f0000000200)="c7602649f635d3060f661204101e3aa93fcf373f4a4ae898170d3410772628ab6534456451bba30a98fc0ff1f6e07a7adcc7b34cf0d46f881b8803b8d96ebf4a1844bacc69d09ab1a7fa070f7a2a0297d806a51548fe8c4627f8fb29a6de96", 0x5f}, {&(0x7f0000000340)="7d2d43a57ff113a975b51381389c005c4f30f5c71d0aa72150d5454ab3aeeb628ae9c78ce91b9051c4009cd314c6cb5864f097d2bdca8d768ae88a461e354459dbdfccf739576d793c013eebd33ec57e7663e8848cd90b9331b32d16d234e9a9c4b6aebf7eaab2c8ed52c81138588c5e5ea4ad58d7cd0851cee30a0182ccedbdfc8c9f38a9f3ccac81aa09cce7b1ba374dadcbb80407f8287920e25880f524becffc7b868fa37c5d39c74fb12f545c74640be0a247b58fca9fc1352a792756ad5a851044d3dc81df541dde27feda2310", 0xd0}], 0x3) 4m49.063797362s ago: executing program 4 (id=1921): unshare(0x22020600) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = getuid() r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x200040, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r6, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x6, 0x400000000000000, 0xfffffffd, 0x0, {0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x7, 0xc000, 0x3, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x1001a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0x7, 0x100, 0x200000, 0x0, 0x4, 0xc000, 0x0, r10, r11, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="040005000000000008000400", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="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"], 0x5c, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000000014000580080001"], 0xe8}}, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r14) ptrace$setregs(0xd, r14, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r14, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r14, 0x2, &(0x7f0000000740)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r14, 0x0, &(0x7f0000000080)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) 4m45.902921306s ago: executing program 4 (id=1939): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d300000000000004800168044000180"], 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000020", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a"], 0x254}}, 0x0) 4m45.661793755s ago: executing program 4 (id=1942): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200013d00000000000000001800b1000c0035000000000000000000080042"], 0x28}], 0x1, 0x0, 0x0, 0x4050}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8], [0x0, 0x0, 0x8000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0xc00000, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x623082, 0x0) fcntl$getflags(r11, 0x3) ioctl$RTC_PIE_ON(r10, 0x7005) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) 4m30.491727785s ago: executing program 33 (id=1942): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200013d00000000000000001800b1000c0035000000000000000000080042"], 0x28}], 0x1, 0x0, 0x0, 0x4050}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8], [0x0, 0x0, 0x8000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0xc00000, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x623082, 0x0) fcntl$getflags(r11, 0x3) ioctl$RTC_PIE_ON(r10, 0x7005) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) 13.991604429s ago: executing program 5 (id=2987): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x1c0, 0x0) sendmsg$nl_route(r0, 0xfffffffffffffffd, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xdb, 0x9, 0x6, 0x1, 0x0, 0x3, 0x6, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0xd, 0x5, 0x6, 0x7, 0x81, 0x1, 0x80, 0x4, 0xe, 0x70}, {0xeeef0000, 0x8080000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x3, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x50000, 0xe, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0xd}, {0xdddd1000, 0x0, 0x0, 0x1, 0x2, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0x45}, {0xdddd1000, 0x4000, 0x4, 0x23, 0x5, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x46, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x0, 0x4000, 0xf000, [0x1, 0x1004, 0x4, 0x1000]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) socket$kcm(0xa, 0x3, 0x87) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000680)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) 13.600617178s ago: executing program 1 (id=2990): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x171200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r4, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000003017c1200040042800c0001800600060086dd0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 11.706543522s ago: executing program 1 (id=2993): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x1c0, 0x0) sendmsg$nl_route(r0, 0xfffffffffffffffd, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xdb, 0x9, 0x6, 0x1, 0x0, 0x3, 0x6, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0xd, 0x5, 0x6, 0x7, 0x81, 0x1, 0x80, 0x4, 0xe, 0x70}, {0xeeef0000, 0x8080000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x3, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x50000, 0xe, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0xd}, {0xdddd1000, 0x0, 0x0, 0x1, 0x2, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0x45}, {0xdddd1000, 0x4000, 0x4, 0x23, 0x5, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x46, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x0, 0x4000, 0xf000, [0x1, 0x1004, 0x4, 0x1000]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r4 = socket$kcm(0xa, 0x3, 0x87) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000680)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = dup(r5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) 10.756538612s ago: executing program 5 (id=2996): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfce9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7ded2dc47ec13c0f6af88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e9798d4ec856993d53b9038ab44fd", @ANYRESHEX=r0, @ANYRES32], 0x2c2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}}}, 0x108) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x94}}, 0x24000800) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) 9.326445373s ago: executing program 5 (id=2999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x1, 0x0, 0x0, 0xddaa, 0x8a}, 0x9c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r5}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.546845958s ago: executing program 1 (id=3001): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x6, 0x1, 0x8, 0x0, 0x6, 0x3, 0x5, 0x7, 0x6, 0x7, 0x3], 0xffff1000, 0x71312}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffe64) sendmmsg$unix(r7, &(0x7f0000000500)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000300)="fd86f4bc7669e7fc3ece42fc2090ee396431b89bd03c69d2fb02bea69a80d6ad4841c90e07d40ae44a357a84f3d66b526a8267eac14eeb92c72644b6ea386da5b7ef1a9a8d74a5c825e64187c8de565677c0a16a86e28d1fb3cc4d3c13e6d489be07d98da49eb77a400c22ff56b9b60a6e70cad999e73e7f1b8c15da7b9c0feb750678d9c422207ac4bf3408fed513ed4e0b4817e19af8f4c965e137aee1ac06fd770c466f8657eeff6bd634153181b2a32e83ddae1386d93ada7d9482a133bde7af7c8025a983e2a9b048cabc619aeb587d1d1e63", 0xd5}, {&(0x7f0000000400)="6bceb058b18a97b61a09d2575571e7a7af871367ac9e2e3f73991740029bcd13ed9577a9f122ee95f284038e73f21d3f6c9ac38cecf7806caf8301ef8671d49f", 0x40}], 0x2, 0x0, 0x0, 0x4044004}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000fc0), 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20, 0x4}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000200)={{'\x00', 0x3}, {0x9}, 0x38, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="603539dbc46b00bda021eb1554acd14e9db0a5faa4f8e32b989adecc2ad3c9744a00483919162346a0e0de04072f463384c80f4a18c0ca7698da5eccc096a1", 0x3f, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1f7}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r9}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 7.923971148s ago: executing program 2 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000004c0)=""/18, 0x12}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000001700)=""/244, 0xf4}], 0xa, &(0x7f0000001800)=""/70, 0x46}, 0x10000) sendmsg$nl_route(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001b40)=ANY=[@ANYRESHEX=r1, @ANYBLOB="d0b0c7c779fb9b31db5a4e0779c7628085f89a1474928dc94196fb53c982b0933d01b9e7dd79c5a6421884d04959cdf3", @ANYRES64=r0, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x2002) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000002300)={&(0x7f0000001c80)=0x5e, 0x0, &(0x7f0000001cc0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000022c0)}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000001c0)={0x7, 0x0, '\x00', {0x0, @reserved}}) getsockname(r0, &(0x7f0000001a40)=@nfc, &(0x7f0000001ac0)=0x80) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000001bc0)={r7, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x10400, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000140), 0x1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 7.017959868s ago: executing program 5 (id=3005): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000780)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r1, &(0x7f0000000580)='status\x00') syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x40, 0x2, 0x99, {0x99, 0x22, "20985f1fb01eb40eab6680929fdce0fdf31e2881bf9f124b4ff18e8541848d566f0ad6635172a29e907abd21e39403f83de168b08d0214fd139b7426193c3fcc1e18407337dbb16742a89c622e193cd4374a8331a5a60308b120bed5d6cdd7f6554f7e4877668de9b8b4603521f5a8b40e33f53e36fc1957bb429f46e1aec599226d4b159d2d82193a489e642b97d6e45406446aaa9cc2"}}, &(0x7f0000000140)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "42bb708c768f8d6c68420aa3ec2332a5d87a518c45659a8cef256404e51d76d2c85387cb2a423a9c2d6493e7e637b5fa5e734b95ab13eeebe5b4f70047d7040e26ba8ece4cdeb2521516f7502ad513bd3f8927e40cf805227b7b5228bd91e2f5e227cf5af544843504c62441839835afd0f4b8a16675f66a21115eb4d5496ec264736cabe9d9c4633797cf2596c8fb36d9856d9dc16fa0cbe2742f42d7"}}, &(0x7f0000000200)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0xb, "9addda08"}, @global=@item_012={0x1, 0x1, 0x2, "e7"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x8, "d60a5cf5"}, @global=@item_012={0x2, 0x1, 0x0, "64f8"}, @global=@item_012={0x2, 0x1, 0x5, "b7d3"}, @global=@item_012={0x1, 0x1, 0x3, "0e"}, @main=@item_012={0x2, 0x0, 0xc, "bd3a"}, @local=@item_4={0x3, 0x2, 0x4, "361024d8"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x1c0}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0x9, 0x55, "511681bb63ef63ea4964a1b885ed6760719941e37deda61412820a44ef86358d58f54ff0de0745e6de5d98c05d552124da57b823b95fc9b5b698f780eb93af33fa4660581a65c12acb82be119c8244bdc414811162"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x1, 0x83, "7e90bb5c956ffd6ae6841e28f8ad30448da6cad9f092adc0869a5af3a5c9d651ff014c982015e443e2be51273e0712bcda0d88c90e06aa750ff3a228710d3b24e6b4d4d25ec9f4ead63aaa4ec4334b3bc92d7a66cc2bc43c6907ac15395c488c7cc5e3ba495d01ca1db4e79a0f2cbc4d3ba7173cb60bc5ea1b9017f17a5a82946b9272"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xfc}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.972462652s ago: executing program 6 (id=3006): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x1c0, 0x0) sendmsg$nl_route(r0, 0xfffffffffffffffd, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xdb, 0x9, 0x6, 0x1, 0x0, 0x3, 0x6, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0xd, 0x5, 0x6, 0x7, 0x81, 0x1, 0x80, 0x4, 0xe, 0x70}, {0xeeef0000, 0x8080000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x3, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x50000, 0xe, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0xd}, {0xdddd1000, 0x0, 0x0, 0x1, 0x2, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0x45}, {0xdddd1000, 0x4000, 0x4, 0x23, 0x5, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x46, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x0, 0x4000, 0xf000, [0x1, 0x1004, 0x4, 0x1000]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) socket$kcm(0xa, 0x3, 0x87) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000680)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) 6.749976344s ago: executing program 2 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000003000)=""/4102, 0x1006}], 0x1, 0x600, 0x3) getdents64(r1, &(0x7f00000000c0)=""/173, 0xad) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00102e07000915810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x400}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20064040}, 0x20040080) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}]}) socket$kcm(0x2, 0x3, 0x84) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="a7", 0x1, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) 6.360699863s ago: executing program 1 (id=3008): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x2e13, 0x4, {0xb, @vbi={0x56, 0x0, 0xf57e, 0x41414770, [0x6, 0x9], [0xa, 0x5], 0x1}}, 0xfffffff8}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) close_range(r0, r0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x800003f, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="200000000000000084"], 0x20, 0x800}, 0x20000000) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0xf57) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.33683189s ago: executing program 1 (id=3010): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x92}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0xfa}}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r3 = mq_open(0x0, 0x2, 0x48, &(0x7f0000000080)={0x7f, 0x9c1, 0x6, 0x80}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000030000000000000000000184ebfe80100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r3, 0x0, r5, &(0x7f0000000140)=0x39, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x7a21, 0x509600) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) recvmmsg(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40000002, 0x0) sendmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xd209f6d814827b17) socket$nl_generic(0x10, 0x3, 0x10) 4.168233202s ago: executing program 3 (id=3013): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8481100000003000000000000000e000a000f08000002800000121f", 0x2e}], 0x1}, 0x8084) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') pread64(r3, 0x0, 0x0, 0x1000004100) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) 4.077339338s ago: executing program 2 (id=3014): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @local}}, 0x1ff, 0x5, 0x8, 0x12, 0x41, 0x80, 0x60}, &(0x7f0000000140)=0x9c) 3.745233067s ago: executing program 2 (id=3015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000100000100fffc0900010073797a30000000002c000000030a010206000000000000000100fffd0900010073797a3000000000090003007b797a31000000ff60000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300f100000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) 3.740377127s ago: executing program 6 (id=3016): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0xb4}, [@ldst={0x6, 0x3, 0x3, 0x5, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) 3.596016273s ago: executing program 3 (id=3017): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000004a0001000000000000000036253e047c0000000000000000000000003094bf93f4e96153991880a67c264a730c9e7cdcabd7452e205561dd201664c035d605cd4c4639876de671bb541cb43a5b9a24ac8be82ad0358c2f621aca079a8476a9804cf9b5f53eeb132b0db71fda0fd5f30e5fc4340886fd094d2372fbb7df8867389695b3733116b7ca21bafa770e6cdba475a1e0447f503a9cc309584e9a84a8a30a668699373d310951d29ab16d0551696d0adc14406e35f4b8b01411fd3f158962b12525b466ccc8356ef8871070afb9e0463400a4f23cfb1e5880e0c37872d6dba2afa9959c7175b87b8b"], 0x20}}, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff09"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="24aa0040", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf250100000084010880380000801400040002004e207f0000010000000000000000200004000a004e2100000001fe8000000000000000000000000000aa040000007000008024000100000000000000000000000000000000000000000000000000000000000000000024000200722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca24000200d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a60400008080000080200004000a004e2200000004fe880000000000000000000000000001010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e23e0000002000000000000000006000500050000001400040002004e2064010101000000000000000008000a00010000005400008008000a000100000024000100000000000000000000000000000000000000000000000000000000000000000024000200039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a081400020077673100"/422], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007060500000000000000000000000042455a3df0c85d5bb28f9908edbd0832825096d564724649461ef15804a13b86031f7c2b0dce5398c9b73cd235dc6bc61f67f35ab4d2bf3a0ad8e83b2b4f8266f642070ee8456e664fe7b55a7eba8c2dba49170e06cbb9f6168b92edb988515994a228840328f86fa0c78b8db9297c00a11ba7c371c2d2ee9342c590b31596648f172b2986751eb838e11e21d80f0168474df57a386ca37cf225cc63aa0a2a5008b7d84a497f1b5325985d6b5ed4a02aa9f8f01c1a87dca29a31971f5b1367f28b52927b2aa2752016f9f9472b391bd26072d635"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) sched_setattr(0xffffffffffffffff, &(0x7f0000000300)={0x38, 0x0, 0x41, 0xab, 0x7, 0x4, 0x36, 0x9, 0x100, 0x1}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0x0) 3.59222697s ago: executing program 6 (id=3018): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00ee00040a030000000000000000000a000089090001"], 0x2c}, 0x1, 0x0, 0x0, 0x24048094}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.537011366s ago: executing program 2 (id=3019): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x16babc4a040d001c, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a47000000030a010100000000000000000a00000a0900010073797a31000000000c"], 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 3.448569007s ago: executing program 5 (id=3020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x1, 0x0, 0x0, 0xddaa, 0x8a}, 0x9c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r5}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.36255301s ago: executing program 6 (id=3021): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000a00000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20000}, 0x8) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 3.110432067s ago: executing program 6 (id=3022): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r7 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000f51000/0x2000)=nil) shmat(r7, &(0x7f0000b2f000/0x3000)=nil, 0xffffffffffffcfff) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3.028196771s ago: executing program 2 (id=3023): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118f7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x6, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xffffff68, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540d9ff00020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 2.06837198s ago: executing program 1 (id=3024): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40c600, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x400335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="ec", 0x1}], 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8, r1}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) unshare(0x20080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x208100}) io_uring_enter(r9, 0x7277, 0x0, 0x28, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 1.55259345s ago: executing program 3 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000880000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.468677144s ago: executing program 5 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4103, 0x1007}], 0x1, 0x18, 0x2) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB="8700000000000000cbc4448c4b03801f50626758c1996e122eada0915efaec293c363b9bba51678fd497e76a6cd193af72b13b3b8d163b656f059f09ce2d997ccce74733dbb4af730d4779660d7f75589e654d930f361f703455283d9b6343556e1abdc9fcaf54b7d36aad90dcd3ef75c85ec624b302ba214b7a6bf3d9e843b94243d78db4038b46a24269d3e79e672e997810bfffbf314c67c96d83f936a873950ad5b2e8e268d9481071a052"], 0x8) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xfffb}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000002240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r13}, 0x20) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000540)={{r3}, 0x3, &(0x7f00000001c0)=[0x5, 0x2, 0x3], 0x8000000000000001, 0x6}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 1.311900099s ago: executing program 3 (id=3027): r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=@ethtool_rxfh={0x47, 0x1, 0x80000001, 0xfffffff3, 0x72, "3e80e1", 0x0, [0xac3, 0x3, 0x5]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000002c0)={0x7, 0x0, r0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback={0x0, 0x460c6}, 0x1, 0x40, 0x259d, 0x40}}) 1.171501917s ago: executing program 3 (id=3028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = eventfd(0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x80, 0x42000006, 0x20a}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x8235}, 0x50) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r8, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x2a36}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 655.038521ms ago: executing program 6 (id=3029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x8800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r8, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) write$UHID_INPUT(r7, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xff) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x2}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7fff}, @TCA_PIE_ALPHA={0x8, 0x4, 0x3}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r3) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="a8000000d46acc09f3d98af8bdb52d2415aefdd66d10690f58250d65e742e940d53f2ea096ee82c2830bcb3c6e405bcb784eaa07dbd5931d1475425ee7a581cebf2cd59d17933224e610f66f3b6a0a188511b9e0d6193ed25b5fb40a6b6aa0662ba9bfaac6f315eafc3b4119f52161db6a0b3c81b1cc46e9ec2541d9c0bb9409c4d0e5ddbfabc0332e8b40c943ddcbe9eb98978b8441c9d11732176a", @ANYRES16=r9, @ANYBLOB="000129bd7000fbdbdf250e00000008000600ff0f00001c000380060004000600000008000500ac14142208000500640101000c0002800800080000000000400002800800060001feffff06000e004e21000006000f00ff030000080003000100000006000f000900000014000100ffffffff000000000000000000000000140003800800050000000000080001000200000008000500030000000800060006000000"], 0xa8}, 0x1, 0x0, 0x0, 0x24000001}, 0x40880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000806) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB="28000000110020002abd70020000002500000000", @ANYRES32=r5, @ANYBLOB="1db400001000000008001e0001800000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) sendmmsg(0xffffffffffffffff, &(0x7f0000001100), 0x400000000000191, 0xc0d0) 0s ago: executing program 3 (id=3030): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x980901, 0x1001}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r5}) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r0, 0x100000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x0, 0x5}}, 0x20) kernel console output (not intermixed with test programs): C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.036151][ T24] m920x_read = error: -19 [ 728.040517][ T24] dvb-usb: error while querying for an remote control event. [ 728.194812][ T24] m920x_read = error: -19 [ 728.204532][ T24] dvb-usb: error while querying for an remote control event. [ 728.338650][ T5194] Dev loop2: unable to read RDB block 7 [ 728.381960][ T24] m920x_read = error: -19 [ 728.384513][ T5194] loop2: AHDI p1 p2 p3 [ 728.405422][ T5194] loop2: partition table partially beyond EOD, truncated [ 728.414966][ T24] dvb-usb: error while querying for an remote control event. [ 728.425512][T16114] vlan2: entered allmulticast mode [ 728.435466][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 728.447043][T16114] bridge_slave_0: entered allmulticast mode [ 728.468889][T16114] bridge0: port 1(vlan2) entered blocking state [ 728.498441][T16114] bridge0: port 1(vlan2) entered disabled state [ 728.507326][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 728.537532][T16114] vlan2: entered promiscuous mode [ 728.542743][T16114] bridge_slave_0: entered promiscuous mode [ 728.554924][ T5936] m920x_read = error: -19 [ 728.559805][ T5936] dvb-usb: error while querying for an remote control event. [ 728.685543][ T24] m920x_read = error: -19 [ 728.690081][ T24] dvb-usb: error while querying for an remote control event. [ 728.815018][ T24] m920x_read = error: -19 [ 728.819608][ T24] dvb-usb: error while querying for an remote control event. [ 728.922394][T16121] input: syz1 as /devices/virtual/input/input76 [ 728.954779][ T24] m920x_read = error: -19 [ 728.971145][ T24] dvb-usb: error while querying for an remote control event. [ 729.024728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.032864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.104995][ T24] m920x_read = error: -19 [ 729.121498][ T24] dvb-usb: error while querying for an remote control event. [ 729.144811][ T797] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 729.267096][ T24] m920x_read = error: -19 [ 729.280610][ T24] dvb-usb: error while querying for an remote control event. [ 729.324633][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 729.351146][ T797] usb 3-1: config 0 has no interfaces? [ 729.391079][ T797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 729.423092][ T797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 729.435031][ T24] m920x_read = error: -19 [ 729.440376][T16126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2840'. [ 729.453990][ T24] dvb-usb: error while querying for an remote control event. [ 729.455254][ T797] usb 3-1: Manufacturer: syz [ 729.551899][ T797] usb 3-1: config 0 descriptor?? [ 729.626576][T16128] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2841'. [ 729.651203][ T24] m920x_read = error: -19 [ 729.657962][ T24] dvb-usb: error while querying for an remote control event. [ 729.791906][T16131] FAULT_INJECTION: forcing a failure. [ 729.791906][T16131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.844783][ T24] m920x_read = error: -19 [ 729.848385][T16131] CPU: 0 UID: 0 PID: 16131 Comm: syz.6.2842 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.848412][T16131] Tainted: [L]=SOFTLOCKUP [ 729.848419][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.848429][T16131] Call Trace: [ 729.848437][T16131] [ 729.848445][T16131] dump_stack_lvl+0xe8/0x150 [ 729.848477][T16131] should_fail_ex+0x412/0x560 [ 729.848507][T16131] _copy_from_user+0x2d/0xb0 [ 729.848525][T16131] ___sys_sendmsg+0x1c6/0x360 [ 729.848551][T16131] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.848597][T16131] ? __fget_files+0x2a/0x420 [ 729.848619][T16131] ? __fget_files+0x3a0/0x420 [ 729.848648][T16131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.848667][T16131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.848692][T16131] ? __pfx_ksys_write+0x10/0x10 [ 729.848719][T16131] do_syscall_64+0x14d/0xf80 [ 729.848738][T16131] ? trace_irq_disable+0x3b/0x150 [ 729.848759][T16131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.848776][T16131] ? clear_bhb_loop+0x40/0x90 [ 729.848795][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.848811][T16131] RIP: 0033:0x7f2a7259c799 [ 729.848827][T16131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.848841][T16131] RSP: 002b:00007f2a7351a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.848859][T16131] RAX: ffffffffffffffda RBX: 00007f2a72816090 RCX: 00007f2a7259c799 [ 729.848871][T16131] RDX: 0000000024008000 RSI: 00002000000029c0 RDI: 0000000000000009 [ 729.848881][T16131] RBP: 00007f2a7351a090 R08: 0000000000000000 R09: 0000000000000000 [ 729.848891][T16131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.848901][T16131] R13: 00007f2a72816128 R14: 00007f2a72816090 R15: 00007f2a7293fa48 [ 729.848926][T16131] [ 730.064714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.072816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.259199][ T5936] usb 3-1: USB disconnect, device number 3 [ 730.450000][ T5899] usbhid 6-1:0.1: can't add hid device: -71 [ 730.479119][ T5899] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 730.498621][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 730.509688][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.568049][ T5899] usb 6-1: USB disconnect, device number 106 [ 730.578789][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.616165][ T24] dvb-usb: error while querying for an remote control event. [ 730.894354][ T24] m920x_read = error: -19 [ 730.899672][ T24] dvb-usb: error while querying for an remote control event. [ 731.014920][ T24] m920x_read = error: -19 [ 731.019327][ T24] dvb-usb: error while querying for an remote control event. [ 731.087666][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.104691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.134770][ T24] m920x_read = error: -19 [ 731.139141][ T24] dvb-usb: error while querying for an remote control event. [ 731.322017][ T24] m920x_read = error: -19 [ 731.351648][ T24] dvb-usb: error while querying for an remote control event. [ 731.480229][ T5194] Dev loop2: unable to read RDB block 7 [ 731.504988][ T5194] loop2: AHDI p1 p2 p3 [ 731.509201][ T5194] loop2: partition table partially beyond EOD, truncated [ 731.553935][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 731.574946][ T24] m920x_read = error: -19 [ 731.579320][ T24] dvb-usb: error while querying for an remote control event. [ 731.624020][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 731.714826][ T5936] m920x_read = error: -19 [ 731.719208][ T5936] dvb-usb: error while querying for an remote control event. [ 731.800012][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 731.835896][T16152] netlink: 'syz.6.2848': attribute type 2 has an invalid length. [ 731.843656][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2848'. [ 731.852879][ T5936] m920x_read = error: -19 [ 731.907441][ T5936] dvb-usb: error while querying for an remote control event. [ 732.013019][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 732.036441][ T5936] m920x_read = error: -19 [ 732.040849][ T5936] dvb-usb: error while querying for an remote control event. [ 732.064317][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.096174][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.125843][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 732.144825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.152943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.169425][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.194738][ T5936] m920x_read = error: -19 [ 732.209336][ T5936] dvb-usb: error while querying for an remote control event. [ 732.250494][ T24] usb 3-1: config 0 descriptor?? [ 732.364773][ T5936] m920x_read = error: -19 [ 732.385521][ T5936] dvb-usb: error while querying for an remote control event. [ 732.429196][T16157] netlink: 'syz.1.2850': attribute type 21 has an invalid length. [ 732.484873][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 732.504259][T16159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2851'. [ 732.524973][ T5936] m920x_read = error: -19 [ 732.529470][ T5936] dvb-usb: error while querying for an remote control event. [ 732.645290][ T5936] m920x_read = error: -19 [ 732.645319][ T5936] dvb-usb: error while querying for an remote control event. [ 732.754760][ T5936] m920x_read = error: -19 [ 732.754779][ T5936] dvb-usb: error while querying for an remote control event. [ 732.868293][ T5936] m920x_read = error: -19 [ 732.872667][ T5936] dvb-usb: error while querying for an remote control event. [ 732.984945][ T5936] m920x_read = error: -19 [ 732.989323][ T5936] dvb-usb: error while querying for an remote control event. [ 733.007621][T16147] IPVS: set_ctl: invalid protocol: 98 172.30.1.3:20002 [ 733.027600][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 733.033633][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 733.092883][ T24] usb 3-1: USB disconnect, device number 4 [ 733.124797][ T5936] m920x_read = error: -19 [ 733.134062][ T5936] dvb-usb: error while querying for an remote control event. [ 733.184724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.265982][ T5936] m920x_read = error: -19 [ 733.281331][ T5936] dvb-usb: error while querying for an remote control event. [ 733.407771][ T5936] m920x_read = error: -19 [ 733.412138][ T5936] dvb-usb: error while querying for an remote control event. [ 733.527549][ T5936] m920x_read = error: -19 [ 733.542411][ T5936] dvb-usb: error while querying for an remote control event. [ 733.580739][ T5194] Dev loop2: unable to read RDB block 7 [ 733.598949][ T5194] loop2: AHDI p1 p2 p3 [ 733.612332][ T5194] loop2: partition table partially beyond EOD, truncated [ 733.634371][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 733.657446][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 733.671139][ T5936] m920x_read = error: -19 [ 733.687842][ T5936] dvb-usb: error while querying for an remote control event. [ 733.834793][ T5936] m920x_read = error: -19 [ 733.839171][ T5936] dvb-usb: error while querying for an remote control event. [ 733.983328][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2856'. [ 733.994942][ T5936] m920x_read = error: -19 [ 734.009660][ T5936] dvb-usb: error while querying for an remote control event. [ 734.021272][T16178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.121661][T16178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.155559][ T5936] m920x_read = error: -19 [ 734.161146][ T5936] dvb-usb: error while querying for an remote control event. [ 734.212210][T16178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.224760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.232887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.284836][ T5936] m920x_read = error: -19 [ 734.289239][ T5936] dvb-usb: error while querying for an remote control event. [ 734.434765][ T5899] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 734.455439][ T5936] m920x_read = error: -19 [ 734.459794][ T5936] dvb-usb: error while querying for an remote control event. [ 734.589344][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 734.598617][ T5936] m920x_read = error: -19 [ 734.606740][ T5899] usb 7-1: config 0 has no interfaces? [ 734.623273][ T5936] dvb-usb: error while querying for an remote control event. [ 734.659378][ T5899] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.674870][ T5899] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.693139][ T5899] usb 7-1: Manufacturer: syz [ 734.719066][ T5899] usb 7-1: config 0 descriptor?? [ 734.754755][ T5936] m920x_read = error: -19 [ 734.759131][ T5936] dvb-usb: error while querying for an remote control event. [ 734.917607][ T5936] m920x_read = error: -19 [ 734.921976][ T5936] dvb-usb: error while querying for an remote control event. [ 734.974743][ T5899] usb 7-1: USB disconnect, device number 44 [ 735.057477][ T5936] m920x_read = error: -19 [ 735.061826][ T5936] dvb-usb: error while querying for an remote control event. [ 735.195164][ T5936] m920x_read = error: -19 [ 735.208724][ T5936] dvb-usb: error while querying for an remote control event. [ 735.264693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.272876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.326679][ T5194] Dev loop2: unable to read RDB block 7 [ 735.335059][ T5936] m920x_read = error: -19 [ 735.339440][ T5936] dvb-usb: error while querying for an remote control event. [ 735.352085][ T5194] loop2: AHDI p1 p2 p3 [ 735.360896][ T5194] loop2: partition table partially beyond EOD, truncated [ 735.382733][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 735.398296][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 735.475033][ T5936] m920x_read = error: -19 [ 735.479412][ T5936] dvb-usb: error while querying for an remote control event. [ 735.559895][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2859'. [ 735.614873][ T5936] m920x_read = error: -19 [ 735.619260][ T5936] dvb-usb: error while querying for an remote control event. [ 735.784838][ T5936] m920x_read = error: -19 [ 735.789743][ T5936] dvb-usb: error while querying for an remote control event. [ 735.837585][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2862'. [ 735.936453][ T5936] m920x_read = error: -19 [ 735.952144][ T5936] dvb-usb: error while querying for an remote control event. [ 736.124896][ T5936] m920x_read = error: -19 [ 736.139943][ T5936] dvb-usb: error while querying for an remote control event. [ 736.186364][ T5194] Dev loop2: unable to read RDB block 7 [ 736.193623][ T5194] loop2: AHDI p1 p2 p3 [ 736.206752][ T5194] loop2: partition table partially beyond EOD, truncated [ 736.223358][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 736.244792][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 736.294243][ T5936] m920x_read = error: -19 [ 736.294767][ T5899] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 736.306217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.353368][ T5936] dvb-usb: error while querying for an remote control event. [ 736.365498][T16206] fuse: Bad value for 'group_id' [ 736.373519][T16206] fuse: Bad value for 'group_id' [ 736.384882][ T797] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 736.494877][ T5936] m920x_read = error: -19 [ 736.498432][ T5899] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 736.499675][ T5936] dvb-usb: error while querying for an remote control event. [ 736.533383][ T5194] Dev loop2: unable to read RDB block 7 [ 736.548426][ T5899] usb 4-1: config 0 has no interface number 0 [ 736.567202][ T5194] loop2: AHDI p1 p2 p3 [ 736.573353][ T797] usb 7-1: unable to get BOS descriptor or descriptor too short [ 736.582711][ T5899] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 736.595615][ T5194] loop2: partition table partially beyond EOD, truncated [ 736.603735][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 736.621304][ T797] usb 7-1: not running at top speed; connect to a high speed hub [ 736.631447][ T5899] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 736.650585][ T797] usb 7-1: config 255 has an invalid interface number: 10 but max is 0 [ 736.661367][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 736.664778][ T5936] m920x_read = error: -19 [ 736.668189][ T797] usb 7-1: config 255 has no interface number 0 [ 736.678241][ T5936] dvb-usb: error while querying for an remote control event. [ 736.687033][ T5899] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 736.704658][ T797] usb 7-1: config 255 interface 10 has no altsetting 0 [ 736.711734][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.739983][ T797] usb 7-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=d1.ac [ 736.766811][ T5899] usb 4-1: config 0 descriptor?? [ 736.775279][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.801614][T16201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.833249][ T797] usb 7-1: Product: syz [ 736.840251][ T5899] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 736.855196][ T5936] m920x_read = error: -19 [ 736.873365][ T797] usb 7-1: Manufacturer: syz [ 736.876760][ T5936] dvb-usb: error while querying for an remote control event. [ 736.917364][ T797] usb 7-1: SerialNumber: syz [ 737.014819][ T5936] m920x_read = error: -19 [ 737.019230][ T5936] dvb-usb: error while querying for an remote control event. [ 737.049819][ T5892] usb 4-1: USB disconnect, device number 40 [ 737.055883][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 737.105316][T16220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2868'. [ 737.205760][ T5936] m920x_read = error: -19 [ 737.212482][ T5936] dvb-usb: error while querying for an remote control event. [ 737.231782][ T797] usb 7-1: Expected 3 endpoints, found: 0 [ 737.323932][ T797] usb 7-1: USB disconnect, device number 45 [ 737.344727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.345074][ T5936] m920x_read = error: -19 [ 737.352878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.375492][ T5936] dvb-usb: error while querying for an remote control event. [ 737.508731][ T5936] m920x_read = error: -19 [ 737.533385][ T5936] dvb-usb: error while querying for an remote control event. [ 737.693947][ T5936] m920x_read = error: -19 [ 737.708393][ T5936] dvb-usb: error while querying for an remote control event. [ 737.811204][ T5194] Dev loop2: unable to read RDB block 7 [ 737.840595][ T5194] loop2: AHDI p1 p2 p3 [ 737.853862][ T5936] m920x_read = error: -19 [ 737.860983][ T5194] loop2: partition table partially beyond EOD, truncated [ 737.874959][ T5936] dvb-usb: error while querying for an remote control event. [ 737.895271][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 737.902091][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 737.984791][ T5936] m920x_read = error: -19 [ 737.989173][ T5936] dvb-usb: error while querying for an remote control event. [ 738.144765][ T5936] m920x_read = error: -19 [ 738.149148][ T5936] dvb-usb: error while querying for an remote control event. [ 738.259171][T16244] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 738.277013][ T797] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 738.324728][ T5936] m920x_read = error: -19 [ 738.329117][ T5936] dvb-usb: error while querying for an remote control event. [ 738.384705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.443428][T16244] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 738.454774][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 738.514664][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 738.524708][ T5936] m920x_read = error: -19 [ 738.535294][ T797] usb 4-1: config 0 has no interfaces? [ 738.541938][ T797] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 738.550370][ T5936] dvb-usb: error while querying for an remote control event. [ 738.551774][ T5899] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 738.571261][ T797] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 738.581023][ T797] usb 4-1: Manufacturer: syz [ 738.592184][ T797] usb 4-1: config 0 descriptor?? [ 738.648746][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 738.688134][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 738.717048][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.725109][ T5936] m920x_read = error: -19 [ 738.725133][ T5936] dvb-usb: error while querying for an remote control event. [ 738.761658][ T5899] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 738.770941][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.784666][ T5892] usb 3-1: Product: syz [ 738.793610][ T5892] usb 3-1: Manufacturer: syz [ 738.807600][ T797] usb 4-1: USB disconnect, device number 41 [ 738.826289][ T5892] usb 3-1: SerialNumber: syz [ 738.834734][ T5899] usb 6-1: config 0 has no interfaces? [ 738.834732][ T5936] m920x_read = error: -19 [ 738.834764][ T5936] dvb-usb: error while querying for an remote control event. [ 738.840271][ T5899] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 738.902574][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.972647][ T5899] usb 6-1: config 0 descriptor?? [ 738.984838][ T5936] m920x_read = error: -19 [ 738.999437][ T5936] dvb-usb: error while querying for an remote control event. [ 739.036653][ T6024] dummy0: left promiscuous mode [ 739.157497][ T5936] m920x_read = error: -19 [ 739.161889][ T5936] dvb-usb: error while querying for an remote control event. [ 739.220836][T16243] netlink: 'syz.5.2875': attribute type 1 has an invalid length. [ 739.242666][ T797] usb 6-1: USB disconnect, device number 107 [ 739.315730][ T5936] m920x_read = error: -19 [ 739.325753][ T5936] dvb-usb: error while querying for an remote control event. [ 739.424735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.432901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.581644][ T5899] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 739.715149][ T5936] m920x_read = error: -19 [ 739.719620][ T5936] dvb-usb: error while querying for an remote control event. [ 739.737269][ T5899] usb 7-1: device descriptor read/64, error -71 [ 739.835071][ T5936] m920x_read = error: -19 [ 739.839685][ T5936] dvb-usb: error while querying for an remote control event. [ 739.964722][ T5936] m920x_read = error: -19 [ 739.969399][ T5936] dvb-usb: error while querying for an remote control event. [ 740.005628][ T5899] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 740.142921][ T5936] m920x_read = error: -19 [ 740.152994][ T5936] dvb-usb: error while querying for an remote control event. [ 740.244452][T16261] Cannot find set identified by id 0 to match [ 740.295445][ T5936] m920x_read = error: -19 [ 740.300201][ T5936] dvb-usb: error while querying for an remote control event. [ 740.304903][ T5899] usb 7-1: device descriptor read/64, error -71 [ 740.321060][T16263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2880'. [ 740.455319][ T5936] m920x_read = error: -19 [ 740.460915][ T5936] dvb-usb: error while querying for an remote control event. [ 740.461129][ T5899] usb usb7-port1: attempt power cycle [ 740.468442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.468460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.585337][ T24] m920x_read = error: -19 [ 740.590951][ T24] dvb-usb: error while querying for an remote control event. [ 740.644854][ T5936] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 740.714818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.754807][ T24] m920x_read = error: -19 [ 740.759305][ T24] dvb-usb: error while querying for an remote control event. [ 740.805852][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 740.821569][ T5936] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 740.867669][ T5936] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 740.886297][ T24] m920x_read = error: -19 [ 740.898857][ T24] dvb-usb: error while querying for an remote control event. [ 740.932406][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 740.966907][ T5899] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 740.979588][ T5936] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 741.025395][ T5899] usb 7-1: device descriptor read/8, error -71 [ 741.026329][ T5936] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.041012][ T24] m920x_read = error: -19 [ 741.046669][ T24] dvb-usb: error while querying for an remote control event. [ 741.096309][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.145813][ T5936] usbtmc 6-1:16.0: bulk endpoints not found [ 741.174894][ T24] m920x_read = error: -19 [ 741.181971][ T24] dvb-usb: error while querying for an remote control event. [ 741.304869][ T5936] m920x_read = error: -19 [ 741.309356][ T5936] dvb-usb: error while querying for an remote control event. [ 741.344842][ T5899] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 741.414812][ T5899] usb 7-1: device descriptor read/8, error -71 [ 741.444793][ T5936] m920x_read = error: -19 [ 741.459610][ T5936] dvb-usb: error while querying for an remote control event. [ 741.504689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.512883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.547604][ T5899] usb usb7-port1: unable to enumerate USB device [ 741.614854][ T5936] m920x_read = error: -19 [ 741.654929][ T5936] dvb-usb: error while querying for an remote control event. [ 741.693083][T16282] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2886'. [ 741.820837][ T5936] m920x_read = error: -19 [ 741.834673][ T5936] dvb-usb: error while querying for an remote control event. [ 741.987501][ T5936] m920x_read = error: -19 [ 741.991961][ T5936] dvb-usb: error while querying for an remote control event. [ 742.144815][ T5936] m920x_read = error: -19 [ 742.176597][ T5936] dvb-usb: error while querying for an remote control event. [ 742.341367][ T5936] m920x_read = error: -19 [ 742.357453][ T5936] dvb-usb: error while querying for an remote control event. [ 742.510596][ T24] m920x_read = error: -19 [ 742.522308][ T24] dvb-usb: error while querying for an remote control event. [ 742.544682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.620878][ T5936] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 742.655860][ T24] m920x_read = error: -19 [ 742.660383][ T24] dvb-usb: error while querying for an remote control event. [ 742.699014][ T796] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 742.867696][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 742.886707][ T796] usb 7-1: config 0 has no interfaces? [ 742.899101][ T796] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.024651][ T796] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.078301][ T796] usb 7-1: Manufacturer: syz [ 743.127435][ T796] usb 7-1: config 0 descriptor?? [ 743.171376][ T796] m920x_read = error: -19 [ 743.186634][ T796] dvb-usb: error while querying for an remote control event. [ 743.327463][ T796] m920x_read = error: -19 [ 743.342850][ T796] dvb-usb: error while querying for an remote control event. [ 743.421527][ T796] usb 7-1: USB disconnect, device number 50 [ 743.486813][ T24] m920x_read = error: -19 [ 743.507143][ T24] dvb-usb: error while querying for an remote control event. [ 743.584732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.592910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.644751][ T24] m920x_read = error: -19 [ 743.649275][ T24] dvb-usb: error while querying for an remote control event. [ 743.795662][ T24] m920x_read = error: -19 [ 743.801506][ T24] dvb-usb: error while querying for an remote control event. [ 743.954854][ T24] m920x_read = error: -19 [ 743.959272][ T24] dvb-usb: error while querying for an remote control event. [ 744.115070][ T24] m920x_read = error: -19 [ 744.124839][ T24] dvb-usb: error while querying for an remote control event. [ 744.151996][ T5892] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 744.311452][ T24] m920x_read = error: -19 [ 744.316076][ T24] dvb-usb: error while querying for an remote control event. [ 744.464857][ T24] m920x_read = error: -19 [ 744.469267][ T24] dvb-usb: error while querying for an remote control event. [ 744.604747][ T24] m920x_read = error: -19 [ 744.609263][ T24] dvb-usb: error while querying for an remote control event. [ 744.624701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.632834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.735738][ T24] m920x_read = error: -19 [ 744.740458][ T24] dvb-usb: error while querying for an remote control event. [ 744.748060][ T796] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 744.864845][ T24] m920x_read = error: -19 [ 744.871780][ T24] dvb-usb: error while querying for an remote control event. [ 744.908510][ T796] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 744.918851][ T796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.929141][ T796] usb 7-1: config 0 has no interfaces? [ 744.954763][ T796] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 745.004826][ T24] m920x_read = error: -19 [ 745.009233][ T24] dvb-usb: error while querying for an remote control event. [ 745.016899][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.067372][ T796] usb 7-1: config 0 descriptor?? [ 745.154750][ T796] m920x_read = error: -19 [ 745.159335][ T796] dvb-usb: error while querying for an remote control event. [ 745.285891][ T796] m920x_read = error: -19 [ 745.290274][ T796] dvb-usb: error while querying for an remote control event. [ 745.309673][ T24] usb 7-1: USB disconnect, device number 51 [ 745.466768][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 745.493623][ T796] m920x_read = error: -19 [ 745.509016][ T796] dvb-usb: error while querying for an remote control event. [ 745.518656][ T5936] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 745.544668][ T5936] usb 4-1: can't read configurations, error -71 [ 745.645707][ T796] m920x_read = error: -19 [ 745.664654][ T796] dvb-usb: error while querying for an remote control event. [ 745.664691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.805368][ T796] m920x_read = error: -19 [ 745.830112][ T796] dvb-usb: error while querying for an remote control event. [ 745.871017][T16299] sctp: [Deprecated]: syz.3.2891 (pid 16299) Use of int in maxseg socket option. [ 745.871017][T16299] Use struct sctp_assoc_value instead [ 745.974841][ T796] m920x_read = error: -19 [ 745.979232][ T796] dvb-usb: error while querying for an remote control event. [ 746.125652][ T796] m920x_read = error: -19 [ 746.141552][ T796] dvb-usb: error while querying for an remote control event. [ 746.284967][ T796] m920x_read = error: -19 [ 746.289353][ T796] dvb-usb: error while querying for an remote control event. [ 746.502374][ T5892] usb 6-1: USB disconnect, device number 108 [ 746.534761][ T796] m920x_read = error: -19 [ 746.539148][ T796] dvb-usb: error while querying for an remote control event. [ 746.676000][ T796] m920x_read = error: -19 [ 746.680448][ T796] dvb-usb: error while querying for an remote control event. [ 746.704713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.712859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.834948][ T796] m920x_read = error: -19 [ 746.839326][ T796] dvb-usb: error while querying for an remote control event. [ 746.968352][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 746.992927][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 746.992941][ T29] audit: type=1800 audit(1773718725.960:732): pid=16308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2893" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 747.046129][ T796] m920x_read = error: -19 [ 747.051446][ T796] dvb-usb: error while querying for an remote control event. [ 747.119046][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.125729][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.176436][ T796] m920x_read = error: -19 [ 747.180815][ T796] dvb-usb: error while querying for an remote control event. [ 747.326973][ T796] m920x_read = error: -19 [ 747.333904][ T796] dvb-usb: error while querying for an remote control event. [ 747.479652][ T796] m920x_read = error: -19 [ 747.496722][ T796] dvb-usb: error while querying for an remote control event. [ 747.626160][ T796] m920x_read = error: -19 [ 747.646920][ T796] dvb-usb: error while querying for an remote control event. [ 747.744682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.885431][ T796] m920x_read = error: -19 [ 747.889842][ T796] dvb-usb: error while querying for an remote control event. [ 748.054767][ T796] m920x_read = error: -19 [ 748.059253][ T796] dvb-usb: error while querying for an remote control event. [ 748.143101][ T5892] usb 3-1: USB disconnect, device number 5 [ 748.195895][ T796] m920x_read = error: -19 [ 748.200322][ T796] dvb-usb: error while querying for an remote control event. [ 748.320163][ T5194] Dev loop2: unable to read RDB block 7 [ 748.335131][ T796] m920x_read = error: -19 [ 748.335478][ T5194] loop2: AHDI p1 p2 p3 [ 748.339500][ T796] dvb-usb: error while querying for an remote control event. [ 748.404309][ T5194] loop2: partition table partially beyond EOD, truncated [ 748.425839][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 748.444922][ T796] m920x_read = error: -19 [ 748.454834][ T796] dvb-usb: error while querying for an remote control event. [ 748.464637][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 748.665149][ T796] m920x_read = error: -19 [ 748.670158][ T796] dvb-usb: error while querying for an remote control event. [ 748.784702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.792854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.854671][ T5936] m920x_read = error: -19 [ 748.859056][ T5936] dvb-usb: error while querying for an remote control event. [ 749.123000][ T796] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 749.136728][ T5936] m920x_read = error: -19 [ 749.141115][ T5936] dvb-usb: error while querying for an remote control event. [ 749.275002][ T5936] m920x_read = error: -19 [ 749.288229][ T5936] dvb-usb: error while querying for an remote control event. [ 749.325417][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 749.396327][ T796] usb 3-1: config 0 has no interfaces? [ 749.406763][ T796] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 749.449574][ T796] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 749.458288][ T5936] m920x_read = error: -19 [ 749.463302][ T5936] dvb-usb: error while querying for an remote control event. [ 749.478499][ T24] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 749.507986][ T796] usb 3-1: Manufacturer: syz [ 749.677276][ T796] usb 3-1: config 0 descriptor?? [ 749.706453][ T5936] m920x_read = error: -19 [ 749.725759][ T5936] dvb-usb: error while querying for an remote control event. [ 749.824688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.832851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.865027][ T5936] m920x_read = error: -19 [ 749.869426][ T5936] dvb-usb: error while querying for an remote control event. [ 749.965601][ T5936] usb 3-1: USB disconnect, device number 6 [ 749.984775][ T796] m920x_read = error: -19 [ 749.989155][ T796] dvb-usb: error while querying for an remote control event. [ 750.106355][ T796] m920x_read = error: -19 [ 750.110795][ T796] dvb-usb: error while querying for an remote control event. [ 750.258645][ T5936] m920x_read = error: -19 [ 750.354792][ T5936] dvb-usb: error while querying for an remote control event. [ 750.476567][ T5936] m920x_read = error: -19 [ 750.480981][ T5936] dvb-usb: error while querying for an remote control event. [ 750.624787][ T5936] m920x_read = error: -19 [ 750.629263][ T5936] dvb-usb: error while querying for an remote control event. [ 750.755426][ T5936] m920x_read = error: -19 [ 750.759807][ T5936] dvb-usb: error while querying for an remote control event. [ 750.864706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.911749][ T5194] Dev loop2: unable to read RDB block 7 [ 750.924740][ T5936] m920x_read = error: -19 [ 750.929201][ T5936] dvb-usb: error while querying for an remote control event. [ 750.977959][ T5194] loop2: AHDI p1 p2 p3 [ 750.984669][ T5194] loop2: partition table partially beyond EOD, truncated [ 751.036352][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 751.086103][ T5936] m920x_read = error: -19 [ 751.090660][ T5936] dvb-usb: error while querying for an remote control event. [ 751.140375][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 751.225086][ T796] m920x_read = error: -19 [ 751.230296][ T796] dvb-usb: error while querying for an remote control event. [ 751.297486][ T5936] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 751.355382][ T796] m920x_read = error: -19 [ 751.364696][ T796] dvb-usb: error while querying for an remote control event. [ 751.501585][T16356] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2906'. [ 751.514748][ T796] m920x_read = error: -19 [ 751.519212][ T796] dvb-usb: error while querying for an remote control event. [ 751.544734][ T5936] usb 7-1: Using ep0 maxpacket: 8 [ 751.552382][ T5936] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 751.579853][ T5936] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 751.634787][ T796] m920x_read = error: -19 [ 751.640632][ T796] dvb-usb: error while querying for an remote control event. [ 751.650245][ T5936] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 751.692114][ T5936] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 751.750038][ T5936] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.785299][ T796] m920x_read = error: -19 [ 751.796984][ T796] dvb-usb: error while querying for an remote control event. [ 751.825240][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.904664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.912771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.922977][ T5936] usbtmc 7-1:16.0: bulk endpoints not found [ 751.950817][ T796] m920x_read = error: -19 [ 751.976166][ T796] dvb-usb: error while querying for an remote control event. [ 752.062630][ T5194] Dev loop2: unable to read RDB block 7 [ 752.080248][ T5194] loop2: AHDI p1 p2 p3 [ 752.101584][ T5194] loop2: partition table partially beyond EOD, truncated [ 752.114998][ T796] m920x_read = error: -19 [ 752.129589][ T796] dvb-usb: error while querying for an remote control event. [ 752.206262][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 752.244637][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 752.334828][ T796] m920x_read = error: -19 [ 752.339344][ T796] dvb-usb: error while querying for an remote control event. [ 752.372218][ T5194] Dev loop2: unable to read RDB block 7 [ 752.824788][ T796] m920x_read = error: -19 [ 752.829211][ T796] dvb-usb: error while querying for an remote control event. [ 752.846360][ T5936] usb 7-1: USB disconnect, device number 52 [ 752.904793][ T5194] loop2: AHDI p1 p2 p3 [ 752.909020][ T5194] loop2: partition table partially beyond EOD, truncated [ 752.944711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.974806][ T796] m920x_read = error: -19 [ 752.979194][ T796] dvb-usb: error while querying for an remote control event. [ 752.994532][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 753.012933][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 753.315035][ T796] m920x_read = error: -19 [ 753.351532][ T796] dvb-usb: error while querying for an remote control event. [ 753.554828][ T5936] m920x_read = error: -19 [ 753.559221][ T5936] dvb-usb: error while querying for an remote control event. [ 753.665950][T16374] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2910'. [ 753.800649][ T5936] m920x_read = error: -19 [ 753.806866][T16375] syzkaller1: entered promiscuous mode [ 753.812374][T16375] syzkaller1: entered allmulticast mode [ 753.834867][ T5936] dvb-usb: error while querying for an remote control event. [ 753.904653][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 753.971638][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 753.984720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.992875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.001234][ T24] usb 6-1: can't read configurations, error -71 [ 754.008019][ T5936] m920x_read = error: -19 [ 754.012339][ T5936] dvb-usb: error while querying for an remote control event. [ 754.326636][ T5936] m920x_read = error: -19 [ 754.352471][ T5936] dvb-usb: error while querying for an remote control event. [ 754.528283][ T5936] m920x_read = error: -19 [ 754.550348][ T5194] Dev loop2: unable to read RDB block 7 [ 754.554704][ T5936] dvb-usb: error while querying for an remote control event. [ 754.586038][ T5194] loop2: AHDI p1 p2 p3 [ 754.636069][ T5194] loop2: partition table partially beyond EOD, truncated [ 754.809349][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 754.810192][ T5936] m920x_read = error: -19 [ 754.825064][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 754.856057][T16387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2914'. [ 754.882677][ T5936] dvb-usb: error while querying for an remote control event. [ 754.994265][T16388] QAT: failed to copy from user. [ 755.024703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.032897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.056310][ T5936] m920x_read = error: -19 [ 755.068631][ T5936] dvb-usb: error while querying for an remote control event. [ 755.207123][ T24] m920x_read = error: -19 [ 755.215380][ T24] dvb-usb: error while querying for an remote control event. [ 755.357304][ T24] m920x_read = error: -19 [ 755.389403][ T24] dvb-usb: error while querying for an remote control event. [ 755.618166][ T24] m920x_read = error: -19 [ 755.638551][ T24] dvb-usb: error while querying for an remote control event. [ 755.716226][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2915'. [ 755.774799][ T24] m920x_read = error: -19 [ 755.788368][ T24] dvb-usb: error while querying for an remote control event. [ 755.932878][ T24] m920x_read = error: -19 [ 755.947705][ T24] dvb-usb: error while querying for an remote control event. [ 756.066163][ T24] m920x_read = error: -19 [ 756.070907][ T24] dvb-usb: error while querying for an remote control event. [ 756.074719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.148534][ T5194] Dev loop2: unable to read RDB block 7 [ 756.158713][ T5194] loop2: AHDI p1 p2 p3 [ 756.177110][ T5194] loop2: partition table partially beyond EOD, truncated [ 756.185124][ T24] m920x_read = error: -19 [ 756.189852][ T24] dvb-usb: error while querying for an remote control event. [ 756.221591][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 756.243125][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 756.304964][ T5936] m920x_read = error: -19 [ 756.309437][ T5936] dvb-usb: error while querying for an remote control event. [ 756.361653][ T5194] Dev loop2: unable to read RDB block 7 [ 756.404688][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 756.434402][ T5194] loop2: AHDI p1 p2 p3 [ 756.438752][ T5936] m920x_read = error: -19 [ 756.443188][ T5936] dvb-usb: error while querying for an remote control event. [ 756.486258][ T5194] loop2: partition table partially beyond EOD, truncated [ 756.554816][ T5936] m920x_read = error: -19 [ 756.559239][ T5936] dvb-usb: error while querying for an remote control event. [ 756.584804][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 756.603031][ T24] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 756.614872][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.632432][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 756.640042][ T5892] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 756.646493][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.677036][ T5936] m920x_read = error: -19 [ 756.681475][ T5936] dvb-usb: error while querying for an remote control event. [ 756.705390][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 756.744959][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 756.774746][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.816153][ T24] usb 4-1: config 0 descriptor?? [ 756.818636][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 756.837566][ T5892] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 756.854748][ T5936] m920x_read = error: -19 [ 756.859113][ T5936] dvb-usb: error while querying for an remote control event. [ 756.888900][ T5892] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 756.948919][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 756.974838][ T5936] m920x_read = error: -19 [ 756.979270][ T5936] dvb-usb: error while querying for an remote control event. [ 756.997452][ T5892] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.006899][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.046772][ T5892] usb 3-1: Product: syz [ 757.094826][ T5936] m920x_read = error: -19 [ 757.099367][ T5936] dvb-usb: error while querying for an remote control event. [ 757.107638][ T5892] usb 3-1: Manufacturer: syz [ 757.114687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.122813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.133927][ T5892] usb 3-1: SerialNumber: syz [ 757.192606][ T5892] usb 3-1: config 0 descriptor?? [ 757.209895][ T5892] usb 3-1: selecting invalid altsetting 0 [ 757.264762][ T5936] m920x_read = error: -19 [ 757.269293][ T5936] dvb-usb: error while querying for an remote control event. [ 757.339745][ T24] logitech 0003:046D:C29C.0020: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 757.453666][ T24] logitech 0003:046D:C29C.0020: no inputs found [ 757.465672][ T5936] m920x_read = error: -19 [ 757.470174][ T5936] dvb-usb: error while querying for an remote control event. [ 757.532220][ T24] usb 4-1: USB disconnect, device number 44 [ 757.584817][ T796] m920x_read = error: -19 [ 757.589252][ T796] dvb-usb: error while querying for an remote control event. [ 757.720079][T16416] fido_id[16416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 757.746263][ T796] m920x_read = error: -19 [ 757.750614][ T796] dvb-usb: error while querying for an remote control event. [ 757.898477][ T796] m920x_read = error: -19 [ 757.904121][ T796] dvb-usb: error while querying for an remote control event. [ 757.918495][T16418] netlink: 'syz.6.2922': attribute type 10 has an invalid length. [ 757.927490][T16418] bond0: (slave wlan1): Opening slave failed [ 758.055468][ T796] m920x_read = error: -19 [ 758.070140][ T796] dvb-usb: error while querying for an remote control event. [ 758.145097][ T5892] usb 3-1: USB disconnect, device number 7 [ 758.154680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.222080][ T5194] Dev loop2: unable to read RDB block 7 [ 758.235106][ T24] m920x_read = error: -19 [ 758.239641][ T24] dvb-usb: error while querying for an remote control event. [ 758.258669][ T5194] loop2: AHDI p1 p2 p3 [ 758.267761][ T5194] loop2: partition table partially beyond EOD, truncated [ 758.314776][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 758.328844][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 758.334814][ T796] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 758.395332][ T24] m920x_read = error: -19 [ 758.399713][ T24] dvb-usb: error while querying for an remote control event. [ 758.534766][ T42] m920x_read = error: -19 [ 758.539304][ T42] dvb-usb: error while querying for an remote control event. [ 758.554750][ T5936] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 758.630374][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.644082][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.652837][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.663127][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.670937][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.679754][ T42] m920x_read = error: -19 [ 758.705245][ T42] dvb-usb: error while querying for an remote control event. [ 758.883683][ T42] m920x_read = error: -19 [ 758.903901][ T42] dvb-usb: error while querying for an remote control event. [ 758.966177][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 759.104942][ T42] m920x_read = error: -19 [ 759.109429][ T42] dvb-usb: error while querying for an remote control event. [ 759.128161][ T5936] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 759.181335][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 759.194672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.202825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.239324][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 759.266323][ T42] m920x_read = error: -19 [ 759.272877][ T42] dvb-usb: error while querying for an remote control event. [ 759.293040][ T5936] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.344814][ T5936] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 759.392022][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.415331][ T42] m920x_read = error: -19 [ 759.419723][ T42] dvb-usb: error while querying for an remote control event. [ 759.508543][T16440] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2929'. [ 759.554843][ T42] m920x_read = error: -19 [ 759.560045][ T42] dvb-usb: error while querying for an remote control event. [ 759.657195][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.668036][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.704731][ T42] m920x_read = error: -19 [ 759.719314][ T5936] usb 4-1: usb_control_msg returned -32 [ 759.728098][ T42] dvb-usb: error while querying for an remote control event. [ 759.750334][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.759862][ T5936] usbtmc 4-1:16.0: can't read capabilities [ 759.805056][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.884715][ T5936] m920x_read = error: -19 [ 759.941038][ T5936] dvb-usb: error while querying for an remote control event. [ 759.942067][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.987539][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.084377][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.104760][ T5936] m920x_read = error: -19 [ 760.109230][ T5936] dvb-usb: error while querying for an remote control event. [ 760.198936][T16444] syzkaller1: entered promiscuous mode [ 760.234694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.242815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.264041][ T5936] m920x_read = error: -19 [ 760.269018][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.276947][ T5936] dvb-usb: error while querying for an remote control event. [ 760.284526][T16444] syzkaller1: entered allmulticast mode [ 760.304298][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.354215][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.395873][ T5936] m920x_read = error: -19 [ 760.412126][ T5936] dvb-usb: error while querying for an remote control event. [ 760.508574][ T5936] usb 4-1: USB disconnect, device number 45 [ 760.554110][ T42] m920x_read = error: -19 [ 760.575865][ T42] dvb-usb: error while querying for an remote control event. [ 760.660886][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2932'. [ 760.722728][ T42] m920x_read = error: -19 [ 760.754815][ T42] dvb-usb: error while querying for an remote control event. [ 760.785978][ T51] Bluetooth: hci3: command tx timeout [ 760.858083][T16437] chnl_net:caif_netlink_parms(): no params data found [ 760.935543][ T42] m920x_read = error: -19 [ 760.950285][ T42] dvb-usb: error while querying for an remote control event. [ 761.094792][ T42] m920x_read = error: -19 [ 761.101543][ T42] dvb-usb: error while querying for an remote control event. [ 761.196389][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.204339][T16437] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.229884][T16437] bridge_slave_0: entered allmulticast mode [ 761.234788][ T42] m920x_read = error: -19 [ 761.240569][ T42] dvb-usb: error while querying for an remote control event. [ 761.264672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.277641][ T5899] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 761.295329][T16437] bridge_slave_0: entered promiscuous mode [ 761.344370][T16437] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.354759][ T42] m920x_read = error: -19 [ 761.359125][ T42] dvb-usb: error while querying for an remote control event. [ 761.379995][T16437] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.403152][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.440643][ T796] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 761.466110][ T5899] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 761.477808][T16437] bridge_slave_1: entered allmulticast mode [ 761.483833][ T796] usb 6-1: can't read configurations, error -71 [ 761.488809][ T5899] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.490800][ T42] m920x_read = error: -19 [ 761.539791][T16437] bridge_slave_1: entered promiscuous mode [ 761.566106][ T42] dvb-usb: error while querying for an remote control event. [ 761.588795][ T5899] usb 7-1: config 2 interface 0 has no altsetting 0 [ 761.639905][ T5899] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 761.679870][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.714752][ T42] m920x_read = error: -19 [ 761.719210][ T42] dvb-usb: error while querying for an remote control event. [ 761.756981][ T5899] usb 7-1: Product: syz [ 761.770807][ T5899] usb 7-1: Manufacturer: syz [ 761.776758][T16437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.794679][ T5899] usb 7-1: SerialNumber: syz [ 761.812594][T16437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.847358][ T42] m920x_read = error: -19 [ 761.851721][ T42] dvb-usb: error while querying for an remote control event. [ 761.995481][ T42] m920x_read = error: -19 [ 761.999889][ T42] dvb-usb: error while querying for an remote control event. [ 762.044139][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2935'. [ 762.091141][T16437] team0: Port device team_slave_0 added [ 762.124761][ T42] m920x_read = error: -19 [ 762.129145][ T42] dvb-usb: error while querying for an remote control event. [ 762.138216][T16437] team0: Port device team_slave_1 added [ 762.245001][T16463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.254692][ T42] m920x_read = error: -19 [ 762.259057][ T42] dvb-usb: error while querying for an remote control event. [ 762.303452][T16463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.311364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.319507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.348084][T16437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.362288][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.405640][ T42] m920x_read = error: -19 [ 762.413867][ T42] dvb-usb: error while querying for an remote control event. [ 762.423425][ T5899] usb 7-1: USB disconnect, device number 53 [ 762.456565][T16437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.509501][T16437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.525097][ T796] m920x_read = error: -19 [ 762.529647][ T796] dvb-usb: error while querying for an remote control event. [ 762.565677][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.656159][ T796] m920x_read = error: -19 [ 762.660519][ T796] dvb-usb: error while querying for an remote control event. [ 762.761158][T16437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.805058][ T796] m920x_read = error: -19 [ 762.809436][ T796] dvb-usb: error while querying for an remote control event. [ 762.864882][ T51] Bluetooth: hci3: command tx timeout [ 762.924958][ T796] m920x_read = error: -19 [ 762.929356][ T796] dvb-usb: error while querying for an remote control event. [ 763.074135][T16437] hsr_slave_0: entered promiscuous mode [ 763.084781][ T796] m920x_read = error: -19 [ 763.089127][ T796] dvb-usb: error while querying for an remote control event. [ 763.116884][T16437] hsr_slave_1: entered promiscuous mode [ 763.135995][T16437] debugfs: 'hsr0' already exists in 'hsr' [ 763.141767][T16437] Cannot create hsr debugfs directory [ 763.234798][ T796] m920x_read = error: -19 [ 763.239313][ T796] dvb-usb: error while querying for an remote control event. [ 763.344772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.395695][ T796] m920x_read = error: -19 [ 763.402399][ T796] dvb-usb: error while querying for an remote control event. [ 763.449816][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2939'. [ 763.528300][T16480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.554942][ T796] m920x_read = error: -19 [ 763.567362][T16486] FAULT_INJECTION: forcing a failure. [ 763.567362][T16486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.584626][ T796] dvb-usb: error while querying for an remote control event. [ 763.585498][T16486] CPU: 0 UID: 0 PID: 16486 Comm: syz.5.2940 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.585523][T16486] Tainted: [L]=SOFTLOCKUP [ 763.585529][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 763.585539][T16486] Call Trace: [ 763.585546][T16486] [ 763.585553][T16486] dump_stack_lvl+0xe8/0x150 [ 763.585581][T16486] should_fail_ex+0x412/0x560 [ 763.585607][T16486] _copy_from_user+0x2d/0xb0 [ 763.585626][T16486] ucma_migrate_id+0x131/0xa30 [ 763.585769][T16486] ? kstrtoull+0x12f/0x1d0 [ 763.585798][T16486] ? __pfx_ucma_migrate_id+0x10/0x10 [ 763.585832][T16486] ucma_write+0x24e/0x2f0 [ 763.585859][T16486] ? __pfx_ucma_write+0x10/0x10 [ 763.585878][T16486] ? security_file_permission+0x75/0x260 [ 763.585930][T16486] ? rw_verify_area+0x255/0x4d0 [ 763.585946][T16486] ? __pfx_ucma_write+0x10/0x10 [ 763.585966][T16486] vfs_write+0x29a/0xb90 [ 763.585990][T16486] ? __pfx_vfs_write+0x10/0x10 [ 763.586010][T16486] ? kmem_cache_free+0x187/0x630 [ 763.586027][T16486] ? fd_install+0x94/0x3d0 [ 763.586045][T16486] ? do_sys_openat2+0x14c/0x200 [ 763.586077][T16486] ksys_write+0x150/0x270 [ 763.586096][T16486] ? __pfx_ksys_write+0x10/0x10 [ 763.586122][T16486] do_syscall_64+0x14d/0xf80 [ 763.586138][T16486] ? trace_irq_disable+0x3b/0x150 [ 763.586159][T16486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.586176][T16486] ? clear_bhb_loop+0x40/0x90 [ 763.586195][T16486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.586210][T16486] RIP: 0033:0x7fd826d9c799 [ 763.586226][T16486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.586240][T16486] RSP: 002b:00007fd827cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 763.586258][T16486] RAX: ffffffffffffffda RBX: 00007fd827015fa0 RCX: 00007fd826d9c799 [ 763.586269][T16486] RDX: 0000000000000018 RSI: 00002000000001c0 RDI: 0000000000000003 [ 763.586279][T16486] RBP: 00007fd827cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 763.586288][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.586297][T16486] R13: 00007fd827016038 R14: 00007fd827015fa0 R15: 00007fd82713fa48 [ 763.586323][T16486] [ 763.737273][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2943'. [ 764.177796][ T5899] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 764.313619][ T796] m920x_read = error: -19 [ 764.327457][ T796] dvb-usb: error while querying for an remote control event. [ 764.394704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.402837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.433146][ T5899] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 764.445565][ T42] m920x_read = error: -19 [ 764.449928][ T42] dvb-usb: error while querying for an remote control event. [ 764.480603][ T5899] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 764.514823][ T796] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 764.523330][ T5899] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.564823][ T42] m920x_read = error: -19 [ 764.569314][ T42] dvb-usb: error while querying for an remote control event. [ 764.586129][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 764.592778][ T5899] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 764.625300][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.667822][ T5899] usb 4-1: config 0 descriptor?? [ 764.673479][T16497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 764.705081][ T42] m920x_read = error: -19 [ 764.961843][ T51] Bluetooth: hci3: command tx timeout [ 764.974875][ T42] dvb-usb: error while querying for an remote control event. [ 765.144873][ T42] m920x_read = error: -19 [ 765.165394][ T42] dvb-usb: error while querying for an remote control event. [ 765.200325][ T5899] holtek 0003:1241:5015.0021: ignoring exceeding usage max [ 765.248741][ T5899] holtek 0003:1241:5015.0021: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 765.285433][ T42] m920x_read = error: -19 [ 765.290007][ T42] dvb-usb: error while querying for an remote control event. [ 765.310142][ T5899] holtek 0003:1241:5015.0021: no inputs found [ 765.380099][T16496] binder: 16495:16496 ioctl c038586a 200000000240 returned -22 [ 765.416146][ T42] m920x_read = error: -19 [ 765.420074][T16496] binder: 16495:16496 ioctl c018620c 200000000000 returned -22 [ 765.428200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.428219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.437118][ T42] dvb-usb: error while querying for an remote control event. [ 765.490388][T16517] syzkaller0: create flow: hash 3818959614 index 2 [ 765.503648][T16517] syzkaller0: delete flow: hash 3818959614 index 2 [ 765.594885][ T42] m920x_read = error: -19 [ 765.596101][ T5899] usb 4-1: USB disconnect, device number 46 [ 765.601060][ T42] dvb-usb: error while querying for an remote control event. [ 765.764849][ T42] m920x_read = error: -19 [ 765.774712][ T42] dvb-usb: error while querying for an remote control event. [ 765.934745][ T42] m920x_read = error: -19 [ 765.935372][T16437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 765.939241][ T42] dvb-usb: error while querying for an remote control event. [ 765.963249][T16437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 765.990880][T16437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 766.008868][T16437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 766.094832][ T42] m920x_read = error: -19 [ 766.099265][ T42] dvb-usb: error while querying for an remote control event. [ 766.188689][T16437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.231544][T16437] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.245856][ T42] m920x_read = error: -19 [ 766.250432][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.257648][ T8417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.267759][ T42] dvb-usb: error while querying for an remote control event. [ 766.292827][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.300090][ T8417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.394757][ T42] m920x_read = error: -19 [ 766.411773][ T42] dvb-usb: error while querying for an remote control event. [ 766.446693][T16437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.464690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.472858][ C0] syzkaller0: tun_net_xmit 76 [ 766.478059][ C0] syzkaller0: tun_net_xmit 76 [ 766.555934][ T42] m920x_read = error: -19 [ 766.560435][ T42] dvb-usb: error while querying for an remote control event. [ 766.612714][T16437] veth0_vlan: entered promiscuous mode [ 766.656505][T16437] veth1_vlan: entered promiscuous mode [ 766.675871][ T42] m920x_read = error: -19 [ 766.680962][ T42] dvb-usb: error while querying for an remote control event. [ 766.776693][T16437] veth0_macvtap: entered promiscuous mode [ 766.814868][ T42] m920x_read = error: -19 [ 766.817148][T16437] veth1_macvtap: entered promiscuous mode [ 766.824621][ T42] dvb-usb: error while querying for an remote control event. [ 766.907688][T16437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.938007][T16437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.956172][ T42] m920x_read = error: -19 [ 766.961614][ T42] dvb-usb: error while querying for an remote control event. [ 766.997720][ T8417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.024820][ T51] Bluetooth: hci3: command tx timeout [ 767.051289][ T8417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.084755][ T42] m920x_read = error: -19 [ 767.089306][ T42] dvb-usb: error while querying for an remote control event. [ 767.090401][ T8417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.233714][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 767.284816][ T42] m920x_read = error: -19 [ 767.305454][ T42] dvb-usb: error while querying for an remote control event. [ 767.307282][ T8417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.312995][ T796] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 767.357517][T16539] FAULT_INJECTION: forcing a failure. [ 767.357517][T16539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.391101][ T796] usb 6-1: can't read configurations, error -71 [ 767.443862][T16539] CPU: 0 UID: 0 PID: 16539 Comm: syz.5.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.443890][T16539] Tainted: [L]=SOFTLOCKUP [ 767.443897][T16539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.443907][T16539] Call Trace: [ 767.443915][T16539] [ 767.443923][T16539] dump_stack_lvl+0xe8/0x150 [ 767.443950][T16539] should_fail_ex+0x412/0x560 [ 767.443977][T16539] _copy_from_iter+0x1d3/0x1670 [ 767.444099][T16539] ? rep_movs_alternative+0x4a/0x90 [ 767.444166][T16539] ? __pfx__copy_from_iter+0x10/0x10 [ 767.444187][T16539] ? sock_alloc_send_pskb+0x896/0x990 [ 767.444212][T16539] ? __pfx__copy_from_iter+0x10/0x10 [ 767.444236][T16539] ? page_copy_sane+0x16a/0x270 [ 767.444260][T16539] copy_page_from_iter+0xdd/0x170 [ 767.444286][T16539] skb_copy_datagram_from_iter+0x306/0x710 [ 767.444347][T16539] unix_dgram_sendmsg+0x521/0x18e0 [ 767.444402][T16539] ? __lock_acquire+0x6b5/0x2cf0 [ 767.444424][T16539] ? __lock_acquire+0x6b5/0x2cf0 [ 767.444457][T16539] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 767.444478][T16539] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 767.444560][T16539] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 767.444582][T16539] ____sys_sendmsg+0x972/0x9f0 [ 767.444598][T16539] ? __lock_acquire+0x6b5/0x2cf0 [ 767.444620][T16539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.444644][T16539] ? import_iovec+0x73/0xa0 [ 767.444661][T16539] ___sys_sendmsg+0x2a5/0x360 [ 767.444682][T16539] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.444701][T16539] ? kstrtouint+0x6e/0xe0 [ 767.444738][T16539] ? __fget_files+0x2a/0x420 [ 767.444758][T16539] ? __fget_files+0x3a0/0x420 [ 767.444784][T16539] __sys_sendmmsg+0x27c/0x4e0 [ 767.444805][T16539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 767.444820][T16539] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 767.444855][T16539] ? ksys_write+0x242/0x270 [ 767.444873][T16539] ? __pfx_ksys_write+0x10/0x10 [ 767.444895][T16539] __x64_sys_sendmmsg+0xa0/0xc0 [ 767.444914][T16539] do_syscall_64+0x14d/0xf80 [ 767.444934][T16539] ? trace_irq_disable+0x3b/0x150 [ 767.444956][T16539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.444971][T16539] ? clear_bhb_loop+0x40/0x90 [ 767.444990][T16539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.445005][T16539] RIP: 0033:0x7fd826d9c799 [ 767.445021][T16539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.445034][T16539] RSP: 002b:00007fd827cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 767.445052][T16539] RAX: ffffffffffffffda RBX: 00007fd827015fa0 RCX: 00007fd826d9c799 [ 767.445063][T16539] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 767.445074][T16539] RBP: 00007fd827cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 767.445084][T16539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.445092][T16539] R13: 00007fd827016038 R14: 00007fd827015fa0 R15: 00007fd82713fa48 [ 767.445124][T16539] [ 767.733582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.741722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.749849][ C0] syzkaller0: tun_net_xmit 76 [ 767.754600][ C0] syzkaller0: tun_net_xmit 76 [ 767.763807][ T42] m920x_read = error: -19 [ 767.768568][ T42] dvb-usb: error while querying for an remote control event. [ 767.906498][ T42] m920x_read = error: -19 [ 767.910853][ T42] dvb-usb: error while querying for an remote control event. [ 768.019584][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.104783][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.114968][ T42] m920x_read = error: -19 [ 768.125096][ T42] dvb-usb: error while querying for an remote control event. [ 768.254865][ T42] m920x_read = error: -19 [ 768.259259][ T42] dvb-usb: error while querying for an remote control event. [ 768.277048][ T8417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.306602][ T8417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.424707][ T5936] m920x_read = error: -19 [ 768.429292][ T5936] dvb-usb: error while querying for an remote control event. [ 768.471161][ T5194] Dev loop2: unable to read RDB block 7 [ 768.478603][ T5194] loop2: AHDI p1 p2 p3 [ 768.483021][ T5194] loop2: partition table partially beyond EOD, truncated [ 768.548008][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 768.585215][ T5936] m920x_read = error: -19 [ 768.589583][ T5936] dvb-usb: error while querying for an remote control event. [ 768.739097][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 768.758838][ T5936] m920x_read = error: -19 [ 768.777756][ T5936] dvb-usb: error while querying for an remote control event. [ 768.784828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.793286][ C0] syzkaller0: tun_net_xmit 76 [ 768.798023][ C0] syzkaller0: tun_net_xmit 76 [ 768.915109][ T796] m920x_read = error: -19 [ 768.919498][ T796] dvb-usb: error while querying for an remote control event. [ 769.044708][ T796] m920x_read = error: -19 [ 769.069491][ T796] dvb-usb: error while querying for an remote control event. [ 769.215519][ T796] m920x_read = error: -19 [ 769.219908][ T796] dvb-usb: error while querying for an remote control event. [ 769.224682][ T797] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 769.334721][ T796] m920x_read = error: -19 [ 769.339100][ T796] dvb-usb: error while querying for an remote control event. [ 769.401850][ T797] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.433329][ T797] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 769.466313][ T796] m920x_read = error: -19 [ 769.470729][ T796] dvb-usb: error while querying for an remote control event. [ 769.510378][ T797] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 769.581648][ T797] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.614742][ T796] m920x_read = error: -19 [ 769.614739][ T797] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 769.614763][ T797] usb 3-1: Product: syz [ 769.619125][ T796] dvb-usb: error while querying for an remote control event. [ 769.695106][ T797] usb 3-1: Manufacturer: syz [ 769.704863][ T797] usb 3-1: SerialNumber: syz [ 769.725356][ T797] cdc_mbim 3-1:1.0: skipping garbage [ 769.758367][ T796] m920x_read = error: -19 [ 769.777108][ T796] dvb-usb: error while querying for an remote control event. [ 769.824731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.832878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.841069][ C0] syzkaller0: tun_net_xmit 76 [ 769.845818][ C0] syzkaller0: tun_net_xmit 76 [ 769.916378][ T796] m920x_read = error: -19 [ 769.924519][T16554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 769.945482][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 769.956613][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 769.967412][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 769.975824][ T796] dvb-usb: error while querying for an remote control event. [ 769.991658][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 770.002582][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 770.084824][ T796] m920x_read = error: -19 [ 770.090308][ T796] dvb-usb: error while querying for an remote control event. [ 770.275013][ T796] m920x_read = error: -19 [ 770.301956][ T796] dvb-usb: error while querying for an remote control event. [ 770.379539][T16574] chnl_net:caif_netlink_parms(): no params data found [ 770.444923][ T796] m920x_read = error: -19 [ 770.449310][ T796] dvb-usb: error while querying for an remote control event. [ 770.558320][T16588] FAULT_INJECTION: forcing a failure. [ 770.558320][T16588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.588226][T16588] CPU: 1 UID: 0 PID: 16588 Comm: syz.5.2964 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.588254][T16588] Tainted: [L]=SOFTLOCKUP [ 770.588260][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.588269][T16588] Call Trace: [ 770.588277][T16588] [ 770.588285][T16588] dump_stack_lvl+0xe8/0x150 [ 770.588313][T16588] should_fail_ex+0x412/0x560 [ 770.588340][T16588] _copy_from_iter+0x1d3/0x1670 [ 770.588364][T16588] ? rep_movs_alternative+0x4a/0x90 [ 770.588392][T16588] ? __pfx__copy_from_iter+0x10/0x10 [ 770.588412][T16588] ? sock_alloc_send_pskb+0x896/0x990 [ 770.588436][T16588] ? __pfx__copy_from_iter+0x10/0x10 [ 770.588461][T16588] ? page_copy_sane+0x16a/0x270 [ 770.588484][T16588] copy_page_from_iter+0xdd/0x170 [ 770.588510][T16588] skb_copy_datagram_from_iter+0x306/0x710 [ 770.588539][T16588] unix_dgram_sendmsg+0x521/0x18e0 [ 770.588562][T16588] ? __lock_acquire+0x6b5/0x2cf0 [ 770.588584][T16588] ? __lock_acquire+0x6b5/0x2cf0 [ 770.588616][T16588] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 770.588636][T16588] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 770.588668][T16588] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 770.588701][T16588] ____sys_sendmsg+0x972/0x9f0 [ 770.588717][T16588] ? __lock_acquire+0x6b5/0x2cf0 [ 770.588742][T16588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.588767][T16588] ? import_iovec+0x73/0xa0 [ 770.588787][T16588] ___sys_sendmsg+0x2a5/0x360 [ 770.588810][T16588] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.588832][T16588] ? kstrtouint+0x6e/0xe0 [ 770.588874][T16588] ? __fget_files+0x2a/0x420 [ 770.588894][T16588] ? __fget_files+0x3a0/0x420 [ 770.588924][T16588] __sys_sendmmsg+0x27c/0x4e0 [ 770.588948][T16588] ? __pfx___sys_sendmmsg+0x10/0x10 [ 770.588964][T16588] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 770.589003][T16588] ? ksys_write+0x242/0x270 [ 770.589022][T16588] ? __pfx_ksys_write+0x10/0x10 [ 770.589045][T16588] __x64_sys_sendmmsg+0xa0/0xc0 [ 770.589065][T16588] do_syscall_64+0x14d/0xf80 [ 770.589082][T16588] ? trace_irq_disable+0x3b/0x150 [ 770.589103][T16588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.589118][T16588] ? clear_bhb_loop+0x40/0x90 [ 770.589138][T16588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.589154][T16588] RIP: 0033:0x7fd826d9c799 [ 770.589170][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.589184][T16588] RSP: 002b:00007fd827cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.589202][T16588] RAX: ffffffffffffffda RBX: 00007fd827015fa0 RCX: 00007fd826d9c799 [ 770.589213][T16588] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 770.589224][T16588] RBP: 00007fd827cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 770.589234][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.589244][T16588] R13: 00007fd827016038 R14: 00007fd827015fa0 R15: 00007fd82713fa48 [ 770.589269][T16588] [ 770.864708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.876963][ T796] m920x_read = error: -19 [ 770.879875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.882883][ T796] dvb-usb: error while querying for an remote control event. [ 770.891023][ C0] syzkaller0: tun_net_xmit 76 [ 770.915522][ C0] syzkaller0: tun_net_xmit 76 [ 770.961747][T16586] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2963'. [ 771.005005][T12195] m920x_read = error: -19 [ 771.009386][T12195] dvb-usb: error while querying for an remote control event. [ 771.049244][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.092659][T16574] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.124828][T12195] m920x_read = error: -19 [ 771.129460][T12195] dvb-usb: error while querying for an remote control event. [ 771.152859][T16574] bridge_slave_0: entered allmulticast mode [ 771.229980][T16574] bridge_slave_0: entered promiscuous mode [ 771.244956][T12195] m920x_read = error: -19 [ 771.249424][T12195] dvb-usb: error while querying for an remote control event. [ 771.296688][T16574] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.327870][T16574] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.350024][T16574] bridge_slave_1: entered allmulticast mode [ 771.364925][T12195] m920x_read = error: -19 [ 771.369310][T12195] dvb-usb: error while querying for an remote control event. [ 771.391987][T16574] bridge_slave_1: entered promiscuous mode [ 771.514779][ T796] m920x_read = error: -19 [ 771.519168][ T796] dvb-usb: error while querying for an remote control event. [ 771.528640][T16574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.573178][T16574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.650357][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 771.684791][T12195] m920x_read = error: -19 [ 771.689173][T12195] dvb-usb: error while querying for an remote control event. [ 771.762905][T16597] bridge_slave_0: invalid flags given to default FDB implementation [ 771.824896][T12195] m920x_read = error: -19 [ 771.834625][T12195] dvb-usb: error while querying for an remote control event. [ 771.904678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.912882][ C0] syzkaller0: tun_net_xmit 76 [ 771.917656][ C0] syzkaller0: tun_net_xmit 76 [ 771.939274][T16574] team0: Port device team_slave_0 added [ 771.959481][T16574] team0: Port device team_slave_1 added [ 771.974707][T12195] m920x_read = error: -19 [ 771.979089][T12195] dvb-usb: error while querying for an remote control event. [ 772.018036][ T797] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 772.040003][ T797] cdc_mbim 3-1:1.0: bind() failure [ 772.048164][ T5194] Dev loop2: unable to read RDB block 7 [ 772.064371][ T797] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 772.071939][ T5833] Bluetooth: hci4: command tx timeout [ 772.084355][ T5194] loop2: AHDI p1 p2 p3 [ 772.089169][ T5194] loop2: partition table partially beyond EOD, truncated [ 772.100191][ T797] cdc_ncm 3-1:1.1: bind() failure [ 772.105696][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 772.123407][ T797] usb 3-1: USB disconnect, device number 8 [ 772.129951][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 772.165254][ T796] m920x_read = error: -19 [ 772.198074][ T796] dvb-usb: error while querying for an remote control event. [ 772.206471][T16606] binder: BINDER_SET_CONTEXT_MGR already set [ 772.253224][T16608] binder: BINDER_SET_CONTEXT_MGR already set [ 772.265274][T16606] binder: 16604:16606 ioctl 4018620d 2000000000c0 returned -16 [ 772.303466][T16608] binder: 16604:16608 ioctl 4018620d 200000000040 returned -16 [ 772.365013][T12195] m920x_read = error: -19 [ 772.369660][T12195] dvb-usb: error while querying for an remote control event. [ 772.381087][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.390144][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.422757][T16574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.482474][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.555406][ T796] m920x_read = error: -19 [ 772.573833][ T796] dvb-usb: error while querying for an remote control event. [ 772.683408][T12195] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 772.805180][ T796] m920x_read = error: -19 [ 772.810871][ T796] dvb-usb: error while querying for an remote control event. [ 772.844883][T12195] usb 3-1: Using ep0 maxpacket: 8 [ 772.855886][T12195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 772.864196][T12195] usb 3-1: can't read configurations, error -61 [ 772.903757][T16574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.925095][ T796] m920x_read = error: -19 [ 772.931226][ T796] dvb-usb: error while querying for an remote control event. [ 772.944692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.952813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.960944][ C0] syzkaller0: tun_net_xmit 76 [ 772.965666][ C0] syzkaller0: tun_net_xmit 76 [ 773.044986][T12195] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 773.074908][ T796] m920x_read = error: -19 [ 773.079295][ T796] dvb-usb: error while querying for an remote control event. [ 773.214510][ T796] m920x_read = error: -19 [ 773.219391][ T796] dvb-usb: error while querying for an remote control event. [ 773.317940][T12195] usb 3-1: Using ep0 maxpacket: 8 [ 773.434838][ T796] m920x_read = error: -19 [ 773.439260][ T796] dvb-usb: error while querying for an remote control event. [ 773.549895][T12195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 773.569769][T12195] usb 3-1: can't read configurations, error -61 [ 773.582269][T16574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.584721][ T796] m920x_read = error: -19 [ 773.604541][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.615778][ T796] dvb-usb: error while querying for an remote control event. [ 773.725664][T16574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.729472][T12195] usb usb3-port1: attempt power cycle [ 773.860393][T16574] hsr_slave_0: entered promiscuous mode [ 773.915521][T16574] hsr_slave_1: entered promiscuous mode [ 773.965082][ T796] m920x_read = error: -19 [ 773.970013][ T796] dvb-usb: error while querying for an remote control event. [ 773.984680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.992842][ C0] syzkaller0: tun_net_xmit 76 [ 773.997572][ C0] syzkaller0: tun_net_xmit 76 [ 774.137687][ T796] m920x_read = error: -19 [ 774.137983][T16574] debugfs: 'hsr0' already exists in 'hsr' [ 774.142155][ T796] dvb-usb: error while querying for an remote control event. [ 774.148626][T16574] Cannot create hsr debugfs directory [ 774.155759][ T5833] Bluetooth: hci4: command tx timeout [ 774.214713][T12195] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 774.255498][T12195] usb 3-1: Using ep0 maxpacket: 8 [ 774.263899][T12195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 774.271796][T12195] usb 3-1: can't read configurations, error -61 [ 774.305019][ T796] m920x_read = error: -19 [ 774.309421][ T796] dvb-usb: error while querying for an remote control event. [ 774.424735][T12195] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 774.434776][ T796] m920x_read = error: -19 [ 774.439150][ T796] dvb-usb: error while querying for an remote control event. [ 774.475463][T12195] usb 3-1: Using ep0 maxpacket: 8 [ 774.485238][T12195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 774.493111][T12195] usb 3-1: can't read configurations, error -61 [ 774.520644][T12195] usb usb3-port1: unable to enumerate USB device [ 774.613570][T12195] m920x_read = error: -19 [ 774.657634][T12195] dvb-usb: error while querying for an remote control event. [ 774.789479][ T35] veth0_to_bond: left allmulticast mode [ 774.805899][ T35] veth0_to_bond: left promiscuous mode [ 774.826451][ T35] bridge2: port 1(veth0_to_bond) entered disabled state [ 774.934798][T12195] m920x_read = error: -19 [ 774.948138][T12195] dvb-usb: error while querying for an remote control event. [ 775.024744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.032880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.040987][ C0] syzkaller0: tun_net_xmit 76 [ 775.045692][ C0] syzkaller0: tun_net_xmit 76 [ 775.094748][T12195] m920x_read = error: -19 [ 775.120012][T12195] dvb-usb: error while querying for an remote control event. [ 775.209024][ T5194] Dev loop2: unable to read RDB block 7 [ 775.242011][ T5194] loop2: AHDI p1 p2 p3 [ 775.255220][ T5194] loop2: partition table partially beyond EOD, truncated [ 775.265154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.273307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.281438][ C0] syzkaller0: tun_net_xmit 48 [ 775.286173][ C0] syzkaller0: tun_net_xmit 48 [ 775.295350][ T796] m920x_read = error: -19 [ 775.296066][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 775.300122][ T796] dvb-usb: error while querying for an remote control event. [ 775.310295][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 775.385004][T12195] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 775.415511][ T35] dvmrp0 (unregistering): left allmulticast mode [ 775.444760][ T796] m920x_read = error: -19 [ 775.449151][ T796] dvb-usb: error while querying for an remote control event. [ 775.469633][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 775.534795][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.586757][T12195] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 775.623738][T12195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.631954][ T796] m920x_read = error: -19 [ 775.637774][ T796] dvb-usb: error while querying for an remote control event. [ 775.688655][T12195] usb 7-1: Product: syz [ 775.692918][T12195] usb 7-1: Manufacturer: syz [ 775.717776][T12195] usb 7-1: SerialNumber: syz [ 775.722654][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.756611][ T35] bond0 (unregistering): Released all slaves [ 775.785116][ T796] m920x_read = error: -19 [ 775.796381][ T796] dvb-usb: error while querying for an remote control event. [ 775.829618][ T35] bond1 (unregistering): Released all slaves [ 775.849525][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.913392][T16643] bridge_slave_0: invalid flags given to default FDB implementation [ 775.992489][ T796] m920x_read = error: -19 [ 775.998079][T16639] binder: 16638:16639 ioctl 4018620d 0 returned -22 [ 776.014607][ T796] dvb-usb: error while querying for an remote control event. [ 776.064693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.072869][ C0] syzkaller0: tun_net_xmit 76 [ 776.077613][ C0] syzkaller0: tun_net_xmit 76 [ 776.105271][T16660] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2981'. [ 776.118704][ T35] tipc: Left network mode [ 776.125692][ T796] m920x_read = error: -19 [ 776.130105][ T796] dvb-usb: error while querying for an remote control event. [ 776.229310][ T5833] Bluetooth: hci4: command tx timeout [ 776.294817][ T796] m920x_read = error: -19 [ 776.314792][ T796] dvb-usb: error while querying for an remote control event. [ 776.424736][ T796] m920x_read = error: -19 [ 776.429143][ T796] dvb-usb: error while querying for an remote control event. [ 776.589734][T16665] ip6erspan1: entered allmulticast mode [ 776.704774][ T796] m920x_read = error: -19 [ 776.712288][ T796] dvb-usb: error while querying for an remote control event. [ 776.854685][ T796] m920x_read = error: -19 [ 776.859255][ T796] dvb-usb: error while querying for an remote control event. [ 776.958833][T12195] rtl8150 7-1:1.0: couldn't reset the device [ 776.982426][T12195] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 777.016397][ T796] m920x_read = error: -19 [ 777.020900][ T796] dvb-usb: error while querying for an remote control event. [ 777.104681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.112804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.120901][ C0] syzkaller0: tun_net_xmit 76 [ 777.125609][ C0] syzkaller0: tun_net_xmit 76 [ 777.166422][ T796] m920x_read = error: -19 [ 777.183356][ T796] dvb-usb: error while querying for an remote control event. [ 777.229209][ T5194] Dev loop2: unable to read RDB block 7 [ 777.248951][ T5194] loop2: AHDI p1 p2 p3 [ 777.281595][ T5194] loop2: partition table partially beyond EOD, truncated [ 777.332473][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 777.362603][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 777.365087][ T796] m920x_read = error: -19 [ 777.408485][ T796] dvb-usb: error while querying for an remote control event. [ 777.564729][ T796] m920x_read = error: -19 [ 777.584838][ T796] dvb-usb: error while querying for an remote control event. [ 777.784365][ T796] m920x_read = error: -19 [ 777.810777][ T796] dvb-usb: error while querying for an remote control event. [ 777.887279][ T35] hsr_slave_0: left promiscuous mode [ 777.942555][ T35] hsr_slave_1: left promiscuous mode [ 777.966348][ T796] m920x_read = error: -19 [ 777.984297][ T796] dvb-usb: error while querying for an remote control event. [ 777.992456][ T35] team0 (unregistering): Port device batadv1 removed [ 778.144665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.152787][ C0] syzkaller0: tun_net_xmit 76 [ 778.157525][ C0] syzkaller0: tun_net_xmit 76 [ 778.174734][ T796] m920x_read = error: -19 [ 778.197163][ T796] dvb-usb: error while querying for an remote control event. [ 778.304763][ T5833] Bluetooth: hci4: command tx timeout [ 778.338388][ T796] m920x_read = error: -19 [ 778.359849][ T796] dvb-usb: error while querying for an remote control event. [ 778.505540][ T796] m920x_read = error: -19 [ 778.526197][ T796] dvb-usb: error while querying for an remote control event. [ 778.684753][ T796] m920x_read = error: -19 [ 778.689295][ T796] dvb-usb: error while querying for an remote control event. [ 778.814973][ T796] m920x_read = error: -19 [ 778.820624][ T796] dvb-usb: error while querying for an remote control event. [ 778.926379][ T35] team0 (unregistering): Port device dummy0 removed [ 778.965513][ T796] m920x_read = error: -19 [ 778.969916][ T796] dvb-usb: error while querying for an remote control event. [ 779.105683][ T796] m920x_read = error: -19 [ 779.121837][ T796] dvb-usb: error while querying for an remote control event. [ 779.184700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.192843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.200944][ C0] syzkaller0: tun_net_xmit 76 [ 779.205659][ C0] syzkaller0: tun_net_xmit 76 [ 779.244375][ T5194] Dev loop2: unable to read RDB block 7 [ 779.265088][ T796] m920x_read = error: -19 [ 779.270550][ T5194] loop2: AHDI p1 p2 p3 [ 779.274983][ T796] dvb-usb: error while querying for an remote control event. [ 779.322485][T16574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 779.330260][ T5194] loop2: partition table partially beyond EOD, truncated [ 779.340234][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 779.347994][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 779.371060][T16708] netlink: 'syz.1.2988': attribute type 29 has an invalid length. [ 779.387492][ T796] m920x_read = error: -19 [ 779.391363][T16574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 779.416219][ T796] dvb-usb: error while querying for an remote control event. [ 779.467066][ T796] usb 7-1: USB disconnect, device number 54 [ 779.490221][T16574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 779.542987][T16574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 779.555451][ T42] m920x_read = error: -19 [ 779.559857][ T42] dvb-usb: error while querying for an remote control event. [ 779.604768][ T797] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 779.604775][T12195] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 779.765376][ T42] m920x_read = error: -19 [ 779.772370][ T42] dvb-usb: error while querying for an remote control event. [ 779.788177][ T797] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 779.799931][ T797] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.885183][ T42] m920x_read = error: -19 [ 779.889540][ T42] dvb-usb: error while querying for an remote control event. [ 779.897165][T12195] usb 6-1: Using ep0 maxpacket: 16 [ 779.944629][T12195] usb 6-1: config 0 has no interfaces? [ 779.975256][T12195] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 779.991932][ T797] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 779.994766][T12195] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 780.042929][T12195] usb 6-1: Manufacturer: syz [ 780.047740][ T42] m920x_read = error: -19 [ 780.048434][ T797] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 780.052202][ T42] dvb-usb: error while querying for an remote control event. [ 780.162361][ T35] IPVS: stop unused estimator thread 0... [ 780.228824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.232028][T12195] usb 6-1: config 0 descriptor?? [ 780.236974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.236996][ C0] syzkaller0: tun_net_xmit 76 [ 780.237017][ C0] syzkaller0: tun_net_xmit 76 [ 780.267180][ T797] usb 3-1: Product: syz [ 780.311967][ T797] usb 3-1: Manufacturer: syz [ 780.342545][ T797] usb 3-1: SerialNumber: syz [ 780.385840][T12195] m920x_read = error: -19 [ 780.390226][T12195] dvb-usb: error while querying for an remote control event. [ 780.408509][ T797] usb 3-1: config 0 descriptor?? [ 780.456643][ T797] usb 3-1: selecting invalid altsetting 0 [ 780.507314][ T42] m920x_read = error: -19 [ 780.515412][ T42] dvb-usb: error while querying for an remote control event. [ 780.527034][T16574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.617764][T16574] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.644160][ T797] usb 3-1: USB disconnect, device number 13 [ 780.654749][ T42] m920x_read = error: -19 [ 780.659282][ T42] dvb-usb: error while querying for an remote control event. [ 780.670617][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.677746][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.746379][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.753517][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.793258][T16543] udevd[16543]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.884731][ T42] m920x_read = error: -19 [ 780.912614][ T42] dvb-usb: error while querying for an remote control event. [ 781.005585][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.074754][ T42] m920x_read = error: -19 [ 781.090278][ T42] dvb-usb: error while querying for an remote control event. [ 781.107936][T16574] veth0_vlan: entered promiscuous mode [ 781.140533][T16574] veth1_vlan: entered promiscuous mode [ 781.213792][T16574] veth0_macvtap: entered promiscuous mode [ 781.249364][T16574] veth1_macvtap: entered promiscuous mode [ 781.264743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.265246][ T42] m920x_read = error: -19 [ 781.272882][ C0] syzkaller0: tun_net_xmit 76 [ 781.272904][ C0] syzkaller0: tun_net_xmit 76 [ 781.359805][ T42] dvb-usb: error while querying for an remote control event. [ 781.384385][T16574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.441588][T16574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.473030][ T8417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.509164][ T8417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.514680][ T42] m920x_read = error: -19 [ 781.522717][ T42] dvb-usb: error while querying for an remote control event. [ 781.552980][ T8417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.563671][ T5194] Dev loop2: unable to read RDB block 7 [ 781.587083][ T5194] loop2: AHDI p1 p2 p3 [ 781.605296][ T8417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.614680][ T5194] loop2: partition table partially beyond EOD, truncated [ 781.644917][ T42] m920x_read = error: -19 [ 781.655665][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 781.667907][ T42] dvb-usb: error while querying for an remote control event. [ 781.704667][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 781.836197][ T42] m920x_read = error: -19 [ 781.840678][ T42] dvb-usb: error while querying for an remote control event. [ 781.911812][T15350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.939276][T15350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.985546][ T42] m920x_read = error: -19 [ 781.998786][ T42] dvb-usb: error while querying for an remote control event. [ 782.023871][ T8417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.042194][ T8417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.145312][ T42] m920x_read = error: -19 [ 782.149822][ T42] dvb-usb: error while querying for an remote control event. [ 782.210808][ T5899] usb 6-1: USB disconnect, device number 115 [ 782.274704][ T42] m920x_read = error: -19 [ 782.279147][ T42] dvb-usb: error while querying for an remote control event. [ 782.304981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.313163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.321286][ C0] syzkaller0: tun_net_xmit 76 [ 782.326017][ C0] syzkaller0: tun_net_xmit 76 [ 782.405229][ T42] m920x_read = error: -19 [ 782.417015][ T42] dvb-usb: error while querying for an remote control event. [ 782.494678][ T797] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 782.597363][ T42] m920x_read = error: -19 [ 782.601756][ T42] dvb-usb: error while querying for an remote control event. [ 782.679990][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 782.696394][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.716058][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.756820][ T42] m920x_read = error: -19 [ 782.763569][ T797] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 782.928593][ T42] dvb-usb: error while querying for an remote control event. [ 782.936628][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.949814][ T5194] Dev loop2: unable to read RDB block 7 [ 782.957540][ T5194] loop2: AHDI p1 p2 p3 [ 782.972813][ T5194] loop2: partition table partially beyond EOD, truncated [ 782.990105][ T797] usb 4-1: config 0 descriptor?? [ 783.007324][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 783.037893][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 783.074930][ T42] m920x_read = error: -19 [ 783.079394][ T42] dvb-usb: error while querying for an remote control event. [ 783.124713][ T5191] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 783.204836][ T42] m920x_read = error: -19 [ 783.221113][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 783.224133][ T42] dvb-usb: error while querying for an remote control event. [ 783.235666][ T797] usbhid 4-1:0.0: can't add hid device: -71 [ 783.269737][ T5191] usb 7-1: device descriptor read/64, error -71 [ 783.282400][ T797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 783.344717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.352978][ C0] syzkaller0: tun_net_xmit 76 [ 783.357781][ C0] syzkaller0: tun_net_xmit 76 [ 783.414785][ T797] usb 4-1: USB disconnect, device number 47 [ 783.533796][T16787] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 783.595170][ T42] m920x_read = error: -19 [ 783.612533][ T42] dvb-usb: error while querying for an remote control event. [ 783.644730][ T5191] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 783.774744][ T42] m920x_read = error: -19 [ 783.775568][ T5191] usb 7-1: device descriptor read/64, error -71 [ 783.779224][ T42] dvb-usb: error while querying for an remote control event. [ 783.925838][ T42] m920x_read = error: -19 [ 783.930896][ T42] dvb-usb: error while querying for an remote control event. [ 783.938684][ T5191] usb usb7-port1: attempt power cycle [ 784.095905][ T42] m920x_read = error: -19 [ 784.110765][ T42] dvb-usb: error while querying for an remote control event. [ 784.235882][ T42] m920x_read = error: -19 [ 784.240257][ T42] dvb-usb: error while querying for an remote control event. [ 784.284886][ T797] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 784.314697][ T5191] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 784.365526][ T5191] usb 7-1: device descriptor read/8, error -71 [ 784.384679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.385257][ T42] m920x_read = error: -19 [ 784.392818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.392839][ C0] syzkaller0: tun_net_xmit 76 [ 784.392862][ C0] syzkaller0: tun_net_xmit 76 [ 784.439075][ T42] dvb-usb: error while querying for an remote control event. [ 784.477173][ T797] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 784.504747][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.531409][ T797] usb 4-1: Product: syz [ 784.545998][ T797] usb 4-1: Manufacturer: syz [ 784.564656][ T797] usb 4-1: SerialNumber: syz [ 784.604713][ T5191] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 784.606373][ T42] m920x_read = error: -19 [ 784.645510][ T5191] usb 7-1: device descriptor read/8, error -71 [ 784.651806][ T42] dvb-usb: error while querying for an remote control event. [ 784.722409][ T5194] Dev loop2: unable to read RDB block 7 [ 784.728261][ T5194] loop2: AHDI p1 p2 p3 [ 784.732490][ T5194] loop2: partition table partially beyond EOD, truncated [ 784.743336][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 784.755823][ T5191] usb usb7-port1: unable to enumerate USB device [ 784.784899][ T42] m920x_read = error: -19 [ 784.786105][ T5194] loop2: p3 start 335544320 is beyond EOD, [ 784.789282][ T42] dvb-usb: error while querying for an remote control event. [ 784.807450][T16797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.825130][T16797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.885387][ T5194] truncated [ 784.894746][T16807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.901735][ T42] m920x_read = error: -19 [ 784.904904][T16807] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 785.000847][ T42] dvb-usb: error while querying for an remote control event. [ 785.156435][ T5194] Dev loop2: unable to read RDB block 7 [ 785.162247][ T42] m920x_read = error: -19 [ 785.164043][ T5194] loop2: AHDI p1 p2 p3 [ 785.166754][ T42] dvb-usb: error while querying for an remote control event. [ 785.307030][ T42] m920x_read = error: -19 [ 785.318248][ T42] dvb-usb: error while querying for an remote control event. [ 785.387449][T16808] fuse: Unknown parameter '0x000000000000000e' [ 785.406937][ T5194] loop2: partition table partially beyond EOD, truncated [ 785.424692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.432834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.440939][ C0] syzkaller0: tun_net_xmit 76 [ 785.445635][ C0] syzkaller0: tun_net_xmit 76 [ 785.455020][ T796] m920x_read = error: -19 [ 785.459761][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 785.468581][ T796] dvb-usb: error while querying for an remote control event. [ 785.525343][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 785.608078][ T796] m920x_read = error: -19 [ 785.612457][ T796] dvb-usb: error while querying for an remote control event. [ 785.835770][ T796] m920x_read = error: -19 [ 785.841262][ T796] dvb-usb: error while querying for an remote control event. [ 785.881230][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.985035][ T796] m920x_read = error: -19 [ 785.989413][ T796] dvb-usb: error while querying for an remote control event. [ 786.104686][ T42] m920x_read = error: -19 [ 786.109193][ T42] dvb-usb: error while querying for an remote control event. [ 786.225881][ T42] m920x_read = error: -19 [ 786.247935][ T42] dvb-usb: error while querying for an remote control event. [ 786.371064][ T5194] Dev loop2: unable to read RDB block 7 [ 786.395270][ T5194] loop2: AHDI p1 p2 p3 [ 786.403882][ T5194] loop2: partition table partially beyond EOD, truncated [ 786.404904][ T42] m920x_read = error: -19 [ 786.423219][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 786.435635][ T42] dvb-usb: error while querying for an remote control event. [ 786.441986][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 786.464683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.472826][ C0] syzkaller0: tun_net_xmit 76 [ 786.477524][ C0] syzkaller0: tun_net_xmit 76 [ 786.482407][ T5191] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 786.494926][T14882] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 786.614852][ T42] m920x_read = error: -19 [ 786.619300][ T42] dvb-usb: error while querying for an remote control event. [ 786.637579][ T5191] usb 6-1: Using ep0 maxpacket: 8 [ 786.654999][T14882] usb 7-1: Using ep0 maxpacket: 16 [ 786.668322][ T5191] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 786.682369][T14882] usb 7-1: config 0 has no interfaces? [ 786.702051][ T5191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.716770][T14882] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 786.741431][ T5191] usb 6-1: Product: syz [ 786.746116][T14882] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 786.754779][ T42] m920x_read = error: -19 [ 786.759137][ T42] dvb-usb: error while querying for an remote control event. [ 786.765014][ T5191] usb 6-1: Manufacturer: syz [ 786.766699][ T796] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 786.771150][T14882] usb 7-1: Manufacturer: syz [ 786.788345][ T5191] usb 6-1: SerialNumber: syz [ 786.803683][ T5191] usb 6-1: config 0 descriptor?? [ 786.816416][T14882] usb 7-1: config 0 descriptor?? [ 786.823123][ T5191] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 786.906270][ T42] m920x_read = error: -19 [ 786.910648][ T42] dvb-usb: error while querying for an remote control event. [ 786.959323][ T796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.974773][ T796] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 787.014915][ T796] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.045899][ T42] m920x_read = error: -19 [ 787.050281][ T42] dvb-usb: error while querying for an remote control event. [ 787.081401][ T796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.107704][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.130274][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 787.143576][ T796] usb 3-1: Product: syz [ 787.155045][ T796] usb 3-1: Manufacturer: syz [ 787.158961][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 787.159667][ T796] usb 3-1: SerialNumber: syz [ 787.186223][ T42] m920x_read = error: -19 [ 787.195368][ T42] dvb-usb: error while querying for an remote control event. [ 787.211470][ T796] cdc_ncm 3-1:1.0: skipping garbage [ 787.233691][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 787.263438][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 787.282816][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 787.299998][ T797] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 787.314721][ T42] m920x_read = error: -19 [ 787.319191][ T42] dvb-usb: error while querying for an remote control event. [ 787.322232][ T797] usb 4-1: USB disconnect, device number 48 [ 787.456103][ T42] m920x_read = error: -19 [ 787.460497][ T42] dvb-usb: error while querying for an remote control event. [ 787.504718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.512828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.520951][ C0] syzkaller0: tun_net_xmit 76 [ 787.525667][ C0] syzkaller0: tun_net_xmit 76 [ 787.604810][ T42] m920x_read = error: -19 [ 787.609226][ T42] dvb-usb: error while querying for an remote control event. [ 787.850911][T12195] m920x_read = error: -19 [ 787.855533][T12195] dvb-usb: error while querying for an remote control event. [ 787.872904][ T29] audit: type=1326 audit(1773718766.840:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16816 comm="syz.5.3005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd826d9c799 code=0x0 [ 787.984057][T12195] m920x_read = error: -19 [ 787.998941][T12195] dvb-usb: error while querying for an remote control event. [ 788.135562][T12195] m920x_read = error: -19 [ 788.140062][T12195] dvb-usb: error while querying for an remote control event. [ 788.264889][T12195] m920x_read = error: -19 [ 788.269309][T12195] dvb-usb: error while querying for an remote control event. [ 788.396584][ T796] cdc_ncm 3-1:1.0: bind() failure [ 788.402150][T12195] m920x_read = error: -19 [ 788.409688][T12195] dvb-usb: error while querying for an remote control event. [ 788.417602][ T796] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 788.429843][ T796] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 788.440952][ T796] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 788.469172][ T796] usb 3-1: USB disconnect, device number 14 [ 788.544680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.545443][ T42] m920x_read = error: -19 [ 788.552848][ C0] syzkaller0: tun_net_xmit 76 [ 788.561871][ C0] syzkaller0: tun_net_xmit 76 [ 788.563735][ T42] dvb-usb: error while querying for an remote control event. [ 788.686808][ T796] m920x_read = error: -19 [ 788.691278][ T796] dvb-usb: error while querying for an remote control event. [ 788.755400][T16838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.825384][ T796] m920x_read = error: -19 [ 788.829775][ T796] dvb-usb: error while querying for an remote control event. [ 788.905299][ T5191] gspca_sonixj: i2c_w8 err -110 [ 788.944706][ T796] m920x_read = error: -19 [ 788.948720][ T5191] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 788.949693][ T796] dvb-usb: error while querying for an remote control event. [ 789.026052][ T5194] Dev loop2: unable to read RDB block 7 [ 789.038495][ T5194] loop2: AHDI p1 p2 p3 [ 789.044193][ T5194] loop2: partition table partially beyond EOD, truncated [ 789.057679][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 789.064892][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 789.072996][T16843] netlink: 'syz.3.3013': attribute type 10 has an invalid length. [ 789.083229][ T796] m920x_read = error: -19 [ 789.087998][ T796] dvb-usb: error while querying for an remote control event. [ 789.119885][T16843] team0: Port device dummy0 added [ 789.125349][T16844] netlink: 'syz.3.3013': attribute type 10 has an invalid length. [ 789.167196][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 789.182631][T16847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.214927][ T796] m920x_read = error: -19 [ 789.220013][ T796] dvb-usb: error while querying for an remote control event. [ 789.224652][T16846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.241656][T16844] team0: Port device dummy0 removed [ 789.254226][ T5191] usb 7-1: USB disconnect, device number 59 [ 789.352094][ T5194] Dev loop2: unable to read RDB block 7 [ 789.358294][ T42] m920x_read = error: -19 [ 789.362667][ T42] dvb-usb: error while querying for an remote control event. [ 789.394313][ T5194] loop2: AHDI p1 p2 p3 [ 789.404886][ T5194] loop2: partition table partially beyond EOD, truncated [ 789.430133][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 789.462276][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 789.495730][ T42] m920x_read = error: -19 [ 789.500125][ T42] dvb-usb: error while querying for an remote control event. [ 789.562250][ T5191] usb 6-1: USB disconnect, device number 116 [ 789.594682][ C0] syzkaller0: tun_net_xmit 76 [ 789.599431][ C0] syzkaller0: tun_net_xmit 76 [ 789.634989][ T42] m920x_read = error: -19 [ 789.639371][ T42] dvb-usb: error while querying for an remote control event. [ 789.762071][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 789.773776][T16864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.784112][ T42] m920x_read = error: -19 [ 789.792799][ T42] dvb-usb: error while querying for an remote control event. [ 789.920457][T16861] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3019'. [ 789.955026][ T42] m920x_read = error: -19 [ 789.959425][ T42] dvb-usb: error while querying for an remote control event. [ 790.094729][ T42] m920x_read = error: -19 [ 790.099303][ T42] dvb-usb: error while querying for an remote control event. [ 790.155574][ T5194] Dev loop2: unable to read RDB block 7 [ 790.188645][ T5194] loop2: AHDI p1 p2 p3 [ 790.207785][ T5194] loop2: partition table partially beyond EOD, truncated [ 790.222517][ T5194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 790.313790][ T796] m920x_read = error: -19 [ 790.318325][ T796] dvb-usb: error while querying for an remote control event. [ 790.327103][ T5194] loop2: p3 start 335544320 is beyond EOD, truncated [ 790.480440][ T796] m920x_read = error: -19 [ 790.489801][ T796] dvb-usb: error while querying for an remote control event. [ 790.624663][ C0] net_ratelimit: 2 callbacks suppressed [ 790.624684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.638394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.646485][ C0] syzkaller0: tun_net_xmit 76 [ 790.651154][ C0] syzkaller0: tun_net_xmit 76 [ 790.670298][ T796] m920x_read = error: -19 [ 790.680726][ T796] dvb-usb: error while querying for an remote control event. [ 790.750915][ T29] audit: type=1800 audit(1773718769.690:734): pid=16876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3022" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 790.806872][ T796] m920x_read = error: -19 [ 790.811274][ T796] dvb-usb: error while querying for an remote control event. [ 790.939343][ T796] m920x_read = error: -19 [ 790.943886][ T796] dvb-usb: error while querying for an remote control event. [ 791.055573][ T796] m920x_read = error: -19 [ 791.059947][ T796] dvb-usb: error while querying for an remote control event. [ 791.197482][ T796] m920x_read = error: -19 [ 791.202327][ T796] dvb-usb: error while querying for an remote control event. [ 791.314850][ T42] m920x_read = error: -19 [ 791.319226][ T42] dvb-usb: error while querying for an remote control event. [ 791.456107][ T796] m920x_read = error: -19 [ 791.460570][ T796] dvb-usb: error while querying for an remote control event. [ 791.594764][ T796] m920x_read = error: -19 [ 791.600464][ T796] dvb-usb: error while querying for an remote control event. [ 791.664794][ C0] syzkaller0: tun_net_xmit 76 [ 791.669539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.677649][ C0] syzkaller0: tun_net_xmit 76 [ 791.816685][T16890] Cannot find set identified by id 0 to match [ 791.833193][T16890] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3027'. [ 791.834732][ T796] m920x_read = error: -19 [ 791.846653][ T796] dvb-usb: error while querying for an remote control event. [ 791.864379][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 791.935496][ T5191] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 791.988435][ T796] m920x_read = error: -19 [ 791.996380][ T796] dvb-usb: error while querying for an remote control event. [ 792.106114][ T5191] usb 6-1: Using ep0 maxpacket: 16 [ 792.114841][ T796] m920x_read = error: -19 [ 792.119372][ T796] dvb-usb: error while querying for an remote control event. [ 792.135773][ T5191] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 792.148535][ T5191] usb 6-1: config 0 has no interface number 0 [ 792.165348][ T5191] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 792.198966][ T5191] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 792.210276][ T5191] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 792.226054][ T5191] usb 6-1: Product: syz [ 792.237486][ T796] m920x_read = error: -19 [ 792.242350][ T796] dvb-usb: error while querying for an remote control event. [ 792.251261][ T5191] usb 6-1: SerialNumber: syz [ 792.271724][ T5191] usb 6-1: config 0 descriptor?? [ 792.292911][ T5191] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 792.308439][ T5191] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input77 [ 792.386602][ T796] m920x_read = error: -19 [ 792.394041][ T796] dvb-usb: error while querying for an remote control event. [ 792.544732][ T796] m920x_read = error: -19 [ 792.550265][ T796] dvb-usb: error while querying for an remote control event. [ 792.685717][ T796] m920x_read = error: -19 [ 792.694991][T16888] lo: Caught tx_queue_len zero misconfig [ 792.709268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.717388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.725482][ C0] syzkaller0: tun_net_xmit 76 [ 792.730147][ C0] syzkaller0: tun_net_xmit 76 [ 792.736461][ T6029] wlan0: Trigger new scan to find an IBSS to join [ 792.808931][ T796] dvb-usb: error while querying for an remote control event. [ 792.975220][ T796] m920x_read = error: -19 [ 792.975263][ T796] dvb-usb: error while querying for an remote control event. [ 793.084780][ T796] m920x_read = error: -19 [ 793.084809][ T796] dvb-usb: error while querying for an remote control event. [ 793.102006][ T5833] Bluetooth: hci5: unexpected event for opcode 0x0c14 [ 793.195487][ T796] m920x_read = error: -19 [ 793.195507][ T796] dvb-usb: error while querying for an remote control event. [ 793.304685][ T42] m920x_read = error: -19 [ 793.304712][ T42] dvb-usb: error while querying for an remote control event. [ 793.347459][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 793.347524][ C0] ------------[ cut here ]------------ [ 793.347542][ C0] URB ffff888030616f00 submitted while active [ 793.347565][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: kworker/u8:5/15350 [ 793.347681][ C0] Modules linked in: [ 793.347758][ C0] CPU: 0 UID: 0 PID: 15350 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.347787][ C0] Tainted: [L]=SOFTLOCKUP [ 793.347796][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.347812][ C0] Workqueue: bat_events batadv_tt_purge [ 793.347904][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 793.347925][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 97 f3 f8 fa 49 83 3e 00 74 40 e8 9c b6 8e fa 48 8d 3d 65 eb e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 81 b6 8e fa eb 05 e8 7a b6 [ 793.347945][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010083 [ 793.347964][ C0] RAX: ffffffff8736ea44 RBX: ffff888030616f00 RCX: 0000000000040000 [ 793.347979][ C0] RDX: ffffc90002191000 RSI: ffff888030616f00 RDI: ffffffff901ed5b0 [ 793.347995][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 793.348008][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 793.348024][ C0] R13: ffff88806bc8f830 R14: ffff888030616f08 R15: dffffc0000000000 [ 793.348041][ C0] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 793.348059][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.348075][ C0] CR2: 0000001b2eb15ff8 CR3: 000000005dbf6000 CR4: 00000000003526f0 [ 793.348093][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 793.348108][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 793.348122][ C0] Call Trace: [ 793.348132][ C0] [ 793.348144][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.348215][ C0] ? ___ratelimit+0x58c/0x8d0 [ 793.348278][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 793.348379][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 793.348413][ C0] dummy_timer+0xbbd/0x45d0 [ 793.348456][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 793.348503][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 793.348554][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 793.348585][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.348613][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 793.348642][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 793.348667][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 793.348710][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 793.348739][ C0] ? read_tsc+0x9/0x20 [ 793.348777][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 793.348811][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 793.348848][ C0] handle_softirqs+0x22a/0x870 [ 793.348881][ C0] ? do_softirq+0x76/0xd0 [ 793.348914][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 793.348946][ C0] do_softirq+0x76/0xd0 [ 793.348974][ C0] [ 793.348983][ C0] [ 793.348992][ C0] __local_bh_enable_ip+0xf8/0x130 [ 793.349025][ C0] batadv_tt_local_purge+0x2a7/0x340 [ 793.349065][ C0] batadv_tt_purge+0x35/0x9e0 [ 793.349102][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 793.349128][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 793.349153][ C0] process_scheduled_works+0xb6e/0x18c0 [ 793.349203][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.349235][ C0] ? assign_work+0x3d5/0x5e0 [ 793.349263][ C0] worker_thread+0xa53/0xfc0 [ 793.349314][ C0] kthread+0x388/0x470 [ 793.349348][ C0] ? __pfx_worker_thread+0x10/0x10 [ 793.349375][ C0] ? __pfx_kthread+0x10/0x10 [ 793.349397][ C0] ret_from_fork+0x51e/0xb90 [ 793.349424][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 793.349450][ C0] ? __switch_to+0xc7d/0x1450 [ 793.349488][ C0] ? __pfx_kthread+0x10/0x10 [ 793.349507][ C0] ret_from_fork_asm+0x1a/0x30 [ 793.349557][ C0] [ 793.349573][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 793.349592][ C0] CPU: 0 UID: 0 PID: 15350 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.349621][ C0] Tainted: [L]=SOFTLOCKUP [ 793.349629][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.349642][ C0] Workqueue: bat_events batadv_tt_purge [ 793.349671][ C0] Call Trace: [ 793.349681][ C0] [ 793.349689][ C0] vpanic+0x56c/0xa60 [ 793.349726][ C0] ? __pfx__printk+0x10/0x10 [ 793.349748][ C0] ? __pfx_vpanic+0x10/0x10 [ 793.349777][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 793.349800][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 793.349828][ C0] panic+0xc5/0xd0 [ 793.349853][ C0] ? __pfx_panic+0x10/0x10 [ 793.349882][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 793.349914][ C0] __warn+0x315/0x4f0 [ 793.349939][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 793.349962][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 793.349983][ C0] __report_bug+0x29a/0x540 [ 793.350051][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 793.350083][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 793.350102][ C0] ? __pfx___report_bug+0x10/0x10 [ 793.350129][ C0] ? dev_printk_emit+0xee/0x140 [ 793.350166][ C0] report_bug_entry+0x19a/0x290 [ 793.350187][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 793.350204][ C0] ? usb_submit_urb+0x83/0x18b0 [ 793.350225][ C0] handle_bug+0xce/0x200 [ 793.350254][ C0] exc_invalid_op+0x1a/0x50 [ 793.350275][ C0] asm_exc_invalid_op+0x1a/0x20 [ 793.350295][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 793.350315][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 97 f3 f8 fa 49 83 3e 00 74 40 e8 9c b6 8e fa 48 8d 3d 65 eb e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 81 b6 8e fa eb 05 e8 7a b6 [ 793.350342][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010083 [ 793.350361][ C0] RAX: ffffffff8736ea44 RBX: ffff888030616f00 RCX: 0000000000040000 [ 793.350379][ C0] RDX: ffffc90002191000 RSI: ffff888030616f00 RDI: ffffffff901ed5b0 [ 793.350399][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 793.350414][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 793.350431][ C0] R13: ffff88806bc8f830 R14: ffff888030616f08 R15: dffffc0000000000 [ 793.350454][ C0] ? usb_submit_urb+0x74/0x18b0 [ 793.350481][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.350513][ C0] ? ___ratelimit+0x58c/0x8d0 [ 793.350551][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 793.350589][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 793.350622][ C0] dummy_timer+0xbbd/0x45d0 [ 793.350664][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 793.350710][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 793.350739][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 793.350767][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.350799][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 793.350827][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 793.350856][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 793.350905][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 793.350937][ C0] ? read_tsc+0x9/0x20 [ 793.350960][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 793.350996][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 793.351033][ C0] handle_softirqs+0x22a/0x870 [ 793.351064][ C0] ? do_softirq+0x76/0xd0 [ 793.351096][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 793.351128][ C0] do_softirq+0x76/0xd0 [ 793.351155][ C0] [ 793.351164][ C0] [ 793.351173][ C0] __local_bh_enable_ip+0xf8/0x130 [ 793.351203][ C0] batadv_tt_local_purge+0x2a7/0x340 [ 793.351244][ C0] batadv_tt_purge+0x35/0x9e0 [ 793.351281][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 793.351309][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 793.351339][ C0] process_scheduled_works+0xb6e/0x18c0 [ 793.351392][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.351425][ C0] ? assign_work+0x3d5/0x5e0 [ 793.351455][ C0] worker_thread+0xa53/0xfc0 [ 793.351508][ C0] kthread+0x388/0x470 [ 793.351538][ C0] ? __pfx_worker_thread+0x10/0x10 [ 793.351565][ C0] ? __pfx_kthread+0x10/0x10 [ 793.351587][ C0] ret_from_fork+0x51e/0xb90 [ 793.351620][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 793.351648][ C0] ? __switch_to+0xc7d/0x1450 [ 793.351677][ C0] ? __pfx_kthread+0x10/0x10 [ 793.351700][ C0] ret_from_fork_asm+0x1a/0x30 [ 793.351747][ C0] [ 793.352043][ C0] Kernel Offset: disabled