last executing test programs: 23m30.591113812s ago: executing program 32 (id=336): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) (async) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0x9}]}, 0x40}}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') (async, rerun: 32) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0/file1\x00') 18m58.313294415s ago: executing program 33 (id=762): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x21000, 0x600000d, 0x12, r0, 0x180000000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x7, {{0x2, 0x4e23, @multicast2}}}, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x63) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000840)={{0x2f, @empty, 0x4e21, 0x2, 'wlc\x00', 0x16, 0x68, 0x71}, {@broadcast, 0x4e24, 0x4, 0x5, 0x1, 0xe}}, 0x44) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_load_syzos={0x136, 0x38, {0x3, 0x6a0b, [@cpuid={0x64, 0x18, {0x1, 0x2}}]}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18}, @nested_load_code={0x12e, 0x56, {0x3, "0fc79800000000c4c2650aa45504000000f20f5cc90f01c90f01c4f2436f83c2130f01c366baf80cb8e0dbe685ef66bafc0cb80bfcbd87efc422350957c4"}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x81, 0x6}}, @rdmsr={0x66, 0x18, {0x269}}, @nested_load_syzos={0x136, 0x138, {0x1, 0x8, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7fffffff, 0xfff}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xa29, 0x6}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0xd}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xa255}}]}}, @nested_load_code={0x12e, 0x4f, {0x1, "0f3566ba4200edf30f2a72f466b8b5008ee0260f01b5df000000c4815df809b99f0a0000b807000000ba000000000f30450fe3e00f77ab"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x20, 0x3, 0x85, 0x3}}, @wr_crn={0x67, 0x20, {0x4, 0x8}}, @wr_crn={0x67, 0x20, {0x4, 0xaeda}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x237, 0x2, 0x590}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x89, {0x0, "66360f1938c4812a52604466baf80cb8d07f4081ef66bafc0cb863004173ef0f084780c20d66baf80cb8e8b7fa83ef66bafc0cedc7442400d0000000c7442402346d0000ff1c248fe9089a83f4fd0000b805000000b9883300000f01d966baf80cb8104a0b85ef66bafc0cb800000000ef"}}, @nested_amd_vmload={0x182, 0x18}, @rdmsr={0x66, 0x18, {0x491}}, @nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x9b9}}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0xc5bf, 0x6}}, @wr_drn={0x68, 0x20, {0x0, 0x4}}, @out_dx={0x6a, 0x28, {0x6aa5, 0x2, 0x101}}, @nested_load_code={0x12e, 0x62, {0x1, "66baf80cb820c3ec89ef66bafc0cedb8010000000f01c16465448016a60f01cab8010000000f01c1c421c5d152cadae926420f60b4ce00800000c423f12075efe9420f6e94164d7da3af"}}, @code={0xa, 0x42, {"f3410f2086440f01c5420f0d0866ba4100ec66ba420066ed65650f01c5400f0fc01c660f388102430fc7ae000000000f09"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb}}, @code={0xa, 0x94, {"c74424004e000000c744240200000000ff2c2466baf80cb85840c183ef66bafc0cb800000000ef801ad8c74424002b079fe6c7442402ac5e0000c7442406000000000f01142466baf80cb8caca0083ef66bafc0cb000ee66ba4300b000eec403796a3300b9670800000f3266410f3880b600880000b9800000c00f3235002000000f30"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xffffffffffffffff, 0x4, 0x1}}], 0x67e}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000780)={[0x7ff, 0xfffffffffffffffc, 0x1ff, 0xfffffffffffffffd, 0x9, 0x2, 0x0, 0x5, 0x2, 0x1, 0x2, 0xffffffffffffefb5, 0xe9, 0xf, 0x9, 0x8], 0xffffffff, 0x1}) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000002040)=0x80000001) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x21000, 0x600000d, 0x12, r0, 0x180000000) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x7, {{0x2, 0x4e23, @multicast2}}}, 0x88) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x63) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000840)={{0x2f, @empty, 0x4e21, 0x2, 'wlc\x00', 0x16, 0x68, 0x71}, {@broadcast, 0x4e24, 0x4, 0x5, 0x1, 0xe}}, 0x44) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_load_syzos={0x136, 0x38, {0x3, 0x6a0b, [@cpuid={0x64, 0x18, {0x1, 0x2}}]}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18}, @nested_load_code={0x12e, 0x56, {0x3, "0fc79800000000c4c2650aa45504000000f20f5cc90f01c90f01c4f2436f83c2130f01c366baf80cb8e0dbe685ef66bafc0cb80bfcbd87efc422350957c4"}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x81, 0x6}}, @rdmsr={0x66, 0x18, {0x269}}, @nested_load_syzos={0x136, 0x138, {0x1, 0x8, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7fffffff, 0xfff}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xa29, 0x6}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0xd}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xa255}}]}}, @nested_load_code={0x12e, 0x4f, {0x1, "0f3566ba4200edf30f2a72f466b8b5008ee0260f01b5df000000c4815df809b99f0a0000b807000000ba000000000f30450fe3e00f77ab"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x20, 0x3, 0x85, 0x3}}, @wr_crn={0x67, 0x20, {0x4, 0x8}}, @wr_crn={0x67, 0x20, {0x4, 0xaeda}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x237, 0x2, 0x590}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x89, {0x0, "66360f1938c4812a52604466baf80cb8d07f4081ef66bafc0cb863004173ef0f084780c20d66baf80cb8e8b7fa83ef66bafc0cedc7442400d0000000c7442402346d0000ff1c248fe9089a83f4fd0000b805000000b9883300000f01d966baf80cb8104a0b85ef66bafc0cb800000000ef"}}, @nested_amd_vmload={0x182, 0x18}, @rdmsr={0x66, 0x18, {0x491}}, @nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x9b9}}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0xc5bf, 0x6}}, @wr_drn={0x68, 0x20, {0x0, 0x4}}, @out_dx={0x6a, 0x28, {0x6aa5, 0x2, 0x101}}, @nested_load_code={0x12e, 0x62, {0x1, "66baf80cb820c3ec89ef66bafc0cedb8010000000f01c16465448016a60f01cab8010000000f01c1c421c5d152cadae926420f60b4ce00800000c423f12075efe9420f6e94164d7da3af"}}, @code={0xa, 0x42, {"f3410f2086440f01c5420f0d0866ba4100ec66ba420066ed65650f01c5400f0fc01c660f388102430fc7ae000000000f09"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb}}, @code={0xa, 0x94, {"c74424004e000000c744240200000000ff2c2466baf80cb85840c183ef66bafc0cb800000000ef801ad8c74424002b079fe6c7442402ac5e0000c7442406000000000f01142466baf80cb8caca0083ef66bafc0cb000ee66ba4300b000eec403796a3300b9670800000f3266410f3880b600880000b9800000c00f3235002000000f30"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xffffffffffffffff, 0x4, 0x1}}], 0x67e}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000780)={[0x7ff, 0xfffffffffffffffc, 0x1ff, 0xfffffffffffffffd, 0x9, 0x2, 0x0, 0x5, 0x2, 0x1, 0x2, 0xffffffffffffefb5, 0xe9, 0xf, 0x9, 0x8], 0xffffffff, 0x1}) (async) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000002040)=0x80000001) (async) 18m24.849109125s ago: executing program 34 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14m12.453456809s ago: executing program 35 (id=1854): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0x40fff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x6bd, 0x7ff}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) unshare(0x28000600) r8 = dup2(r7, r5) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 14m12.364660984s ago: executing program 36 (id=1852): r0 = syz_io_uring_setup(0x4b1d, &(0x7f0000000380)={0x0, 0xb5ac, 0x20, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x14e) r4 = syz_io_uring_setup(0x2bd3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x333, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x8, {}, 0xa6, 0x3, 0x0, {0x0, 0x0, r4}}) (rerun: 64) r7 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000d40)="01", 0x1) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000040), 0x400, 0x80880) (async, rerun: 32) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x891028, &(0x7f0000000640)=ANY=[]) (async) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'syzkaller1\x00', &(0x7f0000000440)=@ethtool_flash={0x33, 0x10000, './file0\x00'}}) (async) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) recvmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f00000001c0)=@tipc=@name, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000700)=""/68, 0x44}, 0x0) (async) getrandom(&(0x7f0000000440)=""/169, 0xa9, 0x1) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, r10, {0x7, 0x1f, 0x1, 0xffffffff808188b1, 0x0, 0xfffe, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async, rerun: 64) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r12 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r12, &(0x7f0000000500), 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0xb7, 0x0, 0x4) (async) write$tcp_congestion(r3, &(0x7f0000000540)='dctcp\x00', 0x6) 14m12.271764607s ago: executing program 37 (id=1847): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000038daab5f1baa5c2e3725a4c3f9a4236ab5b00cb3be8558607c4ed7beb2ca25038028b3b232e81c5ca81f92cea116063dd1a63aa4a974b72275326ee91c3ae96621868f0c"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) r2 = gettid() syz_open_dev$tty20(0xc, 0x4, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x5, 0x4, @tid=r2}, &(0x7f0000000200)) r3 = dup(r1) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000840000000500000981"], 0x18, 0x48d1}, 0x8050) r4 = getpid() r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) fcntl$lock(r5, 0x24, &(0x7f0000000240)={0x2, 0x0, 0x2, 0x73, r6}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'syzkaller0\x00', {0x1}, 0x3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000206010000000000000000000000000005000400000000000900020073797a31000000000c00078008000600000000000c000300688273680500010006000000050005000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x6}, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000080)={0x20, 0x31, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0xaa}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010429bd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08b10400000000002000128009000100766c616e00000000100002800c0002000a0000000a0000001400030076697274fa7669666930000000000000"], 0x54}}, 0x0) 14m12.158492715s ago: executing program 38 (id=1860): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0xa, 0x2, 0x80, 0x41, 0xeb, 0x45, 0x8, 0x9, 0x7ffffffffffffffb}, {0xb, 0xa7f3, 0xa, 0x7, 0xfd, 0x82, 0x6, 0x3, 0xe, 0x6, 0x3, 0x6, 0x1}, {0x0, 0x8, 0x3, 0x6, 0x4, 0x5, 0x0, 0xb9, 0x4, 0x21, 0xfc, 0x2, 0x1}], 0x9}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x1, 0x1003, 0x3, 0x8, 0xc, 0x2, 0x4, 0xfffffffffffffffe, 0x3], 0x10000, 0x2100}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x1, 0x1003, 0x3, 0x8, 0xc, 0x2, 0x4, 0xfffffffffffffffe, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000002c0)=0x4, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffff1000, 0x1000, &(0x7f000000e000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffff1000, 0x1000, &(0x7f000000e000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x26, 0x4007, @fd_index=0x6, 0xfffffffffdffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x26, 0x4007, @fd_index=0x6, 0xfffffffffdffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) (async) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) 14m11.968129335s ago: executing program 39 (id=1859): r0 = socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) (async) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x4800002c, r7, 0x0) (async) write(r7, &(0x7f0000000140)='f', 0x1) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000000280)) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) 12m9.148574512s ago: executing program 0 (id=2209): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="240000005800413bf417a2f90085b3a85c91fddf080001000501009f080001000000000056", 0x25) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4000800) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x3, 0x60, 0xd, 0x18, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x0, 0x1, 0x8, 0x3b}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x4, 0x9, 0x78}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x8a, 0xc, 0x8}}]}}]}}]}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x6, 0x12) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, {0xa, 0x0, 0x8000000, @local}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r5, 0x2, 0x5, 0x10000000}, 0x10) 12m4.575512629s ago: executing program 0 (id=2229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_request={0xf, 0x0, 0x0, 0x81, 0x7}}}}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000003c0)={0xaf71, 0x401}) 11m58.250757558s ago: executing program 0 (id=2254): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) ioctl$DVB_DEMUX_DMX_GET_STC(0xffffffffffffffff, 0xc0106f32, &(0x7f00000001c0)={0x1ab1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES64=r4, @ANYRESDEC=r3], 0x110) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = dup(0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r11 = syz_open_pts(r10, 0x141601) fcntl$setstatus(r11, 0x4, 0x102800) write(r11, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x19) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11m50.38755289s ago: executing program 0 (id=2285): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="01000000", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000480)="55f0", 0x42}, {&(0x7f00000001c0)="d6503ccb6276fca31d52ba0a6c22", 0xe}], 0x4}, 0x40015) 11m47.467503112s ago: executing program 0 (id=2296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x200c1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xfffff000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='udf\x00', 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x80, 0xf9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xf2, 0x2d, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x81, 0x9, 0x1}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x9, 0x9, 0x3, 0x40, 0x7}, 0x46, &(0x7f0000000280)={0x5, 0xf, 0x46, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xfb73b4b78ac34a38, 0x0, 0xc, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x24, 0xf9, 0x1, 0x3, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "63bf1f21055832d82efe7cd5bd338e33"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xd1, 0x0, 0x4, [0xc000, 0xc0c0, 0x7e00]}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r8, 0xc008aec1, &(0x7f0000000100)) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000080)=0x7, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 11m43.208508885s ago: executing program 0 (id=2312): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000014000200"/40], 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r7, r9, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00f3823a2fe86b711eb087e66d0a6c6eebe4299c94dadefbf6a63439e907184aa46e354ade59f9c709aeb489c7a8f9ecb6dfd30db483221e93486d348326c33e27eaacef3a71a4230d66faa527402a1cc12c1503f887434fe9351531c9593f11ed61b1ddf631d01ab857d8bc660740dcc7d69caf47d8c2bf03f1749825e80b4980e6bfa1df9de9224eae8d368d994b4d1751ef928796c1a6486f550a7cc640ec86222ba2bb098d56cda7fbaefa275f17216701e6d5fa3cba7a0d3b4374b53ec66ed6b5ad8d0d5a97d123e1ecf50fc93ea82577cbe92ebaa8922e594b8e75cda5ad3735"]) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYBLOB="00000000080002000c00000014000100fc020000ebff00"/32], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000010003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000074109dff3483a9713af42694099b40e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bff", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 11m27.852059587s ago: executing program 40 (id=2312): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000014000200"/40], 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r7, r9, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00f3823a2fe86b711eb087e66d0a6c6eebe4299c94dadefbf6a63439e907184aa46e354ade59f9c709aeb489c7a8f9ecb6dfd30db483221e93486d348326c33e27eaacef3a71a4230d66faa527402a1cc12c1503f887434fe9351531c9593f11ed61b1ddf631d01ab857d8bc660740dcc7d69caf47d8c2bf03f1749825e80b4980e6bfa1df9de9224eae8d368d994b4d1751ef928796c1a6486f550a7cc640ec86222ba2bb098d56cda7fbaefa275f17216701e6d5fa3cba7a0d3b4374b53ec66ed6b5ad8d0d5a97d123e1ecf50fc93ea82577cbe92ebaa8922e594b8e75cda5ad3735"]) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYBLOB="00000000080002000c00000014000100fc020000ebff00"/32], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000010003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000074109dff3483a9713af42694099b40e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bff", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 11m15.571774408s ago: executing program 3 (id=2381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x2000400) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f00000001c0)=0x80000000, 0x4) 11m15.043618635s ago: executing program 3 (id=2383): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x4}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x54b8000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x3ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000019c0)) read(r1, &(0x7f0000000240)=""/235, 0xeb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x93}}, './file0\x00'}) r2 = socket(0x2, 0x80000, 0xfffffffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x2, 0xfffffe0000000001, 0x200, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') syz_open_pts(r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 11m13.572971905s ago: executing program 3 (id=2385): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) ppoll(&(0x7f0000000540), 0x1ffffffffffffff1, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0x93]}, 0x8) 11m11.551777592s ago: executing program 3 (id=2389): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40a00, 0x175) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x3c, r1, 0x401, 0x70bd25, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x56c}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x4e1e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 11m8.758787566s ago: executing program 3 (id=2395): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002780)={0x0, 0x0, "d607f8f9951e76c13f64323723e701000000363423eb3d2537865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb007fd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000100000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5630e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800000700", "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"}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002700), 0xc00, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000002740)=0x1, 0x4) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000011c0)={0x8, 0x80000, r0}) write(r1, &(0x7f0000001200)="62f010746f957b5cc004f0d351feec5e574effaf31f4682e5c33f3ad35ed6f0432dc3267c8856d122b8f440745c80d050c38265f288f807947cb1b9da98390b7183178508cbb98e990c3bca5b552ce6cf8b1e5c1a64fb3d7add4c672603c98324f4b6e465cc19bef7ddd2fb8c1888bdd6bf55a98021d107fd5e7aac53aa93331e1cb57d75295d72649909e627894da8a8f7dfb88ef59397bfae02dbba8caa3803573c6f197a283f23654409f29cb5ca6c4a1e54a1352ded4ee7976935f6035fb611d29c8c1b482ce4b288d04", 0xcc) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0xffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040)=0x66, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001040)={0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x6, 0x0, 0x7fffffff}]}) ustat(0x401, &(0x7f0000000300)) mlock(&(0x7f00004ff000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x7, 0x5) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ustat(0x5, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54004ef7e3faffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100002c00128009000100766c616e000000001c00028006000100000000000c0004800c000100070000000b00000008000500", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000100)={"4d79e2953b7568a810071914804cfffd", r8, 0x0, {0x8, 0x8}, {0xd73, 0x4}, 0x2, [0x8e6, 0xfffffffffffffffc, 0x3, 0x80, 0x6, 0x3, 0x7fff, 0x0, 0x3, 0x8, 0x32, 0x1, 0xffffffff80000001, 0x38ed, 0x1, 0x7f]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x80000000, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001700)={{r1}, r8, 0x18, @unused=[0x79172978, 0xa, 0x2, 0x40], @devid=r9}) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 11m7.808645657s ago: executing program 3 (id=2397): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x34, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x30c}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x8, 0x86}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0xb0, 0x9, 0x8, 0x2}, 0x7e, &(0x7f0000000080)={0x5, 0xf, 0x7e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x1, 0x6}, @generic={0x4b, 0x10, 0xa, "a001d1ab8f76a3b689242643efdefbd04a47b954506ae200797a491c14cd9890d9258cb39252d83d94860359162e423ccf9bfab2faad68bfa67b30f496090c6f89b23a54e037bf20"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xc, 0x7}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7, 0xff00, 0x2, [0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xfc, 0xc7, 0xc74e}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x400a}}, {0x3e, &(0x7f0000000200)=@string={0x3e, 0x3, "1436beb6c891121a1dba9e9743bb33062f84513a49be0d27474dcf146bd97adb693995b4ddaddfad344e3e08d858e29c510a1c556750c79ed8fd833f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x44, &(0x7f0000000280)=@string={0x44, 0x3, "9ecede4da7c41cc27d4029f8f698c6fb7e87e8495619488c2d8b1ac921bf71bd4887420676b290ab52136ecb975fed5f219c0007a82fb7b15a257e344617e5082f46"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x438}}, {0x32, &(0x7f0000000340)=@string={0x32, 0x3, "f6d58c7430a5c7ee73cd7fe998ccfc9417c39b83feb5298bb36ddd3b0fd600178aae2db9ff3a6b5c056107a20e79e6ae"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11m6.29380339s ago: executing program 41 (id=2397): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x4101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x34, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x30c}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x8, 0x86}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0xb0, 0x9, 0x8, 0x2}, 0x7e, &(0x7f0000000080)={0x5, 0xf, 0x7e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x1, 0x6}, @generic={0x4b, 0x10, 0xa, "a001d1ab8f76a3b689242643efdefbd04a47b954506ae200797a491c14cd9890d9258cb39252d83d94860359162e423ccf9bfab2faad68bfa67b30f496090c6f89b23a54e037bf20"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xc, 0x7}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7, 0xff00, 0x2, [0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xfc, 0xc7, 0xc74e}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x400a}}, {0x3e, &(0x7f0000000200)=@string={0x3e, 0x3, "1436beb6c891121a1dba9e9743bb33062f84513a49be0d27474dcf146bd97adb693995b4ddaddfad344e3e08d858e29c510a1c556750c79ed8fd833f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x44, &(0x7f0000000280)=@string={0x44, 0x3, "9ecede4da7c41cc27d4029f8f698c6fb7e87e8495619488c2d8b1ac921bf71bd4887420676b290ab52136ecb975fed5f219c0007a82fb7b15a257e344617e5082f46"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x438}}, {0x32, &(0x7f0000000340)=@string={0x32, 0x3, "f6d58c7430a5c7ee73cd7fe998ccfc9417c39b83feb5298bb36ddd3b0fd600178aae2db9ff3a6b5c056107a20e79e6ae"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m41.567293599s ago: executing program 9 (id=2612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x6, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r1, &(0x7f00000001c0)='\x00', 0x440800, &(0x7f0000000200)={@align, {0x3, 0x7, 0x1, 0x7}}, 0x10001, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xfffffffd}, {[0x5, 0x1, 0x2, 0x3]}, 0x8000, 0x24, &(0x7f0000000300)=""/36}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x5, 0x5, 0x1, 0x5, 0x8, 0x1, 0x3, 0x9, 0x1bac, 0x56cfb84, 0x728f, 0x2, 0x92, 0x5}}) (rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001500)={{r2, 0xe704, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x6, 0x7767, 0x4, 0x1, 0x8, 0x2a68, 0x3, 0x21, 0x7}}) (async) r3 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r4, 0x29, 0x1, 0x0, &(0x7f0000000580)) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @window={0x3, 0x9, 0x2}], 0x8) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0x48015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502"], 0x0) 9m41.119479688s ago: executing program 9 (id=2615): socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009b, 0x0, 0x1}]}) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) 9m37.560512249s ago: executing program 9 (id=2622): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x17, 0x0, 0x0) 9m37.231541237s ago: executing program 9 (id=2623): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x8000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x8000}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delvlan={0x12, 0x71, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xdf7c7e4100e7b520}, 0x48d4) 9m36.782760484s ago: executing program 9 (id=2625): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) (async) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) (rerun: 64) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) (async, rerun: 32) preadv(r2, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x0) (async, rerun: 32) r4 = fsmount(r3, 0x0, 0x3) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xc996, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)="a8", 0xffffffffffffffc2, 0x10, 0x1}) (async) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async, rerun: 64) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async, rerun: 64) r10 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xd) 9m34.759211379s ago: executing program 9 (id=2631): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000700000008000000c6914ee918355c65516069371a12d0e54fe045192ef731164d578b4b68aa396461660e514ad6c38c42d374607e7529f3d91afae2e359edb7daf0924cb67315bc0206074b10f63e18681b1b4a3b07bcbb42b6d4d5"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000005c0)={0x0, 0x4, 0xffffffa7}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x30314752, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r3, 0xd9d4e000) syz_usb_connect(0x2, 0x52, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x12, 0xa5, 0xf6, 0x8, 0x4dd, 0x9031, 0x56ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x3, 0x2, 0x50, 0x5, [{{0x9, 0x4, 0x92, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x0, 0xa5}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x100000, 0x6, 0x30, 0x57}}]}}]}}]}}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 9m19.574582471s ago: executing program 42 (id=2631): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000700000008000000c6914ee918355c65516069371a12d0e54fe045192ef731164d578b4b68aa396461660e514ad6c38c42d374607e7529f3d91afae2e359edb7daf0924cb67315bc0206074b10f63e18681b1b4a3b07bcbb42b6d4d5"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000005c0)={0x0, 0x4, 0xffffffa7}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x30314752, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r3, 0xd9d4e000) syz_usb_connect(0x2, 0x52, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x12, 0xa5, 0xf6, 0x8, 0x4dd, 0x9031, 0x56ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x3, 0x2, 0x50, 0x5, [{{0x9, 0x4, 0x92, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x0, 0xa5}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x100000, 0x6, 0x30, 0x57}}]}}]}}]}}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 6m48.139596801s ago: executing program 8 (id=3366): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x9, 0x4) (async) poll(0x0, 0x0, 0x8) socketpair(0x1e, 0x1, 0xffffffff, &(0x7f0000000080)={0x0, 0x0}) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x2) (async) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) (async) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x42e6, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r6}}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x43112, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) (async) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 6m47.899019731s ago: executing program 8 (id=3368): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0x47) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r6, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, '\x00', 0xb0, 0x21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, {[@hopopts={0x3a, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @local}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad"}}}}, 0xd8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x6c}}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x40000000004, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000011c0)={0xffffffff, 0x27f, 0x2, {0x1, @win={{0x6, 0x200, 0x200, 0xfffffffa}, 0x9, 0x62e82618, 0x0, 0x4, 0x0, 0x76}}, 0x2}) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) 6m47.663767357s ago: executing program 8 (id=3369): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000200)}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x2b}], 0x4}, 0x40011) 6m47.413096528s ago: executing program 8 (id=3370): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x200, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x9) 6m46.823288115s ago: executing program 8 (id=3372): r0 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="9784bad53fa6b9a7af68dfcb259e224dc6b5b194d40689104f9a270261a201bc21ab84577e19bc8e2bab875c174eb7e151ce5db3ef77778f7a7060ddcf468392e2ec6ae5a1cfeff0b648ac3c74578555327d680ca928e543f9809fd6c5b71d65b2bcc588e68a2300826877d590db55734bf466", 0x73, 0x0) r1 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\\xceD&\x00', 0xfffffffffffffffd) keyctl$reject(0x13, r0, 0xd5db, 0x5, r1) r2 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@hci, &(0x7f0000000240)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00'}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000340)={0x18, r4}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) fstat(r2, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)={r6, 0x71, "846f34688c1a83fc33417172d13ab89d4ad5d39c6eca6b514c0523fb6ba7fc84ebfd253504ea71dea663ec0e275bd6a0e7fff2f12c68e390de386d369a517648e3ea3b3902c07e2ee98e9ea9db7643ce547a76645eb62f7646715f1d21e162f8842f12fe53db45c40d4db7e70b256761cd"}, &(0x7f00000005c0)=0x79) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x80080, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000640)={0x34, 0x1a, 0x14, 0x3, 0x0, 0x4, 0x0, 0x13d, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000680)) close_range(r3, r2, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000940)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f00000009c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000740), r9, 0x1}}, 0x18) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00), 0x103000, 0x0) connect$inet(r2, &(0x7f0000000a40)={0x2, 0x4e24, @private=0xa010101}, 0x10) r11 = syz_open_dev$rtc(&(0x7f0000000a80), 0x1, 0x40) ioctl$RTC_PLL_SET(r11, 0x40207012, &(0x7f0000000ac0)={0x8, 0x7fff, 0x6, 0x5, 0x9, 0x0, 0x5}) ioctl$XFS_IOC_EXCHANGE_RANGE(r10, 0x40285881, &(0x7f0000000b00)={r8, 0x0, 0x5, 0xfffffffffffffffb, 0x2, 0x1}) ioctl$RTC_VL_CLR(r8, 0x7014) r12 = landlock_create_ruleset(&(0x7f0000000b40)={0x801, 0x2, 0x3}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r12, 0x1, &(0x7f0000000b80)={0x4002, r8}, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r12, 0x801c582d, &(0x7f0000000bc0)) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) 6m46.698631559s ago: executing program 8 (id=3374): poll(0x0, 0x0, 0x72) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESHEX=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x20008811) r7 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x8, 0x40000002, 0xb8, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x4, &(0x7f00000004c0)=0xfffffff7, 0x4) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x2, &(0x7f00000000c0)="c5675719f968a08c5a94906bfe1b96f337ec1dd16e5bb719754ee72843eed448221b8834412513980846619d9b", 0x7ff, 0x0, 0x1}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000000180)=@file={0x1}, 0x6e) 6m31.4817882s ago: executing program 43 (id=3374): poll(0x0, 0x0, 0x72) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESHEX=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x20008811) r7 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x8, 0x40000002, 0xb8, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x4, &(0x7f00000004c0)=0xfffffff7, 0x4) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x2, &(0x7f00000000c0)="c5675719f968a08c5a94906bfe1b96f337ec1dd16e5bb719754ee72843eed448221b8834412513980846619d9b", 0x7ff, 0x0, 0x1}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000000180)=@file={0x1}, 0x6e) 3m14.479476463s ago: executing program 2 (id=4150): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) (fail_nth: 1) 3m13.895830828s ago: executing program 2 (id=4153): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x280b03, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7ad) capget(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0xffff, 0x40, 0x5, 0xffff8c83, 0x6, 0x4}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0xbcbc1000) r1 = semget$private(0x0, 0x3, 0xc9) semop(r1, &(0x7f0000000100)=[{0x1, 0xd, 0x1800}, {0x0, 0x9, 0x800}, {0x2, 0xfffb, 0x1000}], 0x3) semctl$IPC_RMID(r1, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)={0x1, "87c9cbf93d95bfa5542b0af18aa44822cc5b846420970346446df7523df5d397919b0ead37"}, 0x2d, 0x800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x3, &(0x7f0000000300)={0x0, 0x11, 0x1, @thr={&(0x7f00000001c0)="2f79744cc5dbb0a8fc969721d3adea528fb582856a913d156f0b0187f4e08d3e24e771828f9999259ac90a2d665e8b1c4d130407666159af0d7b6903ae20e0dd79da97944dfd", &(0x7f0000000240)="7f95392c89055de0f73ec4497dbd3cd11e6c6ebb463282e93d7e8e7507928f6a948bc894cec082673defd1136efd73e7f0b7e2d174b1537566de08f9588680bd9cb20f55136a0f1c3c5508764059f4c621421ffaf86b193c9e0d53b91e5639005baf75015892b2634d6cc4f3fd7de411373bbd13c3a76f9fc87578d9786a072ecf66a9831044d475"}}, &(0x7f0000000340)) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000380)=""/128) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000400)='{)%+\x03-@\'\x00', 0x80, &(0x7f0000000440)={@align=0x5b, {0x36de, 0x8, 0x5, 0x9}}, 0x9, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x6}) write$binfmt_aout(r3, &(0x7f0000000540)={{0xcc, 0x9, 0x3, 0x2fa, 0x393, 0x6, 0x16, 0xfffffff8}, "1046b1e27d85365ef463a2872c75eeb3a859985bb979d055b573af2db73e51b170", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x541) semop(r1, &(0x7f0000000ac0)=[{0x0, 0x2, 0x800}, {0x1, 0x6, 0x1800}, {0x3, 0x8, 0x800}, {0x4, 0xea5f, 0x800}, {0x1, 0x9}], 0x5) bind$inet6(r3, &(0x7f0000000b00)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) mq_notify(r3, &(0x7f0000000d40)={0x0, 0x41, 0x4, @thr={&(0x7f0000000b40)="231bdbd1fe7eaa7b933f40d380b2a8f69a86ca6f9eeca25071f0be1487decfd65d6b6ca7f571be32ce0436a977c9dda1a836aa1bdcc5f250244447ab0fbb0fe4e3c17a4277a68e92d64863b6d4025f6799b0332f4e47c2043c9695f92b19c8c4ddebf6e64dfdeeaf022c8eac00032eb8f41314e7118716f1e800d61134b6fe9982ccdac75736eaa4e38f8b8d2e21af1c0e4fca629430a12c56d3c2af78ef9f8168c0d5667da6d94f71dd3dad1572e1091e15de4c2238b7ac26ef4af15607eeabc60d7ba8bcc00d0ba7eb761ad8519a263db1b768e0603ec9a2", &(0x7f0000000c40)="3199afa66661b8798ac2992e9c359b310c73917442665c2989748355e78063be9f6391bf46109cafefb74012f3cf64b42f956da29d615b4d693695660df08b206f0c0392bc27497d12b0b556809666d23c0a768cd9852c9a29ba1add3dff58d7e842523bc4c4e5c34ac9f1615117e75b359fd777e810cdb5e01c9c88aed2ffd3ecf3d146ebd9d5ab84dade021a5488dba72dc849def52be61f143ab5cf3d985602aecbd824eb076857d212c112f84688f3b23b35f777307c4f83acd9578be823e9e79a8071c4c37a904c6ef2dec77e463e0f42841a6f169590e32c49a14cbfd46d1220c2"}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000d80)={0x0, 0x2, {0x0, 0x2, 0x1000, 0x1, 0xbac}, 0x81}) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000e40)={0x0, 0x30}) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x7) r5 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x3, &(0x7f0000000e80)) semget(0x0, 0x2, 0x202) r6 = syz_open_dev$sndpcmc(&(0x7f0000000ec0), 0x9, 0x480881) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) connect$inet6(r3, &(0x7f0000000f00)={0xa, 0x4e23, 0x7, @private1, 0x2}, 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) capset(&(0x7f0000000f80)={0x20071026, r5}, &(0x7f0000000fc0)={0x9, 0x7, 0x7, 0x7ff, 0x4, 0x4}) 3m13.419916772s ago: executing program 2 (id=4155): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000640)=[@increfs={0x400c6313, 0x2}], 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m10.076965617s ago: executing program 2 (id=4164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x2, "ca33cf"}, 0xb, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000440)}], 0x3, 0xff, 0x8184) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m9.400532818s ago: executing program 2 (id=4167): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000280), 0x2}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/14, 0xe}}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.888231374s ago: executing program 2 (id=4170): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) 3m8.585486141s ago: executing program 44 (id=4170): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) 11.8044842s ago: executing program 7 (id=4749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x9, 0x40, 0x8bac, 0x40}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xd90, 0x0, 0x2a4}]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="070002"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) futex(&(0x7f00000000c0)=0x10000000, 0x2, 0x1, 0x0, 0x0, 0x14fffffd) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fstat(r12, &(0x7f0000000140)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r12}, 0x4) 11.576285479s ago: executing program 7 (id=4752): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r6, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) close(r3) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x111001, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001812000080826388a2310c5cebe25c6fa83b6ff5445297", @ANYBLOB="a9641aa6ea7a4d53e228c6ce96bf3e0f575d33faa250cb0866dc6614963026038d6b38e306e30e8e29f0f28f46758380f6ba75a3e187784c10c2d931f4a3fff5ea47e9e56d505bb4fd9870add7f5b1e7dc80df3533ec40baef09c06e9a53e66e56422788afec761123568019fa021aa98698b80761b0c89d255b4c08e28f0e99f1db9f3b", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) sendmsg$nl_route(r1, 0x0, 0x24040040) r9 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 11.246670344s ago: executing program 6 (id=4755): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xb, 0xfa11, 0xffffffff}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getrusage(0x0, &(0x7f0000000200)) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x2, 0x4, 0x519) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r3 = syz_open_procfs(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x2}}, 0x18) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="11062bbd7000fedbdf251200000008000900050000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000800180000000800080016000000080008000000000044000180080003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="00000000000000000000e2db7e030180ef89512982198aff61556987f409eaa57d5ac2a8f7df0669f8b981e1c14c2b18b67a5ac252207d92898fde3f55e60bcd372bb836901c79ce169b34ce541240b2890730c82763f6550aaefdb6fb67602296ff0e1aca9c73e27a91d7f7524efb4fe9995289ccd10297253b1a73403058", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030001000000080007000000000008000700040000000800060007000000"], 0xc8}}, 0x8800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r6 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x5) fchdir(r7) r8 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x176) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) lseek(r3, 0x8001, 0x1) 9.684615579s ago: executing program 6 (id=4757): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x20, 0x0, 0xb, r0}, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4d1004000000000020001280080001006774700014180280050ff4d00100000008000300ffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$sierra_net(0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) read$FUSE(r2, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffb2) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async) madvise(&(0x7f00007d3000/0x1000)=nil, 0x1000, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) 8.491732651s ago: executing program 7 (id=4762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r8, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000140), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r7, 0x1e67e000) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x0, @local}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000400)={r5, 0x9f44}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r9, 0x4}, 0x8) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r10, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newtaction={0x2cf0, 0x30, 0x4, 0x70bd2a, 0x5, {}, [{0x1844, 0x1, [@m_pedit={0x10fc, 0x10, 0x0, 0x0, {{0xa}, {0x1020, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x8, 0x0, 0x20000000, 0xf, 0x2}, 0xf, 0x9, [{0xfffffffc, 0x35e1, 0x9, 0x6, 0x8001, 0x5}, {0x1, 0xf39c, 0x3ff, 0x7, 0x5, 0x6}, {0x1, 0x0, 0xffffffff, 0xc, 0x7, 0x1}, {0x8, 0x3, 0x3057, 0x3, 0x4, 0x5}, {0x56e5, 0x8001, 0x8, 0x544, 0xffffe000, 0x9111}, {0x4, 0x0, 0x6, 0x0, 0x57a, 0x401}, {0x33, 0x8, 0x2, 0x1, 0xbde2, 0x3ff}]}, [{0x2, 0x6, 0x4, 0x3, 0x80000000}, {0x2, 0xfffffff3, 0xd, 0x9, 0x63, 0x10000000}, {0x10, 0x9cd633a8, 0x8, 0x7, 0x8, 0xffff}, {0x7, 0x8, 0x0, 0x401, 0x9, 0x7}, {0x3, 0xfff, 0x9, 0x3, 0x1, 0x6}, {0x81, 0x3, 0x6, 0x0, 0x8, 0x4}, {0x6, 0x8, 0x8, 0x2, 0x8, 0x9}, {0x9, 0x5, 0x2, 0x8, 0x2, 0xfffffffd}, {0xa00, 0xfffffff9, 0x6, 0x0, 0x10000, 0x7}, {0x9, 0x0, 0xa509, 0x80, 0x3, 0xd}, {0x1000, 0x10, 0x29, 0x8b0b6e00, 0x8341, 0x6}, {0x64b91676, 0x8, 0xfffffff7, 0x200, 0x8, 0x400000}, {0xfffffffc, 0x7, 0x7fff, 0xb, 0x2, 0x4}, {0x7, 0x74, 0x0, 0xffffffff, 0x1, 0x5}, {0x7, 0x4, 0x1, 0x7, 0x7, 0x8}, {0x1, 0x7fffffff, 0x6, 0x40000000, 0x200, 0x1}, {0x9, 0x5, 0x1, 0x331483de, 0x9a, 0x6}, {0x2, 0xfffffffe, 0xd79, 0xc, 0x6, 0xa4}, {0x7, 0xffff0546, 0x9, 0x7, 0x80000000, 0x5}, {0x3, 0x4, 0x6, 0x6, 0x2, 0xc40d}, {0x9, 0x1, 0x8378, 0xfffffffc, 0x28, 0xfffffffb}, {0x10001, 0xb3b, 0xb6, 0x9, 0x7}, {0x7, 0x7, 0x1, 0x4, 0x3, 0x3805}, {0x8, 0x9, 0x2, 0x1, 0xb003, 0xb}, {0x8, 0xfffffffe, 0xc3, 0x3, 0x2, 0x4}, {0x10, 0xc0, 0x1000, 0x8, 0x2481, 0x8}, {0x8, 0x1, 0x0, 0x1, 0x5}, {0x400, 0x10, 0x7, 0x7, 0x4}, {0x80, 0x9, 0x40ce, 0x8, 0xfc7}, {0x7, 0x1000, 0x4, 0x0, 0x4}, {0x83a9, 0x7, 0x6, 0xe, 0xb, 0x10001}, {0x1, 0x4, 0x5, 0x8, 0x1, 0x58f9}, {0x0, 0x1, 0x81, 0x5, 0x1ff, 0xc}, {0xa, 0xfffffff7, 0x5, 0x7, 0x401, 0x80000000}, {0x0, 0x67, 0x8, 0xa, 0xdb, 0xe2a}, {0xa59b, 0x3, 0x0, 0x3c8, 0xd, 0x3549}, {0xe8e0, 0x7, 0x4, 0xff, 0x7f, 0x2}, {0x4, 0xb, 0x100, 0x7fffffff, 0x9, 0x4}, {0x8, 0xffffffff, 0x6, 0xe, 0x8, 0x8}, {0x8a, 0xb7a4, 0x7, 0x1, 0x9, 0x9}, {0x6, 0x8001, 0x100, 0x72a9, 0x2, 0x4}, {0x2, 0x0, 0x3, 0x80000001, 0x7f, 0x4}, {0x0, 0x6, 0x7, 0xf2d8, 0x9, 0x644}, {0x6, 0x81, 0x7fff, 0x6, 0x400, 0x4}, {0xfffffff2, 0x1, 0x7, 0xcf, 0x3, 0x3}, {0x1, 0x0, 0x3b, 0x100, 0x3, 0x3}, {0xfffffffa, 0x2, 0x84, 0x7, 0x6, 0x4}, {0x2, 0x100, 0x2, 0xe2, 0x2000000, 0x4}, {0x8, 0x9, 0x1, 0x2, 0x8, 0x3}, {0x8, 0x800, 0xffffffff, 0x7fff, 0x9044, 0xb3ea}, {0x2, 0x4, 0x70, 0xfffffff8, 0xbbb, 0x200}, {0x81, 0x7ff, 0xab63, 0xd2, 0x8001, 0x1}, {0xd, 0x1, 0xd42, 0x4, 0x2, 0x1}, {0x8000, 0x4, 0x3, 0x27, 0x7, 0xb6}, {0x48, 0x4, 0x10001, 0x2, 0x81, 0x2}, {0x3, 0x8001, 0x5, 0xf9, 0xb51d, 0x75}, {0x4, 0x6, 0x5, 0x3, 0x5, 0x7fffffff}, {0x4, 0x8001, 0x4, 0x80, 0x0, 0x6}, {0x7fff, 0x4, 0x3, 0x6, 0x1}, {0xffffffff, 0x20000000, 0xd, 0x8d03, 0x400, 0x8}, {0xf7a, 0xd82e, 0xb6, 0x72d, 0x81}, {0x8f0, 0x4, 0x9, 0x8000, 0x1, 0x10000}, {0x8, 0x401, 0x0, 0x10001, 0x9ca6, 0x8}, {0x1, 0x9, 0x4, 0x7, 0xfa}, {0x39632d1, 0xffffffff, 0x5, 0x2, 0x7a7, 0x1ff}, {0x1, 0x7, 0x5, 0x3, 0x1bd, 0x7}, {0x4, 0x200, 0x3, 0x9, 0x5, 0x14000000}, {0x5, 0x7, 0x7fb3, 0x7fffffff, 0x2}, {0xffffffff, 0x2, 0x3, 0xe, 0x3, 0x4}, {0x5, 0x7cec, 0x9, 0x6, 0x7fff, 0x4}, {0x9, 0x7, 0x9, 0x7fffffff, 0x7, 0x3}, {0x1, 0x788a, 0x8000, 0x5, 0x10001, 0x7}, {0x80, 0x3, 0xd958, 0x3, 0x0, 0xd348}, {0x2dc5, 0x7, 0x8, 0xff, 0x8, 0x6}, {0x80000001, 0x2, 0x8, 0x1c00000, 0x894e0103, 0x6}, {0x100, 0x0, 0x40, 0x9ab, 0x5, 0x8001}, {0x1, 0x7, 0x46, 0xe8e, 0x5, 0x80000001}, {0x3, 0x81, 0x0, 0x4, 0x8000, 0xffffffff}, {0x4, 0x7688, 0x0, 0x26, 0x3ff, 0xa}, {0xed, 0x3, 0x7, 0x1b8, 0x9, 0x6}, {0x4, 0x44, 0x2, 0x3ff, 0x298000, 0xffffffff}, {0x800, 0xe8, 0x0, 0x62c, 0x6, 0x8}, {0x9, 0x7ff, 0xff, 0x9, 0x6, 0x6}, {0x4, 0x9, 0x4, 0x5, 0x1, 0x5}, {0x8, 0x4, 0x80000002, 0xeb0f, 0x6, 0x7f}, {0xff, 0x10000, 0x5, 0xf5c1, 0x43c, 0xe49}, {0x100, 0x30c2, 0x4, 0xcbe, 0x1ff, 0x4518}, {0x2, 0x0, 0x2, 0x9, 0x4, 0x4}, {0x6, 0x400, 0x9, 0x1, 0xfffffff7, 0x4fb6ea40}, {0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffc}, {0x0, 0x83, 0xf, 0x10000, 0x7fff, 0x2}, {0x3ff, 0x4, 0xfffffffc, 0xc9, 0x3, 0x81}, {0x4f9, 0x1ff, 0xfffffffd, 0x2, 0xa7, 0x80}, {0x1, 0x8, 0x80, 0x6826, 0x8, 0xfffffffb}, {0xfffffff2, 0x9, 0x4, 0xc9, 0x7d, 0x9}, {0xb3, 0x7, 0xb, 0x4056, 0x958, 0xffffffff}, {0x7, 0x2, 0x6, 0xb, 0x5, 0x6}, {0x7fff, 0x5, 0x80000001, 0x3, 0xffffffff, 0x7ff}, {0x5b20, 0x7, 0x8000, 0x6, 0xd23afb3}, {0x9, 0x5, 0xd, 0x6, 0xb7, 0x7}, {0x7, 0x80000001, 0xfffeffff, 0x6, 0x51, 0x7}, {0x44, 0x3, 0x800000, 0x7, 0x8000}, {0xa, 0x4, 0x0, 0xfffffffd, 0x101, 0xcc06}, {0x8, 0xd12, 0x5, 0x800, 0x8, 0x10001}, {0xe, 0xf, 0x4, 0x2, 0xfff, 0x8}, {0x6, 0x2, 0x287d, 0x6, 0xa292, 0x6}, {0x100, 0x8, 0xfae, 0x8, 0x1, 0x5}, {0xfffff2c1, 0x2, 0x5762, 0x3, 0x10, 0x1}, {0x10, 0xfffffffd, 0x1000, 0x1ea1, 0x80000001, 0x5}, {0x3, 0x40, 0x6, 0x1c0000, 0x5, 0xffff8001}, {0x4, 0x2, 0x5, 0x100, 0x5}, {0x2, 0xf, 0x6, 0xffffffff, 0xfffffffd, 0x3}, {0xdee72ad2, 0x1, 0x0, 0x5, 0x4, 0x7ff}, {0xdd, 0x8, 0xfffffff9, 0x800, 0x0, 0x81}, {0x1000, 0xa, 0x4, 0x0, 0x1, 0x9}, {0x4, 0x7, 0x101, 0x6, 0x80, 0xba}, {0x3, 0xd5, 0x7, 0xfffff001, 0x400, 0x7fff}, {0x5, 0x7fffffff, 0xd8d, 0x80, 0xfffffff7, 0x8}, {0x0, 0x0, 0x9, 0xa, 0xd, 0x401}, {0xad, 0x7a, 0xe9, 0x80000000, 0xc, 0x7ff}, {0x2, 0x13b5, 0x4, 0x7, 0x200, 0x8}, {0x6, 0xfffffffd, 0x4, 0x3, 0x4, 0x4}, {0xc, 0xdbc5, 0xcae0, 0x4, 0xfffffffa, 0x4}, {0x1, 0x4, 0x3, 0x0, 0x3, 0x6}, {0xb, 0xb, 0x63, 0xfffffffb, 0x5, 0x1ff}, {0x2, 0x7, 0x3, 0x0, 0x7, 0x8}, {0x6, 0x7, 0x4, 0x0, 0x57b6, 0x9}, {0x7, 0xce8, 0x0, 0x26, 0xc782}], [{0x4}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x6, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0xfb28ef59129c9f30, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x1}, {0x3ca32ad5888c7ccf}, {0x1}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2ed2c6496e9e8ae6, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x154, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xc9373117f186b583}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0xb3, 0x6, "e02de1b230e4a51077f9256c0756b113b13c908a2f9b3b657aa049c609dea34b7025d14e3f1d750e572801f6bcc1b9e18fdb6622a0a0d81dc46a8e57db29587666b148cce076932b5fd73e77aa5ab88a8af91cfcd04db87d70e95f77fc14c66aedbed7a2ab2bbe09919d00363f82d8cbddfaff5ce15d351f64c0e6489a98ec511f3df46d3a6ab1ab18d925ed9f9932148181023aa5d021f5c95c4ce4bbdf7166f31f637f79b212f5acc3169c4c8630"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x298, 0xa, 0x0, 0x0, {{0xa}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa22b75484443edca}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x62f5781c3174564}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb0, 0x6, "e5590d1039544ddcec88b0c62b923e2524ecb254f31d82eae887b5cad6610fbc2c9f79440d0ace43cdecb65d7103dfd7aff96b83b83345ff0d284080b39ea892d98517a4c0e939e7939a6e6f8421cfdd8b8583734be4ebed7511da90e81b531825b0ea6323a67213bf963e7a1221c26ece8a2115de1c248d226b06e1b2ab6e81eaea097abc41aae6adcc5205870abe4189744cf83c5aa2c5b0282edadfb66925598bdad4fedeb3eeddb97f3a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x164, 0x19, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7f15c4a93035"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xf2, 0x6, "fdd26db852c72599d6a559efb699c9df4024aef18f520888b5bd39d638398ce154653ec95f9cee2803696aa24578d65b97016378c25b0c99c02808c26332374704f5d994a608a18ddc0fbd7c7102b1112b68c159277e9c723d36448bb59a7d5248a26e90c7718f2f18251071a9027d374d63e883dd9c75d2c9a248e87d89b706d21d5a91670f89be1d24ffccff70f43acee48a1b28402b9cd4c0a4c2431bccb4542b4e6271ea09faac0fa55d71c3cba23bf2027e3a8ae2c12efa9023276fb0af5f433aaa9498f91fea848ff710542995b259e8140213f4f768d65843aa96cad8cfa38cef6d292ba478f60bd6d2aa"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xc8, 0x1a, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x18, 0xff, 0x9}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x82, 0x6, "4c6b4ec73054c7759e22331c1e047d4df3110973262fdfb476ef3495bf67c85b8c96e15681d58ee88bb2f78785bc03244094a163dd0e39b3920a63a9530659f9b4c5af101fa490b0b92ca7453c47a27a969bf45ecfb51770305a0a1c4e14c4ed091403d70c16b5b14adab79111eea82b7f83029aa7c63adebe207b9a3a63"}, {0xc, 0x7, {0xa8e4b416ccd9feb}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x13c, 0xa, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xae3e, 0x3, 0x1, 0x9}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x8, 0x13644}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0x4, 0x7ff}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x2, 0x10, 0x2}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8000, 0x20000000, 0x8, 0x8}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xff, 0x20000000, 0x8, 0xf6}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xffffffff, 0x8, 0x7}, 0x51}}]}, {0x49, 0x6, "828f52a066272cfc72ac591ccd1960a9d2db41336ff59cdd5398de567621271cd8adc326fe31a2bf50edb2a4a87632e10c626b7c9030a0e9deba5180d1e8bd6743603a9cdc"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x50, 0x1a, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x1d, 0x6, "277e66625432c596282197b8824d8819aa195d7e918ad71b6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xf4, 0x16, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfffffff9, 0xfffffffffffffffe, 0x5, 0x932}, 0x709d9a2f29e9d386, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x101, 0x10000000, 0xc, 0x8}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa105, 0x3, 0x2, 0x1ff, 0xc2b}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xd, 0x20000000, 0xfffffff9, 0x3}, 0x4, r2}}]}, {0x48, 0x6, "4209e50453996f69a09773b61f5013cd5b27b5a677b122ac8b23ef7138d4afaf9c3cc014a7ca638d2fd0d41c914e01d451beb24e65efee3bc61d2377c4fa847cb24b561f"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1498, 0x1, [@m_bpf={0xac, 0xd, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x6, 0xc, 0x8, 0x1}, {0xa7, 0x6, 0xff, 0x1}, {0x1, 0x10, 0x4, 0x2a1}, {0x1, 0x5, 0xad}, {0x6, 0x2, 0x7f, 0x8}, {0x8, 0x7, 0x0, 0x2}, {0xcb37, 0xbe, 0xc, 0x6e735c45}, {0x1b6d, 0x3, 0x3, 0xd}, {0x2, 0x8, 0x9, 0x8001}]}]}, {0x2d, 0x6, "06e7934a07024aacfe87cf5e879f40232608d4d956ee1ec095ab18f1d7673cbd11ee8e7d8067a4a6e2"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x120, 0x19, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x7, 0x8, 0x7}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0xba}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0xaf, 0x6, "86170bc81a26bcd478f77f1a345254609a55501bbe72f19ebc174daed85c1fa86172f3817fc7e54d5a636eb6707d40fcbc27b493ce53d7d69680a7ec1ee1bdfb296db32981c17ff899a7af090704d2bfb205d91d4434be4bc5f6388ad428b72f38a3dfafcca5489e4c97796e526d054ffb1cbf67f5024ace4b45539102db68cdf040d796dc2825ec234a45753c22c91383f25fac8326632c3003e166f712cc35d44cbd60b265a3794d1938"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0xec, 0x1f, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}]}, {0x6a, 0x6, "795d3db4132295cb70463f8cb34ff821bf0e81b7287acafe25840d738f7cbc2d4dfdb5ac1666d19c5c29f0a6fa7556abd8c6220d8c5559b1f903cd5d4704890f6b412a645429c8a751c6fe168d5d4e314ccae6a08407f5fedb47130fdcd8b0580466e46961cc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xdbc, 0x5, 0x0, 0x0, {{0xb}, {0xcac, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1000, 0x81, 0x200, 0x8, 0x2, 0x5, 0xfffffff5, 0xff, 0xe6d800, 0x95e, 0x4, 0x10001, 0x58be5924, 0x4, 0x4, 0x1, 0x36, 0x2, 0x9, 0xf, 0xf8bb, 0xfffffffb, 0x5, 0x8, 0x4, 0xd, 0x5, 0x0, 0x7ff, 0x306, 0x2, 0x6, 0x4, 0x8, 0x401, 0x0, 0x0, 0x5, 0x2, 0x7f, 0x8001, 0x8, 0x10, 0xffffffff, 0x4, 0x6, 0xa7, 0x15b, 0xffffffff, 0x4, 0x2, 0x1, 0x3, 0x6, 0x3, 0xfffffe21, 0xfffffe00, 0x1, 0x0, 0xa26, 0xfffffff7, 0x1, 0x57, 0x5, 0x0, 0x0, 0x7, 0x1, 0x3, 0x5, 0x3ff, 0x400000, 0x9, 0xf359, 0x10000, 0x1, 0x1ff, 0x67d7, 0x1, 0x0, 0x1, 0x3, 0x3, 0x8, 0x6, 0xc7, 0xfde, 0x56ee, 0x81, 0x0, 0x1, 0x388dd15a, 0x3, 0x1, 0x7, 0x7, 0x9, 0x3, 0x2dc1, 0x4, 0x7, 0xfffffffa, 0x1, 0x18, 0x5, 0x3416, 0x1a2, 0xffffff17, 0x100, 0x6, 0x0, 0x1, 0x0, 0x8, 0x8, 0xff, 0xd, 0x2, 0xf15a, 0xb, 0x2, 0x4, 0x191d, 0x200, 0xc, 0x9, 0x0, 0x5456, 0x2, 0xa3, 0x7, 0x6, 0x7, 0x6, 0xfffffffa, 0x200, 0x11ee, 0x0, 0x4, 0xe, 0x200, 0x3a2, 0x1, 0x200, 0x1, 0x6, 0x7, 0x0, 0x7, 0x1, 0x3, 0x8, 0xffffff7f, 0x1, 0x5, 0x7, 0xfffffff7, 0x10000, 0xf, 0xfffffffa, 0x7f, 0xea, 0x7, 0xd, 0xffff8000, 0x0, 0x6, 0x0, 0x6fc90000, 0x7fff, 0xfffffffe, 0x0, 0x7, 0x7, 0x3, 0x8, 0x2c, 0x3, 0x6, 0x6, 0xfffffffa, 0x4, 0xfe1, 0x7ff, 0xffffffff, 0x29fc, 0x8, 0x5, 0x64cd, 0x1, 0xc0, 0x6, 0x400, 0x7fffffff, 0x2, 0x200, 0x6c, 0x7e150ed8, 0x7, 0x9, 0x0, 0x1ff, 0x9, 0x157, 0x8, 0x1a40, 0xa0000, 0x3, 0x9, 0x1, 0x0, 0x2, 0x6, 0x85c, 0x0, 0x4, 0x9, 0x8, 0x5, 0x9, 0x1000000, 0x7, 0xfffffec9, 0x20, 0x2, 0x80, 0x3, 0x0, 0x1, 0x8, 0x2515, 0x4, 0x1000, 0x2, 0x401, 0x5, 0x79, 0x1, 0x10000, 0x6, 0x14d, 0x7fff, 0x200, 0x8, 0x10, 0x3e8, 0xd4, 0x7, 0x0, 0xf, 0x0, 0x5, 0x8, 0x4, 0x639]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7d, 0x8, 0xc, 0x6, 0x4, {0x5, 0x2, 0x5, 0x5af8, 0x8, 0x5}, {0x8, 0x9e14721a28fd5bc3, 0x3, 0x278a, 0xf4fd, 0x5}, 0x9, 0x6229, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x300000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x2, 0x0, 0x2, 0x9, 0x1, 0x3, 0x7ff, 0x2, 0x7fffffff, 0xffff, 0x7, 0x3, 0x7, 0x38bead2b, 0xfffffffa, 0xfffffff7, 0x7, 0x0, 0x80000001, 0xae6c, 0x3, 0x10001, 0x726, 0x5, 0x7, 0xa, 0x1, 0x4, 0x5, 0x101ba295, 0x4, 0x3ff, 0x2, 0x73, 0x6, 0x8, 0x401, 0x884, 0x0, 0x46a, 0x1, 0x8, 0x6, 0x542, 0x1, 0x6, 0x7, 0x3, 0x12cb, 0x0, 0x77, 0xfffffc01, 0x7, 0x40, 0x8, 0x3, 0x2, 0xe9ad, 0x5, 0x1, 0x2, 0xd823, 0x7, 0xfffffff9, 0x0, 0x8, 0xbcff, 0x401, 0x200, 0xb0d, 0x3, 0x59, 0xffffffff, 0x0, 0xc, 0x10000, 0x8, 0x1, 0x0, 0x5, 0x4, 0x4, 0x7, 0x5, 0x7, 0x8001, 0xfff, 0x5, 0x7, 0x1000, 0x18cc, 0xa, 0x800, 0x3, 0x2, 0x4, 0x80000001, 0xa, 0x7, 0xff9, 0x9, 0xfff, 0x2f, 0x81, 0xb, 0xffffff00, 0xffffffff, 0x1ff, 0xfffffffb, 0x0, 0x200, 0xfffff08a, 0x7, 0x6, 0x9, 0x1, 0x1, 0x9, 0xfffffff7, 0x8, 0x6, 0x4, 0x3, 0x3, 0x1, 0x0, 0x6, 0x3b8, 0x401, 0xffff8001, 0x1, 0x4, 0x40, 0x2, 0x0, 0x401, 0xb, 0x3, 0x7, 0x2, 0xb2b2, 0x7, 0x5, 0xbdd6, 0x80000000, 0xf8, 0x0, 0x0, 0xb10, 0x8, 0x1, 0x8001, 0xff, 0xad9, 0x9, 0x3, 0x1, 0x6, 0xe86, 0xc0672b0, 0x5, 0x8, 0x0, 0x3, 0x100, 0x3, 0xffff, 0x7, 0x9, 0x10001, 0xcfe7, 0x7, 0x6, 0xa4c7, 0x80000001, 0x10000, 0x200, 0x6, 0x309f, 0x26, 0xfffffffe, 0x5, 0x9, 0xfffffffe, 0x3, 0x3, 0x2, 0xf9458d80, 0x6, 0x6, 0x1, 0x38, 0x2, 0x3, 0x1, 0x6, 0x5, 0xffffffff, 0x3, 0x10000, 0x8, 0x7, 0x7f, 0x3, 0x3, 0x7, 0x9, 0xd4, 0x734, 0x9, 0x7, 0x81, 0x0, 0x1, 0xeb, 0xffffffff, 0x2, 0x6, 0x1, 0x5e, 0x9, 0x1, 0xa, 0xfb2a, 0x4, 0x7635, 0x1, 0x2, 0x4, 0x0, 0x8, 0xfffffffc, 0x3, 0x39f991f, 0x83f2, 0xffffffff, 0x0, 0xfffffffe, 0x3, 0x5, 0xfffffff2, 0xd7c3, 0xff, 0x8, 0x8, 0x90c1, 0x80000000, 0x5, 0x4, 0x6, 0x1, 0x34, 0x0, 0x2f5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xf931, 0x10001, 0x9, {0x81, 0x0, 0x0, 0xb9, 0x6, 0x3}, {0x2c, 0x0, 0x7, 0xdea, 0x4ce, 0x1}, 0x8, 0x6, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x2, 0xfffffff9, 0x5, 0x7, 0xd, 0xc0000000, 0x7, 0xf, 0x0, 0x9, 0x7f, 0xe6a, 0x101, 0x10, 0x7f, 0x200, 0x81, 0x2, 0xb5, 0x5, 0x1, 0x7, 0x1, 0x7, 0xffffffff, 0x5, 0x5, 0x0, 0x200, 0x5, 0x8, 0x5, 0xffffffff, 0xfffffffa, 0x3, 0x3, 0x91a, 0x6, 0x6, 0xff, 0x1, 0x8, 0x5, 0x5, 0x9, 0x0, 0x6, 0xffffffff, 0x6, 0x80000001, 0xc95, 0x6, 0x5c3, 0x80, 0x7, 0x6, 0x0, 0x80000000, 0x81, 0x100, 0x0, 0x7, 0x8, 0x0, 0x6, 0x400, 0x1, 0x1, 0xf8aa, 0x1, 0x6, 0x800, 0x0, 0x6, 0x6, 0x9, 0x4, 0xc, 0x1, 0x10001, 0x78, 0x4, 0x800, 0x1, 0x4, 0x4, 0xfffffff9, 0x4, 0x9, 0x400, 0x8, 0x60, 0x4, 0x5, 0x6, 0x80000000, 0x1ff, 0x4, 0x4, 0x0, 0x19331f1b, 0x24, 0xffff0, 0x6, 0x4, 0x5, 0x7, 0x0, 0x5, 0x9, 0x1, 0x5, 0xa0, 0x7, 0x200, 0xc72, 0xa, 0x4, 0xffff8069, 0x10, 0x8, 0x3, 0xe1, 0xe9, 0x864a, 0x7, 0x5, 0x5, 0x4, 0x3, 0x5, 0x9, 0xffff, 0x4, 0x5, 0xf, 0x4, 0x3, 0x8, 0x101, 0x4, 0x7ff, 0x2, 0x8, 0x0, 0x400, 0xfffffff8, 0x6, 0x5, 0x1, 0xfffffff7, 0x4, 0xa65f, 0x70e6, 0x2, 0x3, 0xc126, 0x0, 0x5, 0x0, 0x9, 0x4, 0x7, 0x8, 0x9, 0xb25f686, 0x1fdc, 0xa, 0x7, 0x2, 0x5, 0xffffff30, 0x4, 0x3, 0x401, 0x9c1, 0xb, 0x8, 0x3, 0x401, 0x4, 0x200, 0x0, 0x7, 0x4, 0xc270, 0x0, 0x7, 0x9, 0x7, 0x42a, 0x101, 0x6, 0x1, 0x8001, 0x9, 0x8, 0x5, 0xe2, 0x7f, 0x5, 0xa, 0x7, 0xec, 0x2, 0xfffffff9, 0xe, 0x0, 0x2, 0x4, 0x77, 0x5, 0x3ff, 0x3, 0x40, 0x10001, 0x2, 0x2, 0x7, 0x8, 0xc, 0x4, 0x80000001, 0x6, 0x5, 0x3ff, 0x40, 0x800, 0x9, 0x5, 0x6, 0x5, 0xfad, 0x6, 0x10, 0xcc, 0x34300000, 0x7, 0x2, 0x7f, 0x6, 0x2, 0x3, 0xffffffff, 0x6, 0x3, 0x1000, 0x2, 0x1, 0x200, 0x8, 0x7f, 0x4, 0x7ff, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0xe5, 0x6, "fd2eb66f7949806343cbe589349d680b9575e41925c340ceef2113a764480ed3e231df79ab35ac961bea9ecadf00fff14dc95e87b1296083118ead5fb545d56acd3df32d09d1c9ee06d1eaa6f62ad4fa54aa8e3f82e6e79e5f3f06a4ee6cb50826b9dfbaa7fc9f459617ce15be206ecdbeadeeee086bd7bfe354e2c280ff23035aebe6f8e6b69f0b9a1a0cb06d3434a8319e464a3aa54624484f174fd58e6a6dc7e49c18d3b584015af515ad33d330e233eb5a205f63d24f29b5940802514d83f2332cb36217aa5f96a312c9b37e9946b65c862b25f12be43dce0986fa97275f63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x120, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0xf6, 0x6, "da5cc3fc30e5d083955c6b6d9f36f68a67dba249f2fc2daaf89b48cdca45638dad7016000a55de1e30b1e83c1a2c3e13a335730af4aa302e46b26693a1a2caab38cba460bee9cc7694da8227ab48cab47ed98c054387944db2601883b33e2f81ed922dfb33feba33c7a02debe1316a8b2041fbff30ee0f7ceef1c4d863a1b873e539761384971a97df08535fafe7b7677a610e5c6f0a4610ab36aab333352a37edbe2b8e9be3f3d3fc9ec1634f0fd7d2231d2e44acf4a199e8a1246023181a8ba9b0db330dd0982633bf1dd3659719d0a07466a0ece866728c51ba857e6295c115390332d8988901e0ea4971c341a62a8cbb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x150, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffff963}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x9, 0x6, 0x0, 0xc10}}]}, {0xf9, 0x6, "33cee69c571b5117cc5c7218c7e85fe774660df8e80dae9f9dddf960ed911f48fd5d41e4f101b0fd6fdfca40651666cd6ee13c85c0bbb2de348c5e6a100e71672f265919c5eff2beefed5c56e616168328ea00b7a7d5f0494b0440f60d2df84d48d2e1db68768047a4f199522341319f98da9a7f9e402ffa3e25cbf9dee58465ab17e261d905421cb4ae69a62fded368d0857f4541d6bbdf737843f5e96ae665c4f3a96144bd989b79d5ae2dde0977037c06203d88f331e7cf465694597cebedc7b9ad8fa322aaa6f84e9bab3df6ee011bd01ae3f8c84b6fd141e5421e7fb3ce9e19d9a0df71905ff55be62f7bd285d8d21601cbbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0xc4, 0xb, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x86, 0x6, "82ffb3700b10fd9c28eeec535d54a8e0c4290f70cc5a34a5ba339ced9a3b89a36c36e2ec599e17759d61cf2b882f79ccf1d2240960f7077c9a82085457b1b23012db4e23711fae14c98c4377a3d1b2b20a056ff2691b7f43f7eab538b52ad41c28cab58b4ddeaee030b5f0f50af10aab6501207705ca5997f04823a80ca8724bf9cc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xec, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x2, 0xde, 0x25}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd1082}]}, {0x8a, 0x6, "bdbcc0d346d42be87a2498aac10d4365db2fce60bb64e282bf9c7787665a81565b09782d709e45b721b62bcaddfcc09a5ebf6600291a41114eed056798fbbc331e42d3ce04256e856f7dca250c722ddf6443525d5448618b84b952c6917c7078f1b5f0e001ea9a8947f555d85d111c1a13e05a9842d85cbcdaa7f7a51730720fe0cb0f75c8af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2cf0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f24, 0x7, 0x81, 0x9, 0x8b, 0x14, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x4000010) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5fd0002030109021b0001000000000904d60001b5e145000905"], 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) 8.474493191s ago: executing program 6 (id=4763): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005"], 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xe8}) 5.248084717s ago: executing program 6 (id=4768): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x80000000, 0x0, 0x2, 0x4d, 0xffffa52e, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x6, 0x7, 0x7, 0x1, 0x4, 0x81, 0xd1a, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x2, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x6, 0xb728, 0x960, 0x8, 0x5, 0x50, 0x6, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0x1000, 0x1, 0x3, 0x2, 0xffff, 0x3, 0x5, 0x3, 0x6, 0x4e, 0x1, 0x9, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8001, 0xfff, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x8, 0x1, 0x0, 0xc, 0x40, 0x6, 0x8, 0x3, 0x8, 0x101, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6]}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 5.128006249s ago: executing program 7 (id=4770): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x200000000000011, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @random="518c66db9de1"}, 0x14) (async) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async, rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610fac6f39d87f0000020800450000240000e0"], 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r8) (async) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRESDEC, @ANYRES8, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40040a0}, 0x8094) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.596045216s ago: executing program 1 (id=4773): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {0x0}, {&(0x7f0000000200)="196c1bbe3c41ecf05b54c31f1e6a2551420ab3013dd702ec495c0bfbd8ac8ef469e7572b2d095b058a7f507671866fab41ac2a16307564896c746f56e71eaf61a10ea7fdccbf0a1210224a8aeaea5aaa0c648b2d50c8bf7ac2e35c7729b92558cc004dc3ed47f68684744d37e730203bf8761b854ae199f8b4eb417bb82cd1275364f09409bf808c915e2a3134560a9392d12aae346afde7bb45229beecc4043208a81f0845ca339ffcb92f03d4f94f5517ae44fd61986970ff2e5235c1e5054481b3925ef17b88087ff76", 0xcb}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x2b}], 0x4}, 0x40011) 4.543937471s ago: executing program 1 (id=4774): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0x0) socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f00000000c0)) r1 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x100}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffff0554}}, {@fowner_gt={'fowner>', 0xee00}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000340)="fd396efb56f2399c0043db2d1ef36f559ede647e95507c338e23e904bb43110c3393453e03e8f884aa4847660b13840da4f868b70c5d8c5e997d69758686bdc74c70253c83ae9df3b8201c33d5d01b1668500768b479eb1d43c924c78c69327fd21b631f0e643be8478a94404adb1c84c1a651a97c5cb9b8618f1f9c6d9fd2dafd1df59fa742a34941d6d9ea24096fb30baaddf56ea4ba461c3ee60449f957dfe0348a19619a13686ae1c6769353738a02f9012665c2822178ff7ae5a4c06f04c2cbefe4") fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='wlan1\x00', &(0x7f0000000140)='./file0\x00', r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x204080, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x7, 0x9, 0xc462, 0x0, 0x7}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010032bc7000fbdbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="10005080040005000500020000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x44000) 4.224903113s ago: executing program 4 (id=4775): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c0100000002010300000000000000000700000208010a80440002801400018008000100e000000108000200ac1414aa0c00028005000100880000000c0002dfb4e74d00210000000c00028005000100000000000600034000010000740002800c000280050001003a0000002c00018014000300fe8000000000000000000000000000aa140000000000000000bb060003400004000014000180080001000000000008000200ac1e00011400018008000100ac1414bb08000200ac14142606000340000200000800014000000000440002800c000280050001001100000014084642e3b8ac2a2e4fe600018008000100ffffffff08000200000000000c000280050001008800000006000340000000000c00028005000100110000000e0006007369702d3230670f194e000008000840000000021800018006000340000100000c00"/332], 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @private}, &(0x7f0000000640)=0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1440000002f9d80c050d338607fc95", @ANYRES16], 0x14}}, 0xc0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) (async) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000880)={0x5, 0xfbe, 0x1, 0x0, 0x0, [{}]}) mbind(&(0x7f0000524000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x40000000e, 0xa, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 4.091611729s ago: executing program 4 (id=4776): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="1b1b"]) 3.917307194s ago: executing program 1 (id=4777): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="060000001a00010000808000000020001000000000000000000000007b96ba303c45708e77e7d8dc3f3c158926df9c0234c5b6f6bf7e0a188115af9c982f72eba771117d72f1f70568551b491380c92ad7e88037a56330c394046150a49447e7a4e608394c9fd977373eba0e9e2cfa4fde7483e97e49600d2c2b140336f9abfc1f68588ec2054ec5c703"], 0x1c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c', 0xee00}}, {@hash}, {@dont_appraise}]}}, 0x0, 0x0, &(0x7f0000000340)="631de654d364") r2 = openat(r1, &(0x7f0000000380)='./file0\x00', 0x82040, 0x102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r5, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000540)={{r1}, "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"}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000001540)) r6 = openat(r2, &(0x7f0000001580)='./file0\x00', 0x10040, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000015c0)=0x1, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001640)={0x3, &(0x7f0000001600)=[{0x80, 0xc8, 0x1, 0x61f}, {0x4, 0x2b, 0x5, 0x8}, {0xf, 0x8, 0x0, 0x82f}]}, 0x10) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000001680)={0x2fcd5e6a, 0x8, 0x1, 0x7ff}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000001a80), 0x3b6, 0x600000) r8 = syz_pidfd_open(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000016c0)="a114edb71022d0d9bb96956b6c318c84cc8971859b935ce6168aaae54b18673786d36107b458d3eedeaa12acf71788fae9e5734bcc16f1d3f21d4fa0179523bd8accc0a4ac28aa0a1b8114d685545fa0d9521b8108d1a816c60b5516dcc3e0132a6c88767560e3922700ca3510301efa9539607ad704be18ab642084dd7129abc0f68c4ff7ae45e22c9ae9358aff41874e6a4cce78", 0x95}, {&(0x7f0000001780)="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", 0xfe}, {&(0x7f0000001880)="5a5c85b442c37d6de3f1f1bc2c1562cff8341a4fbfc13a000acb66b36df13a23ad95aa62c1d86ea57368457742c04ebe05838150643e220b38d80790035773277e544103029bb6e9d7bd7f3318b2d4", 0x4f}, {&(0x7f0000001900)="0648f17ffab04dfee64faf12c23607af3f9d76a2c24cadc5b88e13d7b0bb6dedbb17e60e406ca80bd771a5978131", 0x2e}, {&(0x7f0000001940)="54056da639e45a6367d46b80fdd4dfe9e1de8f6971c96ec43b551f033fe73cb06bdb2fa3ff7fe6f7b51c2d7d81c2d731d9ef765f2c97c71a9a0bf193b4735ca68ed558ffe9e35559f017c24a34b0c838d0a4c4e4f07625408d0cd1943270ba76a31f1f2f99b4c6ca7afc65f14fb14b277e3efdd890fe73a9d526f1dd355e99f12863c858957a0b72fab2e2c3ea6330e2d913e29ccf8965f9c26442dc6e250f11de2fd3eca7898140c69700193beee2a6da81bb6ea806ed404a355a", 0xbb}], 0x5, &(0x7f0000001ac0)=[@rights={{0x20, 0x1, 0x1, [r3, r6, r7, r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r2, r1, r2, r4, r8]}}], 0x48, 0x8800}, 0x88c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, r5, 0x311, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7b, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0x88, r9, 0x2, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040043}, 0x40000000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001e80)="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", 0x1000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000002e80)='/dev/dvb/adapter#/frontend#\x00', &(0x7f0000002ec0)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002f00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x3, &(0x7f0000002f40)) socket(0x0, 0x4, 0x21) syz_open_dev$loop(&(0x7f0000002f80), 0x9, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000002fc0)=0xffff8cc8) pivot_root(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)='./file1\x00') 2.445290411s ago: executing program 4 (id=4780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f3, 0x0, 0x1ff}]}) cachestat(r0, &(0x7f0000000080)={0x2, 0x9}, &(0x7f00000000c0), 0x0) 2.384210725s ago: executing program 5 (id=4781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xe36}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4000000000000007}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0xa, 0x1}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x12, 0x24008050, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0x3}, 0x14) 2.21177893s ago: executing program 4 (id=4782): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000693000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000000f600"/36, @ANYRES32=0x0, @ANYBLOB="0780000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x6, 0x5, 0x7fff, 0x1000200004, 0x4, 0xfffffffffffffffe, 0x0, 0x4000000000000000], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.09924524s ago: executing program 6 (id=4783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000001c0)={@local, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) read$FUSE(r3, &(0x7f0000005c80)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000001c00)="44d52afa14e4c57f0ac4683f447356f9972fe51396fac091375ac4d3f013a3849c52ce065b06a2e18a6485744ddf22d852a33313af872118ee36dcccc298579774e089369f1afe390f4d8d4d71bb1c21e20daf700dcbb1b94fa5f37718e3255ba7c508b30e7fc48157634e3471d82f0e557369b5f70565007289036c0918ce509c2f5218a32d49b2d25a40b2888a119c226344a7d7e6d52ac90678b8ca339841a90e7c7799d3742a729b4bcb61c80327ddf55ac64490fb5bdaef36f31924e68c1662bc92773aed0ea0785cef12fbe0c0b459e4ed4c6356dd362525bcc8480a7b197dad17ab254771c600341a996fad48e9e06b7fd37959f53f7afc860b9d1936ae675c34fd967e2870234f86e1344f183f4004c9b09b5a4c48ad9079988b9b5b2c954aba9a03ce756cd70cd681a994e2776edec58df1c302dc772b83411dfd9bf855ff60032d5122a72426f641a596c34dbc6937a3759623ee2701cd776c1692cb59534230764e2d359ec18c344c048bcd8a43a85c526955a9c08ea3bb69160429eca7198a7fc6bca582c0033ec91ccd1a331c34c1af825b4e1211185878e59bb503cb0b461b80a96f0ade502257c7c0289569cc0941efda34f55d6d0b7a84078067ae3c193593f80865888a1f0df5543b4c0cff56532d2cc1208f828289cb01df18f53cdf462877bdd68a2b3ea82cf5833b9fb77f9de781ba85af6f9020df7b7f0141294f32488434f3925a4e869aa57826d7ea5e38adcc9eb0f62acbcf69f29996bb03daef6ec8a004da30bd09b1c1522e02a754c30e776e8bc14f9c79b82e323c0e51bd1b68b3e7744755a0379adfcc09f2b95d3e3f9383d0cf3b5c08bedb9978b67d1b68f5a0e856664541cd66aec2b06ce93cf1088587fa71b1a0d7d1a1de9b919eaffe34f3ba2e35db83dd4268a85dff57a0ab97b4f2824e839b966191aea369bb4fc0e892a9dc5f83d47599c8a96574d9d7f8d5cf4f6281f73448b36f853149784bcec2463e822acf463a89d97bea1da6417e3505810bd192a2ed5e91838d65af2c9f05008601d3170c9425ee6523bfcc23b570f27e368e555fd6e9d604ffb3398bf4c7591d055110379347bc70d9c786b94b8e23746ae7ab7f3512b10835b94e254c464d45faa00826ab901e4c7d84076731cca5eec6c1a379c784cb3f0045adcd9c34d478a2a65abe49c1a20f9ebce2cb1710a82ee3fa53f3ba6d4947283ef050db67b0b7d356b070ac20fd1c9e41671876b43e4e78d0ffd1dc2892430d6a06ec0b67745c93d1f35b34ba480fbc601e907201116be5b276f980793abda8be0384f2ce3fd918799029325aaf4d17db0c31e5e4d6b9aaa9d7f0ea086421fca7a44f25260a6e11eeb64439d380fac9d9a5cbb4246c07cd26e5385c3eb2c52304a726083bdb88420e105cbfbb78c4a0c1275eaefb5412981a2b8ff130daf1312f06e8a35fdffc5d86b1ad2697126b6eccbd7a7bcffc4f7a735c8bbc9bc8231f16e0bb4c439688fdf406b975894dfe14340fa25378086ed47c2291f2ad6f3642ba644d90a98a7b79f2ff4ca5bc0806dfb8c54bb51eee5a2812367b9dc441a350c70c15139c459bc03e49d98d5fe6701e139d28fea80561adfe2180da9fb994d8a11c57873f554228a88d08829d7bc146b4bfcafa83d6001de36d6c1363ec851e0e1e39f926e885b23b53ad94604544b0621b42c485520fa854d598e70ef3270395f7742685cc2d1ff0eaa55699ca158de6e49657abad05e0c28f8d15dab21c8b6889a4ffa8de9a3ca8a9c27ac4e70fc57aa453bdbc2d5dd7c5aaa6bd506a1c2e5b11e84740a430721beea129b9d93f660a06ffbd73ae427e54bbfa60961d43b4e6178b3dc10d7e7a4ab996149617b341c5575ff152c4a2599097f417070dda63c460afa753fe0a41ec88b7b7e11393f60edd19be8227c00ace51d5367cc108b91943b9130e3bf4ab384acac35a351a6bd78157a33610af826cbd7eeb3f671b296d39e96f4bedff01b525cd10f8eb3619e0094d242d2d1b04cc21548d4edd7c06f3825cfecffb78a778a1b72eb6728b4200d9354aa154cc80062e0d1bdea76e82a0b3f7a9753c256559c481b8e52b92696bae6d2964d345fe1ec1c6cde9dcd88094d2effdcc0741d6d31dc4485dea6e7daaf8fca51113c44db3a2293bb4828fcdc9ff9721fc9645d667eedd006c9e81f73a8df6cc1efa4fd9490cd9a98edbd6e70b592c25c7e2bf313498f5cee090e71d5ab2ccb0a9c9daa45f8215d5c65c3ab8e8eb609accda07b169ed57af90ccad9c8a230faafc6696256d7c7ae791d344c3fdf681799d7e8447bc7c786d48e72fd47793bf880f5eb66708c306658b7e54304c93cd9a39be0ea488263207383d7c4f390f8c6277b9c27c2447177a802f2ef17d2e99f7aea9a60d0318c7119555bc34cb3f377bed29238bdef33f7c6f59c3534e15edd18f3d150ac9dfbb6c014fc58220c8b19faed7ea2486d99f207279033385c236ac7fa7fcee8b26446449aa228c3f5ecd73d3cc25254440312735e3097d9be3f2228e97c5ffa060378981f932f2e90bc41c740b3f9aacffd6ebf494a117eeafb47c994b1a3fc4ef627274a369bccca1b1d7d3cdc282c0c2add080fc1c4fa6ffb2748e4405834d21fddabdd622b55c3ca91cc82ab1cc5b10aba819adfa09ad726a504f2cd8b2140ea634c0d1394fc9fcb3f427dffcd803b6dc0e8a8b9c16ec02d180968ed800209fd79d7d3fbf1a88ab84205fdb189f3b7d3d391413a040b0e8b7df6081faae05dbfef88e14263cce97ec1b1e6eb3755fd94e43d29d0fd578855346b7e1d45cd5a8b69ab189c49ad4a6b923e23fbf81c847cafad41c7833bb0a37fd8daed99f4953e9970ca992e43dd3e663da9aabc80fe0b49241c5b1160f9c5d9c6f4c749ec6fb6ee799c0250a57d12e93775a17cc2dad7b1531f07bd3a5e1b43a599971985f2db8bb1786fd0dc55cd9194fdf4938018abc4c4f4c23fd8ebc9e7ddf15a396a0840a0bbbef79c648a3a4c3875291b926775db25d4da4ebb5f35ea6b30e0118bb391118469ba43496a33f884a9e0622beedb8340f96b944a9f5217bd6e7103171f884bd9f71a8f6c8b8b27a4a7132388336749ef9b7f7a806e84651fa678d828c922cce05c2af2b63bf92b346f7a6682b7fc290ccd2d723334f108a9aa3b670f1d746972b01728669370e62a56d49dd20dc0e421806ba102ea241f2e2f1e348a7fa4f0338506cb143486cafb74f2afde761ce6ac73a9a1012d6ca950c81a8afe1d7f149e8fef97d5646184ac693d852920677dd415d14742044a3bed08c65e1abe91a7d64f7739c9b5680631143bef772fe4e2b351aba82cffc0958c14ccdd55f45ef06f772d9635c5c2f724a043ae7d6d1ab3fefc46c15aa3ac6335b4d5132195d01dfab903f8df77910d2b2f2a8ad18912506ace8b393e34b1fd9d464ddca1121602cd8785285e55acdf548996ad0f31fc905b9bcc14ff57b2d41bf50f58059801131751b6d54e4b0050e7bac34e993373a467bffcb5d9ecd0fe1e01ea9ba76d1b483620522a120e7443869977cb927cee6d023c7185e883ab8a5f17d6e6a7cf8798b82d72142bcb2c2a1cefa911fc5e5346417d8901c99fa28cc30b2fe2fd9e65a5c7eed7769a8fff1e904c0f70788301bc4e7f7d47203a98ccf2c9aefadfb49a0296705f8e91bd96886fe900e2d2976e4ef99dd2a2fa6d3530e12eae3074b5c965ad4c8fef756b65fe3f36d15ddb513d830cca889e800b9f99ebfbea301e345b9450014cec4e7d8ce3d8e73197fe0957332cf2763e46eacb4696c238b08dbd14d3c8ca9f579f0bc646fb81e9ddf55ce6db079fc76e14184d8ac0aec2f0a55fd2b84f4338209f29a3fb59450091bf7b7336f7e190722484356b81c7dc5ef22a44f81e220346201de565a80e64167a82e06c31a1b49cb9741621a207ac8edb2ab8b8642cbbee1173bb5021623b6f1a0f09672437a7f272a0303bd085b7d1db1f2b43a26c703f4db2cae6ec3d71a29af9c76262f5511aab8b9898c8cba30e8decec746c6597d3da9110c313c75770f890a8bb9302116268b5dcb4a78e1d9b628787a1c40058f6d7712820b5e3de8ca6919c65e946fd811cd214b6c649c1cf6b4a75dc02fc626df2e1804bf31971135075b22faa21489ee088b979ecaf354c568fb13d82942c3ff3aef10c5ad2a1bfd0729fc8257472cc575f91525bc86f3fc2444d565235260d33e71f722b144d406dc003d1a4861482c44b9cd9a03e5832279f996de00bda7fe9c591608abc52add8147aafb6996b418ad21b72abe5db05388095bde3c6da12f266437abb48a4bbc0c7bb14542031bb45c457c74520ca41072b2220b8eb0cf64d830117f693d451055ec39303af224a2c2ea0e8e8d6d9290fb631fd92b51f73191fcf1f323087458b6c59fea0edeb8067861b6fdafaadff40803950e905164d2d84efe9a4509009e9c5cdc91f4d12128689fdfb3bd5c6cc1b1c376454b0bd88010bf0a502c5ca3a426d06c44b703382989bbe7305a21450c7ea8858a009bfda4c87011952fd9217d3b4ceaacb554716ad28efe22b0903266599d83d04a553f827bd5dd0892d163a910fd74a10dac3b608c370fb6e15445b74b96463d2f1725300512f75b0d1c6563b8ec2b660563a215aa50c3822b36cd05aecf8437a55e0fa4d5129070495c3d0522f6bad5dbb34fe3b3fe104197e495a0ba38ffa578c40d0e4f9bfa10c55b289cc7a522a12495d318a72ee82efc2e2d67b4a56d1c506e54258018458e75cfd53bbf01273af4751d8e73f417126decf62604424be2b6cdbfd0412e63cd21659c80e49e75d98810798ed6dc0b07f6c227b29150970258f8c5fd55170ea38ad7861c5d28eaa59b5db69039994c970a5d448273ee16329e3541e13a95ec24a6d230cf170a61b5ac16c1890193bb8a77089049f5b5682ab244c2e97d55995c5f995b9b8020fb183f23670ca4c74142a4afc818516dbea367338c6a7991f7414ef38a4d136e90e952b8062ebb9db1c24f61e2cd5ecbc455a9c963dd05ba1670ad4734d42eaa51db7ed123849eea374df73c596249f75bdd273b868d54ab21c1866bea71a1f7524807c1f152c71c35fdf6487ea1955e83225fcb947071bd3794f3270caeaf5fa1d7b204870246384304ec25225d451adf64a795a443f2aa9fcc9db9a903a2b5878de6d2821b15bea3b5d9c5750e3307aa048a587451bfe75c74443bd37d9fcb81d1f57c9a87e863a69b111d67817f7d0116f6928e478d2b8c70a07eb5fb4713d92511563bba43f1939cce86c638d2ad19f20610e99ad7002e009478a72ca6d2465dfcd46d2b885c0857b9cc5a0c5ff665472418a378ccaf176e9e4854eee8bdb275a7a05d152560c2516293ff09f698f891844f5cce9ecd33e09b70df1d1a49787aa91b33356c03ddc700dfad8e72b27b9c31bd549f5a7bf3ca1e5ae6695fbe986989639b13c563620216cb233607e83581602df1f664bf78431a5cac378ec1c4898501e13ec0344063cbc12dbb7d33964635c2a95c14d7a88c60292b4454ffefbb17f778584102eb37b03259633ba15bff52f4e0d1b70fcf681102623db355a9cf995e701c80a81659a371a387220de7d13f49a21b9f2df21b6ae6592782a7b7f58c1420013ba53efa5d96a5b93e93f58ff2d0267de8a7bfb4016b06abd74886a202809fbf76e20724c3bc2b387d3dd59f56c1d1c2429600932e3fe8b8344a9b01a4daa8dd11194622cce2cbc7ddffef50abe88197aa1284682393621713584da5a845d85e625a57aae92cbad5d383742bbe6b04b08a06603c605c7b2dae6ecabbbf98caf8669cbd9879e67237d71d62009d15cd15a4bca4b0f5a01936a498d18739675bad941681c7a5fc290a0252166e52e8dee7f9d7a4edaaff955c66cf0f1518584747474c249fc9b98b753bb0dc17f69d84cd0462c471a29ba3fb5a8eea62c14346a8eeed0dc6b18fa3f79b3777089b2dcee1dab73c0981af2052e7c3e49ad6c74ce953e331de418c439e42620b5f8b305712acdb71dbb30699476fc520dc6175ec3b3c8b5d997a777939b2824c11fa77d25ea7d2574c609639cb03fe0fca1cf149ba26e83211b096c1683535609293332136099e89e6a182de13dbb62400a6e6a3c5893dae53eee9cc35c42d4b54b592dfb05e915aeb23905861a719e070ff2c978d0d935d1909bb69da2414b6eed3631097a77e0b5be0cdd55bf48a9309a0fa2bf275660d0644f5a910ce9d2955d79635fa7ac7f71d38841a43547bcdc089861e4bebd69ea5cc578d080ee16b40d36cf8a1c33a1743faaf23eb33d419667b92b14a306665da3dc6d2abe3900f4a90b33aab67673028225dc631b860c0fc0a7d6c8e151b1a07cbae6a9e867d0a1a5c802361c0fb6f92086cd1989d321d2256048999159712220d0d69d5e9cac572d04246a44b0bf46e9bdcb42c8e5b51e56f6a945206bd2cfbbe031d5cd8ebd04e14be0ce9e719039df709bd440fec2beca6b3355ddb4799e67c463c1da6d14517d1cd648b6c48f2b0bef595a37d4acf4dd45452569366b51da74ec9d69f7cb93732d1efd9240d268b59f1739d24bf155ac87c4022b0eea1d73eab95b25ae4da3ff22292d505facf3199a70cbd681c42d29bb0f49854d272e049f35aedc7c8a68b2c8d37a9514b13ff0147853c76d99c2ad99d655f3d80d3902a6de7fb0996d5b77c48a75506d5175b7a57fc7643b41749b1eb60cec1e92fd5254c67c984cfce13e5e9646666ba08c507610bd06d95932273a3c86aaee59b394c94e10d487a4914c0dbd18efcd909b5bdb008c463d32d87b616eb349159d2a5fd3ed350630564ed133d4c6e0a43c7adaade560520bd85a71560a75fcc19f8452a3ba8ffa71a4cb61dfec6e1384c224dec168eabe2c6ada78cbe08a017c9e26c28382f4825c95ccac5a6b3f929eab216b3e119cdd5ae47d5287b8b16c2561fd7211a5aa9d38552a88eeab24ac13ad4425a1dbe71687fe5812695e71b13b44ebd1b65dcd0eab370f7647b605329afbd9571a1550107a738a6b7c31b443cae641cbb6a22a9502cc8708de9350ddd49dbb35e00c8dc859da075b1a73b1dbc14dc5b512467cb146d0aeedfe7e6db95b906675a3f8fbb45518f579a04344f3c055fd51d95691ab2d9d6668f6b448ba5c52996e86f7f15e262e0c4a6712502f461b4477b8f5cec54721ebd3af0c2539bc181f402c4708cb024026e6a80cc6289254a935b157cdd832ad7e22739c2685b3cab00b1fbd44531c43da2bba797db784b6e2f5a55eb7776a8397eead36254ac0b377d49dc64bda477afcb355af9b9b755e57019d13df2b9a5fd5b943564732fc6f417e1de5f6996fe72f95cc3478e915a205189963a6542ae96b74e8a21546406640db3b009591bba01454cb6d1f3b9dfcc65e33a78f47ec0df6a78a79c3f526339be0e2f084769658791ecce0ce6fc7e201a5ff3b323c060dc9298447d40178b4576025de2cfe7573fa69ed4803bad07994f5bb42c5784ecddbbe5d1ae859a5004611da2d1e0f34f04af04f5ca820b78565304d06b89acb71a5d0d4ec72bd80cbd2e9e78069fa06bbbd0a99bbe833cca97a6416a8ef55b7e38e857cee6321c92ea52f467e6ea72164d4a85efa4704ef775f79493081cbf7bd9fe7d8c3593b582002ce0631a4e4ba32fef94d508f3ad7eb035bc1d2cc8c30864c30881c903fc7f02904e6fd65eb03e4c13bc3c94308c270b1e5289de0684e2b590f722a480dbb4a80d6817421c2bf0562375572b381e46728d45e2f82f227784c7ecffb0fade6bf58047fd084da3c59508e504bd5e96713a5bd968d8dbcdbb0e157b9f19cd20d1c17b371e641ba2a6e20228805f91f5654960dcde2ecc83574fa321ff27a9ea6b9d0bf1b0b634ffbc93957e0015ea33ff6cc0cc3f4c210cbcbf92993902a8cbe72cb454ccacf1264c2dcc04486b8440b4670e5305431b0dab599bb88f76543c4232f2e6d125d347ead5d2ed8c1e23387c6707e75d8199c3497ddcb6ca7b4a36778d5e6714a9ea7fa0408070a28e2af569c97cbc3c4f6ec16a6069df5728a4b52e73b3fa2da9dcedc676ce43d5e3522847125ea6cb4c59898721744c7ea4f06d3827bc1926ce0fcbc18570378ffe1dcb4ae30363548fb8c5656e40f7d7abd74456c4bb69aaa09ca7d243b921e5b9684fc3dc0e5185f0c1f3a0202a3d4a77ec258a891b3938d16fda3fb56ad9c32daa2841224a127184a7ca395d308c49d4c4975973fc11e6384a87859d9b5af3f2e088b7d1814569a534f4de270b3c1b40684d6dbd7befd487b587944dac60a51fff27ec028ca707f06c5202dfc5108189830f852b6a6c35d52a724c52f86f38cb235cd6928ea71228a9c024a5baa39b11b9733ddd85a9b83d75e8c8f881d1804d86c28ccb912ed29d55a299fd4dce37ce6636b29867f4c3dcf0d97d3a09059eda656f4dd5b41d8922055b25afce9d290800e5129906c58cb6bf70d6d2a663f0eff2e7e22fbc5022438e8aa4bf02fd6d22b49fcb76c4677da3da5cf4540316ffcb5956f58c81d8967364a40b954c3beae9b6e752542b7e28e3a00040b3dc66d27b041330a8dba4183e565190cfac8d7e44085ed14f8b61548eaf97205dd288b882f20b0ae6b8df09155bc20c4c899b0aeed04c7e37187e4eb748fa8ae60d10f979d6da88c897e3c7b0547195aac84b7a7340d0e86839ab0c2292123404084570127ee959e607499a025882c1f073f797e1b58ff9e1833e5d47276653b924bbb98645b8e0fdaac5f6d94a31a85a91bad428196eef401f5edac4c4a2cf6502963abc0f1b9ec0eb6d37dee99c3319f3997bf317a7a140bb85435c69f030f89d5abc4c407c4d1a806447257a08edb38871de3a266a754097d0f90dc32fca252fa58c97181d69483301b7eb6445bc5e345a3ea38187caa886ae8273612a1bdad8211f3d11fdf9b0faf6cb826c2721b4005b0ac2e83c3bedc20273270917d600073c8c9b0f5242d4b2dff10d5414066154aa3490c749d0c550627fa6bc2d05c66d6f54723e94288d889e6f0fabe91ab4235788e59f6163a302cfb5378b942600838c78249c81f3327aab2fb3edcc706491511a34aad85c56f7ed81e589dd1f5d4a67ea776a6c607b27ede4923b058e5ff63ffb21d4b3765bec7f4cab61df7e54bb37dad35006707ce8264f4616c68294768420becb9447082c2142625135ee2c892b649f4fee3930e7ceaded1c8e96eb9b386c75c07d5ad2c438a2bc0e42016e8509bf65fdb235076e6a6e4faf5d2d18f46774f3cecab5d03cf6dda7c5e27fc663d235a312ce5d7fc60fd188ce86daea7802291f222496007587ad8bf243fac818f14bfdaaca6cf73de44601b2aed7d9fe745f403bdbc9063b3082cb694869097753768de7bcd5519ee7d6e34bc8c3510157580b5a90e8530bb1820f0feb9cf71bf5d38cf9cf0a3e471a0d0b881b63d38e02d081836dd07e94cf3adf4b0d2943ed49d40d40b4bf14350103dda7952aa8f95555bac4e9a379fa75a52c8cc6ec9c6fefb9d1fb5c7b0e3fb42fa11cf789479f35aa1aa4386faa28f549e1594acb8adae6969fa7257b4e52c7239be413266223200d1a2f49cfbd6f4515d5547048baa655bfb12ea07a0497ba12edeeb69c93295a32d8d4edf35566492e32f27ec22faf2e23830e6c8ba13e73d5c644f9fb7260dfc64c4bb40f1805096c3a78ff7f7745344f6a9b703e1765bcad2794e0f68339f72c7168200b03c837f209317dd3077f8a0c775ea523fc07f21ce71026a79d63b6f6f715b1655bff215b370e67a39c73209469085440e34ad733ee37319f9d5326b8bbc934bccc41ba4217225f1c6a0f1b9edfd3c541835e85dd8ef4516e7ded21da9b56107a1077b5a7c00aad5c97174ec8944fec762c1769855016a77b0ff4f7d558335e007eddf4ebbb3543f70dd31859479c976be95657a836aec9af5ddcf51b4178037b723cd3adad79037171ca0e9878878fc5f7aa53d750dae2cf3ef9a1769464a5fc6784e46574cc6d0a57ca042e82df456adb7bb59045f9741338b3cfecef185575b8c280d527fc3325849ec57f163a85e4f6e6b3f689c80eea1bb0b1aa0fe7f642034f0779bb69954e7b8cf95d2a239d277a6d3787a2665e96c76ef37dda4213765ff3e59ae2c990ec0b70995909c672312b6bd0a92abee9511c9e9c3fb78e9f54b66af762253231f9b78e9e236285352cfab187bcf4c6fa381ade6e5bd9bb9ccc7db4e05147d75d5ae6d164afc1582b6118f84d99f289ceff5def6f592324383f81dd9978953bb29f9605c783cf273d9d4899ebff74d69817860fa49addb46d15ffb99037f444d70c9ca7b0025bf53818b17440b05543a3ac6ac720c85c612a09bf6c4f806417c67e3e2eb37372f1e0b33b1cb485826b55b5aa8c751fd2ba4ef092d0c597e98fc5feee1f4a6f941593a4c77fe51cba3a239649a4abdfae5f0a42533bfc884af911c891707063d8b062fbd9bd62f46771062878d5bed2311717f38ec39c6a7920298d45f692778c46ceb4b4d3c9acdfdbc4034dea36e6a5bdd58b3735d80b22293d609750ee07db27cdb6b973171ef60628b433aeba108c829138f531a391ee729901b7a4ebe6b97fdf99d46fd0c7626d7efbbe9cc75cc472be87613a5385a7592c6a727e84d96177651b89591088afc6da50f2bcbe824d04e40ade03db0322d3f30326a1ad846da3f6f17385961f2b45b355fabe814c596b6f4890661b01bb029f3bc4b98fb41849d7572128f19f960b92d67236040ba7d1f15f9030076fbac6636389c3e6bcbb69263846ea79fb45b33f22dbe33a8be7979006e19a2d9296bdac9460573d23663e2401eca7134d632dc94fc232e704c87eadc97fbd23d6c0d57c5ef37c0441b17781f26e4453e164ed34624115e3828fe2bb867635a9f0a9120048a1126a4d202aa2cc72ea2b62d43014581148fbfdeed26ad006c1ecd2888b55a4412c0be4342aaa0ba62db846f74c086170ab22c529cdf53f8dba0ab291f35a896c57f6d12337a4e9f331e47d4391ab49090fbe3b6800cc1b8581bb36bae1bf92de91df20088230debb66bfd0c91c0c0de295fd873f0a7073a554d7ddf689a099265f6d42a485cd8840deff0d8a8901fc2a3312b3d850885934bba187db49ab28dc39bad333e46e39f87c307c4653dde9732d5dc471297f25f1d7216d401cc0dcca8be696801fb0417b214b82d53a6a165b802099849148e46e3c2778642aab077e75a659f6a831e9e63343a641168a27eb689bd6fc006714c333db3d7129ec22818b847797238682065c51632bcca84aed4df219ac2b6df6086e73765be5f9a5c981acd3ad51cd438e68b554448fb4cd7a00fe3dfc4b1d39ce4397326621da4d570322ae0cf782a9125666e98d55f6a774a33d9b8ff9c2db1fcc3d06a680f14299f716996335b7868f9da0b13ce395f34199a26ca399bb26105ff7ae42621ec4b2cd7cb7061ea444e3761c394b75855f35edbb31b5620d2ec39463a767b7f4747aaf0d742a3e6b12b24543504db6999de49abc07d717ee4d3cd37f524f3956048b20b1cb", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 2.091124986s ago: executing program 5 (id=4784): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {0x0}, {&(0x7f0000000200)="196c1bbe3c41ecf05b54c31f1e6a2551420ab3013dd702ec495c0bfbd8ac8ef469e7572b2d095b058a7f507671866fab41ac2a16307564896c746f56e71eaf61a10ea7fdccbf0a1210224a8aeaea5aaa0c648b2d50c8bf7ac2e35c7729b92558cc004dc3ed47f68684744d37e730203bf8761b854ae199f8b4eb417bb82cd1275364f09409bf808c915e2a3134560a9392d12aae346afde7bb45229beecc4043208a81f0845ca339ffcb92f03d4f94f5517ae44fd61986970ff2e5235c1e5054481b3925ef17b88087ff76", 0xcb}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x2b}], 0x4}, 0x40011) 1.979771564s ago: executing program 4 (id=4785): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001680)={r1, 0x38, "b5218f24aa04857f37042e3c3dc219984efcc101fc319b72df73c2d8da29e42208b16f1158e31f8f33c4586c849204532e3eeb95304821ab"}, &(0x7f00000002c0)=0x40) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) mq_unlink(&(0x7f0000000000)='@\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000080)={0x8, 0x9, {0x57, 0x0, 0x4, {0x4, 0x5}, {0xfff7, 0xd7}, @rumble={0x8}}, {0x51, 0xc5dc, 0x99c4, {0xcb, 0xe2b3}, {0xa87, 0x6}, @cond=[{0x8, 0x14e, 0xd8, 0x4, 0x4, 0x9}, {0x9, 0x1ff, 0x5, 0xfffd, 0x7, 0x4}]}}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000c40)={0x8000203d}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r6, 0x40, "d438bacc0682f11a293137d5ac484ea56bde04e10f07c5b7abcf7efc33de199740bde9f1b6b29e24f5fed5c50d8df51d9b575d34559a2073d7b25d02aa702996"}, &(0x7f0000000240)=0x48) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000280)={r6, 0x3}, 0x8) syz_usb_control_io(r7, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0xf4, 0x7, 0x7, 0x423, 0x9}}}, 0x0) 1.960781886s ago: executing program 7 (id=4786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="400e5304319011d27233780e490657007f9ee3bb5c23e187f3683658215adcd75ffdf08993fa5b291f12a2f9dc8a4b2c9e7cc2ff60e2b4051eb4d5d793f0ae3286f484356a35a77e03df79c438b45a96ce7fc8d9427f10a61d4bf0016e7dabfd7692461cad4744ee9f79c08da1ee8b66ee533e78e7a87ba30232958e793df9039865cdf65a71fc0e64e709fb279042b9050c7741f946d9dad42d8b2613d927fda38fb2166d98ad50baf49bf9e497849ae2ebe994f9fae260f329939ab4423b10a379e1f5a13456f1aa543f362ab62843da47020538e49df04746ed0787f259a21ca4d72fe8b0b8c404cd16", 0xeb, 0x4040000, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = io_uring_setup(0x45a6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x72000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d060000000000000000000002000003050005000a000000050005000100000016000300686173683a6e65742c706f72742c6e65740000010000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x9e}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.83159308s ago: executing program 5 (id=4787): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r6, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@FILEID_INO32_GEN={0x8, 0x1, {0xa, 0x80000001}}, 0x0, 0x600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.812967748s ago: executing program 6 (id=4788): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r10 = openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$int_in(r11, 0x5452, &(0x7f0000000080)=0x7fffffffffffffff) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYRES8=r10], &(0x7f0000000180)={0xffffffffffffffd7, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) 1.347541682s ago: executing program 5 (id=4789): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005"], 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xe8}) 1.143659909s ago: executing program 4 (id=4790): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0xfffffffffffffe54, 0x5, 0x8, 0x8001, 0x0, 0x400009, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x9, 0x2, 0x1, 0x0, 0x10}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000001580)="03", 0x1}], 0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)=@mmap={0x7ff, 0x1, 0x4, 0x1, 0x4, {}, {0x1, 0x0, 0x7, 0x1, 0x5, 0xfb, "729c2fe2"}, 0x9, 0x1, {}, 0x9, 0x0, r3}) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/43, 0x1000, 0x800, 0x7ffffeff, 0x3}, 0x1c) r5 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x1, 0x0, 0x0, [{}]}, 0x88) 632.797146ms ago: executing program 1 (id=4791): syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000001e65b20d039d6cda2a69", @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000", @ANYRES32=r0], 0x50) (async, rerun: 64) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x42, 0x177) (async) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a000000110003"], 0x60}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x0, 0x3, 0x47, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0xffa}}) r5 = io_uring_setup(0x111b, &(0x7f0000000280)={0x0, 0xb71a, 0x400, 0x4, 0x3d7}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f00000000c0)={0x1, 0x2, 0xa}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) (async) syz_open_dev$dri(0x0, 0x1, 0x0) (async, rerun: 32) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) read$dsp(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000002e000900fefdfffffddbdf25eebe0000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd) (rerun: 64) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) 378.801217ms ago: executing program 1 (id=4792): r0 = io_uring_setup(0x6e95, &(0x7f00000004c0)={0x0, 0xed2e, 0x800, 0x0, 0x305}) r1 = syz_io_uring_setup(0x100497, &(0x7f0000000400)={0x0, 0x3f71, 0x100, 0x0, 0x1d2, 0x0, r0}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c000280050002008900000008000340000000000800044000000001080006400000000208000140000500010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x5007, @fd_index=0x3, 0xfffffffffffffffc, 0x2fc, 0x6, 0x19, 0x0, {0x3, r5}}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x2, 0x4}) (async) setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f00000000c0)={0x1, r10, 0x6, 0x200, 0x8000, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000540)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000240)={r11, r8, r10, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_enter(r1, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 106.126068ms ago: executing program 7 (id=4793): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '*-\\%[*!]-\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000940)=""/114, 0x72}], 0x2) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000602, r7, &(0x7f0000000200)={0xd, 0xc, 0x1, 0x1}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2d, &(0x7f0000000140)=0xb1e0, 0x4) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x8001, 0x40}, {0x4ae, 0xc0d}], r7}, 0x18, 0x1) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x40, {{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x6}}, {{0xa, 0x4e22, 0x2, @remote, 0x6}}}, 0x108) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0x0, 0x2, 0xaf5c, 0x4002004ca, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x7, 0x0, 0x80000003fffffe, 0x200000000c], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=4794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xe36}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4000000000000007}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0xa, 0x1}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x12, 0x24008050, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0x3}, 0x14) kernel console output (not intermixed with test programs): l event. [ 1522.854675][ T8715] m920x_read = error: -19 [ 1522.873556][ T8715] dvb-usb: error while querying for an remote control event. [ 1523.095511][T25842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.184019][ T8715] m920x_read = error: -19 [ 1523.271198][T25842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.277228][ T8715] dvb-usb: error while querying for an remote control event. [ 1523.396609][T25854] syzkaller0: entered promiscuous mode [ 1523.402845][T25854] syzkaller0: entered allmulticast mode [ 1523.625611][ T8715] m920x_read = error: -19 [ 1523.663857][ T8715] dvb-usb: error while querying for an remote control event. [ 1523.886004][ T8715] m920x_read = error: -19 [ 1523.890393][ T8715] dvb-usb: error while querying for an remote control event. [ 1524.046492][ T8715] m920x_read = error: -19 [ 1524.060249][ T8715] dvb-usb: error while querying for an remote control event. [ 1524.196238][ T8715] m920x_read = error: -19 [ 1524.210999][ T8715] dvb-usb: error while querying for an remote control event. [ 1524.279667][T25869] program syz.6.4540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1524.410483][ T8715] m920x_read = error: -19 [ 1524.428660][ T8715] dvb-usb: error while querying for an remote control event. [ 1524.657508][ T8715] m920x_read = error: -19 [ 1524.662057][ T8715] dvb-usb: error while querying for an remote control event. [ 1524.757002][T25876] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4541'. [ 1524.785744][ T8715] m920x_read = error: -19 [ 1524.790444][ T8715] dvb-usb: error while querying for an remote control event. [ 1524.915846][ T8715] m920x_read = error: -19 [ 1524.924617][ T8715] dvb-usb: error while querying for an remote control event. [ 1525.279118][ T8715] m920x_read = error: -19 [ 1525.283634][ T8715] dvb-usb: error while querying for an remote control event. [ 1525.415646][ T8715] m920x_read = error: -19 [ 1525.420107][ T8715] dvb-usb: error while querying for an remote control event. [ 1525.566109][ T8715] m920x_read = error: -19 [ 1525.570491][ T8715] dvb-usb: error while querying for an remote control event. [ 1525.705679][ T8715] m920x_read = error: -19 [ 1525.710126][ T8715] dvb-usb: error while querying for an remote control event. [ 1525.788776][ T8715] usb 2-1: USB disconnect, device number 63 [ 1525.857984][ T10] m920x_read = error: -19 [ 1525.862492][ T10] dvb-usb: error while querying for an remote control event. [ 1526.025999][ T10] m920x_read = error: -19 [ 1526.032884][ T10] dvb-usb: error while querying for an remote control event. [ 1526.096411][T25889] loop5: detected capacity change from 0 to 7 [ 1526.151782][T25889] Dev loop5: unable to read RDB block 7 [ 1526.157912][ T8715] m920x_read = error: -19 [ 1526.166199][ T8715] dvb-usb: error while querying for an remote control event. [ 1526.181151][T25889] loop5: AHDI p1 p2 p3 [ 1526.198564][T25889] loop5: partition table partially beyond EOD, truncated [ 1526.215902][T25889] loop5: p1 start 1701142371 is beyond EOD, truncated [ 1526.246743][T25889] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1526.295666][ T8715] m920x_read = error: -19 [ 1526.300085][ T8715] dvb-usb: error while querying for an remote control event. [ 1526.515704][ T10] m920x_read = error: -19 [ 1526.520613][ T10] dvb-usb: error while querying for an remote control event. [ 1526.750180][ T10] m920x_read = error: -19 [ 1526.754581][ T10] dvb-usb: error while querying for an remote control event. [ 1526.886049][ T10] m920x_read = error: -19 [ 1527.013602][ T10] dvb-usb: error while querying for an remote control event. [ 1527.069807][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4550'. [ 1527.125975][ T10] m920x_read = error: -19 [ 1527.130383][ T10] dvb-usb: error while querying for an remote control event. [ 1527.255640][ T8715] m920x_read = error: -19 [ 1527.262846][ T8715] dvb-usb: error while querying for an remote control event. [ 1527.409887][ T8715] m920x_read = error: -19 [ 1527.434798][ T8715] dvb-usb: error while querying for an remote control event. [ 1527.475328][T25919] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1527.615121][ T8715] m920x_read = error: -19 [ 1527.665704][ T8715] dvb-usb: error while querying for an remote control event. [ 1527.836694][ T5868] m920x_read = error: -19 [ 1527.843728][ T5868] dvb-usb: error while querying for an remote control event. [ 1527.876257][ T8715] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1527.972482][ T5868] m920x_read = error: -19 [ 1527.977181][ T5868] dvb-usb: error while querying for an remote control event. [ 1528.168995][ T10] m920x_read = error: -19 [ 1528.173414][ T10] dvb-usb: error while querying for an remote control event. [ 1528.204641][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4557'. [ 1528.230965][ T8715] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1528.275124][ T8715] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1528.303775][ T8715] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1528.367470][ T10] m920x_read = error: -19 [ 1528.372112][ T10] dvb-usb: error while querying for an remote control event. [ 1528.419677][ T8715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.458929][T25910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1528.537782][ T10] m920x_read = error: -19 [ 1528.542182][ T10] dvb-usb: error while querying for an remote control event. [ 1528.553245][ T8715] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1528.746613][T25910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.757059][T25910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.770452][T25910] syzkaller0: entered promiscuous mode [ 1528.776204][T25910] syzkaller0: entered allmulticast mode [ 1528.895512][T15677] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1528.916060][ T10] m920x_read = error: -19 [ 1528.920705][ T10] dvb-usb: error while querying for an remote control event. [ 1529.096840][T15677] usb 5-1: Using ep0 maxpacket: 16 [ 1529.117902][T15677] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1529.155487][T15677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.195902][T19363] m920x_read = error: -19 [ 1529.200305][T19363] dvb-usb: error while querying for an remote control event. [ 1529.222660][T15677] usb 5-1: Product: syz [ 1529.242444][T15677] usb 5-1: Manufacturer: syz [ 1529.271359][T15677] usb 5-1: SerialNumber: syz [ 1529.335656][ T10] m920x_read = error: -19 [ 1529.340402][ T10] dvb-usb: error while querying for an remote control event. [ 1529.359411][T15677] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1529.393647][T15677] r8152-cfgselector 5-1: config 0 descriptor?? [ 1529.538767][ T10] m920x_read = error: -19 [ 1529.543397][ T10] dvb-usb: error while querying for an remote control event. [ 1529.655787][ T10] m920x_read = error: -19 [ 1529.660310][ T10] dvb-usb: error while querying for an remote control event. [ 1529.815936][ T10] m920x_read = error: -19 [ 1529.845542][ T10] dvb-usb: error while querying for an remote control event. [ 1529.985617][ T10] m920x_read = error: -19 [ 1529.990490][ T10] dvb-usb: error while querying for an remote control event. [ 1530.003233][T25935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1530.115708][ T10] m920x_read = error: -19 [ 1530.120188][ T10] dvb-usb: error while querying for an remote control event. [ 1530.138531][T15677] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 1530.392231][ T10] m920x_read = error: -19 [ 1530.420025][ T10] dvb-usb: error while querying for an remote control event. [ 1530.490570][T15474] usb 2-1: USB disconnect, device number 64 [ 1530.539418][ T10] m920x_read = error: -19 [ 1530.543873][ T10] dvb-usb: error while querying for an remote control event. [ 1530.699953][ T10] m920x_read = error: -19 [ 1530.711661][ T10] dvb-usb: error while querying for an remote control event. [ 1530.785394][T25951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4561'. [ 1530.846818][ T10] m920x_read = error: -19 [ 1530.851326][ T10] dvb-usb: error while querying for an remote control event. [ 1531.039357][ T10] m920x_read = error: -19 [ 1531.052194][ T10] dvb-usb: error while querying for an remote control event. [ 1531.095650][T15474] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1531.182911][ T10] m920x_read = error: -19 [ 1531.187835][ T10] dvb-usb: error while querying for an remote control event. [ 1531.279044][T15474] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1531.293105][T15474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.305630][ T10] m920x_read = error: -19 [ 1531.310042][ T10] dvb-usb: error while querying for an remote control event. [ 1531.327798][T15474] usb 2-1: config 0 has no interface number 0 [ 1531.345709][T15474] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1531.355490][T15474] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1531.368415][T15474] usb 2-1: Product: syz [ 1531.377252][T15474] usb 2-1: Manufacturer: syz [ 1531.389014][T15474] usb 2-1: SerialNumber: syz [ 1531.421265][T15474] usb 2-1: config 0 descriptor?? [ 1531.426989][ T10] m920x_read = error: -19 [ 1531.431566][ T10] dvb-usb: error while querying for an remote control event. [ 1531.447840][T15474] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1531.460139][T15474] uvcvideo 2-1:0.105: Entity type for entity Output 1 was not initialized! [ 1531.477976][T15474] uvcvideo 2-1:0.105: Failed to create links for entity 1 [ 1531.515894][T15474] uvcvideo 2-1:0.105: Failed to register entities (-22). [ 1531.545600][ T10] m920x_read = error: -19 [ 1531.550133][ T10] dvb-usb: error while querying for an remote control event. [ 1531.666101][ T10] usb 2-1: USB disconnect, device number 65 [ 1531.685616][ T8715] m920x_read = error: -19 [ 1531.690114][ T8715] dvb-usb: error while querying for an remote control event. [ 1531.815978][ T8715] m920x_read = error: -19 [ 1531.825534][ T8715] dvb-usb: error while querying for an remote control event. [ 1531.965614][ T8715] m920x_read = error: -19 [ 1531.970003][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.105751][ T8715] m920x_read = error: -19 [ 1532.110194][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.265602][ T8715] m920x_read = error: -19 [ 1532.270019][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.390605][T25967] fuse: Bad value for 'group_id' [ 1532.426427][ T8715] m920x_read = error: -19 [ 1532.430836][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.446681][T25967] fuse: Bad value for 'group_id' [ 1532.575613][ T8715] m920x_read = error: -19 [ 1532.583843][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.656809][T25979] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.4568'. [ 1532.715645][ T8715] m920x_read = error: -19 [ 1532.720063][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.855559][ T8715] m920x_read = error: -19 [ 1532.860100][ T8715] dvb-usb: error while querying for an remote control event. [ 1532.945948][T15474] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1532.985619][ T8715] m920x_read = error: -19 [ 1532.990036][ T8715] dvb-usb: error while querying for an remote control event. [ 1533.106797][T15474] usb 2-1: Using ep0 maxpacket: 16 [ 1533.125885][ T8715] m920x_read = error: -19 [ 1533.130295][ T8715] dvb-usb: error while querying for an remote control event. [ 1533.139336][T15474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.184810][T15474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.228768][T15474] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1533.265671][ T8715] m920x_read = error: -19 [ 1533.270083][ T8715] dvb-usb: error while querying for an remote control event. [ 1533.295885][T15474] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1533.375023][T15474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.425744][ T10] m920x_read = error: -19 [ 1533.430164][ T10] dvb-usb: error while querying for an remote control event. [ 1533.447886][T15474] usb 2-1: config 0 descriptor?? [ 1533.554819][ T30] audit: type=1326 audit(1772105197.267:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.609583][T26000] program syz.4.4575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1533.680680][ T8715] m920x_read = error: -19 [ 1533.680713][ T8715] dvb-usb: error while querying for an remote control event. [ 1533.715602][ T30] audit: type=1326 audit(1772105197.267:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715660][ T30] audit: type=1326 audit(1772105197.267:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715709][ T30] audit: type=1326 audit(1772105197.267:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715765][ T30] audit: type=1326 audit(1772105197.267:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715812][ T30] audit: type=1326 audit(1772105197.267:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715870][ T30] audit: type=1326 audit(1772105197.267:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715918][ T30] audit: type=1326 audit(1772105197.267:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.715970][ T30] audit: type=1326 audit(1772105197.267:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.716016][ T30] audit: type=1326 audit(1772105197.267:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.4.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1533.802406][ T8715] m920x_read = error: -19 [ 1533.802439][ T8715] dvb-usb: error while querying for an remote control event. [ 1533.908707][ T8715] m920x_read = error: -19 [ 1533.908739][ T8715] dvb-usb: error while querying for an remote control event. [ 1533.980424][T15474] HID 045e:07da: Invalid code 65791 type 1 [ 1534.008634][T15474] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0051/input/input84 [ 1534.018073][ T8715] m920x_read = error: -19 [ 1534.018103][ T8715] dvb-usb: error while querying for an remote control event. [ 1534.018624][T15474] microsoft 0003:045E:07DA.0051: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1534.137609][ T8715] m920x_read = error: -19 [ 1534.137632][ T8715] dvb-usb: error while querying for an remote control event. [ 1534.168011][T15474] usb 2-1: USB disconnect, device number 66 [ 1534.246362][ T8715] m920x_read = error: -19 [ 1534.246395][ T8715] dvb-usb: error while querying for an remote control event. [ 1534.334379][T26002] fido_id[26002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1534.355906][ T8715] m920x_read = error: -19 [ 1534.355960][ T8715] dvb-usb: error while querying for an remote control event. [ 1534.469758][ T8715] m920x_read = error: -19 [ 1534.469780][ T8715] dvb-usb: error while querying for an remote control event. [ 1534.579387][ T8715] m920x_read = error: -19 [ 1534.579411][ T8715] dvb-usb: error while querying for an remote control event. [ 1534.772899][ T10] m920x_read = error: -19 [ 1534.772929][ T10] dvb-usb: error while querying for an remote control event. [ 1535.045654][ T10] m920x_read = error: -19 [ 1535.045687][ T10] dvb-usb: error while querying for an remote control event. [ 1535.155865][ T10] m920x_read = error: -19 [ 1535.155897][ T10] dvb-usb: error while querying for an remote control event. [ 1535.266856][ T10] m920x_read = error: -19 [ 1535.266889][ T10] dvb-usb: error while querying for an remote control event. [ 1535.694151][ T10] m920x_read = error: -19 [ 1535.694175][ T10] dvb-usb: error while querying for an remote control event. [ 1535.805647][ T10] m920x_read = error: -19 [ 1535.805681][ T10] dvb-usb: error while querying for an remote control event. [ 1535.916494][ T10] m920x_read = error: -19 [ 1535.916526][ T10] dvb-usb: error while querying for an remote control event. [ 1535.974885][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4582'. [ 1536.034539][ T8715] m920x_read = error: -19 [ 1536.034569][ T8715] dvb-usb: error while querying for an remote control event. [ 1536.135833][ T8715] m920x_read = error: -19 [ 1536.135863][ T8715] dvb-usb: error while querying for an remote control event. [ 1536.246548][ T10] m920x_read = error: -19 [ 1536.510131][T26039] netlink: 'syz.1.4586': attribute type 29 has an invalid length. [ 1536.904035][ T10] dvb-usb: error while querying for an remote control event. [ 1537.020288][T26050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4587'. [ 1537.085619][T19363] m920x_read = error: -19 [ 1537.090036][T19363] dvb-usb: error while querying for an remote control event. [ 1537.225687][T19363] m920x_read = error: -19 [ 1537.230626][T19363] dvb-usb: error while querying for an remote control event. [ 1537.335861][ T29] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1537.445902][T19363] m920x_read = error: -19 [ 1537.450282][T19363] dvb-usb: error while querying for an remote control event. [ 1537.626253][T19363] m920x_read = error: -19 [ 1537.630667][T19363] dvb-usb: error while querying for an remote control event. [ 1537.630932][ T29] usb 5-1: device descriptor read/64, error -71 [ 1537.649301][T26061] vivid-000: disconnect [ 1537.788463][T19363] m920x_read = error: -19 [ 1537.828027][T19363] dvb-usb: error while querying for an remote control event. [ 1537.905844][ T29] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1537.956653][T19363] m920x_read = error: -19 [ 1537.961102][T19363] dvb-usb: error while querying for an remote control event. [ 1538.043188][ T29] usb 5-1: device descriptor read/64, error -71 [ 1538.075901][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 1538.075972][T19363] m920x_read = error: -19 [ 1538.118909][T19363] dvb-usb: error while querying for an remote control event. [ 1538.159777][ T29] usb usb5-port1: attempt power cycle [ 1538.200670][T26065] netlink: 192 bytes leftover after parsing attributes in process `syz.7.4591'. [ 1538.245830][T19363] m920x_read = error: -19 [ 1538.266136][T19363] dvb-usb: error while querying for an remote control event. [ 1538.406391][T19363] m920x_read = error: -19 [ 1538.426434][T19363] dvb-usb: error while querying for an remote control event. [ 1538.486143][T26067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4592'. [ 1538.506176][ T29] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1538.558849][ T29] usb 5-1: device descriptor read/8, error -71 [ 1538.571856][T19363] m920x_read = error: -19 [ 1538.603052][T19363] dvb-usb: error while querying for an remote control event. [ 1538.769491][T19363] m920x_read = error: -19 [ 1538.773908][T19363] dvb-usb: error while querying for an remote control event. [ 1538.815711][ T29] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1538.866249][ T29] usb 5-1: device descriptor read/8, error -71 [ 1538.908551][T19363] m920x_read = error: -19 [ 1538.912971][T19363] dvb-usb: error while querying for an remote control event. [ 1539.025952][ T29] usb usb5-port1: unable to enumerate USB device [ 1539.067874][T19363] m920x_read = error: -19 [ 1539.072294][T19363] dvb-usb: error while querying for an remote control event. [ 1539.094259][T26082] loop7: detected capacity change from 0 to 7 [ 1539.163310][T26077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1539.176324][T26083] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4595'. [ 1539.186222][T26077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1539.295619][T19363] m920x_read = error: -19 [ 1539.300019][T19363] dvb-usb: error while querying for an remote control event. [ 1539.445087][T19363] m920x_read = error: -19 [ 1539.449802][T19363] dvb-usb: error while querying for an remote control event. [ 1539.625600][T19363] m920x_read = error: -19 [ 1539.630118][T19363] dvb-usb: error while querying for an remote control event. [ 1539.652256][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4597'. [ 1539.688829][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4597'. [ 1539.872899][T26082] Dev loop7: unable to read RDB block 7 [ 1539.878586][T19363] m920x_read = error: -19 [ 1539.878619][T19363] dvb-usb: error while querying for an remote control event. [ 1539.934624][T26082] loop7: unable to read partition table [ 1539.950734][T26047] vivid-000: reconnect [ 1539.975805][T26082] loop7: partition table beyond EOD, truncated [ 1539.985628][T19363] m920x_read = error: -19 [ 1539.990080][T19363] dvb-usb: error while querying for an remote control event. [ 1540.009682][T26082] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1540.110413][T19363] m920x_read = error: -19 [ 1540.125086][T19363] dvb-usb: error while querying for an remote control event. [ 1540.245659][T19363] m920x_read = error: -19 [ 1540.267050][T19363] dvb-usb: error while querying for an remote control event. [ 1540.306921][T26094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1540.450559][T19363] m920x_read = error: -19 [ 1540.455032][T19363] dvb-usb: error while querying for an remote control event. [ 1540.575601][T19363] m920x_read = error: -19 [ 1540.579999][T19363] dvb-usb: error while querying for an remote control event. [ 1540.705658][T19363] m920x_read = error: -19 [ 1540.731340][T19363] dvb-usb: error while querying for an remote control event. [ 1540.815876][T15474] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1540.877128][T19363] m920x_read = error: -19 [ 1540.881531][T19363] dvb-usb: error while querying for an remote control event. [ 1541.001817][T15474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1541.015606][T19363] m920x_read = error: -19 [ 1541.020011][T19363] dvb-usb: error while querying for an remote control event. [ 1541.037507][T15474] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1541.057784][T15474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.099873][T15474] usb 5-1: config 0 descriptor?? [ 1541.287464][ T10] m920x_read = error: -19 [ 1541.343098][ T10] dvb-usb: error while querying for an remote control event. [ 1541.414368][T26095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1541.475609][ T10] m920x_read = error: -19 [ 1541.480138][ T10] dvb-usb: error while querying for an remote control event. [ 1541.544636][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1541.544658][ T30] audit: type=1800 audit(1772105205.257:3093): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4607" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1541.686004][ T10] m920x_read = error: -19 [ 1541.692480][ T10] dvb-usb: error while querying for an remote control event. [ 1541.855648][ T10] m920x_read = error: -19 [ 1541.860028][ T10] dvb-usb: error while querying for an remote control event. [ 1541.955819][T15677] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 1541.963890][T15474] elan 0003:04F3:0755.0052: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1542.029222][ T10] m920x_read = error: -19 [ 1542.038987][ T10] dvb-usb: error while querying for an remote control event. [ 1542.195607][ T10] m920x_read = error: -19 [ 1542.207265][ T10] dvb-usb: error while querying for an remote control event. [ 1542.425896][T15677] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1542.440606][T15677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.448895][T15677] usb 6-1: Product: syz [ 1542.456198][T15677] usb 6-1: Manufacturer: syz [ 1542.481673][ T10] m920x_read = error: -19 [ 1542.491939][ T10] dvb-usb: error while querying for an remote control event. [ 1542.513831][T15677] usb 6-1: SerialNumber: syz [ 1542.537392][T15677] usb 6-1: config 0 descriptor?? [ 1542.607284][ T10] m920x_read = error: -19 [ 1542.611834][ T10] dvb-usb: error while querying for an remote control event. [ 1542.736074][ T10] m920x_read = error: -19 [ 1542.740491][ T10] dvb-usb: error while querying for an remote control event. [ 1542.754235][T15677] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1542.856314][ T10] m920x_read = error: -19 [ 1542.860878][ T10] dvb-usb: error while querying for an remote control event. [ 1542.985700][T19363] m920x_read = error: -19 [ 1542.990241][T19363] dvb-usb: error while querying for an remote control event. [ 1543.005586][ T29] usb 5-1: reset full-speed USB device number 21 using dummy_hcd [ 1543.135894][T19363] m920x_read = error: -19 [ 1543.140345][T19363] dvb-usb: error while querying for an remote control event. [ 1543.315859][T19363] m920x_read = error: -19 [ 1543.325315][T19363] dvb-usb: error while querying for an remote control event. [ 1543.456663][T19363] m920x_read = error: -19 [ 1543.462788][T19363] dvb-usb: error while querying for an remote control event. [ 1543.569372][T26137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1543.587186][T19363] m920x_read = error: -19 [ 1543.600483][T19363] dvb-usb: error while querying for an remote control event. [ 1543.735605][T19363] m920x_read = error: -19 [ 1543.740839][T19363] dvb-usb: error while querying for an remote control event. [ 1543.773879][T26147] fuse: Bad value for 'fd' [ 1543.781940][T26147] binder: BINDER_SET_CONTEXT_MGR already set [ 1543.788148][T26147] binder: 26143:26147 ioctl 4018620d 200000004a80 returned -16 [ 1543.855624][T19363] m920x_read = error: -19 [ 1543.862302][T19363] dvb-usb: error while querying for an remote control event. [ 1543.976677][T19363] m920x_read = error: -19 [ 1543.981289][T19363] dvb-usb: error while querying for an remote control event. [ 1544.126138][T19363] m920x_read = error: -19 [ 1544.141785][T19363] dvb-usb: error while querying for an remote control event. [ 1544.229952][T26154] netlink: 'syz.4.4614': attribute type 4 has an invalid length. [ 1544.240555][T26154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4614'. [ 1544.277634][T19363] m920x_read = error: -19 [ 1544.282073][T19363] dvb-usb: error while querying for an remote control event. [ 1544.405623][T19363] m920x_read = error: -19 [ 1544.422674][T19363] dvb-usb: error while querying for an remote control event. [ 1544.514884][T15677] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1544.564120][T15677] usb 6-1: USB disconnect, device number 121 [ 1544.575680][T19363] m920x_read = error: -19 [ 1544.588896][T19363] dvb-usb: error while querying for an remote control event. [ 1544.717165][T15474] usb 5-1: USB disconnect, device number 21 [ 1544.765627][T19363] m920x_read = error: -19 [ 1544.785506][T19363] dvb-usb: error while querying for an remote control event. [ 1544.897678][T19363] m920x_read = error: -19 [ 1544.917389][T19363] dvb-usb: error while querying for an remote control event. [ 1544.958818][T26167] fuse: Unknown parameter 'user_i00000000000000000000' [ 1545.045919][T19363] m920x_read = error: -19 [ 1545.056473][T19363] dvb-usb: error while querying for an remote control event. [ 1545.209028][T19363] m920x_read = error: -19 [ 1545.213648][T19363] dvb-usb: error while querying for an remote control event. [ 1545.321740][T26170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1545.329118][T26170] IPv6: NLM_F_CREATE should be set when creating new route [ 1545.336427][T26170] IPv6: NLM_F_CREATE should be set when creating new route [ 1545.345303][ T10] m920x_read = error: -19 [ 1545.349893][ T10] dvb-usb: error while querying for an remote control event. [ 1545.395595][T15474] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1545.465622][ T10] m920x_read = error: -19 [ 1545.470278][ T10] dvb-usb: error while querying for an remote control event. [ 1545.555518][T15474] usb 5-1: device descriptor read/64, error -71 [ 1545.586497][ T10] m920x_read = error: -19 [ 1545.590964][ T10] dvb-usb: error while querying for an remote control event. [ 1545.726136][ T10] m920x_read = error: -19 [ 1545.731424][ T10] dvb-usb: error while querying for an remote control event. [ 1545.855621][T15474] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1545.865625][ T10] m920x_read = error: -19 [ 1545.870320][ T10] dvb-usb: error while querying for an remote control event. [ 1546.016159][T15474] usb 5-1: device descriptor read/64, error -71 [ 1546.163100][ T10] m920x_read = error: -19 [ 1546.181050][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.187924][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.212069][T15474] usb usb5-port1: attempt power cycle [ 1546.218391][T26183] input: syz0 as /devices/virtual/input/input85 [ 1546.225107][ T10] dvb-usb: error while querying for an remote control event. [ 1546.373454][ T8715] m920x_read = error: -19 [ 1546.378253][ T8715] dvb-usb: error while querying for an remote control event. [ 1546.485552][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1546.516346][T19363] m920x_read = error: -19 [ 1546.520797][T19363] dvb-usb: error while querying for an remote control event. [ 1546.565544][T15474] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1546.615810][T15474] usb 5-1: device descriptor read/8, error -71 [ 1546.655917][ T8715] m920x_read = error: -19 [ 1546.660457][ T8715] dvb-usb: error while querying for an remote control event. [ 1546.685740][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1546.710700][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.744962][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1546.778522][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1546.800657][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.809172][ T8715] m920x_read = error: -19 [ 1546.818962][ T8715] dvb-usb: error while querying for an remote control event. [ 1546.828731][ T10] usb 2-1: Product: syz [ 1546.832965][ T10] usb 2-1: Manufacturer: syz [ 1546.838519][ T10] usb 2-1: SerialNumber: syz [ 1546.865750][T15474] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1546.896260][T15474] usb 5-1: device descriptor read/8, error -71 [ 1546.938851][ T8715] m920x_read = error: -19 [ 1546.943303][ T8715] dvb-usb: error while querying for an remote control event. [ 1547.006912][T15474] usb usb5-port1: unable to enumerate USB device [ 1547.061347][ T10] usb 2-1: 0:2 : does not exist [ 1547.066887][ T8715] m920x_read = error: -19 [ 1547.087277][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1547.095625][ T8715] dvb-usb: error while querying for an remote control event. [ 1547.179383][ T10] usb 2-1: USB disconnect, device number 67 [ 1547.216645][ T8715] m920x_read = error: -19 [ 1547.221370][ T8715] dvb-usb: error while querying for an remote control event. [ 1547.236876][ T8693] udevd[8693]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.354620][ T8715] m920x_read = error: -19 [ 1547.373189][ T8715] dvb-usb: error while querying for an remote control event. [ 1547.495838][ T8715] m920x_read = error: -19 [ 1547.500270][ T8715] dvb-usb: error while querying for an remote control event. [ 1547.615961][ T8715] m920x_read = error: -19 [ 1547.620373][ T8715] dvb-usb: error while querying for an remote control event. [ 1547.691668][T26205] fuse: Invalid rootmode [ 1547.765912][T19363] m920x_read = error: -19 [ 1547.770316][T19363] dvb-usb: error while querying for an remote control event. [ 1547.816024][ T10] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1547.940015][T19363] m920x_read = error: -19 [ 1547.953111][T19363] dvb-usb: error while querying for an remote control event. [ 1548.065643][T19363] m920x_read = error: -19 [ 1548.070089][T19363] dvb-usb: error while querying for an remote control event. [ 1548.087430][ T10] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1548.102014][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1548.110524][ T10] usb 6-1: config 1 has no interface number 0 [ 1548.118270][ T10] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1548.124334][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1548.138569][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1548.148589][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1548.156716][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1548.163932][ T10] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.195941][T19363] m920x_read = error: -19 [ 1548.200949][T19363] dvb-usb: error while querying for an remote control event. [ 1548.237314][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1548.284816][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.325244][ T10] usb 6-1: Product: syz [ 1548.349606][ T10] usb 6-1: Manufacturer: syz [ 1548.375596][T19363] m920x_read = error: -19 [ 1548.380091][T19363] dvb-usb: error while querying for an remote control event. [ 1548.391269][ T10] usb 6-1: SerialNumber: syz [ 1548.569391][T26200] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1548.592834][ T10] usb 6-1: Expected 3 endpoints, found: 2 [ 1548.644310][T19363] m920x_read = error: -19 [ 1548.659769][T19363] dvb-usb: error while querying for an remote control event. [ 1548.805631][ T8715] m920x_read = error: -19 [ 1548.810040][ T8715] dvb-usb: error while querying for an remote control event. [ 1548.935635][ T8715] m920x_read = error: -19 [ 1548.950225][ T8715] dvb-usb: error while querying for an remote control event. [ 1549.080128][T12303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.092408][ T8715] m920x_read = error: -19 [ 1549.105578][ T8715] dvb-usb: error while querying for an remote control event. [ 1549.226978][ T8715] m920x_read = error: -19 [ 1549.236808][T12303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.249489][ T8715] dvb-usb: error while querying for an remote control event. [ 1549.288320][T26209] chnl_net:caif_netlink_parms(): no params data found [ 1549.366191][ T8715] m920x_read = error: -19 [ 1549.370732][ T8715] dvb-usb: error while querying for an remote control event. [ 1549.382106][T12303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.482701][T12303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.495593][ T8715] m920x_read = error: -19 [ 1549.500011][ T8715] dvb-usb: error while querying for an remote control event. [ 1549.589177][T26209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.602156][T26209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.611804][T26209] bridge_slave_0: entered allmulticast mode [ 1549.618039][T19363] m920x_read = error: -19 [ 1549.622646][T19363] dvb-usb: error while querying for an remote control event. [ 1549.632870][T26209] bridge_slave_0: entered promiscuous mode [ 1549.660953][T26209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.677647][T26209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.693927][T26209] bridge_slave_1: entered allmulticast mode [ 1549.720507][T26209] bridge_slave_1: entered promiscuous mode [ 1549.735755][ T10] m920x_read = error: -19 [ 1549.741452][ T10] dvb-usb: error while querying for an remote control event. [ 1549.849566][T26209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.885883][T19363] m920x_read = error: -19 [ 1549.890323][T19363] dvb-usb: error while querying for an remote control event. [ 1549.952773][T26209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.035571][ T10] m920x_read = error: -19 [ 1550.040095][ T10] dvb-usb: error while querying for an remote control event. [ 1550.161014][T26236] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4635'. [ 1550.170541][ T10] m920x_read = error: -19 [ 1550.185842][ T10] dvb-usb: error while querying for an remote control event. [ 1550.207465][T26209] team0: Port device team_slave_0 added [ 1550.236065][ T5839] Bluetooth: hci4: command tx timeout [ 1550.288264][T26209] team0: Port device team_slave_1 added [ 1550.328632][ T10] m920x_read = error: -19 [ 1550.335119][ T10] dvb-usb: error while querying for an remote control event. [ 1550.422139][ T30] audit: type=1326 audit(1772105214.137:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26239 comm="syz.6.4636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fa679c629 code=0x0 [ 1550.457639][ T10] m920x_read = error: -19 [ 1550.462147][ T10] dvb-usb: error while querying for an remote control event. [ 1550.575874][ T10] m920x_read = error: -19 [ 1550.580291][ T10] dvb-usb: error while querying for an remote control event. [ 1550.639041][T26209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.658048][T26209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.723238][ T10] m920x_read = error: -19 [ 1550.747242][ T10] dvb-usb: error while querying for an remote control event. [ 1550.754841][T26209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.833437][T26209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.840842][T26209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.867822][ T10] m920x_read = error: -19 [ 1550.872215][ T10] dvb-usb: error while querying for an remote control event. [ 1550.895748][T26209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.038125][ T10] m920x_read = error: -19 [ 1551.042549][ T10] dvb-usb: error while querying for an remote control event. [ 1551.125655][ T8715] usb 6-1: USB disconnect, device number 122 [ 1551.175707][ T10] m920x_read = error: -19 [ 1551.180195][ T10] dvb-usb: error while querying for an remote control event. [ 1551.213003][T12303] bridge_slave_1: left allmulticast mode [ 1551.218855][T12303] bridge_slave_1: left promiscuous mode [ 1551.232091][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.253443][T12303] bridge_slave_0: left allmulticast mode [ 1551.265160][T12303] bridge_slave_0: left promiscuous mode [ 1551.272382][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.296082][T19363] m920x_read = error: -19 [ 1551.300565][T19363] dvb-usb: error while querying for an remote control event. [ 1551.418542][ T8715] m920x_read = error: -19 [ 1551.422928][ T8715] dvb-usb: error while querying for an remote control event. [ 1551.549508][ T8715] m920x_read = error: -19 [ 1551.559051][ T8715] dvb-usb: error while querying for an remote control event. [ 1551.685943][ T8715] m920x_read = error: -19 [ 1551.691519][ T8715] dvb-usb: error while querying for an remote control event. [ 1551.805761][ T8715] m920x_read = error: -19 [ 1551.810269][ T8715] dvb-usb: error while querying for an remote control event. [ 1551.880548][T12303] bond2 (unregistering): (slave .`): Releasing backup interface [ 1551.904345][T12303] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.913167][T12303] bond_slave_0: left promiscuous mode [ 1551.925687][ T8715] m920x_read = error: -19 [ 1551.930079][ T8715] dvb-usb: error while querying for an remote control event. [ 1551.971502][T12303] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.986815][T12303] bond_slave_1: left promiscuous mode [ 1551.994176][T12303] .` (unregistering): (slave team0): Releasing backup interface [ 1552.013027][T12303] team0: left promiscuous mode [ 1552.027171][T12303] team_slave_0: left promiscuous mode [ 1552.037504][T12303] team_slave_1: left promiscuous mode [ 1552.043621][T12303] .` (unregistering): Released all slaves [ 1552.055570][ T8715] m920x_read = error: -19 [ 1552.063345][ T8715] dvb-usb: error while querying for an remote control event. [ 1552.089355][T12303] bond1 (unregistering): Released all slaves [ 1552.103144][T12303] bond2 (unregistering): Released all slaves [ 1552.141236][T12303] bond3 (unregistering): Released all slaves [ 1552.186232][T19363] m920x_read = error: -19 [ 1552.190658][T19363] dvb-usb: error while querying for an remote control event. [ 1552.315694][ T5839] Bluetooth: hci4: command tx timeout [ 1552.341675][ T10] m920x_read = error: -19 [ 1552.347191][ T10] dvb-usb: error while querying for an remote control event. [ 1552.369307][T26209] hsr_slave_0: entered promiscuous mode [ 1552.378077][T26209] hsr_slave_1: entered promiscuous mode [ 1552.384588][T26209] debugfs: 'hsr0' already exists in 'hsr' [ 1552.391039][T26209] Cannot create hsr debugfs directory [ 1552.413571][T12303] tipc: Left network mode [ 1552.487932][ T10] m920x_read = error: -19 [ 1552.492338][ T10] dvb-usb: error while querying for an remote control event. [ 1552.670737][ T10] m920x_read = error: -19 [ 1552.675131][ T10] dvb-usb: error while querying for an remote control event. [ 1552.816238][ T10] m920x_read = error: -19 [ 1552.820683][ T10] dvb-usb: error while querying for an remote control event. [ 1553.275200][T19363] m920x_read = error: -19 [ 1553.283108][T19363] dvb-usb: error while querying for an remote control event. [ 1553.436072][T19363] m920x_read = error: -19 [ 1553.452660][T19363] dvb-usb: error while querying for an remote control event. [ 1553.585763][T19363] m920x_read = error: -19 [ 1553.816833][T19363] dvb-usb: error while querying for an remote control event. [ 1553.883482][T26276] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4643'. [ 1553.937506][T19363] m920x_read = error: -19 [ 1553.955630][T19363] dvb-usb: error while querying for an remote control event. [ 1554.068787][T19363] m920x_read = error: -19 [ 1554.073383][T19363] dvb-usb: error while querying for an remote control event. [ 1554.268749][T19363] m920x_read = error: -19 [ 1554.278546][T19363] dvb-usb: error while querying for an remote control event. [ 1554.408608][T19363] m920x_read = error: -19 [ 1554.415612][ T5839] Bluetooth: hci4: command tx timeout [ 1554.450718][T19363] dvb-usb: error while querying for an remote control event. [ 1554.465872][T12303] hsr_slave_0: left promiscuous mode [ 1554.517932][T12303] hsr_slave_1: left promiscuous mode [ 1554.537634][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.545079][T12303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.658328][T19363] m920x_read = error: -19 [ 1554.671053][T19363] dvb-usb: error while querying for an remote control event. [ 1554.686037][T12303] veth1_macvtap: left promiscuous mode [ 1554.713391][T12303] veth0_macvtap: left promiscuous mode [ 1554.805638][T19363] m920x_read = error: -19 [ 1554.810235][T19363] dvb-usb: error while querying for an remote control event. [ 1554.976453][T19363] m920x_read = error: -19 [ 1554.990126][T19363] dvb-usb: error while querying for an remote control event. [ 1555.116982][T19363] m920x_read = error: -19 [ 1555.128706][T19363] dvb-usb: error while querying for an remote control event. [ 1555.256194][ T10] m920x_read = error: -19 [ 1555.261500][ T10] dvb-usb: error while querying for an remote control event. [ 1555.285563][T19363] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1555.360403][T12303] team0 (unregistering): Port device team_slave_1 removed [ 1555.375782][ T10] m920x_read = error: -19 [ 1555.383141][ T10] dvb-usb: error while querying for an remote control event. [ 1555.397589][T12303] team0 (unregistering): Port device team_slave_0 removed [ 1555.446014][T19363] usb 6-1: Using ep0 maxpacket: 16 [ 1555.463824][T19363] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.487726][T19363] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1555.502602][T19363] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1555.523941][ T10] m920x_read = error: -19 [ 1555.534033][ T10] dvb-usb: error while querying for an remote control event. [ 1555.544456][T19363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.573641][T19363] usb 6-1: config 0 descriptor?? [ 1555.667672][ T10] m920x_read = error: -19 [ 1555.673767][ T10] dvb-usb: error while querying for an remote control event. [ 1555.836687][ T10] m920x_read = error: -19 [ 1555.841115][ T10] dvb-usb: error while querying for an remote control event. [ 1556.007255][ T10] m920x_read = error: -19 [ 1556.011730][ T10] dvb-usb: error while querying for an remote control event. [ 1556.126590][T19363] nzxt-smart2 0003:1E71:2009.0053: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1556.160333][ T10] m920x_read = error: -19 [ 1556.164792][ T10] dvb-usb: error while querying for an remote control event. [ 1556.288361][T19363] m920x_read = error: -19 [ 1556.296503][T19363] dvb-usb: error while querying for an remote control event. [ 1556.415611][T19363] m920x_read = error: -19 [ 1556.420189][T19363] dvb-usb: error while querying for an remote control event. [ 1556.475611][ T5839] Bluetooth: hci4: command tx timeout [ 1556.555745][ T10] m920x_read = error: -19 [ 1556.560198][ T10] dvb-usb: error while querying for an remote control event. [ 1556.733887][ T10] m920x_read = error: -19 [ 1556.746381][ T10] dvb-usb: error while querying for an remote control event. [ 1556.756250][T15474] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1556.955883][ T10] m920x_read = error: -19 [ 1556.960502][ T10] dvb-usb: error while querying for an remote control event. [ 1556.988145][T15474] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 1557.114779][T15474] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1557.165458][T15474] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1557.210921][T15474] usb 5-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40 [ 1557.270807][T15474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.299671][T15474] usb 5-1: Product: 䀊 [ 1557.319940][T15474] usb 5-1: Manufacturer: ц [ 1557.325568][ T10] m920x_read = error: -19 [ 1557.330825][T15474] usb 5-1: SerialNumber: ᤱ좔꯾䮡쾤㵵襹â½á¹°î¹ï¯±â¥íŠ¯æˆê³Ÿî„ƒé¥ï¡˜ìŸŸéœ¶ã¾‰æ¾’벼Θí…瘨ëèºå€¾í‰¼æ Œèº¬îµ’䦘톛쾣鼱á¢æ·ƒë¬¼ä‹—é‹â™§çž·ì“œê±¨ãŒ’鰔鲳ì¬ã‡³ç“¼ê†¶é³šê¿Žè¡ä°™â¾–館꩖ᠾè°ï–ꬺé¢ã³€ï„ªà³ˆ [ 1557.435772][ T10] dvb-usb: error while querying for an remote control event. [ 1557.596159][ T10] m920x_read = error: -19 [ 1557.605568][ T10] dvb-usb: error while querying for an remote control event. [ 1557.639227][T26209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1557.715706][T19363] m920x_read = error: -19 [ 1557.725523][T19363] dvb-usb: error while querying for an remote control event. [ 1557.762457][T26209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1557.818858][T26209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1557.855607][T19363] m920x_read = error: -19 [ 1557.860139][T19363] dvb-usb: error while querying for an remote control event. [ 1557.892025][T26209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1557.996166][T19363] m920x_read = error: -19 [ 1558.000629][T19363] dvb-usb: error while querying for an remote control event. [ 1558.072327][T26310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.087652][T26311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.116330][T26310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.122552][T26311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.145633][T19363] m920x_read = error: -19 [ 1558.161211][T19363] dvb-usb: error while querying for an remote control event. [ 1558.250892][T26310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.325633][T19363] m920x_read = error: -19 [ 1558.326882][T26310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.331441][T19363] dvb-usb: error while querying for an remote control event. [ 1558.468802][T15474] usbhid 5-1:1.0: can't add hid device: -71 [ 1558.490728][T15474] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1558.499226][T19363] m920x_read = error: -19 [ 1558.504829][T19363] dvb-usb: error while querying for an remote control event. [ 1558.576376][T15474] usb 5-1: USB disconnect, device number 26 [ 1558.602210][T26209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.657145][T19363] m920x_read = error: -19 [ 1558.686773][T19363] dvb-usb: error while querying for an remote control event. [ 1558.762009][T26209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.836259][T19363] m920x_read = error: -19 [ 1558.841918][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.849129][ T9459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.858651][T19363] dvb-usb: error while querying for an remote control event. [ 1558.980788][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.988047][ T9459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.997325][T19363] m920x_read = error: -19 [ 1559.001762][T19363] dvb-usb: error while querying for an remote control event. [ 1559.155744][T19363] m920x_read = error: -19 [ 1559.193107][T19363] dvb-usb: error while querying for an remote control event. [ 1559.366549][ T8715] m920x_read = error: -19 [ 1559.401713][ T8715] dvb-usb: error while querying for an remote control event. [ 1559.454875][T26209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1559.574765][ T8715] m920x_read = error: -19 [ 1559.585515][ T8715] dvb-usb: error while querying for an remote control event. [ 1559.725626][ T8715] m920x_read = error: -19 [ 1559.738447][T26209] veth0_vlan: entered promiscuous mode [ 1559.744594][ T8715] dvb-usb: error while querying for an remote control event. [ 1559.791989][T26209] veth1_vlan: entered promiscuous mode [ 1559.945754][ T8715] m920x_read = error: -19 [ 1559.950224][ T8715] dvb-usb: error while querying for an remote control event. [ 1559.987281][T26209] veth0_macvtap: entered promiscuous mode [ 1560.076018][T26209] veth1_macvtap: entered promiscuous mode [ 1560.148969][T26209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1560.156288][ T8715] m920x_read = error: -19 [ 1560.156317][ T8715] dvb-usb: error while querying for an remote control event. [ 1560.250819][T26209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1560.320280][T12308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.345600][ T8715] m920x_read = error: -19 [ 1560.350072][ T8715] dvb-usb: error while querying for an remote control event. [ 1560.418675][T12308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.454907][T12308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.486694][ T8715] m920x_read = error: -19 [ 1560.491317][ T8715] dvb-usb: error while querying for an remote control event. [ 1560.611500][T12308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.629243][ T8715] m920x_read = error: -19 [ 1560.647653][ T8715] dvb-usb: error while querying for an remote control event. [ 1560.756125][T19363] m920x_read = error: -19 [ 1560.760584][T19363] dvb-usb: error while querying for an remote control event. [ 1560.879383][T26374] syzkaller0: entered promiscuous mode [ 1560.884935][T26374] syzkaller0: entered allmulticast mode [ 1560.896049][T19363] m920x_read = error: -19 [ 1560.900481][T19363] dvb-usb: error while querying for an remote control event. [ 1561.029242][ T8715] m920x_read = error: -19 [ 1561.033695][ T8715] dvb-usb: error while querying for an remote control event. [ 1561.196383][ T10] m920x_read = error: -19 [ 1561.200849][ T10] dvb-usb: error while querying for an remote control event. [ 1561.351312][ T10] m920x_read = error: -19 [ 1561.359755][ T10] dvb-usb: error while querying for an remote control event. [ 1561.458841][ T5920] usb 6-1: USB disconnect, device number 123 [ 1561.488540][ T10] m920x_read = error: -19 [ 1561.492931][ T10] dvb-usb: error while querying for an remote control event. [ 1561.514861][T12303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.549638][T12303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.665773][ T10] m920x_read = error: -19 [ 1561.670234][ T10] dvb-usb: error while querying for an remote control event. [ 1561.875699][ T8715] m920x_read = error: -19 [ 1561.880139][ T8715] dvb-usb: error while querying for an remote control event. [ 1561.957778][T12308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.974731][T26388] tipc: Started in network mode [ 1561.990176][T12308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.997833][T26388] tipc: Node identity 7f000001, cluster identity 4711 [ 1562.044771][T26388] tipc: Enabled bearer , priority 10 [ 1562.052320][ T8715] m920x_read = error: -19 [ 1562.057139][ T8715] dvb-usb: error while querying for an remote control event. [ 1562.083379][T26390] tipc: Enabling of bearer rejected, already enabled [ 1562.165586][ T10] m920x_read = error: -19 [ 1562.170020][ T10] dvb-usb: error while querying for an remote control event. [ 1562.350906][ T10] m920x_read = error: -19 [ 1562.355347][ T10] dvb-usb: error while querying for an remote control event. [ 1562.466549][T26402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1562.506146][ T10] m920x_read = error: -19 [ 1562.510569][ T10] dvb-usb: error while querying for an remote control event. [ 1562.598850][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1562.745642][ T10] m920x_read = error: -19 [ 1562.782713][ T10] dvb-usb: error while querying for an remote control event. [ 1562.945675][ T5868] m920x_read = error: -19 [ 1562.950083][ T5868] dvb-usb: error while querying for an remote control event. [ 1563.045898][T26395] random: crng reseeded on system resumption [ 1563.066654][T15677] tipc: Node number set to 2130706433 [ 1563.085580][ T5868] m920x_read = error: -19 [ 1563.092421][ T5868] dvb-usb: error while querying for an remote control event. [ 1563.226876][ T5868] m920x_read = error: -19 [ 1563.231585][ T5868] dvb-usb: error while querying for an remote control event. [ 1563.244698][T26418] syz.1.4667: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1563.376148][ T5868] m920x_read = error: -19 [ 1563.382004][ T5868] dvb-usb: error while querying for an remote control event. [ 1563.435196][T26418] CPU: 0 UID: 0 PID: 26418 Comm: syz.1.4667 Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.435225][T26418] Tainted: [L]=SOFTLOCKUP [ 1563.435231][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1563.435242][T26418] Call Trace: [ 1563.435249][T26418] [ 1563.435257][T26418] dump_stack_lvl+0xe8/0x150 [ 1563.435285][T26418] warn_alloc+0x249/0x340 [ 1563.435304][T26418] ? stack_trace_save+0xa9/0x100 [ 1563.435323][T26418] ? __pfx_warn_alloc+0x10/0x10 [ 1563.435345][T26418] ? kasan_save_track+0x4f/0x80 [ 1563.435360][T26418] ? kasan_save_track+0x3e/0x80 [ 1563.435376][T26418] ? __kasan_kmalloc+0x93/0xb0 [ 1563.435427][T26418] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1563.435449][T26418] ? xskq_create+0x56/0x170 [ 1563.435486][T26418] ? xsk_setsockopt+0x54c/0x990 [ 1563.435507][T26418] ? do_sock_setsockopt+0x17c/0x1b0 [ 1563.435530][T26418] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1563.435552][T26418] ? do_syscall_64+0x14d/0xf80 [ 1563.435579][T26418] __vmalloc_node_range_noprof+0x132/0x1730 [ 1563.435618][T26418] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1563.435640][T26418] ? __kasan_kmalloc+0x93/0xb0 [ 1563.435660][T26418] vmalloc_user_noprof+0xad/0xe0 [ 1563.435676][T26418] ? xskq_create+0xbf/0x170 [ 1563.435698][T26418] xskq_create+0xbf/0x170 [ 1563.435722][T26418] xsk_init_queue+0x8a/0xe0 [ 1563.435751][T26418] xsk_setsockopt+0x54c/0x990 [ 1563.435774][T26418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1563.435794][T26418] ? __pfx_aa_sk_perm+0x10/0x10 [ 1563.435815][T26418] ? aa_sock_opt_perm+0xff/0x1a0 [ 1563.435836][T26418] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1563.435853][T26418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1563.435874][T26418] do_sock_setsockopt+0x17c/0x1b0 [ 1563.435900][T26418] __x64_sys_setsockopt+0x13d/0x1b0 [ 1563.435927][T26418] do_syscall_64+0x14d/0xf80 [ 1563.435951][T26418] ? trace_irq_disable+0x3b/0x150 [ 1563.435975][T26418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.435992][T26418] ? clear_bhb_loop+0x40/0x90 [ 1563.436011][T26418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.436028][T26418] RIP: 0033:0x7f17cef9c629 [ 1563.436043][T26418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.436057][T26418] RSP: 002b:00007f17cff20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1563.436074][T26418] RAX: ffffffffffffffda RBX: 00007f17cf216090 RCX: 00007f17cef9c629 [ 1563.436086][T26418] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1563.436096][T26418] RBP: 00007f17cf032b39 R08: 0000000000000004 R09: 0000000000000000 [ 1563.436106][T26418] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.436116][T26418] R13: 00007f17cf216128 R14: 00007f17cf216090 R15: 00007f17cf33fa48 [ 1563.436140][T26418] [ 1563.751321][ T5868] m920x_read = error: -19 [ 1563.755851][ T5868] dvb-usb: error while querying for an remote control event. [ 1564.000538][ T5868] m920x_read = error: -19 [ 1564.004952][ T5868] dvb-usb: error while querying for an remote control event. [ 1564.065875][T26418] Mem-Info: [ 1564.070416][T26418] active_anon:20137 inactive_anon:0 isolated_anon:0 [ 1564.070416][T26418] active_file:13986 inactive_file:4272 isolated_file:0 [ 1564.070416][T26418] unevictable:768 dirty:146 writeback:0 [ 1564.070416][T26418] slab_reclaimable:12130 slab_unreclaimable:103564 [ 1564.070416][T26418] mapped:36878 shmem:12264 pagetables:2434 [ 1564.070416][T26418] sec_pagetables:3 bounce:0 [ 1564.070416][T26418] kernel_misc_reclaimable:0 [ 1564.070416][T26418] free:1301444 free_pcp:19746 free_cma:0 [ 1564.126022][ T8715] m920x_read = error: -19 [ 1564.127223][T15677] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1564.130425][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.236352][ T8715] m920x_read = error: -19 [ 1564.236375][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.275858][T26418] Node 0 active_anon:81580kB inactive_anon:0kB active_file:55896kB inactive_file:16956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148124kB dirty:652kB writeback:0kB shmem:48204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14108kB pagetables:9296kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 1564.275930][T26418] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1564.275989][T26418] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1564.276097][T26418] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1564.276149][T26418] Node 0 DMA32 free:1288380kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81580kB inactive_anon:0kB active_file:55896kB inactive_file:16956kB unevictable:1536kB writepending:652kB zspages:0kB present:3129332kB managed:2552840kB mlocked:0kB bounce:0kB free_pcp:35296kB local_pcp:19248kB free_cma:0kB [ 1564.276205][T26418] lowmem_reserve[]: 0 0 0 0 0 [ 1564.276240][T26418] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1564.276284][T26418] lowmem_reserve[]: 0 0 0 0 0 [ 1564.276317][T26418] Node 1 Normal free:3902032kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:42896kB local_pcp:25920kB free_cma:0kB [ 1564.276365][T26418] lowmem_reserve[]: 0 0 0 0 0 [ 1564.276398][T26418] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1564.276509][T26418] Node 0 DMA32: 7897*4kB (UM) 6739*8kB (UM) 4358*16kB (UME) 727*32kB (UME) 1356*64kB (UME) 989*128kB (UME) 644*256kB (UME) 381*512kB (UM) 226*1024kB (UME) 31*2048kB (UM) 59*4096kB (UM) = 1288380kB [ 1564.276657][T26418] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1564.276754][T26418] Node 1 Normal: 14*4kB (UME) 15*8kB (UME) 16*16kB (UME) 21*32kB (UME) 14*64kB (UME) 9*128kB (UM) 8*256kB (UME) 7*512kB (UME) 6*1024kB (UM) 4*2048kB (UME) 947*4096kB (UM) = 3902032kB [ 1564.276901][T26418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.276915][T26418] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1564.276929][T26418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.276944][T26418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.276957][T26418] 30689 total pagecache pages [ 1564.276965][T26418] 0 pages in swap cache [ 1564.276972][T26418] Free swap = 124996kB [ 1564.276979][T26418] Total swap = 124996kB [ 1564.276987][T26418] 2097051 pages RAM [ 1564.276993][T26418] 0 pages HighMem/MovableOnly [ 1564.277000][T26418] 427005 pages reserved [ 1564.277007][T26418] 0 pages cma reserved [ 1564.345588][ T8715] m920x_read = error: -19 [ 1564.345620][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.449834][T15677] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1564.449877][T15677] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1564.449922][T15677] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1564.449950][T15677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.455605][ T8715] m920x_read = error: -19 [ 1564.455628][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.461643][T26416] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1564.473228][T15677] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1564.565540][ T8715] m920x_read = error: -19 [ 1564.565572][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.676248][ T8715] m920x_read = error: -19 [ 1564.676279][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.685500][T26416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.689626][T26416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.794257][ T8715] m920x_read = error: -19 [ 1564.794286][ T8715] dvb-usb: error while querying for an remote control event. [ 1564.913150][ T8715] m920x_read = error: -19 [ 1564.913184][ T8715] dvb-usb: error while querying for an remote control event. [ 1565.016666][ T8715] m920x_read = error: -19 [ 1565.016698][ T8715] dvb-usb: error while querying for an remote control event. [ 1565.094564][T26432] syzkaller0: entered promiscuous mode [ 1565.094584][T26432] syzkaller0: entered allmulticast mode [ 1565.147972][ T5868] m920x_read = error: -19 [ 1565.148000][ T5868] dvb-usb: error while querying for an remote control event. [ 1565.255776][ T8715] m920x_read = error: -19 [ 1565.255800][ T8715] dvb-usb: error while querying for an remote control event. [ 1565.370859][ T5868] m920x_read = error: -19 [ 1565.370891][ T5868] dvb-usb: error while querying for an remote control event. [ 1565.480983][ T5868] m920x_read = error: -19 [ 1565.481017][ T5868] dvb-usb: error while querying for an remote control event. [ 1565.598537][ T5868] m920x_read = error: -19 [ 1565.598578][ T5868] dvb-usb: error while querying for an remote control event. [ 1565.698183][ T30] audit: type=1326 audit(1772105229.417:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.698338][ T30] audit: type=1326 audit(1772105229.417:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.701093][ T30] audit: type=1326 audit(1772105229.417:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.701408][ T30] audit: type=1326 audit(1772105229.417:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.701889][ T30] audit: type=1326 audit(1772105229.417:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.702051][ T30] audit: type=1326 audit(1772105229.417:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.702279][ T30] audit: type=1326 audit(1772105229.417:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.702581][ T30] audit: type=1326 audit(1772105229.417:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.702911][ T30] audit: type=1326 audit(1772105229.417:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.703082][ T30] audit: type=1326 audit(1772105229.417:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.4.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bc459c629 code=0x7ffc0000 [ 1565.708179][ T5868] m920x_read = error: -19 [ 1565.708207][ T5868] dvb-usb: error while querying for an remote control event. [ 1565.823037][ T5868] m920x_read = error: -19 [ 1565.823067][ T5868] dvb-usb: error while querying for an remote control event. [ 1565.839942][T26447] netlink: 'syz.1.4673': attribute type 4 has an invalid length. [ 1565.933089][ T5868] m920x_read = error: -19 [ 1565.933123][ T5868] dvb-usb: error while querying for an remote control event. [ 1566.039893][ T5868] m920x_read = error: -19 [ 1566.039916][ T5868] dvb-usb: error while querying for an remote control event. [ 1566.175782][ T8715] m920x_read = error: -19 [ 1566.175815][ T8715] dvb-usb: error while querying for an remote control event. [ 1566.285850][ T8715] m920x_read = error: -19 [ 1566.285875][ T8715] dvb-usb: error while querying for an remote control event. [ 1566.395942][ T8715] m920x_read = error: -19 [ 1566.395976][ T8715] dvb-usb: error while querying for an remote control event. [ 1566.516345][ T5868] m920x_read = error: -19 [ 1566.516380][ T5868] dvb-usb: error while querying for an remote control event. [ 1566.625975][ T5868] m920x_read = error: -19 [ 1566.625998][ T5868] dvb-usb: error while querying for an remote control event. [ 1566.736142][ T5868] m920x_read = error: -19 [ 1566.736174][ T5868] dvb-usb: error while querying for an remote control event. [ 1566.738113][T15677] usb 6-1: USB disconnect, device number 124 [ 1566.854440][ T5868] m920x_read = error: -19 [ 1566.854471][ T5868] dvb-usb: error while querying for an remote control event. [ 1566.965927][ T8715] m920x_read = error: -19 [ 1566.965957][ T8715] dvb-usb: error while querying for an remote control event. [ 1567.035822][ T5868] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1567.078943][ T10] m920x_read = error: -19 [ 1567.078974][ T10] dvb-usb: error while querying for an remote control event. [ 1567.163351][T26462] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1567.170295][T26462] IPVS: length: 528 != 279172874352 [ 1567.172082][T26462] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1567.181711][T26463] ALSA: mixer_oss: invalid OSS volume '' [ 1567.205643][ T8715] m920x_read = error: -19 [ 1567.205675][ T8715] dvb-usb: error while querying for an remote control event. [ 1567.225549][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1567.227561][ T5868] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1567.227586][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.235871][ T5868] usb 2-1: config 0 descriptor?? [ 1567.238913][ T5868] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1567.329159][ T8715] m920x_read = error: -19 [ 1567.329193][ T8715] dvb-usb: error while querying for an remote control event. [ 1567.349475][T26463] cgroup: fork rejected by pids controller in /syz4 [ 1567.444013][ T8715] m920x_read = error: -19 [ 1567.444045][ T8715] dvb-usb: error while querying for an remote control event. [ 1567.663195][ T10] m920x_read = error: -19 [ 1567.663219][ T10] dvb-usb: error while querying for an remote control event. [ 1567.894255][ T10] m920x_read = error: -19 [ 1567.894283][ T10] dvb-usb: error while querying for an remote control event. [ 1567.908842][T26452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.914042][T26452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.996054][ T10] m920x_read = error: -19 [ 1567.996084][ T10] dvb-usb: error while querying for an remote control event. [ 1568.115937][ T10] m920x_read = error: -19 [ 1568.115968][ T10] dvb-usb: error while querying for an remote control event. [ 1568.225945][ T8715] m920x_read = error: -19 [ 1568.225969][ T8715] dvb-usb: error while querying for an remote control event. [ 1568.342205][ T8715] m920x_read = error: -19 [ 1568.342237][ T8715] dvb-usb: error while querying for an remote control event. [ 1568.446493][ T10] m920x_read = error: -19 [ 1568.446525][ T10] dvb-usb: error while querying for an remote control event. [ 1568.535530][ T8715] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1568.538835][ T5868] gspca_sonixj: reg_w1 err -71 [ 1568.572855][T19363] m920x_read = error: -19 [ 1568.572887][T19363] dvb-usb: error while querying for an remote control event. [ 1568.573065][ T5868] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1568.584867][ T5868] usb 2-1: USB disconnect, device number 68 [ 1568.675794][T19363] m920x_read = error: -19 [ 1568.675815][T19363] dvb-usb: error while querying for an remote control event. [ 1568.746809][ T8715] usb 6-1: Using ep0 maxpacket: 32 [ 1568.747645][ T8715] usb 6-1: too many configurations: 183, using maximum allowed: 8 [ 1568.749327][ T8715] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1568.749365][ T8715] usb 6-1: can't read configurations, error -61 [ 1568.786397][T19363] m920x_read = error: -19 [ 1568.786421][T19363] dvb-usb: error while querying for an remote control event. [ 1568.875859][ T8715] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1569.392617][ T5868] m920x_read = error: -19 [ 1569.392650][ T5868] dvb-usb: error while querying for an remote control event. [ 1569.610082][T19363] m920x_read = error: -19 [ 1569.610107][T19363] dvb-usb: error while querying for an remote control event. [ 1569.636752][T27243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4683'. [ 1569.716006][T19363] m920x_read = error: -19 [ 1569.716035][T19363] dvb-usb: error while querying for an remote control event. [ 1569.875676][ T5868] m920x_read = error: -19 [ 1569.875699][ T5868] dvb-usb: error while querying for an remote control event. [ 1569.992236][T19363] m920x_read = error: -19 [ 1569.992259][T19363] dvb-usb: error while querying for an remote control event. [ 1570.142431][T19363] m920x_read = error: -19 [ 1570.142462][T19363] dvb-usb: error while querying for an remote control event. [ 1570.260057][ T5868] m920x_read = error: -19 [ 1570.260089][ T5868] dvb-usb: error while querying for an remote control event. [ 1570.373070][ T5868] m920x_read = error: -19 [ 1570.373095][ T5868] dvb-usb: error while querying for an remote control event. [ 1570.476851][T19363] m920x_read = error: -19 [ 1570.476886][T19363] dvb-usb: error while querying for an remote control event. [ 1570.523678][ T8715] usb 6-1: Using ep0 maxpacket: 32 [ 1570.525056][ T8715] usb 6-1: too many configurations: 183, using maximum allowed: 8 [ 1570.528981][ T8715] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1570.640301][T19363] m920x_read = error: -19 [ 1570.644724][T19363] dvb-usb: error while querying for an remote control event. [ 1570.789144][T19363] m920x_read = error: -19 [ 1570.793567][T19363] dvb-usb: error while querying for an remote control event. [ 1570.801352][ T8715] usb 6-1: can't read configurations, error -61 [ 1570.818893][ T8715] usb usb6-port1: attempt power cycle [ 1570.968553][T19363] m920x_read = error: -19 [ 1570.972982][T19363] dvb-usb: error while querying for an remote control event. [ 1571.133517][T19363] m920x_read = error: -19 [ 1571.143894][T19363] dvb-usb: error while querying for an remote control event. [ 1571.235578][ T8715] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1571.275599][T19363] m920x_read = error: -19 [ 1571.280021][T19363] dvb-usb: error while querying for an remote control event. [ 1571.353555][ T8715] usb 6-1: device descriptor read/8, error -71 [ 1571.415763][T19363] m920x_read = error: -19 [ 1571.420200][T19363] dvb-usb: error while querying for an remote control event. [ 1571.739483][T19363] m920x_read = error: -19 [ 1571.743899][T19363] dvb-usb: error while querying for an remote control event. [ 1571.800619][T27253] random: crng reseeded on system resumption [ 1571.867939][T27267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4689'. [ 1571.879276][T27267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4689'. [ 1571.895742][T19363] m920x_read = error: -19 [ 1571.900407][T19363] dvb-usb: error while querying for an remote control event. [ 1572.070428][ T10] m920x_read = error: -19 [ 1572.077903][ T10] dvb-usb: error while querying for an remote control event. [ 1572.195928][ T10] m920x_read = error: -19 [ 1572.200460][ T10] dvb-usb: error while querying for an remote control event. [ 1572.335694][ T10] m920x_read = error: -19 [ 1572.340418][ T10] dvb-usb: error while querying for an remote control event. [ 1572.455595][T19363] m920x_read = error: -19 [ 1572.460207][T19363] dvb-usb: error while querying for an remote control event. [ 1572.575586][T19363] m920x_read = error: -19 [ 1572.580015][T19363] dvb-usb: error while querying for an remote control event. [ 1572.994578][ T8715] m920x_read = error: -19 [ 1573.003787][ T8715] dvb-usb: error while querying for an remote control event. [ 1573.136241][ T8715] m920x_read = error: -19 [ 1573.140654][ T8715] dvb-usb: error while querying for an remote control event. [ 1573.268213][ T10] m920x_read = error: -19 [ 1573.268241][ T10] dvb-usb: error while querying for an remote control event. [ 1573.375562][T19363] m920x_read = error: -19 [ 1573.375596][T19363] dvb-usb: error while querying for an remote control event. [ 1573.485597][T19363] m920x_read = error: -19 [ 1573.485627][T19363] dvb-usb: error while querying for an remote control event. [ 1573.595737][ T8715] m920x_read = error: -19 [ 1573.600218][ T8715] dvb-usb: error while querying for an remote control event. [ 1573.609908][T27276] netlink: 'syz.4.4691': attribute type 29 has an invalid length. [ 1573.727443][ T8715] m920x_read = error: -19 [ 1573.732840][ T8715] dvb-usb: error while querying for an remote control event. [ 1573.774815][T27279] syzkaller1: entered promiscuous mode [ 1573.893961][ T8715] m920x_read = error: -19 [ 1573.898768][ T8715] dvb-usb: error while querying for an remote control event. [ 1573.906896][T27279] syzkaller1: entered allmulticast mode [ 1574.025612][ T8715] m920x_read = error: -19 [ 1574.030363][ T8715] dvb-usb: error while querying for an remote control event. [ 1574.145565][T19363] m920x_read = error: -19 [ 1574.150148][T19363] dvb-usb: error while querying for an remote control event. [ 1574.266904][T19363] m920x_read = error: -19 [ 1574.271339][T19363] dvb-usb: error while querying for an remote control event. [ 1574.395679][T19363] m920x_read = error: -19 [ 1574.400367][T19363] dvb-usb: error while querying for an remote control event. [ 1574.575801][T19363] m920x_read = error: -19 [ 1574.581473][T19363] dvb-usb: error while querying for an remote control event. [ 1574.695968][T19363] m920x_read = error: -19 [ 1574.700660][T19363] dvb-usb: error while querying for an remote control event. [ 1574.850853][T27296] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1574.860067][ T10] m920x_read = error: -19 [ 1574.864627][ T10] dvb-usb: error while querying for an remote control event. [ 1574.882732][T27296] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1574.995643][ T10] m920x_read = error: -19 [ 1575.003005][ T10] dvb-usb: error while querying for an remote control event. [ 1575.171081][ T10] m920x_read = error: -19 [ 1575.176948][ T10] dvb-usb: error while querying for an remote control event. [ 1575.217548][T27299] xt_CT: No such helper "pptp" [ 1575.279118][T25577] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.295625][ T10] m920x_read = error: -19 [ 1575.300095][ T10] dvb-usb: error while querying for an remote control event. [ 1575.316966][T25577] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.404072][T25577] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.432013][T25577] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.442408][ T10] m920x_read = error: -19 [ 1575.451037][ T10] dvb-usb: error while querying for an remote control event. [ 1575.565627][ T10] m920x_read = error: -19 [ 1575.684203][ T10] dvb-usb: error while querying for an remote control event. [ 1575.806044][ T10] m920x_read = error: -19 [ 1575.818488][ T10] dvb-usb: error while querying for an remote control event. [ 1576.076038][ T10] m920x_read = error: -19 [ 1576.080516][ T10] dvb-usb: error while querying for an remote control event. [ 1576.196292][ T10] m920x_read = error: -19 [ 1576.204353][ T10] dvb-usb: error while querying for an remote control event. [ 1576.316919][ T10] m920x_read = error: -19 [ 1576.321604][ T10] dvb-usb: error while querying for an remote control event. [ 1576.436110][T19363] m920x_read = error: -19 [ 1576.443342][T19363] dvb-usb: error while querying for an remote control event. [ 1576.555633][T19363] m920x_read = error: -19 [ 1576.560149][T19363] dvb-usb: error while querying for an remote control event. [ 1576.676276][T19363] m920x_read = error: -19 [ 1576.680957][T19363] dvb-usb: error while querying for an remote control event. [ 1576.865829][T19363] m920x_read = error: -19 [ 1576.891248][T19363] dvb-usb: error while querying for an remote control event. [ 1577.016150][T19363] m920x_read = error: -19 [ 1577.020593][T19363] dvb-usb: error while querying for an remote control event. [ 1577.147051][T19363] m920x_read = error: -19 [ 1577.151914][T19363] dvb-usb: error while querying for an remote control event. [ 1577.305580][T19363] m920x_read = error: -19 [ 1577.310086][T19363] dvb-usb: error while querying for an remote control event. [ 1577.436104][T19363] m920x_read = error: -19 [ 1577.440665][T19363] dvb-usb: error while querying for an remote control event. [ 1577.485821][T15474] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1577.555580][ T8715] m920x_read = error: -19 [ 1577.560040][ T8715] dvb-usb: error while querying for an remote control event. [ 1577.615725][T15474] usb 2-1: device descriptor read/64, error -71 [ 1577.690484][ T8715] m920x_read = error: -19 [ 1577.701262][ T8715] dvb-usb: error while querying for an remote control event. [ 1577.855664][ T8715] m920x_read = error: -19 [ 1577.860139][ T8715] dvb-usb: error while querying for an remote control event. [ 1577.875815][T15474] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1577.975930][ T8715] m920x_read = error: -19 [ 1577.980610][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.007656][T15474] usb 2-1: device descriptor read/64, error -71 [ 1578.095604][ T8715] m920x_read = error: -19 [ 1578.100087][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.120569][T15474] usb usb2-port1: attempt power cycle [ 1578.215557][ T8715] m920x_read = error: -19 [ 1578.220077][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.335719][ T8715] m920x_read = error: -19 [ 1578.340427][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.371997][T27333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 1578.455666][ T8715] m920x_read = error: -19 [ 1578.460125][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.483876][T15474] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1578.526323][T15474] usb 2-1: device descriptor read/8, error -71 [ 1578.601800][ T8715] m920x_read = error: -19 [ 1578.607786][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.658503][T27337] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4708'. [ 1578.725792][ T8715] m920x_read = error: -19 [ 1578.731784][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.756345][T27341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1578.765503][T15474] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1578.786290][T15474] usb 2-1: device descriptor read/8, error -71 [ 1578.846785][ T8715] m920x_read = error: -19 [ 1578.851255][ T8715] dvb-usb: error while querying for an remote control event. [ 1578.896105][T15474] usb usb2-port1: unable to enumerate USB device [ 1578.959900][T27345] Context (ID=0x4df) not attached to queue pair (handle=0x2:0x2) [ 1578.968824][ T8715] m920x_read = error: -19 [ 1578.973233][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.045129][T27348] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4712'. [ 1579.065863][T15474] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1579.085640][ T8715] m920x_read = error: -19 [ 1579.090022][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.215613][T15474] usb 6-1: Using ep0 maxpacket: 32 [ 1579.225570][ T8715] m920x_read = error: -19 [ 1579.230097][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.230389][T15474] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1579.255778][T15474] usb 6-1: config 2 has no interface number 0 [ 1579.366146][T19363] m920x_read = error: -19 [ 1579.370862][T19363] dvb-usb: error while querying for an remote control event. [ 1579.386748][T15474] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1579.398641][T15474] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1579.409460][T15474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.418373][T15474] usb 6-1: Product: syz [ 1579.422683][T15474] usb 6-1: Manufacturer: syz [ 1579.431199][T15474] usb 6-1: SerialNumber: syz [ 1579.486090][ T8715] m920x_read = error: -19 [ 1579.490501][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.605699][ T8715] m920x_read = error: -19 [ 1579.610397][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.736045][ T8715] m920x_read = error: -19 [ 1579.741095][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.856049][ T8715] m920x_read = error: -19 [ 1579.860736][ T8715] dvb-usb: error while querying for an remote control event. [ 1579.975621][ T8715] m920x_read = error: -19 [ 1579.980078][ T8715] dvb-usb: error while querying for an remote control event. [ 1580.105640][ T8715] m920x_read = error: -19 [ 1580.110249][ T8715] dvb-usb: error while querying for an remote control event. [ 1580.225598][T19363] m920x_read = error: -19 [ 1580.230357][T19363] dvb-usb: error while querying for an remote control event. [ 1580.315575][ T8715] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1580.345659][T19363] m920x_read = error: -19 [ 1580.350121][T19363] dvb-usb: error while querying for an remote control event. [ 1580.455575][ T8715] usb 5-1: device descriptor read/64, error -71 [ 1580.475932][ T5868] m920x_read = error: -19 [ 1580.480347][ T5868] dvb-usb: error while querying for an remote control event. [ 1580.482827][T15474] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1580.530144][T15474] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1580.547389][T15474] asix 6-1:2.88: probe with driver asix failed with error -71 [ 1580.571117][T15474] usb 6-1: USB disconnect, device number 3 [ 1580.635724][T19363] m920x_read = error: -19 [ 1580.640426][T19363] dvb-usb: error while querying for an remote control event. [ 1580.705953][ T8715] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1580.765547][T19363] m920x_read = error: -19 [ 1580.773659][T19363] dvb-usb: error while querying for an remote control event. [ 1580.845514][ T8715] usb 5-1: device descriptor read/64, error -71 [ 1580.887385][T19363] m920x_read = error: -19 [ 1580.891763][T19363] dvb-usb: error while querying for an remote control event. [ 1580.956667][ T8715] usb usb5-port1: attempt power cycle [ 1580.983255][T27371] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:0 [ 1581.005581][T19363] m920x_read = error: -19 [ 1581.009983][T19363] dvb-usb: error while querying for an remote control event. [ 1581.125775][T19363] m920x_read = error: -19 [ 1581.133890][T19363] dvb-usb: error while querying for an remote control event. [ 1581.247651][T19363] m920x_read = error: -19 [ 1581.252786][T19363] dvb-usb: error while querying for an remote control event. [ 1581.308209][ T8715] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1581.335522][T15474] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1581.339319][ T8715] usb 5-1: device descriptor read/8, error -71 [ 1581.365764][ T5868] m920x_read = error: -19 [ 1581.370488][ T5868] dvb-usb: error while querying for an remote control event. [ 1581.475940][T15474] usb 6-1: device descriptor read/64, error -71 [ 1581.485929][ T5868] m920x_read = error: -19 [ 1581.490331][ T5868] dvb-usb: error while querying for an remote control event. [ 1581.545896][ T5920] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1581.586297][ T8715] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1581.605815][ T5868] m920x_read = error: -19 [ 1581.610203][ T5868] dvb-usb: error while querying for an remote control event. [ 1581.634020][ T8715] usb 5-1: device descriptor read/8, error -71 [ 1581.659399][T27381] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4722'. [ 1581.695870][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1581.719959][T15474] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1581.736256][ T5868] m920x_read = error: -19 [ 1581.741848][ T5868] dvb-usb: error while querying for an remote control event. [ 1581.755865][ T8715] usb usb5-port1: unable to enumerate USB device [ 1581.855571][T15474] usb 6-1: device descriptor read/64, error -71 [ 1581.869232][ T8715] m920x_read = error: -19 [ 1581.873609][ T8715] dvb-usb: error while querying for an remote control event. [ 1581.945674][ T5920] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1581.966077][T15474] usb usb6-port1: attempt power cycle [ 1581.989270][ T8715] m920x_read = error: -19 [ 1581.993659][ T8715] dvb-usb: error while querying for an remote control event. [ 1582.075555][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1582.106904][ T8715] m920x_read = error: -19 [ 1582.111706][ T8715] dvb-usb: error while querying for an remote control event. [ 1582.199093][ T5920] usb usb2-port1: attempt power cycle [ 1582.234375][ T5868] m920x_read = error: -19 [ 1582.239722][ T5868] dvb-usb: error while querying for an remote control event. [ 1582.315961][T15474] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1582.346473][T15474] usb 6-1: device descriptor read/8, error -71 [ 1582.355915][ T5868] m920x_read = error: -19 [ 1582.360526][ T5868] dvb-usb: error while querying for an remote control event. [ 1582.476132][ T5868] m920x_read = error: -19 [ 1582.480590][ T5868] dvb-usb: error while querying for an remote control event. [ 1582.555791][ T5920] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1582.585602][T15474] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1582.593644][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1582.596514][ T5868] m920x_read = error: -19 [ 1582.604615][ T5868] dvb-usb: error while querying for an remote control event. [ 1582.616052][T15474] usb 6-1: device descriptor read/8, error -71 [ 1582.715967][ T5868] m920x_read = error: -19 [ 1582.720511][ T5868] dvb-usb: error while querying for an remote control event. [ 1582.735827][T15474] usb usb6-port1: unable to enumerate USB device [ 1582.835816][ T5868] m920x_read = error: -19 [ 1582.835860][ T5920] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1582.840226][ T5868] dvb-usb: error while querying for an remote control event. [ 1582.869365][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1582.965799][ T8715] m920x_read = error: -19 [ 1582.970434][ T8715] dvb-usb: error while querying for an remote control event. [ 1582.989012][ T5920] usb usb2-port1: unable to enumerate USB device [ 1583.085807][ T8715] m920x_read = error: -19 [ 1583.090598][ T8715] dvb-usb: error while querying for an remote control event. [ 1583.206733][ T5868] m920x_read = error: -19 [ 1583.212059][ T5868] dvb-usb: error while querying for an remote control event. [ 1583.325631][ T5868] m920x_read = error: -19 [ 1583.330128][ T5868] dvb-usb: error while querying for an remote control event. [ 1583.446038][ T5868] m920x_read = error: -19 [ 1583.451492][ T5868] dvb-usb: error while querying for an remote control event. [ 1583.465543][ T8715] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1583.565866][ T5868] m920x_read = error: -19 [ 1583.570366][ T5868] dvb-usb: error while querying for an remote control event. [ 1583.615576][ T8715] usb 5-1: Using ep0 maxpacket: 32 [ 1583.623062][ T8715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.633571][ T8715] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1583.642603][ T8715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1583.651080][ T8715] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1583.660806][ T8715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1583.668937][ T8715] usb 5-1: SerialNumber: syz [ 1583.676591][ T8715] usb 5-1: config 0 descriptor?? [ 1583.685573][ T5868] m920x_read = error: -19 [ 1583.690050][ T5868] dvb-usb: error while querying for an remote control event. [ 1583.698369][ T8715] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1583.708374][ T8715] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1583.815573][ T5868] m920x_read = error: -19 [ 1583.820191][ T5868] dvb-usb: error while querying for an remote control event. [ 1583.889256][ T5920] usb 5-1: USB disconnect, device number 31 [ 1583.935625][ T5868] m920x_read = error: -19 [ 1583.940079][ T5868] dvb-usb: error while querying for an remote control event. [ 1584.056305][ T5868] m920x_read = error: -19 [ 1584.060773][ T5868] dvb-usb: error while querying for an remote control event. [ 1584.176308][ T8715] m920x_read = error: -19 [ 1584.180896][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.295633][ T8715] m920x_read = error: -19 [ 1584.300051][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.425656][ T8715] m920x_read = error: -19 [ 1584.439128][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.525733][ T5868] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1584.566157][ T8715] m920x_read = error: -19 [ 1584.573496][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.686258][ T8715] m920x_read = error: -19 [ 1584.690668][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.698318][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 1584.716940][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.735486][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1584.747733][ T5868] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1584.757196][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.765356][ T5868] usb 6-1: Product: syz [ 1584.769794][ T5868] usb 6-1: Manufacturer: syz [ 1584.774498][ T5868] usb 6-1: SerialNumber: syz [ 1584.825919][ T8715] m920x_read = error: -19 [ 1584.830597][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.945652][ T8715] m920x_read = error: -19 [ 1584.950284][ T8715] dvb-usb: error while querying for an remote control event. [ 1584.998819][T27395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.029016][T27395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.066971][ T8715] m920x_read = error: -19 [ 1585.090809][ T8715] dvb-usb: error while querying for an remote control event. [ 1585.215679][ T10] m920x_read = error: -19 [ 1585.220190][ T10] dvb-usb: error while querying for an remote control event. [ 1585.351056][ T10] m920x_read = error: -19 [ 1585.366333][ T10] dvb-usb: error while querying for an remote control event. [ 1585.460214][ T5868] usb 6-1: 0:2 : does not exist [ 1585.485593][ T8715] m920x_read = error: -19 [ 1585.495534][ T8715] dvb-usb: error while querying for an remote control event. [ 1585.615561][ T10] m920x_read = error: -19 [ 1585.620682][ T10] dvb-usb: error while querying for an remote control event. [ 1585.642417][T27420] syzkaller0: entered promiscuous mode [ 1585.655822][T27420] syzkaller0: entered allmulticast mode [ 1585.757095][ T10] m920x_read = error: -19 [ 1585.765140][ T10] dvb-usb: error while querying for an remote control event. [ 1585.907810][ T10] m920x_read = error: -19 [ 1585.912618][ T10] dvb-usb: error while querying for an remote control event. [ 1586.036004][ T10] m920x_read = error: -19 [ 1586.045992][ T10] dvb-usb: error while querying for an remote control event. [ 1586.175575][ T8715] m920x_read = error: -19 [ 1586.180806][ T8715] dvb-usb: error while querying for an remote control event. [ 1586.260300][ T10] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1586.302808][T27435] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.308919][T27435] binder: 27430:27435 ioctl 4018620d 200000004a80 returned -16 [ 1586.317338][ T8715] m920x_read = error: -19 [ 1586.322874][ T8715] dvb-usb: error while querying for an remote control event. [ 1586.435618][ T8715] m920x_read = error: -19 [ 1586.440134][ T8715] dvb-usb: error while querying for an remote control event. [ 1586.447748][ T10] usb 2-1: device descriptor read/64, error -71 [ 1586.517944][T27437] syzkaller0: entered promiscuous mode [ 1586.531665][T27437] syzkaller0: entered allmulticast mode [ 1586.556481][ T8715] m920x_read = error: -19 [ 1586.560949][ T8715] dvb-usb: error while querying for an remote control event. [ 1586.680261][ T8715] m920x_read = error: -19 [ 1586.686217][ T8715] dvb-usb: error while querying for an remote control event. [ 1586.694023][ T10] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1586.806382][ T8715] m920x_read = error: -19 [ 1586.819166][ T8715] dvb-usb: error while querying for an remote control event. [ 1586.843268][ T10] usb 2-1: device descriptor read/64, error -71 [ 1586.996698][ T8715] m920x_read = error: -19 [ 1587.001373][ T10] usb usb2-port1: attempt power cycle [ 1587.008292][ T8715] dvb-usb: error while querying for an remote control event. [ 1587.155996][T19363] m920x_read = error: -19 [ 1587.246340][T19363] dvb-usb: error while querying for an remote control event. [ 1587.411901][T27443] sctp: [Deprecated]: syz.7.4743 (pid 27443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1587.411901][T27443] Use struct sctp_sack_info instead [ 1587.429028][ T8715] m920x_read = error: -19 [ 1587.433436][ T8715] dvb-usb: error while querying for an remote control event. [ 1587.512758][ T5868] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1587.520935][ T10] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1587.565758][ T8715] m920x_read = error: -19 [ 1587.570198][ T8715] dvb-usb: error while querying for an remote control event. [ 1587.596552][ T10] usb 2-1: device descriptor read/8, error -71 [ 1587.759838][T19363] m920x_read = error: -19 [ 1587.801705][T19363] dvb-usb: error while querying for an remote control event. [ 1587.816991][ T5868] usb 6-1: USB disconnect, device number 8 [ 1587.835631][ T10] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1587.888037][ T10] usb 2-1: device descriptor read/8, error -71 [ 1587.945599][T19363] m920x_read = error: -19 [ 1587.949994][T19363] dvb-usb: error while querying for an remote control event. [ 1587.960968][ T8693] udevd[8693]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.996338][ T10] usb usb2-port1: unable to enumerate USB device [ 1588.096270][ T5868] m920x_read = error: -19 [ 1588.141646][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.253525][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4745'. [ 1588.265800][ T5868] m920x_read = error: -19 [ 1588.277140][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.356949][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1588.356963][ T30] audit: type=1800 audit(1772105252.077:3136): pid=27449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4746" name="memory.events" dev="tmpfs" ino=605 res=0 errno=0 [ 1588.402365][ T5868] m920x_read = error: -19 [ 1588.414800][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.466533][T27451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4745'. [ 1588.491947][T27451] macsec1: entered promiscuous mode [ 1588.514582][T27451] batadv_slave_1: entered promiscuous mode [ 1588.526111][T27451] macsec1: entered allmulticast mode [ 1588.527198][ T5868] m920x_read = error: -19 [ 1588.531648][T27451] batadv_slave_1: entered allmulticast mode [ 1588.545778][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.556357][T27451] batadv_slave_1: left allmulticast mode [ 1588.582248][T27451] batadv_slave_1: left promiscuous mode [ 1588.666103][ T5868] m920x_read = error: -19 [ 1588.670668][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.757708][T27453] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1588.795852][ T5868] m920x_read = error: -19 [ 1588.800262][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.925922][ T5868] m920x_read = error: -19 [ 1588.930429][ T5868] dvb-usb: error while querying for an remote control event. [ 1588.972805][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1589.013520][T27465] netlink: 'syz.4.4750': attribute type 13 has an invalid length. [ 1589.052407][ T5868] m920x_read = error: -19 [ 1589.062556][ T5868] dvb-usb: error while querying for an remote control event. [ 1589.185578][ T5868] m920x_read = error: -19 [ 1589.190079][ T5868] dvb-usb: error while querying for an remote control event. [ 1589.335599][ T10] m920x_read = error: -19 [ 1589.341035][ T10] dvb-usb: error while querying for an remote control event. [ 1589.355805][ T5868] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1589.496096][T19363] m920x_read = error: -19 [ 1589.500694][T19363] dvb-usb: error while querying for an remote control event. [ 1589.536561][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 1589.547952][ T5868] usb 2-1: config 6 has an invalid interface number: 241 but max is 0 [ 1589.573994][ T5868] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.584817][ T5868] usb 2-1: config 6 has no interface number 0 [ 1589.591615][ T5868] usb 2-1: config 6 interface 241 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1589.605729][ T5868] usb 2-1: config 6 interface 241 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1589.620161][T19363] m920x_read = error: -19 [ 1589.625636][T19363] dvb-usb: error while querying for an remote control event. [ 1589.848597][ T5868] usb 2-1: config 6 interface 241 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 1589.862683][ T5868] usb 2-1: config 6 interface 241 has no altsetting 0 [ 1589.880628][ T5868] usb 2-1: New USB device found, idVendor=06f8, idProduct=e010, bcdDevice=9b.87 [ 1589.903951][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.932135][ T5868] usb 2-1: Product: syz [ 1589.977194][T19363] m920x_read = error: -19 [ 1589.985162][T19363] dvb-usb: error while querying for an remote control event. [ 1589.997176][ T5868] usb 2-1: Manufacturer: syz [ 1590.016425][ T5868] usb 2-1: SerialNumber: syz [ 1590.125757][ T8715] m920x_read = error: -19 [ 1590.130241][ T8715] dvb-usb: error while querying for an remote control event. [ 1590.267984][T19363] m920x_read = error: -19 [ 1590.419695][ T5868] usb 2-1: USB disconnect, device number 81 [ 1590.426328][T19363] dvb-usb: error while querying for an remote control event. [ 1590.536951][ T8715] m920x_read = error: -19 [ 1590.550978][ T8715] dvb-usb: error while querying for an remote control event. [ 1590.675591][ T5868] m920x_read = error: -19 [ 1590.682870][ T5868] dvb-usb: error while querying for an remote control event. [ 1590.815757][ T5868] m920x_read = error: -19 [ 1590.820263][ T5868] dvb-usb: error while querying for an remote control event. [ 1590.936720][ T8715] m920x_read = error: -19 [ 1590.941136][ T8715] dvb-usb: error while querying for an remote control event. [ 1590.990166][T27491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1591.056021][ T8715] m920x_read = error: -19 [ 1591.065849][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.091498][T27488] syzkaller1: entered promiscuous mode [ 1591.113306][T27488] syzkaller1: entered allmulticast mode [ 1591.215781][ T8715] m920x_read = error: -19 [ 1591.236838][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.255005][T27489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1591.355514][ T8715] m920x_read = error: -19 [ 1591.356439][ T5920] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1591.361070][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.505687][ T8715] m920x_read = error: -19 [ 1591.512065][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.545479][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1591.556611][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.569746][ T5920] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1591.579360][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.593840][ T5920] usb 2-1: Product: syz [ 1591.605216][ T5920] usb 2-1: Manufacturer: syz [ 1591.625552][ T8715] m920x_read = error: -19 [ 1591.628611][ T5920] usb 2-1: SerialNumber: syz [ 1591.633993][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.647992][ T5920] usb 2-1: config 0 descriptor?? [ 1591.661353][ T5920] usb 2-1: bad CDC descriptors [ 1591.670075][ T5920] usb 2-1: unsupported MDLM descriptors [ 1591.765869][ T8715] m920x_read = error: -19 [ 1591.778294][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.860450][T27495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.879835][T27495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.903043][T27495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.916296][ T8715] m920x_read = error: -19 [ 1591.922604][ T8715] dvb-usb: error while querying for an remote control event. [ 1591.926982][T27495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.964635][T27495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.995356][T27495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.020171][T27495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.047111][T27495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.056133][ T8715] m920x_read = error: -19 [ 1592.067565][ T5920] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1592.095724][T27495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.104593][ T8715] dvb-usb: error while querying for an remote control event. [ 1592.119897][T27495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.162125][ T8715] usb 2-1: USB disconnect, device number 82 [ 1592.215666][ T5920] usb 6-1: device descriptor read/64, error -71 [ 1592.245782][T19363] m920x_read = error: -19 [ 1592.250464][T19363] dvb-usb: error while querying for an remote control event. [ 1592.365683][ T8715] m920x_read = error: -19 [ 1592.371789][ T8715] dvb-usb: error while querying for an remote control event. [ 1592.456026][ T5920] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1592.486949][T19363] m920x_read = error: -19 [ 1592.491418][T19363] dvb-usb: error while querying for an remote control event. [ 1592.585641][ T5920] usb 6-1: device descriptor read/64, error -71 [ 1592.615623][T19363] m920x_read = error: -19 [ 1592.620393][T19363] dvb-usb: error while querying for an remote control event. [ 1592.696134][ T5920] usb usb6-port1: attempt power cycle [ 1592.739567][T19363] m920x_read = error: -19 [ 1592.744705][T19363] dvb-usb: error while querying for an remote control event. [ 1592.855699][T19363] m920x_read = error: -19 [ 1592.860468][T19363] dvb-usb: error while querying for an remote control event. [ 1592.975989][T19363] m920x_read = error: -19 [ 1592.980627][T19363] dvb-usb: error while querying for an remote control event. [ 1593.055748][ T5920] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1593.076211][ T5920] usb 6-1: device descriptor read/8, error -71 [ 1593.095604][T19363] m920x_read = error: -19 [ 1593.099980][T19363] dvb-usb: error while querying for an remote control event. [ 1593.215643][T19363] m920x_read = error: -19 [ 1593.220360][T19363] dvb-usb: error while querying for an remote control event. [ 1593.325794][ T5920] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1593.335753][T19363] m920x_read = error: -19 [ 1593.340523][T19363] dvb-usb: error while querying for an remote control event. [ 1593.347683][ T5920] usb 6-1: device descriptor read/8, error -71 [ 1593.455651][T19363] m920x_read = error: -19 [ 1593.457802][ T5920] usb usb6-port1: unable to enumerate USB device [ 1593.467475][T19363] dvb-usb: error while querying for an remote control event. [ 1593.575576][T19363] m920x_read = error: -19 [ 1593.580094][T19363] dvb-usb: error while querying for an remote control event. [ 1593.706439][ T8715] m920x_read = error: -19 [ 1593.710830][ T8715] dvb-usb: error while querying for an remote control event. [ 1593.825858][ T8715] m920x_read = error: -19 [ 1593.830477][ T8715] dvb-usb: error while querying for an remote control event. [ 1593.905745][ T5920] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1593.945823][ T8715] m920x_read = error: -19 [ 1593.951344][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.065785][ T8715] m920x_read = error: -19 [ 1594.070510][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.070520][ T5920] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1594.103535][ T5920] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 1594.114870][ T5920] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 1594.124254][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.135569][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1594.144988][ T5920] usb 2-1: config 0 has no interface number 0 [ 1594.156356][ T5920] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1594.172279][ T5920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1594.183255][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.192816][ T5920] usb 2-1: Product: syz [ 1594.197697][ T5920] usb 2-1: Manufacturer: syz [ 1594.202437][ T5920] usb 2-1: SerialNumber: syz [ 1594.212046][ T5920] usb 2-1: config 0 descriptor?? [ 1594.224954][ T8715] m920x_read = error: -19 [ 1594.234547][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.355567][ T8715] m920x_read = error: -19 [ 1594.360909][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.425307][T27515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.441087][T27515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.517842][ T8715] m920x_read = error: -19 [ 1594.520700][ T5920] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1594.537656][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.537691][ T5920] usb 2-1: MIDIStreaming interface descriptor not found [ 1594.666050][ T8715] m920x_read = error: -19 [ 1594.670833][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.731534][ T5920] usb 2-1: USB disconnect, device number 83 [ 1594.785621][ T8715] m920x_read = error: -19 [ 1594.790082][ T8715] dvb-usb: error while querying for an remote control event. [ 1594.812896][ T8841] udevd[8841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1594.905829][ T8715] m920x_read = error: -19 [ 1594.910882][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.038425][ T8715] m920x_read = error: -19 [ 1595.048162][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.211715][ T8715] m920x_read = error: -19 [ 1595.219864][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.365616][ T8715] m920x_read = error: -19 [ 1595.370068][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.505912][ T8715] m920x_read = error: -19 [ 1595.510333][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.648110][ T8715] m920x_read = error: -19 [ 1595.659061][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.802246][ T8715] m920x_read = error: -19 [ 1595.821276][ T8715] dvb-usb: error while querying for an remote control event. [ 1595.945584][ T8715] m920x_read = error: -19 [ 1595.950170][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.066900][ T8715] m920x_read = error: -19 [ 1596.081359][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.160564][ T30] audit: type=1326 audit(1772105259.877:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.187511][T27545] fuse: Invalid rootmode [ 1596.216091][ T8715] m920x_read = error: -19 [ 1596.220490][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.252084][ T30] audit: type=1326 audit(1772105259.877:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.295529][ T30] audit: type=1326 audit(1772105259.877:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.339186][ T30] audit: type=1326 audit(1772105259.877:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.376244][ T8715] m920x_read = error: -19 [ 1596.385260][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.420383][ T30] audit: type=1326 audit(1772105259.907:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.471449][ T30] audit: type=1326 audit(1772105259.907:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.506177][ T8715] m920x_read = error: -19 [ 1596.512423][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.532718][ T30] audit: type=1326 audit(1772105259.907:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.561729][ T30] audit: type=1326 audit(1772105259.907:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.588380][ T30] audit: type=1326 audit(1772105259.907:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.621127][ T30] audit: type=1326 audit(1772105259.907:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.1.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cef9c629 code=0x7ffc0000 [ 1596.643853][ T8715] m920x_read = error: -19 [ 1596.648774][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.766026][ T8715] m920x_read = error: -19 [ 1596.785650][ T8715] dvb-usb: error while querying for an remote control event. [ 1596.905769][ T10] m920x_read = error: -19 [ 1596.910324][ T10] dvb-usb: error while querying for an remote control event. [ 1596.925530][ T8715] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1596.975537][ T5868] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1597.025614][ T10] m920x_read = error: -19 [ 1597.030038][ T10] dvb-usb: error while querying for an remote control event. [ 1597.055721][ T5920] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1597.075529][ T8715] usb 5-1: Using ep0 maxpacket: 32 [ 1597.083159][ T8715] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1597.091547][ T8715] usb 5-1: config 0 has no interface number 0 [ 1597.100288][ T8715] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1597.109609][ T5868] usb 2-1: device descriptor read/64, error -71 [ 1597.116228][ T8715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.124567][ T8715] usb 5-1: Product: syz [ 1597.129393][ T8715] usb 5-1: Manufacturer: syz [ 1597.134122][ T8715] usb 5-1: SerialNumber: syz [ 1597.141144][ T8715] usb 5-1: config 0 descriptor?? [ 1597.146729][T19363] m920x_read = error: -19 [ 1597.151114][T19363] dvb-usb: error while querying for an remote control event. [ 1597.161898][ T8715] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1597.225516][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 1597.233253][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.244206][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1597.253329][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1597.264067][ T5920] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1597.266081][T19363] m920x_read = error: -19 [ 1597.278562][T19363] dvb-usb: error while querying for an remote control event. [ 1597.283426][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1597.296147][ T5920] usb 6-1: SerialNumber: syz [ 1597.303712][ T5920] usb 6-1: config 0 descriptor?? [ 1597.312481][ T5920] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1597.324210][ T5920] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1597.365730][ T5868] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1597.382637][ T8715] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1597.395626][T19363] m920x_read = error: -19 [ 1597.400116][T19363] dvb-usb: error while querying for an remote control event. [ 1597.414147][ T8715] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1597.507202][ T5868] usb 2-1: device descriptor read/64, error -71 [ 1597.516437][ T8715] m920x_read = error: -19 [ 1597.520959][ T8715] dvb-usb: error while querying for an remote control event. [ 1597.532577][ T8715] usb 6-1: USB disconnect, device number 13 [ 1597.579206][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1597.588938][T19363] usb 5-1: USB disconnect, device number 32 [ 1597.604505][T19363] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1597.616838][ T5868] usb usb2-port1: attempt power cycle [ 1597.629452][T19363] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1597.641075][ T10] m920x_read = error: -19 [ 1597.648004][ T10] dvb-usb: error while querying for an remote control event. [ 1597.656387][T19363] quatech2 5-1:0.51: device disconnected [ 1597.765556][ T8715] m920x_read = error: -19 [ 1597.770009][ T8715] dvb-usb: error while querying for an remote control event. [ 1597.886111][T19363] m920x_read = error: -19 [ 1597.890506][T19363] dvb-usb: error while querying for an remote control event. [ 1597.965528][ T5868] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1597.986070][ T5868] usb 2-1: device descriptor read/8, error -71 [ 1598.005724][T19363] m920x_read = error: -19 [ 1598.010113][T19363] dvb-usb: error while querying for an remote control event. [ 1598.127420][T19363] m920x_read = error: -19 [ 1598.131976][T19363] dvb-usb: error while querying for an remote control event. [ 1598.252083][ T5868] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1598.268360][ T8715] m920x_read = error: -19 [ 1598.273097][ T8715] dvb-usb: error while querying for an remote control event. [ 1598.287165][T27568] syzkaller0: entered promiscuous mode [ 1598.292653][T27568] syzkaller0: entered allmulticast mode [ 1598.300258][ T5868] usb 2-1: device descriptor read/8, error -71 [ 1598.396306][ T8715] m920x_read = error: -19 [ 1598.400728][ T8715] dvb-usb: error while querying for an remote control event. [ 1598.426054][ T5868] usb usb2-port1: unable to enumerate USB device [ 1598.537828][ T5868] m920x_read = error: -19 [ 1598.542248][ T5868] dvb-usb: error while querying for an remote control event. [ 1598.554890][T27573] loop5: detected capacity change from 0 to 4096 [ 1598.655631][ T5868] m920x_read = error: -19 [ 1598.670493][ T5868] dvb-usb: error while querying for an remote control event. [ 1598.805777][ T5868] m920x_read = error: -19 [ 1598.810283][ T5868] dvb-usb: error while querying for an remote control event. [ 1598.860052][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4788'. [ 1598.905270][T27584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1598.929047][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4788'. [ 1599.007112][T27589] netlink: 'syz.6.4788': attribute type 4 has an invalid length. [ 1599.017941][ T5868] m920x_read = error: -19 [ 1599.025505][ T5868] dvb-usb: error while querying for an remote control event. [ 1599.033002][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4788'. [ 1599.061966][T27589] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4788'. [ 1599.092300][T27584] bond0: left allmulticast mode [ 1599.118562][T27584] team0: left allmulticast mode [ 1599.131082][T27584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.153995][T27584] bond4: (slave bond0): making interface the new active one [ 1599.162129][ T8715] m920x_read = error: -19 [ 1599.168904][ T8715] dvb-usb: error while querying for an remote control event. [ 1599.184097][T27584] bond4: (slave bond0): Enslaving as an active interface with an up link [ 1599.230029][T27589] .`: renamed from bond0 (while UP) [ 1599.285894][ T8715] m920x_read = error: -19 [ 1599.292840][ T8715] dvb-usb: error while querying for an remote control event. [ 1599.349624][T12303] bond4: (slave .`): link status definitely down, disabling slave [ 1599.370070][T12303] bond4: now running without any active interface! [ 1599.415595][ T8715] m920x_read = error: -19 [ 1599.420000][ T8715] dvb-usb: error while querying for an remote control event. [ 1599.555635][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1599.585625][ T8715] m920x_read = error: -19 [ 1599.590123][ T8715] dvb-usb: error while querying for an remote control event. [ 1599.796188][ T8715] m920x_read = error: -19 [ 1599.800651][ T8715] dvb-usb: error while querying for an remote control event. [ 1599.808227][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 1599.836797][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.850181][ T5868] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1599.861924][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1599.874369][ T5868] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1599.883792][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1599.948926][ T5868] usb 6-1: SerialNumber: syz [ 1599.956113][ T8715] m920x_read = error: -19 [ 1599.963185][ T8715] dvb-usb: error while querying for an remote control event. [ 1600.032911][ T5868] usb 6-1: config 0 descriptor?? [ 1600.077965][ T5868] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1600.085588][ T8715] m920x_read = error: -19 [ 1600.090045][ T8715] dvb-usb: error while querying for an remote control event. [ 1600.131556][ T5868] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1600.225607][ T8715] m920x_read = error: -19 [ 1600.230151][ T8715] dvb-usb: error while querying for an remote control event. [ 1600.314940][ T8715] usb 6-1: USB disconnect, device number 14 [ 1600.356157][ T5868] m920x_read = error: -19 [ 1600.363602][ T5868] dvb-usb: error while querying for an remote control event. [ 1600.505768][ T5868] m920x_read = error: -19 [ 1600.510185][ T5868] dvb-usb: error while querying for an remote control event. [ 1600.686910][ T5868] m920x_read = error: -19 [ 1600.691302][ T5868] dvb-usb: error while querying for an remote control event. [ 1600.752602][T27613] syzkaller0: entered promiscuous mode [ 1600.759038][T27613] syzkaller0: entered allmulticast mode [ 1600.781582][T27614] [ 1600.783979][T27614] ===================================================== [ 1600.790912][T27614] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1600.798556][T27614] syzkaller #0 Tainted: G L [ 1600.804544][T27614] ----------------------------------------------------- [ 1600.811480][T27614] syz.7.4793/27614 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1600.819204][T27614] ffff888025024168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1600.827924][T27614] [ 1600.827924][T27614] and this task is already holding: [ 1600.835301][T27614] ffff888022bbc028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1600.845107][T27614] which would create a new lock dependency: [ 1600.851028][T27614] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1600.859168][T27614] [ 1600.859168][T27614] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1600.868636][T27614] (&dev->event_lock#2){..-.}-{3:3} [ 1600.868676][T27614] [ 1600.868676][T27614] ... which became SOFTIRQ-irq-safe at: [ 1600.881602][T27614] lock_acquire+0xf0/0x2e0 [ 1600.886142][T27614] _raw_spin_lock_irqsave+0x40/0x60 [ 1600.891467][T27614] input_inject_event+0xa5/0x340 [ 1600.896526][T27614] led_trigger_event+0x138/0x210 [ 1600.901577][T27614] kbd_bh+0x1f3/0x300 [ 1600.905672][T27614] tasklet_action_common+0x2da/0x4b0 [ 1600.911072][T27614] handle_softirqs+0x22a/0x870 [ 1600.915967][T27614] __irq_exit_rcu+0x5f/0x150 [ 1600.920686][T27614] irq_exit_rcu+0x9/0x30 [ 1600.925081][T27614] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1600.930831][T27614] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1600.936925][T27614] _raw_spin_unlock_irq+0x29/0x50 [ 1600.942093][T27614] n_tty_ioctl_helper+0x38a/0x4d0 [ 1600.947227][T27614] tty_ioctl+0x9c5/0xde0 [ 1600.951577][T27614] __se_sys_ioctl+0xfc/0x170 [ 1600.956267][T27614] do_syscall_64+0x14d/0xf80 [ 1600.960975][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.966971][T27614] [ 1600.966971][T27614] to a SOFTIRQ-irq-unsafe lock: [ 1600.974000][T27614] (tasklist_lock){.+.+}-{3:3} [ 1600.974030][T27614] [ 1600.974030][T27614] ... which became SOFTIRQ-irq-unsafe at: [ 1600.986687][T27614] ... [ 1600.986699][T27614] lock_acquire+0xf0/0x2e0 [ 1600.993832][T27614] _raw_read_lock+0x36/0x50 [ 1600.998481][T27614] __do_wait+0xde/0x740 [ 1601.002751][T27614] do_wait+0x1e7/0x540 [ 1601.006953][T27614] kernel_wait+0xd6/0x1c0 [ 1601.011411][T27614] call_usermodehelper_exec_work+0xbe/0x230 [ 1601.017443][T27614] process_scheduled_works+0xb02/0x1830 [ 1601.023206][T27614] worker_thread+0xa50/0xfc0 [ 1601.027928][T27614] kthread+0x388/0x470 [ 1601.032149][T27614] ret_from_fork+0x51e/0xb90 [ 1601.036856][T27614] ret_from_fork_asm+0x1a/0x30 [ 1601.041741][T27614] [ 1601.041741][T27614] other info that might help us debug this: [ 1601.041741][T27614] [ 1601.051992][T27614] Chain exists of: [ 1601.051992][T27614] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1601.051992][T27614] [ 1601.065692][T27614] Possible interrupt unsafe locking scenario: [ 1601.065692][T27614] [ 1601.074033][T27614] CPU0 CPU1 [ 1601.079436][T27614] ---- ---- [ 1601.084829][T27614] lock(tasklist_lock); [ 1601.089103][T27614] local_irq_disable(); [ 1601.095898][T27614] lock(&dev->event_lock#2); [ 1601.103127][T27614] lock(&client->buffer_lock); [ 1601.110516][T27614] [ 1601.113991][T27614] lock(&dev->event_lock#2); [ 1601.118934][T27614] [ 1601.118934][T27614] *** DEADLOCK *** [ 1601.118934][T27614] [ 1601.127089][T27614] 7 locks held by syz.7.4793/27614: [ 1601.132303][T27614] #0: ffff88802c26a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1601.141569][T27614] #1: ffff88801dfb6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1601.151723][T27614] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1601.161430][T27614] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1601.171050][T27614] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1601.180370][T27614] #5: ffff888022bbc028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1601.190613][T27614] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1601.199755][T27614] [ 1601.199755][T27614] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1601.210193][T27614] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1601.215883][T27614] IN-SOFTIRQ-W at: [ 1601.220062][T27614] lock_acquire+0xf0/0x2e0 [ 1601.226345][T27614] _raw_spin_lock_irqsave+0x40/0x60 [ 1601.233521][T27614] input_inject_event+0xa5/0x340 [ 1601.240318][T27614] led_trigger_event+0x138/0x210 [ 1601.247121][T27614] kbd_bh+0x1f3/0x300 [ 1601.252951][T27614] tasklet_action_common+0x2da/0x4b0 [ 1601.260091][T27614] handle_softirqs+0x22a/0x870 [ 1601.266705][T27614] __irq_exit_rcu+0x5f/0x150 [ 1601.273144][T27614] irq_exit_rcu+0x9/0x30 [ 1601.279232][T27614] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1601.286770][T27614] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1601.294615][T27614] _raw_spin_unlock_irq+0x29/0x50 [ 1601.301503][T27614] n_tty_ioctl_helper+0x38a/0x4d0 [ 1601.308383][T27614] tty_ioctl+0x9c5/0xde0 [ 1601.314490][T27614] __se_sys_ioctl+0xfc/0x170 [ 1601.320925][T27614] do_syscall_64+0x14d/0xf80 [ 1601.327378][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.335127][T27614] INITIAL USE at: [ 1601.339136][T27614] lock_acquire+0xf0/0x2e0 [ 1601.345317][T27614] _raw_spin_lock_irqsave+0x40/0x60 [ 1601.352280][T27614] input_inject_event+0xa5/0x340 [ 1601.358987][T27614] kbd_led_trigger_activate+0xbc/0x100 [ 1601.366201][T27614] led_trigger_set+0x535/0x960 [ 1601.372748][T27614] led_trigger_set_default+0x260/0x2a0 [ 1601.379997][T27614] led_classdev_register_ext+0x787/0x9c0 [ 1601.387410][T27614] input_leds_connect+0x517/0x790 [ 1601.394204][T27614] input_register_device+0xd00/0x1160 [ 1601.401345][T27614] atkbd_connect+0x731/0xa50 [ 1601.407706][T27614] serio_driver_probe+0x82/0xd0 [ 1601.414322][T27614] really_probe+0x267/0xaf0 [ 1601.420668][T27614] __driver_probe_device+0x18c/0x320 [ 1601.427710][T27614] driver_probe_device+0x4f/0x240 [ 1601.434500][T27614] __driver_attach+0x3e7/0x710 [ 1601.441025][T27614] bus_for_each_dev+0x23b/0x2c0 [ 1601.447646][T27614] serio_handle_event+0x20a/0xdd0 [ 1601.454516][T27614] process_scheduled_works+0xb02/0x1830 [ 1601.461820][T27614] worker_thread+0xa50/0xfc0 [ 1601.468178][T27614] kthread+0x388/0x470 [ 1601.474000][T27614] ret_from_fork+0x51e/0xb90 [ 1601.480358][T27614] ret_from_fork_asm+0x1a/0x30 [ 1601.486889][T27614] } [ 1601.489491][T27614] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1601.498662][T27614] -> (&client->buffer_lock){....}-{3:3} { [ 1601.504421][T27614] INITIAL USE at: [ 1601.508337][T27614] lock_acquire+0xf0/0x2e0 [ 1601.514344][T27614] _raw_spin_lock+0x2e/0x40 [ 1601.520432][T27614] evdev_handle_get_val+0x70/0x9f0 [ 1601.527145][T27614] evdev_ioctl_handler+0x127b/0x1fe0 [ 1601.534025][T27614] __se_sys_ioctl+0xfc/0x170 [ 1601.540210][T27614] do_syscall_64+0x14d/0xf80 [ 1601.546400][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.553881][T27614] } [ 1601.556395][T27614] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1601.564571][T27614] ... acquired at: [ 1601.568385][T27614] _raw_spin_lock+0x2e/0x40 [ 1601.573084][T27614] evdev_handle_get_val+0x70/0x9f0 [ 1601.578416][T27614] evdev_ioctl_handler+0x127b/0x1fe0 [ 1601.583936][T27614] __se_sys_ioctl+0xfc/0x170 [ 1601.588723][T27614] do_syscall_64+0x14d/0xf80 [ 1601.593524][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.599607][T27614] [ 1601.601947][T27614] [ 1601.601947][T27614] the dependencies between the lock to be acquired [ 1601.601958][T27614] and SOFTIRQ-irq-unsafe lock: [ 1601.615498][T27614] -> (tasklist_lock){.+.+}-{3:3} { [ 1601.620825][T27614] HARDIRQ-ON-R at: [ 1601.624994][T27614] lock_acquire+0xf0/0x2e0 [ 1601.631431][T27614] _raw_read_lock+0x36/0x50 [ 1601.637963][T27614] __do_wait+0xde/0x740 [ 1601.644141][T27614] do_wait+0x1e7/0x540 [ 1601.650231][T27614] kernel_wait+0xd6/0x1c0 [ 1601.656584][T27614] call_usermodehelper_exec_work+0xbe/0x230 [ 1601.664508][T27614] process_scheduled_works+0xb02/0x1830 [ 1601.672107][T27614] worker_thread+0xa50/0xfc0 [ 1601.678733][T27614] kthread+0x388/0x470 [ 1601.684835][T27614] ret_from_fork+0x51e/0xb90 [ 1601.691463][T27614] ret_from_fork_asm+0x1a/0x30 [ 1601.698263][T27614] SOFTIRQ-ON-R at: [ 1601.702437][T27614] lock_acquire+0xf0/0x2e0 [ 1601.708884][T27614] _raw_read_lock+0x36/0x50 [ 1601.715411][T27614] __do_wait+0xde/0x740 [ 1601.721593][T27614] do_wait+0x1e7/0x540 [ 1601.727707][T27614] kernel_wait+0xd6/0x1c0 [ 1601.734061][T27614] call_usermodehelper_exec_work+0xbe/0x230 [ 1601.741986][T27614] process_scheduled_works+0xb02/0x1830 [ 1601.749566][T27614] worker_thread+0xa50/0xfc0 [ 1601.756265][T27614] kthread+0x388/0x470 [ 1601.762348][T27614] ret_from_fork+0x51e/0xb90 [ 1601.768971][T27614] ret_from_fork_asm+0x1a/0x30 [ 1601.775761][T27614] INITIAL USE at: [ 1601.779876][T27614] lock_acquire+0xf0/0x2e0 [ 1601.786232][T27614] _raw_write_lock_irq+0x3d/0x50 [ 1601.793117][T27614] copy_process+0x247a/0x3cf0 [ 1601.799742][T27614] kernel_clone+0x248/0x8e0 [ 1601.806183][T27614] user_mode_thread+0x110/0x180 [ 1601.812976][T27614] rest_init+0x23/0x300 [ 1601.819063][T27614] start_kernel+0x385/0x3d0 [ 1601.825506][T27614] x86_64_start_reservations+0x24/0x30 [ 1601.832895][T27614] x86_64_start_kernel+0x143/0x1c0 [ 1601.839968][T27614] common_startup_64+0x13e/0x147 [ 1601.846855][T27614] INITIAL READ USE at: [ 1601.851373][T27614] lock_acquire+0xf0/0x2e0 [ 1601.858161][T27614] _raw_read_lock+0x36/0x50 [ 1601.865031][T27614] __do_wait+0xde/0x740 [ 1601.871566][T27614] do_wait+0x1e7/0x540 [ 1601.878008][T27614] kernel_wait+0xd6/0x1c0 [ 1601.884709][T27614] call_usermodehelper_exec_work+0xbe/0x230 [ 1601.892983][T27614] process_scheduled_works+0xb02/0x1830 [ 1601.900926][T27614] worker_thread+0xa50/0xfc0 [ 1601.907897][T27614] kthread+0x388/0x470 [ 1601.914330][T27614] ret_from_fork+0x51e/0xb90 [ 1601.921292][T27614] ret_from_fork_asm+0x1a/0x30 [ 1601.928452][T27614] } [ 1601.931144][T27614] ... key at: [] tasklist_lock+0x18/0x40 [ 1601.939148][T27614] ... acquired at: [ 1601.943145][T27614] _raw_read_lock+0x36/0x50 [ 1601.947850][T27614] send_sigio+0x101/0x370 [ 1601.952376][T27614] kill_fasync+0x24d/0x4d0 [ 1601.956985][T27614] sock_wake_async+0x137/0x160 [ 1601.961943][T27614] sock_def_readable+0x3c1/0x580 [ 1601.967074][T27614] unix_stream_sendmsg+0x8a3/0xe80 [ 1601.972381][T27614] ____sys_sendmsg+0xa68/0xad0 [ 1601.977347][T27614] ___sys_sendmsg+0x2a5/0x360 [ 1601.982257][T27614] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1601.987400][T27614] do_syscall_64+0x14d/0xf80 [ 1601.992205][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.998296][T27614] [ 1602.000638][T27614] -> (&f_owner->lock){....}-{3:3} { [ 1602.005966][T27614] INITIAL USE at: [ 1602.010058][T27614] lock_acquire+0xf0/0x2e0 [ 1602.016234][T27614] _raw_write_lock_irq+0x3d/0x50 [ 1602.022944][T27614] __f_setown+0x67/0x370 [ 1602.028944][T27614] f_setown+0x23a/0x300 [ 1602.034855][T27614] do_fcntl+0x6cd/0x1a20 [ 1602.040865][T27614] __se_sys_fcntl+0xc8/0x150 [ 1602.047228][T27614] do_syscall_64+0x14d/0xf80 [ 1602.053650][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.061317][T27614] INITIAL READ USE at: [ 1602.065768][T27614] lock_acquire+0xf0/0x2e0 [ 1602.072420][T27614] _raw_read_lock_irqsave+0x48/0x60 [ 1602.079906][T27614] send_sigio+0x38/0x370 [ 1602.086355][T27614] kill_fasync+0x24d/0x4d0 [ 1602.092974][T27614] sock_wake_async+0x137/0x160 [ 1602.099943][T27614] sk_wake_async+0x184/0x280 [ 1602.106732][T27614] unix_release_sock+0x74f/0xc80 [ 1602.113860][T27614] unix_release+0x92/0xd0 [ 1602.120378][T27614] sock_close+0xc3/0x240 [ 1602.126835][T27614] __fput+0x44f/0xa70 [ 1602.133014][T27614] task_work_run+0x1d9/0x270 [ 1602.139798][T27614] get_signal+0x11eb/0x1330 [ 1602.146531][T27614] arch_do_signal_or_restart+0xbc/0x830 [ 1602.154287][T27614] exit_to_user_mode_loop+0x86/0x480 [ 1602.161792][T27614] do_syscall_64+0x32d/0xf80 [ 1602.168600][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.176693][T27614] } [ 1602.179300][T27614] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1602.188269][T27614] ... acquired at: [ 1602.192176][T27614] _raw_read_lock_irqsave+0x48/0x60 [ 1602.197575][T27614] send_sigio+0x38/0x370 [ 1602.202021][T27614] kill_fasync+0x24d/0x4d0 [ 1602.206633][T27614] sock_wake_async+0x137/0x160 [ 1602.211592][T27614] sk_wake_async+0x184/0x280 [ 1602.216376][T27614] unix_release_sock+0x74f/0xc80 [ 1602.221532][T27614] unix_release+0x92/0xd0 [ 1602.226053][T27614] sock_close+0xc3/0x240 [ 1602.230506][T27614] __fput+0x44f/0xa70 [ 1602.234693][T27614] task_work_run+0x1d9/0x270 [ 1602.239479][T27614] get_signal+0x11eb/0x1330 [ 1602.244190][T27614] arch_do_signal_or_restart+0xbc/0x830 [ 1602.249937][T27614] exit_to_user_mode_loop+0x86/0x480 [ 1602.255416][T27614] do_syscall_64+0x32d/0xf80 [ 1602.260236][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.266322][T27614] [ 1602.268665][T27614] -> (&new->fa_lock){....}-{3:3} { [ 1602.273824][T27614] INITIAL USE at: [ 1602.277745][T27614] lock_acquire+0xf0/0x2e0 [ 1602.283762][T27614] _raw_write_lock_irq+0x3d/0x50 [ 1602.290289][T27614] fasync_remove_entry+0xf1/0x1c0 [ 1602.296902][T27614] sock_fasync+0x85/0xf0 [ 1602.302728][T27614] __fput+0x8a5/0xa70 [ 1602.308320][T27614] task_work_run+0x1d9/0x270 [ 1602.314527][T27614] exit_to_user_mode_loop+0xed/0x480 [ 1602.321411][T27614] do_syscall_64+0x32d/0xf80 [ 1602.327594][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.335080][T27614] INITIAL READ USE at: [ 1602.339438][T27614] lock_acquire+0xf0/0x2e0 [ 1602.345927][T27614] _raw_read_lock_irqsave+0x48/0x60 [ 1602.353353][T27614] kill_fasync+0x199/0x4d0 [ 1602.359802][T27614] sock_wake_async+0x137/0x160 [ 1602.366595][T27614] sk_wake_async+0x184/0x280 [ 1602.373207][T27614] unix_release_sock+0x74f/0xc80 [ 1602.380165][T27614] unix_release+0x92/0xd0 [ 1602.386514][T27614] sock_close+0xc3/0x240 [ 1602.392784][T27614] __fput+0x44f/0xa70 [ 1602.398806][T27614] task_work_run+0x1d9/0x270 [ 1602.405465][T27614] get_signal+0x11eb/0x1330 [ 1602.412013][T27614] arch_do_signal_or_restart+0xbc/0x830 [ 1602.419582][T27614] exit_to_user_mode_loop+0x86/0x480 [ 1602.426892][T27614] do_syscall_64+0x32d/0xf80 [ 1602.433511][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.441425][T27614] } [ 1602.443947][T27614] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1602.452655][T27614] ... acquired at: [ 1602.456482][T27614] _raw_read_lock_irqsave+0x48/0x60 [ 1602.461887][T27614] kill_fasync+0x199/0x4d0 [ 1602.466500][T27614] evdev_pass_values+0x627/0xbd0 [ 1602.471666][T27614] evdev_events+0x1e6/0x340 [ 1602.476364][T27614] input_pass_values+0x288/0x890 [ 1602.481495][T27614] input_event_dispose+0x330/0x6b0 [ 1602.486813][T27614] input_inject_event+0x1dd/0x340 [ 1602.492138][T27614] evdev_write+0x325/0x4c0 [ 1602.496755][T27614] vfs_write+0x29a/0xb90 [ 1602.501186][T27614] ksys_write+0x150/0x270 [ 1602.505703][T27614] do_syscall_64+0x14d/0xf80 [ 1602.510584][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.516674][T27614] [ 1602.519018][T27614] [ 1602.519018][T27614] stack backtrace: [ 1602.525275][T27614] CPU: 0 UID: 0 PID: 27614 Comm: syz.7.4793 Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.525303][T27614] Tainted: [L]=SOFTLOCKUP [ 1602.525310][T27614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1602.525322][T27614] Call Trace: [ 1602.525331][T27614] [ 1602.525340][T27614] dump_stack_lvl+0xe8/0x150 [ 1602.525367][T27614] __lock_acquire+0x2a94/0x2cf0 [ 1602.525403][T27614] lock_acquire+0xf0/0x2e0 [ 1602.525427][T27614] ? kill_fasync+0x199/0x4d0 [ 1602.525456][T27614] _raw_read_lock_irqsave+0x48/0x60 [ 1602.525483][T27614] ? kill_fasync+0x199/0x4d0 [ 1602.525500][T27614] kill_fasync+0x199/0x4d0 [ 1602.525517][T27614] ? kill_fasync+0x53/0x4d0 [ 1602.525535][T27614] evdev_pass_values+0x627/0xbd0 [ 1602.525560][T27614] ? evdev_pass_values+0x641/0xbd0 [ 1602.525585][T27614] evdev_events+0x1e6/0x340 [ 1602.525605][T27614] ? evdev_events+0x79/0x340 [ 1602.525626][T27614] ? input_pass_values+0x8d/0x890 [ 1602.525646][T27614] input_pass_values+0x288/0x890 [ 1602.525669][T27614] ? input_handle_event+0x70c/0xf30 [ 1602.525700][T27614] input_event_dispose+0x330/0x6b0 [ 1602.525729][T27614] input_inject_event+0x1dd/0x340 [ 1602.525758][T27614] ? input_inject_event+0xb6/0x340 [ 1602.525788][T27614] evdev_write+0x325/0x4c0 [ 1602.525812][T27614] ? __pfx_evdev_write+0x10/0x10 [ 1602.525834][T27614] ? bpf_lsm_file_permission+0x9/0x20 [ 1602.525856][T27614] ? security_file_permission+0x75/0x260 [ 1602.525887][T27614] ? rw_verify_area+0x255/0x4d0 [ 1602.525903][T27614] ? __pfx_evdev_write+0x10/0x10 [ 1602.525926][T27614] vfs_write+0x29a/0xb90 [ 1602.525946][T27614] ? __pfx_vfs_write+0x10/0x10 [ 1602.525963][T27614] ? __fget_files+0x2a/0x420 [ 1602.525990][T27614] ? __fget_files+0x2a/0x420 [ 1602.526013][T27614] ? __fget_files+0x3a0/0x420 [ 1602.526038][T27614] ? __fget_files+0x2a/0x420 [ 1602.526066][T27614] ksys_write+0x150/0x270 [ 1602.526084][T27614] ? __pfx_ksys_write+0x10/0x10 [ 1602.526101][T27614] ? __pfx_kcov_ioctl+0x10/0x10 [ 1602.526131][T27614] do_syscall_64+0x14d/0xf80 [ 1602.526159][T27614] ? trace_irq_disable+0x3b/0x150 [ 1602.526186][T27614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.526204][T27614] ? clear_bhb_loop+0x40/0x90 [ 1602.526225][T27614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.526244][T27614] RIP: 0033:0x7f1a2eb9c629 [ 1602.526262][T27614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.526278][T27614] RSP: 002b:00007f1a2f993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1602.526299][T27614] RAX: ffffffffffffffda RBX: 00007f1a2ee16090 RCX: 00007f1a2eb9c629 [ 1602.526313][T27614] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000006 [ 1602.526325][T27614] RBP: 00007f1a2ec32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1602.526337][T27614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.526349][T27614] R13: 00007f1a2ee16128 R14: 00007f1a2ee16090 R15: 00007f1a2ef3fa48 [ 1602.526369][T27614] [ 1602.820019][ T5868] m920x_read = error: -19 [ 1602.824491][ T5868] dvb-usb: error while querying for an remote control event. [ 1602.939191][ T8715] m920x_read = error: -19 [ 1602.943596][ T8715] dvb-usb: error while querying for an remote control event. [ 1603.055682][ T10] m920x_read = error: -19 [ 1603.060085][ T10] dvb-usb: error while querying for an remote control event. [ 1603.175538][ T10] m920x_read = error: -19 [ 1603.180352][ T10] dvb-usb: error while querying for an remote control event. [ 1603.295884][ T10] m920x_read = error: -19 [ 1603.300289][ T10] dvb-usb: error while querying for an remote control event. [ 1603.415862][ T10] m920x_read = error: -19 [ 1603.420270][ T10] dvb-usb: error while querying for an remote control event. [ 1603.535851][ T10] m920x_read = error: -19 [ 1603.540267][ T10] dvb-usb: error while querying for an remote control event. [ 1603.655919][ T10] m920x_read = error: -19 [ 1603.660350][ T10] dvb-usb: error while querying for an remote control event. [ 1603.775765][ T10] m920x_read = error: -19 [ 1603.780520][ T10] dvb-usb: error while querying for an remote control event. [ 1603.896004][ T10] m920x_read = error: -19 [ 1603.900413][ T10] dvb-usb: error while querying for an remote control event. [ 1604.015697][ T10] m920x_read = error: -19 [ 1604.020096][ T10] dvb-usb: error while querying for an remote control event. [ 1604.136316][ T10] m920x_read = error: -19 [ 1604.140857][ T10] dvb-usb: error while querying for an remote control event. [ 1604.255656][ T10] m920x_read = error: -19 [ 1604.260093][ T10] dvb-usb: error while querying for an remote control event. [ 1604.375942][ T10] m920x_read = error: -19 [ 1604.380375][ T10] dvb-usb: error while querying for an remote control event. [ 1604.505707][ T10] m920x_read = error: -19 [ 1604.510124][ T10] dvb-usb: error while querying for an remote control event. [ 1604.625812][ T10] m920x_read = error: -19 [ 1604.630201][ T10] dvb-usb: error while querying for an remote control event. [ 1604.746182][ T10] m920x_read = error: -19 [ 1604.750632][ T10] dvb-usb: error while querying for an remote control event. [ 1604.865633][ T10] m920x_read = error: -19 [ 1604.870040][ T10] dvb-usb: error while querying for an remote control event. [ 1604.985849][ T10] m920x_read = error: -19 [ 1604.990235][ T10] dvb-usb: error while querying for an remote control event. [ 1605.105825][ T10] m920x_read = error: -19 [ 1605.110224][ T10] dvb-usb: error while querying for an remote control event. [ 1605.225809][ T10] m920x_read = error: -19 [ 1605.230208][ T10] dvb-usb: error while querying for an remote control event. [ 1605.345778][ T10] m920x_read = error: -19 [ 1605.350299][ T10] dvb-usb: error while querying for an remote control event. [ 1605.465869][ T10] m920x_read = error: -19 [ 1605.470266][ T10] dvb-usb: error while querying for an remote control event. [ 1605.596017][ T10] m920x_read = error: -19 [ 1605.600414][ T10] dvb-usb: error while querying for an remote control event. [ 1605.716046][ T10] m920x_read = error: -19 [ 1605.720421][ T10] dvb-usb: error while querying for an remote control event. [ 1605.835658][ T10] m920x_read = error: -19 [ 1605.840095][ T10] dvb-usb: error while querying for an remote control event. [ 1605.956054][ T10] m920x_read = error: -19 [ 1605.961118][ T10] dvb-usb: error while querying for an remote control event. [ 1606.076233][ T8715] m920x_read = error: -19 [ 1606.080628][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.196738][ T8715] m920x_read = error: -19 [ 1606.214150][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.335694][ T8715] m920x_read = error: -19 [ 1606.340457][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.456095][ T8715] m920x_read = error: -19 [ 1606.460469][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.575996][ T8715] m920x_read = error: -19 [ 1606.580371][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.705887][ T8715] m920x_read = error: -19 [ 1606.710304][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.825668][ T8715] m920x_read = error: -19 [ 1606.830061][ T8715] dvb-usb: error while querying for an remote control event. [ 1606.946091][ T5920] m920x_read = error: -19 [ 1606.950480][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.065613][ T5920] m920x_read = error: -19 [ 1607.070024][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.185691][ T5920] m920x_read = error: -19 [ 1607.190158][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.306191][ T5920] m920x_read = error: -19 [ 1607.310714][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.425946][ T5920] m920x_read = error: -19 [ 1607.430469][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.546131][ T5920] m920x_read = error: -19 [ 1607.550530][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.597996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.604387][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.665602][ T5920] m920x_read = error: -19 [ 1607.670025][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.787534][ T5920] m920x_read = error: -19 [ 1607.791918][ T5920] dvb-usb: error while querying for an remote control event. [ 1607.905617][ T5920] m920x_read = error: -19 [ 1607.910084][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.025881][ T5920] m920x_read = error: -19 [ 1608.030257][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.145934][ T5920] m920x_read = error: -19 [ 1608.150380][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.265862][ T5920] m920x_read = error: -19 [ 1608.270320][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.395981][ T5920] m920x_read = error: -19 [ 1608.400384][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.517590][ T5920] m920x_read = error: -19 [ 1608.521993][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.636453][ T5920] m920x_read = error: -19 [ 1608.640861][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.755626][ T5920] m920x_read = error: -19 [ 1608.760001][ T5920] dvb-usb: error while querying for an remote control event. [ 1608.876226][ T5892] m920x_read = error: -19 [ 1608.880609][ T5892] dvb-usb: error while querying for an remote control event. [ 1608.995908][ T5892] m920x_read = error: -19 [ 1609.000336][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.116646][ T5892] m920x_read = error: -19 [ 1609.121033][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.235823][ T5892] m920x_read = error: -19 [ 1609.240232][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.355632][ T5892] m920x_read = error: -19 [ 1609.360005][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.475661][ T5892] m920x_read = error: -19 [ 1609.480118][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.596421][ T5892] m920x_read = error: -19 [ 1609.600807][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.715948][ T5892] m920x_read = error: -19 [ 1609.720456][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.835892][ T5892] m920x_read = error: -19 [ 1609.840288][ T5892] dvb-usb: error while querying for an remote control event. [ 1609.957543][ T5892] m920x_read = error: -19 [ 1609.961939][ T5892] dvb-usb: error while querying for an remote control event. [ 1610.076103][ T5892] m920x_read = error: -19 [ 1610.080522][ T5892] dvb-usb: error while querying for an remote control event. [ 1610.195661][ T5892] m920x_read = error: -19 [ 1610.200066][ T5892] dvb-usb: error while querying for an remote control event. [ 1610.315973][ T5892] m920x_read = error: -19 [ 1610.320376][ T5892] dvb-usb: error while querying for an remote control event. [ 1610.435684][ T5892] m920x_read = error: -19 [ 1610.440422][ T5892] dvb-usb: error while querying for an remote control event. [ 1610.556288][ T5892] m920x_read = error: -19 [ 1610.560833][ T5892] dvb-usb: error while querying for an remote control event. [ 1610.676315][ T5892] m920x_read = error: -19 [ 1610.680707][ T5892] dvb-usb: error while querying for an remote control event.