last executing test programs: 9m10.459516762s ago: executing program 32 (id=70): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x289d292b8edec6c4, &(0x7f0000001ac0)={&(0x7f0000004bc0)={0x1c, 0x2c, 0x1, 0x70bd29, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20044044) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xffffffff, 0x10, 0x4, 0x5, 0xd, "c182ac492bca3259ea133ea51525836ad16d48"}) syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="8a84924af755ce4304908cc7018b896598bba4b0265d831de28c923f6fd3581a099dcd4a149bb3246ec6a150f3a8bfee1501f4a87e92b51fd1f5fe8d94c794c2eeb325e63c426e8c8d65029141c15c914fd3fdd1f6132700d3ad7e259906783a3d836f09795e3060692b5301739b837c5f44082866f8584a44c6c2e737d24194"], &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0}) 6m19.317592561s ago: executing program 33 (id=2170): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x1, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0xf854, 0x1, 0x4, 0xdc8d, r2}, &(0x7f0000000240)=0x10) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0001800600060088480000040502"], 0x528}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 5m54.617106361s ago: executing program 34 (id=2339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5m24.234401934s ago: executing program 35 (id=2536): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000011000100900051230000400007000000", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 5m20.766814869s ago: executing program 36 (id=2556): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r0, 0x801, 0x0, 0x800, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x50}}, 0x800) 5m17.792196437s ago: executing program 37 (id=2564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0400040000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f83f00ffbfa400000000000007040000f0ffffffb70200000c00000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xc, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) readv(0xffffffffffffffff, &(0x7f00000005c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802800018007000100637400001c00028005000300f444361608000140000000170800024000000008140001800a000100726564697200000004000280180001800e000100636f6e6e6c696d6974000000040002800900010073797a30000000000900020073797a32"], 0xac}}, 0x0) 4m52.657337193s ago: executing program 38 (id=2672): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0) 4m33.022720972s ago: executing program 39 (id=2776): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000009c0)="ba14b14c84b7262d43d803ce0ebd7faefefbe9f521a3ec7fa35beee050dd1fd9e67b5afff502890d8bc1b91df04d903f63d14ba0ba1ca3a094c3c120e4eb3ac713fcd5a9dd6cbf4ae5bcb0be6e5d264e3821a588f799250622ba714ebb5627430fa193", 0x63}, {&(0x7f0000000ac0)="cfaaae553fd85559860c01", 0xb}], 0x2}, 0x20000811) 4m28.12948274s ago: executing program 40 (id=2794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a0100000018001200080001"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x64403, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 4m26.064409605s ago: executing program 41 (id=2806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) r1 = msgget$private(0x0, 0x2) msgsnd(r1, &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000000000023b8fb3b6503481859341b0579f1d55b7f28f6d210f6b22db62ee5771f74647c6a23e0c7905d38e7234eed8f8e171ea54a90ca1136ddb81fa0136a479795b34f60151e6daa9fb1821125244fe500b2def7a650a1a5461c86d4fa2e4bce5f251e6931b908bb6e6daa72af76f66921d449ec5092da43c8bcfccb592b8c5de9ebd6c3531b8b0a1da6c6a566da1d28bb7f8ce0adbe5bb2c05c19ae6ca8af89095480f24efe6a8e7510a679ff1e78b1e8b83cb97736243d4387d5b59f9839800ca34034ec4aa17be8f1ff881ff11d177a4ae6cba9577cba2b8897bd42f420a3023c1c108a0dc0025bab465cdb8e2ace516fcfd51d38af63af9effa41c1d6d51dfa1694a498776c7e1fe222352a29e71d281d3c70cd71a16885520cda28ecc310345265f07786594f73dd913b390c31d2fe19131e847955afa0c5af164e2ee06ee7e92e69e064d82021923139d26f7f998a57fbbc0cf00619ce283253c92c877ff3d388dfffaf155bc25bb9399f269d8cc3997dd0eb994b7190541153afadc0f66af875838f4a6f9fd9e6c9ccd7c7655fc2c695838594af45cca6b1313fe35738527bb9ec6359751ea33323a1647506c396ea15460f5c5a4ccf7c34a4b700119c7fcc1119ad905c1c72dd8535204773b7adb6875667bb9137187d504f501660515f979c7a547a1faa307cdce741873baaf837ef9db6f11e96b7e01ea9f3693eab10fc3cceffe0686828239195d8b897cdd0ac7452f3ed92790c878062738c0d74088cd6ce2693c6101f4f78e8344251cbc21c89f86e87f5f1480701d3512dbd452848508596cf26aecebfb52ae1c14a9abdc87ee1f760015c856927e4e381a856f95c837b6fc3404aab53cb740420bba4c5bbd6184d10ae808eadcea791011de3d49a3babdd549f2ef00289003ca88f42d0bf91822492a84b21c3f7f0615140c094c8c7f76a504eaa6dedb903863e33526631e62ef67dade6e70072c686215af9157d8d30e69b13311776a72c142d922ed10e912a4751dce7dc4f8317edf626127509fbc90f18513100ef5d38e80162185a2d9268600fa6257bdb5397723a17c0e2f76ccf846fe87fa11f8010918e87ba3edc93a03143c490d5737d9b1960b961f1e3fb38fd0b9c218905197f745503b222653b0c45f2368ea98b23a83a4e82858d83153ac47ebda0b5add4cac5fe12d44215aa34109cfa108ec9017701b6df34b1526d075963de114eb7ae421ecaaed07425cd40fd013bc5acb82de460c730eff73bbc5dae9650225e1fe8f7b3d2e41bfce7a8c02533043ff49f18d73f1d17773c0f2981e70cc2d9dd52fdca6fe0facb189074d4f7707a0cd2a04182200dbe3735ff11d5de0bd97042a04a11ed23be2e82835e68da220ca38538da46d9d513fd1756921064a6e1b6ce960c6adf5355f8d91a8d716dbe6e2a2254b40"], 0x401, 0x800) socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x60900, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), r4, r3}}, 0x18) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) 4m18.456049941s ago: executing program 42 (id=2816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) r3 = open(0x0, 0x200080, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r4) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r4, r5}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001004d00000008000300", @ANYRES32=r8, @ANYBLOB="140004006e69637666300000000000000000000008000500060000000c00"], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r10, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0xc8, 0x2b8, 0xc8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@empty, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {0x78aef440fbc8f012}, {}, 0x84, 0x3, 0x10}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x5}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x7f46, 0x6de, 0x2}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x5, 0x1}}, @common=@ah={{0x30}, {[0x2e6, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x4, 0x2, 0x1, 0xa], 0x2, 0x1}, {0x1, [0x1, 0x5, 0x3, 0x0, 0x6, 0x4], 0x2, 0x2}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'wg0\x00', {0xff}, {0xff}, 0x4, 0x1, 0x40}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1d], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 3m17.962188907s ago: executing program 43 (id=3102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) r3 = open(0x0, 0x200080, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r4) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r4, r5}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001004d00", @ANYRES32=r8, @ANYBLOB="140004006e69637666300000000000000000000008000500060000000c0017"], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r10, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r10, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0xc8, 0x2b8, 0xc8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@empty, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {0x78aef440fbc8f012}, {}, 0x84, 0x3, 0x10}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x5}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x7f46, 0x6de, 0x2}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x5, 0x1}}, @common=@ah={{0x30}, {[0x2e6, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x4, 0x2, 0x1, 0xa], 0x2, 0x1}, {0x1, [0x1, 0x5, 0x3, 0x0, 0x6, 0x4], 0x2, 0x2}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'wg0\x00', {0xff}, {0xff}, 0x4, 0x1, 0x40}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1d], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 3m14.24023631s ago: executing program 44 (id=3119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@overlay={0x7, 0x3, 0x4, 0x1, 0xe, {r3, r4/1000+10000}, {0x5, 0xc, 0x2, 0x7, 0x23, 0x1, "76fbb702"}, 0x6, 0x3, {}, 0x3, 0x0, r5}) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) epoll_create(0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r7, 0x29, 0xc9, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x40003, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r11, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x2c9ab000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/561, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d) syz_open_dev$sg(0x0, 0x0, 0x0) msgget$private(0x0, 0x2) 2m37.783398998s ago: executing program 45 (id=3293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) write$cgroup_type(r0, &(0x7f00000010c0), 0xffe0) 2m33.50629825s ago: executing program 46 (id=3309): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0xd0, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'pim6reg0\x00', 'veth0\x00'}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27, 0x1b}], 0x1, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002002, 0x0) 2m16.594983295s ago: executing program 47 (id=3374): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r1, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x1000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r3, 0x0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x60000881}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 2m4.910278135s ago: executing program 48 (id=3432): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x8d4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000040}, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m58.30086312s ago: executing program 49 (id=3447): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0) syz_io_uring_setup(0x683b, &(0x7f0000000080)={0x0, 0x729e, 0x8, 0x3, 0x3ac}, &(0x7f0000000000), &(0x7f0000000100)) 1m56.108978798s ago: executing program 50 (id=3456): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000006000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1m22.382421619s ago: executing program 51 (id=3572): r0 = socket$inet6(0xa, 0x806, 0x44) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0x6) listen(r0, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3) read(r2, &(0x7f0000000680)=""/201, 0xc9) close(0x4) 1m18.65516099s ago: executing program 52 (id=3590): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}]}, 0xc) pwrite64(r0, &(0x7f0000000040)="ab", 0x1, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xe}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1019, &(0x7f0000002e80)=""/4121, 0x0, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700000000000240000001800018014000200766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$kcm(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000009c0)="ba14b14c84b7262d43d803ce0ebd7faefefbe9f521a3ec7fa35beee050dd1fd9e67b5afff502890d8bc1b91df04d903f63d14ba0ba1ca3a094c3c120e4eb3ac713fcd5a9dd6cbf4ae5bcb0be6e5d264e3821a588f799255627430fa1934f1133cea3e8ccc2bb92a737c9626a9f76b63c651e90a489f0a76995229958834d77bfb689be371586b8e1feb059d5ecd049844e10f56fb6d16c01961351b67de4cac050b8f891c726f208c1a2d347f6d128e64e59b99df262e554b020748a595518000000000000", 0xc5}, {&(0x7f0000000ac0)="cfaaae553fd85559860c017604d11c733b58b3b98eb508ea46625bb427e88a7831d4069a6616de10bc282f0d889b44356f237462805269dec5550ccad87240e5bbc8aab4999fae8105b02f", 0x4b}], 0x2}, 0x20000811) 1m14.738761265s ago: executing program 2 (id=3606): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x3) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x213a000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5e}}, {@max_read={'max_read', 0x3d, 0xf}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@default_permissions}]}}, 0x1, 0x0, 0x0) 1m14.682160907s ago: executing program 2 (id=3607): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_misc(r5, &(0x7f0000000080)="bd41dc", 0x3) splice(r4, 0x0, r6, 0x0, 0x91, 0xe) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r7 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, 0x0, &(0x7f0000002280)=0x90) r8 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000", @ANYRES32, @ANYBLOB="00000000000000016b00000000f0ffffab0000005c4a4924175ff347a1f8add6cd29b87ab4c620d0e2a6d10208410081196c9ba485ed", @ANYRES32, @ANYBLOB="0000000000100000000000000000010000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000001000000000040000000000000"]) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630134000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0) getdents(r9, 0x0, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40800) unshare(0x22020600) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r10, 0x40045402, &(0x7f0000000040)=0x1) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3ff, @private0, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fa", 0x1}], 0x1}}], 0x2, 0x4040001) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f00000022c0)=ANY=[], 0x1008) read(r10, &(0x7f00000003c0)=""/4096, 0x1000) socket$kcm(0x10, 0x2, 0x0) 1m14.510665805s ago: executing program 2 (id=3609): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x178, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xdc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xc0, 0x6, [@m_mirred={0x88, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x5b, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m14.278372093s ago: executing program 2 (id=3610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a801400072cfe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) eventfd2(0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m12.879028017s ago: executing program 2 (id=3615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0x8008ae9d, &(0x7f0000000000)=""/76) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x20000014) 1m10.554769919s ago: executing program 2 (id=3623): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x600, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f0000000380)=[0x80000000]}) (fail_nth: 8) 1m10.182712551s ago: executing program 53 (id=3623): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x600, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f0000000380)=[0x80000000]}) (fail_nth: 8) 48.60964964s ago: executing program 4 (id=3706): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0xffffffff00000001, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffe, 0x0, 0x0, 0x8000, 0x40000, 0x0, r2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r3, 0x6700000000000000) 48.314451791s ago: executing program 4 (id=3708): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x109001, 0x0) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000400)={0x2, 0x6, 0x7, 0x6, 0x10001, 0x1, "72fa079b7e2b3cf0e8f4eff4d24b5ab3", 0x3, 0xfb, 0x1, 0x7, 0xde, 0x3, 0xa7}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x3, 0x4, 0x52424752, 0x6, 0x7, 0x3ff, 0x4, 0x1, 0x1, 0x6, 0x2, 0x3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) write(r2, &(0x7f00000020c0)="49d5e998c64488e958b52cc5ba7b46bb0b69bbf0d0085d3d46660eb0fde308b31659479b9eff158b0b9d8f2252f76c6d56b591898e963c2883033a32d2dce62e1326a2885d6989fb1b8032da249fcd9c1c", 0x51) accept4$tipc(r4, &(0x7f0000002140), &(0x7f0000002180)=0x10, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 46.446457045s ago: executing program 4 (id=3721): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000500)={0x800000, 0x10000, 0x2, 0xf55, 0x2, 0x55a}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000680)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="f79500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000340)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.434107186s ago: executing program 4 (id=3731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 43.110229765s ago: executing program 4 (id=3733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}}, 0x0) 42.846245707s ago: executing program 4 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x408, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x67}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) unshare(0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 42.264540593s ago: executing program 54 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x408, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x67}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) unshare(0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 41.242941664s ago: executing program 0 (id=3742): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r3, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x8000002}, 0x10004}}, 0x10) bind$tipc(r2, 0x0, 0x0) 40.99321645s ago: executing program 0 (id=3745): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) unshare(0x28040600) setns(0xffffffffffffffff, 0x8020000) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) ioprio_set$pid(0x1, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) unshare(0x28040600) (async) setns(0xffffffffffffffff, 0x8020000) (async) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) (async) 39.87872374s ago: executing program 0 (id=3749): futex(0xffffffffffffffff, 0xc, 0x1, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xb1) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x34, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x32]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0xfffffffe}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x8f) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0xa0, 0x0, 0x9e, {0x9e, 0x24, "2d9207f8c909ed9520cb1f4920c060388ec8896b160ffb6bd3597a2b28d1985f2066ecd0d7d22a6f39ce54c3609f3aa55a66ec60aaa5cc9b62ce875b11e7ca1b29cef2d8fad937c599d64b700552f781f8673430abe35808b81a6c8bfeea8c63ca842637bea438672a53fffcdb41dab3d96feb1814cfc9bcc07f3950253e75a66e9a8cf125b0f9d61a74f762fb62024534c5f4fe1421f92cdeb1ad3c"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="627a55f4a5be08ab5f414b3f1ce64dd7d31a6090533f9c0fc48e75ed4292f607a2a19e40de63fa3ce483337c4e5215b7532b56e61bc559bc1e541a56ddf51ab0e6b5df7a79147d"], &(0x7f0000000100), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x4d1}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x1, 0x8, "b0a39f248ad12ace"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="400702000023bde4"], 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r7, 0x40047459, &(0x7f0000000040)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002c00010026bd7000fedbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 38.921147081s ago: executing program 5 (id=3752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "351d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) (fail_nth: 6) 38.34957807s ago: executing program 5 (id=3753): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecde", 0x8) 36.91562323s ago: executing program 5 (id=3757): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) 36.812349131s ago: executing program 5 (id=3758): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 36.697948082s ago: executing program 5 (id=3759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1ec, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @filter_kind_options=@f_route={{0xa}, {0x158, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_ACT={0x144, 0x6, [@m_mirred={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c559c9f175a2197d89121af0d976d2ec57cc85f19e63f752afd4e5dcec7b20ac52043f46883ce0db024eb1738448b508cac9a3581aa6150f6f3857e242dba946fdb14b091191b9e199e40ed08e99ec0b676720a21ac8ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 35.974859826s ago: executing program 5 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0) 35.356054559s ago: executing program 55 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0) 35.349552824s ago: executing program 0 (id=3763): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 35.188310899s ago: executing program 0 (id=3765): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e00008001"], 0x50) 35.182809873s ago: executing program 1 (id=3766): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecde", 0x8) 34.647945807s ago: executing program 0 (id=3767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) 34.173968857s ago: executing program 56 (id=3767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) 33.647786645s ago: executing program 1 (id=3769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000001080)=0x1, r4, 0x0, 0x1, 0x4000}}, 0x20) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r6 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRESOCT=r2, @ANYBLOB="0000000a010000001800120008000100736974000c000200080003003688"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffeb000003e42f465bf8d4a84913c86a61fbb67058577823994641976829fb00aebac91f3c3df4178641a19cb255e1da5991a4cf36977a6994d44e2f8cda0cb2598626b858552088ba8939db8e5d23048fad62edb11c0d8b6db75e3a00b978f77a38eb", @ANYRES32, @ANYBLOB="03440600c31006002000128008000100736974001400028008000300ac1414bb0800140001000100"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 32.664653214s ago: executing program 1 (id=3772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xf2ff, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0xc0000000, 0x3, 0x6, {0xa, 0x2, 0x0, 0xfffe, 0xfff9, 0x7ff}, {0x1, 0x1, 0x7, 0xd53c, 0xc000, 0x4}, 0xa6c}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000001, 0x8, 0x8001, 0x401, 0x3, 0xfffffffd, 0x2, 0xfffffff7, 0x8, 0x39a, 0x7, 0x0, 0xffff, 0x7, 0x7990e5b, 0x1, 0x45, 0x0, 0x7, 0x2, 0x8, 0x4, 0xd2, 0xb, 0x8, 0x6, 0x10, 0x6, 0x49, 0x7fffffff, 0x9, 0xa4ee, 0xae6, 0x6, 0xb, 0xb, 0x8, 0x8, 0x4, 0x5, 0xd2, 0x7, 0x0, 0x101, 0x6, 0x3, 0x6, 0x8, 0x5, 0x8, 0x4, 0x700, 0x98, 0x7, 0x7, 0xfff, 0x3, 0x1, 0x0, 0x7f, 0x9, 0x6, 0x7fff, 0x6, 0xe59, 0xd2, 0x5, 0x4, 0xfffffff9, 0x2, 0x4da9, 0x6, 0x80, 0x0, 0x2, 0x8, 0x7, 0x10, 0xfffff350, 0x4, 0xb, 0x7, 0x9, 0xfffffca2, 0x9, 0x2, 0x40, 0xffff, 0x6, 0x2, 0xbdd, 0x80000000, 0x292, 0x9, 0x0, 0x5, 0x40, 0x7cf, 0xfff, 0xc81b, 0x7fff, 0x6, 0x0, 0x57b, 0x10001, 0x9, 0xf, 0x3c83, 0x6, 0x7, 0xe, 0x6, 0x6, 0x0, 0xffffffff, 0x5, 0x11f7800, 0x5, 0x6, 0xff, 0x8, 0x200, 0x8e2, 0x9e, 0x7, 0x6, 0x7, 0x5, 0x27a, 0x10000, 0xfff, 0x3, 0xffffff80, 0x4, 0x80, 0x9, 0x800, 0x5, 0x4, 0x4, 0x4, 0x8, 0x5, 0x200, 0x7028, 0x4, 0x7, 0x298, 0x100, 0x5, 0x8001, 0x10, 0x1, 0xd4f, 0x816, 0x7, 0xe, 0x1, 0x1, 0x4, 0x8, 0x2e9610a9, 0x3, 0xd8, 0x80, 0x5, 0x9, 0x80000003, 0x1, 0x9, 0xa0, 0x9, 0x6, 0x1180, 0x1000, 0x3, 0x9, 0x5, 0xd6a, 0x2, 0x2, 0x8000, 0x2, 0x5, 0xe, 0x4a20e965, 0x0, 0x5, 0x2, 0x1, 0xb4, 0x98, 0x6, 0x40, 0x0, 0x7, 0x8, 0x72df, 0x9, 0x9, 0x8, 0x7, 0x7ff, 0x7, 0x9, 0x4, 0x9, 0xe8, 0xffffffff, 0x200, 0x8001, 0xfffffff9, 0x9, 0x31, 0xffff, 0x1000, 0x1, 0x747, 0x681c3fd2, 0x6, 0x10000, 0x2, 0x4, 0xffff, 0x7, 0xffff, 0x7, 0x8, 0x401, 0x36, 0x8, 0xd, 0x7ff, 0x436, 0x2, 0x7, 0x0, 0x9, 0x5b1, 0xfffffff8, 0x5b, 0x9, 0x7, 0x848, 0x7f, 0x4, 0x7fffffff, 0x5, 0x5, 0x1, 0x0, 0x0, 0x5, 0x5862, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x401, 0x6, 0x0, 0x0, 0x5, 0x2, 0x7ff, 0x7ff, 0x3, 0x4, 0x2, 0x153, 0x6, 0x6, 0xffff, 0x6, 0x5, 0x6, 0xcf13, 0x5, 0x8ef, 0x2, 0x80000001, 0x1, 0xfffffff7, 0x2, 0x4, 0x0, 0x7ff, 0x80000000, 0xffffffff, 0x1, 0xfff, 0xf, 0x7, 0x0, 0x4, 0x81, 0x6, 0x3, 0x80, 0x31d42533, 0x800, 0x0, 0xe2a, 0x9, 0x2000000, 0x7, 0x9, 0xb819, 0x6, 0x4, 0x3, 0x9, 0x7, 0xb84, 0x7, 0x3ff, 0x2, 0x0, 0xbfb, 0xd, 0x1, 0x3a, 0x2, 0x40, 0x2, 0xf28, 0xb0, 0x6, 0x4, 0xdaf, 0x0, 0x4, 0x1bf, 0xb, 0x7, 0x1000, 0x8, 0x5, 0x0, 0x0, 0x800, 0x401, 0x0, 0x1000200, 0x8000, 0x0, 0xdee, 0x8695, 0x0, 0xf01, 0x1, 0x10001, 0xb, 0x7f, 0x9, 0x1, 0xfffffffd, 0x9, 0x7fff, 0xa93, 0x2, 0x0, 0x2, 0x40, 0x5, 0x0, 0x3, 0x76e, 0xd, 0x4, 0x1ff, 0x6, 0x9, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8, 0x853, 0x80000000, 0x8, 0xbc, 0x8000, 0x3d8, 0x8, 0xfff, 0x200, 0x0, 0x61, 0xfffffeff, 0x4, 0x73294eaf, 0x0, 0x9, 0x80000001, 0xb319, 0x9, 0x8, 0x4077d5b8, 0x2, 0x3, 0x7, 0x2, 0x4, 0x3, 0x5491, 0x2, 0x7, 0x200000e, 0x2, 0x6, 0x5f3a, 0x5f24, 0x9, 0x4, 0x5, 0x9, 0x401, 0x3, 0x8, 0x80, 0x2, 0x1710dc0f, 0xffff, 0xb236, 0x100, 0xbff9, 0xfffffffe, 0x101, 0x9, 0x7fffffff, 0xffffff04, 0x7, 0xa93, 0x8, 0xd8b2, 0x1a2, 0x4, 0xaf93, 0xfff, 0x80, 0x3, 0x0, 0x0, 0x401, 0xfffffffe, 0x8, 0x9, 0x9, 0x2, 0xffff, 0x9, 0x5, 0xfffffffd, 0x4, 0x7, 0x0, 0x4, 0x2, 0x7, 0x8, 0xdbb, 0x9, 0x400, 0x6, 0x4, 0x3, 0x3, 0x9, 0x10001, 0x4, 0x65, 0x5, 0x2, 0x80000000, 0x6, 0x3, 0x4, 0xc8, 0x6, 0x9, 0x0, 0x2000000, 0x10001, 0x1, 0x7, 0x6, 0x72e, 0x3, 0x8, 0x8, 0x63, 0x4, 0x8, 0x0, 0x6, 0x6, 0x5, 0x80, 0x6, 0x4, 0x9, 0x4, 0x101, 0x6, 0x8, 0x1000, 0x5d8, 0x3, 0x8, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) 32.235107746s ago: executing program 1 (id=3774): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 32.032496847s ago: executing program 1 (id=3775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = creat(&(0x7f0000000480)='./file0\x00', 0xa) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffe00, 0x0, [{0x0, 0xfc}, {0x19, 0x0, 0x5b}, {0xfc, 0x4}, {0x4a, 0x0, 0x7f, '\x00', 0x9}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xfa}, {0x0, 0x81, 0xbe}, {0x2, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0xa}, {0x0, 0x0, 0x1}, {0xfd, 0x50}, {0x0, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x0, 0x0, '\x00', 0x4}, {0x2, 0x2, 0x4}, {0xd8, 0x7, 0x0, '\x00', 0xff}, {0x41, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x6, 0x7, '\x00', 0x3}, {0xa, 0x0, 0x1, '\x00', 0x40}, {0x0, 0x4}, {0x5, 0x0, 0x0, '\x00', 0xfe}, {0x1}, {0xfc, 0x83, 0xe}]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000100)={'bond0\x00', @ifru_data=&(0x7f0000000000)="348c3fd01c803e4c1cad62d526e41ffe85676d7f3f48597c7ea34125737e4a40"}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r10 = syz_open_dev$video(&(0x7f0000000180), 0x4b97, 0x28000) ioctl$VIDIOC_G_FMT(r10, 0xc0d05604, &(0x7f0000000340)={0x1, @win={{0x2, 0x1, 0x4, 0x8}, 0x5, 0xd7, &(0x7f00000002c0)={{0x3, 0x0, 0x9, 0x6}, &(0x7f0000000280)={{0x10001, 0x2, 0xd, 0x6}, &(0x7f0000000240)={{0x8, 0x3c17, 0x401, 0x5}}}}, 0x4, &(0x7f0000000300)="95aaa7ec5c3d4d5559606d6c80c6e5130544b890a97726c0c2555b742d0b32f4e78767b7b12a7849820e4f4d79aacc103b49331f", 0x80}}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x800000000000, {0x2, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 30.210489136s ago: executing program 1 (id=3777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0102000000000800000002000000040004800900010073797a3100000000140000001100010000000000000000000000000a"], 0x4c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000005400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xbc, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x4, 0x24, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11d}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 29.784230043s ago: executing program 57 (id=3777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0102000000000800000002000000040004800900010073797a3100000000140000001100010000000000000000000000000a"], 0x4c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000005400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xbc, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x4, 0x24, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11d}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.536445865s ago: executing program 7 (id=3812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000340)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x3, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x14, 0x0, 0x1c}}}}}, 0x36) 8.270659485s ago: executing program 7 (id=3814): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x1c, 0x140f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="45f867ac75a9662a671fead7a784bf2943b1f1ae661a2a0d9240cb547e3ab944bb4954d9d53766584cc3967fd578b8651e1458888beb2d53b56742137b50feb59b7781ab86e6c564888517a0c3ebe0df0bd8990b01693f9aa6607957a1642994a2d015382f6273084e3c06a9336d562dfcfbda3ab31194fd8b393065ba36fe5535da75e998415625350c93759e030d6af803b6e81501ff9c249eb5c54b1282a2960d9f188ac6d5958e10597643eb4a7551202e568d2874b5642bc833", 0xbc}, {&(0x7f0000000180)="b9cb", 0x2}], 0x2, 0x0, 0x0, 0x130}, 0xa000) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) listxattr(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6erspan0\x00'}}, 0x1e) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 7.850127881s ago: executing program 7 (id=3820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES8], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000220"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x25dfdbff, {{}, {0x0, 0x800b}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109029e0003010230000904000000010100000a24010600310201020b2407030100077cf5354e08240504032920ec082405024045cf7b0a2407010400008c8e58090401000001020000090c0101010102000009050109ff030803dd072501020cf7ff090402000001020000090402010101020000072401800f04000b24020101040901ec27ab08240201070405070905820910"], 0x0) 6.756255237s ago: executing program 3 (id=3828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x8, 0x0, 0xf, 0xff, 0xff, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 6.616169563s ago: executing program 8 (id=3829): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb070000", 0xe) 6.49554354s ago: executing program 3 (id=3830): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x24, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}}, 0x4004000) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x40041}, 0x4080) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000f90109022d00010000000009040000030b0800e209058da203002a000009050505000000000009058b3ebd2e0b257916915ea5a89ee44cc60e5281ce6a33bb9853e5d24e56ade57864fe22488a3c959109d5f6c811ef137e33380b9c7c8943f364ab7178421937af1ce3b9915ec965b8aae0e34ef8405805c746be8b5e05515bbba3ab9022cbe88f13881137babe9127c49a17"], 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090000000004000000001c140000fe00000100000000080001"], 0x24}}, 0x4) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x412001, 0x0) (async) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fspick(r6, &(0x7f0000000500)='./file0\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r8, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r9) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x18, r10, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET]}, 0x18}}, 0x8800) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@cgroup, 0xffffffffffffffff, 0xb, 0x4, 0xffffffffffffffff, @void, @value}, 0x20) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="912fe8293387f5670dc0aa249657a8b20b2c65043ceb2ebcefb4faa38501955bcfd3ea8d551518d486fe71a1400bab6265e462d02a1416d8c687154c9eaa72219c2f72d1d009c4ee59e0492cdf3c5ab0bfb9b5e32bc7b61576000000", @ANYRES16=r10, @ANYBLOB="100025bd7000fddbdf25070000001c0004800900010073797a30000000000900010073797a3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x2040}, 0x4000000) 6.328460791s ago: executing program 7 (id=3831): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6800008, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0xffffffffffffffdb) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000031c0)=""/4089, 0xff9) 6.222804644s ago: executing program 3 (id=3832): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000031c0)=""/4089, 0xfd) 6.12847051s ago: executing program 3 (id=3833): setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200)=0x1, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0xa3, 0x64, 0x20, 0xb49, 0x64f, 0xacb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe0, 0xd3, 0x4a}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) r0 = socket(0x8000000010, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x244c00, 0x1) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x100) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000013481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x2c, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0xd0, 0x88}, [@NDA_PROTOCOL={0x5, 0xc, 0x1}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x26004095) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.014819875s ago: executing program 8 (id=3835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xff}}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x7f, @none, 0x5}}}, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r0) 4.913722772s ago: executing program 9 (id=3836): io_uring_setup(0x6ed9, &(0x7f00000000c0)={0x0, 0xb2e9, 0x4, 0x0, 0x240}) io_uring_setup(0x2b85, &(0x7f0000000200)={0x0, 0xfefbfffe, 0x10000, 0x0, 0x3d4}) r0 = syz_io_uring_setup(0x8ad, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, r0, 0x1}) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/31) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c00018006000600"], 0x528}}, 0xc000) io_uring_setup(0x6ed9, &(0x7f00000000c0)={0x0, 0xb2e9, 0x4, 0x0, 0x240}) (async) io_uring_setup(0x2b85, &(0x7f0000000200)={0x0, 0xfefbfffe, 0x10000, 0x0, 0x3d4}) (async) syz_io_uring_setup(0x8ad, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, r0, 0x1}) (async) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/31) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c00018006000600"], 0x528}}, 0xc000) (async) 4.87831889s ago: executing program 8 (id=3837): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000001500)=""/125, 0x7d}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) 4.486727212s ago: executing program 9 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.409663051s ago: executing program 3 (id=3840): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000580)={{r0}, "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"}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.100043861s ago: executing program 9 (id=3841): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r3, 0x0, 0x0) 3.877353685s ago: executing program 9 (id=3842): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000f00e00008001000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 3.82664237s ago: executing program 8 (id=3843): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0102000000000800000002000000040004800900010073797a3100000000140000001100010000000000000000000000000a"], 0x4c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000005400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xbc, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x4, 0x24, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11d}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.777050184s ago: executing program 6 (id=3844): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/84, 0x54}, 0x5}], 0x1, 0x300, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x40, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.520208748s ago: executing program 8 (id=3845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (fail_nth: 9) 3.438822968s ago: executing program 9 (id=3846): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.415377996s ago: executing program 6 (id=3847): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x700}]}, 0x40}}, 0x0) 3.16090734s ago: executing program 9 (id=3848): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x5, 0x5, 0x0, 0xfffffffe, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x28}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "cca1c1d6"}, @main=@item_4={0x3, 0x0, 0x9, "7e49ed50"}, @global=@item_012={0x1, 0x1, 0x4, "b8"}, @local=@item_012={0x2, 0x2, 0x4, 'uQ'}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000040)) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x1, 0x0, 0x101}) 2.909426164s ago: executing program 6 (id=3849): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x60000881}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (fail_nth: 4) 2.682857383s ago: executing program 8 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="200000002c00010026bd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (fail_nth: 9) 2.613528505s ago: executing program 6 (id=3851): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x700, r2}}, 0x24}}, 0x0) 2.44871984s ago: executing program 7 (id=3852): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.245114987s ago: executing program 3 (id=3853): r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 10) 1.150633573s ago: executing program 6 (id=3854): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') (async) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB='9i\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffe1b, &(0x7f0000000640)={0x0, 0x9, 0x102, {0x102, 0x6, "bb3a3f5454eb4db9ab6f2e19cb5e266b8e58abb53bc04e843dba404d289a27a89eb380da9acbcf7f2732a90e3ed5edb9d9087aa0f6ffbbec5a5c0e4ac3e19a52b48ba45096ca310f3305a3717f641dc12eeb53ab83958252d93ef4cd520bb6a00a9e55821f6c3c6d38da936385d9625a4397e5366d4352d306084e7368629e73ca35c7afb23c7f470146095abbc3843b8016adfd09f6221ff8ba7b23411fb9dd27e4d46ef7530af16060f5a594e133560715284ef042710c8c3118bc54503ca3ce5e5f726ce56a0eed8268a7ec5bd1bdb737a815d2593d04913a3eab3cf2adaa9f5589f63088684e5aef2bacba828fe28bb90f95cd269e000000000000000000"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003000000005828778e6ab87d624dd4ed0fac994e32ff068d1076669f774e21ccb0b3abe7a018a1de0188385c30f92f1e5bd7f3d435292c0bc751750c9ecfb7fb9fb4a371cc4ecff4c1871fcae3668bf6dd4549d45bb6c02618f091e58e24a479e3bdcf9e77632d73fb26a670b66cb11b7bd6c084746184a9000738ae4bb5e68d2999138714c7da0252fec8b376b80725b3c498fcdb7c3682c23e67b8ade047802962cf2f97f920b5d2c97126224f01c258f7576121e9dd29037ab49fe4974863c1e8f5e0ce31040780d3359be97c745cde7c45cf4a18b471e1e04635660819fdffb19b704c094bc8488a15240c7aff8c4a3c", @ANYBLOB="e822d2d135f86887533985040c76e24b6ea0c24337269f4499e991e8dcf1a0fa8c29394fd4dde0db5d350f177de904a14de7948047c54e4b0db75dcb6b0e38aaae37705bdbbe360823b58960fcd5674a7f22ad2230fff6d46bd1ac6b2bbacf87a34acd31afa29dc0a9875b1ddcfe7a706f"]}, &(0x7f0000000480)={0x34, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x64}, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f00000003c0)={0x20, 0x1, 0xfffffffffffffd8c, 0x6}, &(0x7f0000000080)={0x20, 0x0, 0x1, 0xc5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$inet6(r1, 0x0, 0xfffffffffffffff2, 0x20004040) 1.066407679s ago: executing program 7 (id=3855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 6) 0s ago: executing program 6 (id=3856): r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x6, &(0x7f0000000b00)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000006c0)="6bb8f7ee0185b3ba2d351b29a5fc8ac0b81a3c0293dd3323f322465fb18818e591bbabd502d13c4485ba89013ddf34ee3847b4b51c4c2f7283ee19a4c89bd1ca700b1e87f07b4dcf0a011c39ed7108494555d930d273839c3c2d5c7c64ffd0e3", 0x60, 0x2, 0x0, 0x1, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x4, 0x74, r4, &(0x7f0000000780)="560fc0c665d90a0a72c3ff93b28cd9095854c4b1cfe7158cdcae8c61232aa9cdf071882e274875a01d993161a2a0ac5649beca9ed0af21e7b916453db4a6ab0312897e96534f9bea3cc1abe1ae39921a7edf3b77d5c261a33ac3ca99a2d002b9", 0x60, 0xca58, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000880)="9f5f5fbc8329209258ebb9b8a7ee32ca010ea66f0e35618091ef36779d9a70b5c3b70261d9ec0c53ca23f487bc4a31f07c27cff03eeb241543dbe718", 0x3c, 0xd9a7, 0x0, 0x2, r4}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f00000009c0)="9e9a9852e3c16ed1041dbf6302a1299a89a370bf21c3e9c77a6a9bb849559df7a4862b5b02f7f0129cde01f5ed5cd19c4a70a97316a627a2d3c984f30acb7c2fcd5b18e0cbcf98f73d4b231f69ab947e62c35c5c5cc4f20de9189b27addf60e0eec72bc206173a3d7d484e15551465fac79243ef3ba93ad9f63d19f5add582ad96024c317b54a6a1bf905747dba6c35c8edd93e898b9fc9fac0b50db184d5fa468acc5610afd412a5579dc6cb455ce6157f304cdde80cd598ac79885db516223e5a1c6347f5d3f08da0ed0c245a40341cca8a741e97f4c19212459b1", 0xdc, 0x0, 0x0, 0x3, r4}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x10, r2, &(0x7f0000000940)="72b60d6090fd79b9158242cd1ae8685de4dda8be762508a8577a596dfc270cfb4e1f652c793b7e1560e42523385388", 0x2f, 0x4, 0x0, 0x0, r4}]) ppoll(&(0x7f0000000040)=[{r2, 0x81}, {r2, 0x2093}], 0x2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="210f000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="87bcb775b125329a9918ebbcebcdfcf642d2b1b677bace85a638017da4351972ce62c7666060e1ad4941344de49d1a8d5a0a760e618f57d12141b870c62d9eb60c437f4523ed37b9442af2f4bcec386132a5db7cdcf10425af46d1a7e75dda6fff82b569c7fa11ab04bde8251a0a1a5edb5d61370ef7fa04fb68c00bb5f2a6d40933360b3a41b137738e2c307d4a8f338b1961ad6e54eefbe1c2e192a7fbddfab19ac9513c60bed3b9636d81bc57506366e5bc34", 0xb4, r0) r7 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x472a, 0x4, 0x1, 0x0, 0x0, r6}, &(0x7f0000000140)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10, r7, 0x0) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xb4682689e8aca82a, 0x800, 0x0, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x4}]}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000480)=ANY=[@ANYBLOB="8401000010000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000006c000000ac1e000100000000000000000000000009000000008000000000000000000000040000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a0000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736d332d636500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027e3d3d4bddf862b39fdcc487d18ff0bfb113b009c3fe3b5d5b1ed444784a4312f0172484a3b815b516bfd31d59e5d993e1a41e2be056d9640fd61e57a0a9503cce2dad0ed02b746021d21af6ab770fd33e13cd67f1cd37c8ba8ddfd7ff60fd42d2c56d9beeaf8648bf315a95fdbc6157e654a7dbc454194c950e4c55e45d8cbfbc5a5a4b811d62ee83f619ba21d3e3b623994d691ca7b20e83ff75c5f0f04f79d999720cd625b1c966819c57ea820"], 0x184}}, 0x0) syz_io_uring_complete(r8) syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) r12 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) fsmount(r12, 0x0, 0x19) kernel console output (not intermixed with test programs): B device number 60 using dummy_hcd [ 603.537736][ T5887] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 603.564341][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 603.573624][ T5887] usb 1-1: can't read configurations, error -61 [ 603.621505][T18151] fuse: Bad value for 'fd' [ 603.639181][ T5888] m920x_read = error: -19 [ 603.644178][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 603.718802][ T5887] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 603.749229][ T5887] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 603.765884][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 603.773963][ T5887] usb 1-1: can't read configurations, error -61 [ 603.791402][ T5887] usb usb1-port1: unable to enumerate USB device [ 603.819659][ T5887] m920x_read = error: -19 [ 603.834245][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 603.969321][ T5888] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 604.018130][ T5885] m920x_read = error: -19 [ 604.022645][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 604.129878][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 604.154494][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.180400][ T5888] usb 6-1: config 0 descriptor?? [ 604.194795][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 604.204172][ T5887] m920x_read = error: -19 [ 604.208776][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 604.377539][ T5887] m920x_read = error: -19 [ 604.397904][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 604.429806][ T10] usb 6-1: USB disconnect, device number 50 [ 604.553731][ T5886] usb 9-1: USB disconnect, device number 15 [ 604.578074][ T5887] m920x_read = error: -19 [ 604.582493][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 604.687639][T18184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 604.778225][ T5887] m920x_read = error: -19 [ 604.782969][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 604.896398][T18157] dccp_close: ABORT with 60 bytes unread [ 604.960097][ T5887] m920x_read = error: -19 [ 604.964516][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 605.167984][ T5885] m920x_read = error: -19 [ 605.173607][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 605.268686][T18202] FAULT_INJECTION: forcing a failure. [ 605.268686][T18202] name failslab, interval 1, probability 0, space 0, times 0 [ 605.307987][T18202] CPU: 1 UID: 0 PID: 18202 Comm: syz.8.3719 Not tainted 6.14.0-syzkaller #0 [ 605.308027][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 605.308041][T18202] Call Trace: [ 605.308050][T18202] [ 605.308059][T18202] dump_stack_lvl+0x241/0x360 [ 605.308090][T18202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.308113][T18202] ? __pfx__printk+0x10/0x10 [ 605.308135][T18202] ? __kmalloc_cache_noprof+0x48/0x390 [ 605.308166][T18202] ? __pfx___might_resched+0x10/0x10 [ 605.308191][T18202] ? __mutex_lock+0x397/0x1010 [ 605.308229][T18202] should_fail_ex+0x40a/0x550 [ 605.308265][T18202] should_failslab+0xac/0x100 [ 605.308294][T18202] __kmalloc_cache_noprof+0x70/0x390 [ 605.308332][T18202] ? flow_change+0x447/0x1b10 [ 605.308364][T18202] flow_change+0x447/0x1b10 [ 605.308396][T18202] ? __pfx_flow_change+0x10/0x10 [ 605.308422][T18202] ? tcf_chain_tp_insert_unique+0x996/0xa70 [ 605.308475][T18202] ? __pfx_flow_change+0x10/0x10 [ 605.308501][T18202] tc_new_tfilter+0x112d/0x1a90 [ 605.308556][T18202] ? __pfx_tc_new_tfilter+0x10/0x10 [ 605.308599][T18202] ? rcu_read_unlock+0x87/0xa0 [ 605.308640][T18202] ? __pfx_tc_new_tfilter+0x10/0x10 [ 605.308676][T18202] rtnetlink_rcv_msg+0x791/0xcf0 [ 605.308707][T18202] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 605.308747][T18202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 605.308781][T18202] ? ref_tracker_free+0x643/0x7e0 [ 605.308808][T18202] netlink_rcv_skb+0x206/0x480 [ 605.308834][T18202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 605.308864][T18202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.308911][T18202] ? netlink_deliver_tap+0x2e/0x1b0 [ 605.308939][T18202] netlink_unicast+0x7f6/0x990 [ 605.308971][T18202] ? __pfx_netlink_unicast+0x10/0x10 [ 605.308991][T18202] ? __virt_addr_valid+0x45f/0x530 [ 605.309012][T18202] ? __phys_addr_symbol+0x2f/0x70 [ 605.309031][T18202] ? __check_object_size+0x47a/0x730 [ 605.309063][T18202] netlink_sendmsg+0x8de/0xcb0 [ 605.309101][T18202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.309131][T18202] ? aa_sock_msg_perm+0x91/0x160 [ 605.309169][T18202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.309193][T18202] __sock_sendmsg+0x221/0x270 [ 605.309225][T18202] ____sys_sendmsg+0x53a/0x860 [ 605.309256][T18202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.309276][T18202] ? __fget_files+0x2a/0x410 [ 605.309309][T18202] ? __fget_files+0x2a/0x410 [ 605.309347][T18202] __sys_sendmsg+0x269/0x350 [ 605.309375][T18202] ? __pfx___sys_sendmsg+0x10/0x10 [ 605.309411][T18202] ? do_sys_openat2+0x17a/0x1d0 [ 605.309468][T18202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.309501][T18202] ? do_syscall_64+0x100/0x230 [ 605.309524][T18202] ? do_syscall_64+0xb6/0x230 [ 605.309546][T18202] do_syscall_64+0xf3/0x230 [ 605.309564][T18202] ? clear_bhb_loop+0x35/0x90 [ 605.309596][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.309624][T18202] RIP: 0033:0x7f9b3bd8d169 [ 605.309643][T18202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.309661][T18202] RSP: 002b:00007f9b3cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.309683][T18202] RAX: ffffffffffffffda RBX: 00007f9b3bfa5fa0 RCX: 00007f9b3bd8d169 [ 605.309704][T18202] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 605.309719][T18202] RBP: 00007f9b3cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 605.309732][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.309745][T18202] R13: 0000000000000000 R14: 00007f9b3bfa5fa0 R15: 00007f9b3c0cfa28 [ 605.309775][T18202] [ 605.831567][ T5887] m920x_read = error: -19 [ 605.835983][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 606.041168][ T5885] m920x_read = error: -19 [ 606.045588][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 606.058091][ T5890] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 606.209718][ T5890] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 606.223022][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.231270][ T5887] m920x_read = error: -19 [ 606.231296][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 606.323055][ T5890] usb 5-1: config 0 descriptor?? [ 606.388154][ T5888] m920x_read = error: -19 [ 606.392652][ T5890] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 606.402662][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 606.478172][ T5887] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 606.578014][T13611] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 606.598189][ T5952] m920x_read = error: -19 [ 606.602675][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 606.641396][ T5887] usb 6-1: New USB device found, idVendor=055f, idProduct=c244, bcdDevice=b6.ac [ 606.663492][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.778097][T13611] usb 2-1: Using ep0 maxpacket: 16 [ 606.789815][T13611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.800399][ T5887] usb 6-1: Product: syz [ 606.804613][ T5887] usb 6-1: Manufacturer: syz [ 606.812093][ T5890] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 606.819561][T13611] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.837965][ T5888] m920x_read = error: -19 [ 606.842370][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 606.853458][T13611] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 606.881661][T13611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.890258][ T5887] usb 6-1: SerialNumber: syz [ 606.961803][ T5887] usb 6-1: config 0 descriptor?? [ 607.016254][T13611] usb 2-1: config 0 descriptor?? [ 607.078006][ T5888] m920x_read = error: -19 [ 607.106838][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 607.369470][ T5888] m920x_read = error: -19 [ 607.373884][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 607.427295][T18243] FAULT_INJECTION: forcing a failure. [ 607.427295][T18243] name failslab, interval 1, probability 0, space 0, times 0 [ 607.448400][T18243] CPU: 1 UID: 0 PID: 18243 Comm: syz.8.3728 Not tainted 6.14.0-syzkaller #0 [ 607.448431][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.448445][T18243] Call Trace: [ 607.448454][T18243] [ 607.448463][T18243] dump_stack_lvl+0x241/0x360 [ 607.448494][T18243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.448516][T18243] ? __pfx__printk+0x10/0x10 [ 607.448539][T18243] ? kmem_cache_alloc_noprof+0x48/0x380 [ 607.448577][T18243] ? __pfx___might_resched+0x10/0x10 [ 607.448608][T18243] should_fail_ex+0x40a/0x550 [ 607.448645][T18243] should_failslab+0xac/0x100 [ 607.448673][T18243] ? fib_insert_alias+0x30e/0x1280 [ 607.448696][T18243] kmem_cache_alloc_noprof+0x70/0x380 [ 607.448731][T18243] fib_insert_alias+0x30e/0x1280 [ 607.448757][T18243] ? rcu_is_watching+0x15/0xb0 [ 607.448781][T18243] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 607.448806][T18243] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 607.448839][T18243] fib_table_insert+0x7ff/0x1f20 [ 607.448886][T18243] ? rcu_is_watching+0x15/0xb0 [ 607.448909][T18243] ? __pfx_fib_table_insert+0x10/0x10 [ 607.448934][T18243] ? __mutex_lock+0xba3/0x1010 [ 607.448965][T18243] ? fib_new_table+0x120/0x2d0 [ 607.448999][T18243] inet_rtm_newroute+0x149/0x290 [ 607.449033][T18243] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 607.449082][T18243] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 607.449116][T18243] rtnetlink_rcv_msg+0x73f/0xcf0 [ 607.449142][T18243] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 607.449176][T18243] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.449210][T18243] ? ref_tracker_free+0x643/0x7e0 [ 607.449236][T18243] netlink_rcv_skb+0x206/0x480 [ 607.449262][T18243] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.449290][T18243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.449337][T18243] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.449364][T18243] netlink_unicast+0x7f6/0x990 [ 607.449394][T18243] ? __pfx_netlink_unicast+0x10/0x10 [ 607.449412][T18243] ? __virt_addr_valid+0x45f/0x530 [ 607.449434][T18243] ? __phys_addr_symbol+0x2f/0x70 [ 607.449453][T18243] ? __check_object_size+0x47a/0x730 [ 607.449487][T18243] netlink_sendmsg+0x8de/0xcb0 [ 607.449524][T18243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.449561][T18243] ? aa_sock_msg_perm+0x91/0x160 [ 607.449599][T18243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.449624][T18243] __sock_sendmsg+0x221/0x270 [ 607.449655][T18243] ____sys_sendmsg+0x53a/0x860 [ 607.449687][T18243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.449707][T18243] ? __fget_files+0x2a/0x410 [ 607.449741][T18243] ? __fget_files+0x2a/0x410 [ 607.449779][T18243] __sys_sendmsg+0x269/0x350 [ 607.449808][T18243] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.449873][T18243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.449908][T18243] ? do_syscall_64+0x100/0x230 [ 607.449930][T18243] ? do_syscall_64+0xb6/0x230 [ 607.449952][T18243] do_syscall_64+0xf3/0x230 [ 607.449972][T18243] ? clear_bhb_loop+0x35/0x90 [ 607.450005][T18243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.450035][T18243] RIP: 0033:0x7f9b3bd8d169 [ 607.450055][T18243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.450072][T18243] RSP: 002b:00007f9b3cc06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.450096][T18243] RAX: ffffffffffffffda RBX: 00007f9b3bfa6080 RCX: 00007f9b3bd8d169 [ 607.450109][T18243] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 607.450119][T18243] RBP: 00007f9b3cc06090 R08: 0000000000000000 R09: 0000000000000000 [ 607.450128][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.450138][T18243] R13: 0000000000000000 R14: 00007f9b3bfa6080 R15: 00007f9b3c0cfa28 [ 607.450168][T18243] [ 607.828187][ T5890] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 607.837638][ T5890] cpia1 5-1:0.0: unexpected systemstate: 01 [ 607.858360][ T5888] m920x_read = error: -19 [ 607.863037][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 608.042819][T13613] usb 5-1: USB disconnect, device number 66 [ 608.058042][ T5888] m920x_read = error: -19 [ 608.062442][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 608.127972][ T5890] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 608.227970][ T5888] m920x_read = error: -19 [ 608.232437][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 608.288438][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 608.337011][ T5890] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 608.397360][ T5890] usb 1-1: config 8 has no interface number 0 [ 608.412213][ T5888] m920x_read = error: -19 [ 608.420266][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 608.440815][ T5890] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 608.473891][ T5890] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 608.494510][ T5890] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 608.509644][ T5890] usb 1-1: config 8 interface 39 has no altsetting 0 [ 608.524696][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 608.641907][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.658080][ T5888] m920x_read = error: -19 [ 608.662859][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 608.664529][ T5890] usb 1-1: Product: syz [ 608.713960][ T5890] usb 1-1: Manufacturer: syz [ 608.727664][ T5890] usb 1-1: SerialNumber: syz [ 608.868009][ T5888] m920x_read = error: -19 [ 608.875172][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 608.979918][ T5890] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 609.043594][ T5890] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 609.140901][ T5887] m920x_read = error: -19 [ 609.148547][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 609.214867][ T5890] usb 1-1: USB disconnect, device number 62 [ 609.348059][ T5888] m920x_read = error: -19 [ 609.352438][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 609.518037][ T5888] m920x_read = error: -19 [ 609.522487][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 609.547036][ T3877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.731645][ T5888] m920x_read = error: -19 [ 609.745114][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 609.854326][ T3877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.918043][ T5888] m920x_read = error: -19 [ 609.924757][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 610.040513][T13611] usb 2-1: USB disconnect, device number 35 [ 610.124595][ T5888] m920x_read = error: -19 [ 610.142822][ T3877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.150236][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 610.315076][ T3877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.326202][ T5890] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 610.335879][ T5888] usb 6-1: USB disconnect, device number 51 [ 610.364856][T13660] m920x_read = error: -19 [ 610.380327][T13660] dvb-usb: error -19 while querying for an remote control event. [ 610.478335][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3740'. [ 610.480226][T18297] FAULT_INJECTION: forcing a failure. [ 610.480226][T18297] name failslab, interval 1, probability 0, space 0, times 0 [ 610.508091][T18297] CPU: 0 UID: 0 PID: 18297 Comm: syz.5.3741 Not tainted 6.14.0-syzkaller #0 [ 610.508135][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 610.508148][T18297] Call Trace: [ 610.508156][T18297] [ 610.508166][T18297] dump_stack_lvl+0x241/0x360 [ 610.508196][T18297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.508219][T18297] ? __pfx__printk+0x10/0x10 [ 610.508242][T18297] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 610.508280][T18297] ? __pfx___might_resched+0x10/0x10 [ 610.508312][T18297] should_fail_ex+0x40a/0x550 [ 610.508348][T18297] should_failslab+0xac/0x100 [ 610.508377][T18297] __kmalloc_node_noprof+0xe1/0x4d0 [ 610.508405][T18297] ? __kvmalloc_node_noprof+0x72/0x190 [ 610.508444][T18297] __kvmalloc_node_noprof+0x72/0x190 [ 610.508477][T18297] alloc_netdev_mqs+0x92d/0x1210 [ 610.508512][T18297] rtnl_create_link+0x2f9/0xc90 [ 610.508544][T18297] rtnl_newlink_create+0x210/0xa40 [ 610.508583][T18297] ? __pfx___mutex_lock+0x10/0x10 [ 610.508618][T18297] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 610.508663][T18297] ? nla_strscpy+0x100/0x180 [ 610.508686][T18297] ? full_name_hash+0x89/0xe0 [ 610.508721][T18297] rtnl_newlink+0x17cc/0x1d30 [ 610.508765][T18297] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.508789][T18297] ? __netlink_deliver_tap+0x561/0x7f0 [ 610.508842][T18297] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.508877][T18297] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.508917][T18297] ? mark_lock+0x9a/0x360 [ 610.508942][T18297] ? __lock_acquire+0x1397/0x2100 [ 610.509005][T18297] ? __pfx_lock_release+0x10/0x10 [ 610.509052][T18297] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.509082][T18297] rtnetlink_rcv_msg+0x791/0xcf0 [ 610.509108][T18297] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 610.509140][T18297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.509174][T18297] ? ref_tracker_free+0x643/0x7e0 [ 610.509203][T18297] netlink_rcv_skb+0x206/0x480 [ 610.509228][T18297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.509267][T18297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.509313][T18297] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.509342][T18297] netlink_unicast+0x7f6/0x990 [ 610.509372][T18297] ? __pfx_netlink_unicast+0x10/0x10 [ 610.509392][T18297] ? __virt_addr_valid+0x45f/0x530 [ 610.509412][T18297] ? __phys_addr_symbol+0x2f/0x70 [ 610.509431][T18297] ? __check_object_size+0x47a/0x730 [ 610.509464][T18297] netlink_sendmsg+0x8de/0xcb0 [ 610.509502][T18297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.509532][T18297] ? aa_sock_msg_perm+0x91/0x160 [ 610.509570][T18297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.509594][T18297] __sock_sendmsg+0x221/0x270 [ 610.509625][T18297] ____sys_sendmsg+0x53a/0x860 [ 610.509654][T18297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.509674][T18297] ? __fget_files+0x2a/0x410 [ 610.509706][T18297] ? __fget_files+0x2a/0x410 [ 610.509744][T18297] __sys_sendmsg+0x269/0x350 [ 610.509773][T18297] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.509811][T18297] ? do_sys_openat2+0x17a/0x1d0 [ 610.509867][T18297] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.509901][T18297] ? do_syscall_64+0x100/0x230 [ 610.509924][T18297] ? do_syscall_64+0xb6/0x230 [ 610.509947][T18297] do_syscall_64+0xf3/0x230 [ 610.509967][T18297] ? clear_bhb_loop+0x35/0x90 [ 610.510000][T18297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.510028][T18297] RIP: 0033:0x7f5c4bf8d169 [ 610.510046][T18297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.510064][T18297] RSP: 002b:00007f5c4ce5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.510087][T18297] RAX: ffffffffffffffda RBX: 00007f5c4c1a5fa0 RCX: 00007f5c4bf8d169 [ 610.510103][T18297] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 610.510117][T18297] RBP: 00007f5c4ce5a090 R08: 0000000000000000 R09: 0000000000000000 [ 610.510130][T18297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.510141][T18297] R13: 0000000000000000 R14: 00007f5c4c1a5fa0 R15: 00007f5c4c2cfa28 [ 610.510171][T18297] [ 610.578134][T13660] m920x_read = error: -19 [ 610.582643][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.588945][T13660] dvb-usb: error -19 while querying for an remote control event. [ 610.967777][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.989749][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.018737][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 611.028549][ T5890] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.065946][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.081130][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.101923][ T5890] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.114355][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 611.129481][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.137654][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 611.150204][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.167787][ T5890] usb 9-1: config 0 descriptor?? [ 611.209965][T13660] m920x_read = error: -19 [ 611.228139][T13660] dvb-usb: error -19 while querying for an remote control event. [ 611.292712][ T3877] bridge_slave_1: left allmulticast mode [ 611.308211][ T3877] bridge_slave_1: left promiscuous mode [ 611.314122][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.339232][ T3877] bridge_slave_0: left allmulticast mode [ 611.345010][ T3877] bridge_slave_0: left promiscuous mode [ 611.360038][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.419173][T13660] m920x_read = error: -19 [ 611.436838][T13660] dvb-usb: error -19 while querying for an remote control event. [ 611.585273][ T5890] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 611.618103][T13660] m920x_read = error: -19 [ 611.618807][ T5890] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 611.623576][T13660] dvb-usb: error -19 while querying for an remote control event. [ 611.664977][ T5890] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 611.802750][T18329] FAULT_INJECTION: forcing a failure. [ 611.802750][T18329] name failslab, interval 1, probability 0, space 0, times 0 [ 611.816108][T18317] syz.0.3745 (18317): drop_caches: 2 [ 611.818155][T18329] CPU: 0 UID: 0 PID: 18329 Comm: syz.5.3748 Not tainted 6.14.0-syzkaller #0 [ 611.818184][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.818199][T18329] Call Trace: [ 611.818208][T18329] [ 611.818218][T18329] dump_stack_lvl+0x241/0x360 [ 611.818250][T18329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.818274][T18329] ? __pfx__printk+0x10/0x10 [ 611.818299][T18329] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 611.818332][T18329] ? __pfx___might_resched+0x10/0x10 [ 611.818366][T18329] should_fail_ex+0x40a/0x550 [ 611.818404][T18329] should_failslab+0xac/0x100 [ 611.818434][T18329] kmem_cache_alloc_node_noprof+0x77/0x380 [ 611.818465][T18329] ? __alloc_skb+0x1c3/0x440 [ 611.818490][T18329] __alloc_skb+0x1c3/0x440 [ 611.818516][T18329] ? __pfx___alloc_skb+0x10/0x10 [ 611.818536][T18329] ? __pfx_tc_new_tfilter+0x10/0x10 [ 611.818571][T18329] ? netlink_ack_tlv_len+0x6e/0x200 [ 611.818600][T18329] netlink_ack+0x145/0xa60 [ 611.818623][T18329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.818660][T18329] ? ref_tracker_free+0x643/0x7e0 [ 611.818687][T18329] netlink_rcv_skb+0x294/0x480 [ 611.818714][T18329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.818744][T18329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.818792][T18329] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.818821][T18329] netlink_unicast+0x7f6/0x990 [ 611.818852][T18329] ? __pfx_netlink_unicast+0x10/0x10 [ 611.818874][T18329] ? __virt_addr_valid+0x45f/0x530 [ 611.818903][T18329] ? __phys_addr_symbol+0x2f/0x70 [ 611.818923][T18329] ? __check_object_size+0x47a/0x730 [ 611.818957][T18329] netlink_sendmsg+0x8de/0xcb0 [ 611.819000][T18329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.819032][T18329] ? aa_sock_msg_perm+0x91/0x160 [ 611.819070][T18329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.819096][T18329] __sock_sendmsg+0x221/0x270 [ 611.819128][T18329] ____sys_sendmsg+0x53a/0x860 [ 611.819161][T18329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.819183][T18329] ? __fget_files+0x2a/0x410 [ 611.819217][T18329] ? __fget_files+0x2a/0x410 [ 611.819257][T18329] __sys_sendmsg+0x269/0x350 [ 611.819284][T18329] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.819320][T18329] ? do_sys_openat2+0x17a/0x1d0 [ 611.819377][T18329] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 611.819413][T18329] ? do_syscall_64+0x100/0x230 [ 611.819438][T18329] ? do_syscall_64+0xb6/0x230 [ 611.819462][T18329] do_syscall_64+0xf3/0x230 [ 611.819483][T18329] ? clear_bhb_loop+0x35/0x90 [ 611.819517][T18329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.819546][T18329] RIP: 0033:0x7f5c4bf8d169 [ 611.819566][T18329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.819584][T18329] RSP: 002b:00007f5c4ce39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.819609][T18329] RAX: ffffffffffffffda RBX: 00007f5c4c1a6080 RCX: 00007f5c4bf8d169 [ 611.819625][T18329] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 611.819640][T18329] RBP: 00007f5c4ce39090 R08: 0000000000000000 R09: 0000000000000000 [ 611.819654][T18329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.819668][T18329] R13: 0000000000000001 R14: 00007f5c4c1a6080 R15: 00007f5c4c2cfa28 [ 611.819698][T18329] [ 612.149957][T13660] m920x_read = error: -19 [ 612.154335][T13660] dvb-usb: error -19 while querying for an remote control event. [ 612.318156][ T5885] m920x_read = error: -19 [ 612.322583][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 612.487994][T13660] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 612.500345][ T3877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.504581][ T5885] m920x_read = error: -19 [ 612.514936][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 612.523538][ T3877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.534254][ T3877] bond0 (unregistering): Released all slaves [ 612.688313][ T5888] m920x_read = error: -19 [ 612.694531][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 612.709984][T13660] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 612.722039][T13660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.739915][T13660] usb 1-1: config 0 descriptor?? [ 612.888872][ T5888] m920x_read = error: -19 [ 612.893404][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 612.917640][T18312] chnl_net:caif_netlink_parms(): no params data found [ 612.946017][ T5885] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 613.037736][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3751'. [ 613.128340][ T5888] m920x_read = error: -19 [ 613.133077][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 613.181465][ T5885] usb 2-1: New USB device found, idVendor=055f, idProduct=c244, bcdDevice=b6.ac [ 613.203425][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.217942][ T5885] usb 2-1: Product: syz [ 613.219784][T18356] FAULT_INJECTION: forcing a failure. [ 613.219784][T18356] name failslab, interval 1, probability 0, space 0, times 0 [ 613.222187][ T5885] usb 2-1: Manufacturer: syz [ 613.235860][T13479] Bluetooth: hci1: command tx timeout [ 613.240315][ T5885] usb 2-1: SerialNumber: syz [ 613.271446][ T5885] usb 2-1: config 0 descriptor?? [ 613.297052][T18356] CPU: 1 UID: 0 PID: 18356 Comm: syz.5.3752 Not tainted 6.14.0-syzkaller #0 [ 613.297073][T18356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 613.297083][T18356] Call Trace: [ 613.297089][T18356] [ 613.297103][T18356] dump_stack_lvl+0x241/0x360 [ 613.297129][T18356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.297146][T18356] ? __pfx__printk+0x10/0x10 [ 613.297162][T18356] ? kmem_cache_alloc_noprof+0x48/0x380 [ 613.297185][T18356] ? __pfx___might_resched+0x10/0x10 [ 613.297208][T18356] should_fail_ex+0x40a/0x550 [ 613.297234][T18356] should_failslab+0xac/0x100 [ 613.297254][T18356] ? skb_clone+0x20c/0x390 [ 613.297271][T18356] kmem_cache_alloc_noprof+0x70/0x380 [ 613.297294][T18356] skb_clone+0x20c/0x390 [ 613.297313][T18356] nfnetlink_rcv+0x575/0x2ab0 [ 613.297340][T18356] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 613.297365][T18356] ? __dev_queue_xmit+0x1775/0x3f50 [ 613.297383][T18356] ? kasan_save_track+0x51/0x80 [ 613.297403][T18356] ? ____sys_sendmsg+0x53a/0x860 [ 613.297421][T18356] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 613.297459][T18356] ? ref_tracker_free+0x643/0x7e0 [ 613.297475][T18356] ? __asan_memcpy+0x40/0x70 [ 613.297489][T18356] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.297503][T18356] ? __skb_clone+0x5c/0x6c0 [ 613.297529][T18356] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.297547][T18356] ? skb_clone+0x240/0x390 [ 613.297564][T18356] ? __pfx_lock_release+0x10/0x10 [ 613.297588][T18356] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 613.297614][T18356] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.297646][T18356] netlink_unicast+0x7f6/0x990 [ 613.297667][T18356] ? __pfx_netlink_unicast+0x10/0x10 [ 613.297681][T18356] ? __virt_addr_valid+0x45f/0x530 [ 613.297696][T18356] ? __phys_addr_symbol+0x2f/0x70 [ 613.297709][T18356] ? __check_object_size+0x47a/0x730 [ 613.297731][T18356] netlink_sendmsg+0x8de/0xcb0 [ 613.297757][T18356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.297777][T18356] ? aa_sock_msg_perm+0x91/0x160 [ 613.297811][T18356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.297833][T18356] __sock_sendmsg+0x221/0x270 [ 613.297864][T18356] ____sys_sendmsg+0x53a/0x860 [ 613.297893][T18356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.297913][T18356] ? __fget_files+0x2a/0x410 [ 613.297945][T18356] ? __fget_files+0x2a/0x410 [ 613.297981][T18356] __sys_sendmsg+0x269/0x350 [ 613.298006][T18356] ? __pfx___sys_sendmsg+0x10/0x10 [ 613.298041][T18356] ? do_sys_openat2+0x17a/0x1d0 [ 613.298102][T18356] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 613.298135][T18356] ? do_syscall_64+0x100/0x230 [ 613.298157][T18356] ? do_syscall_64+0xb6/0x230 [ 613.298178][T18356] do_syscall_64+0xf3/0x230 [ 613.298197][T18356] ? clear_bhb_loop+0x35/0x90 [ 613.298229][T18356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.298258][T18356] RIP: 0033:0x7f5c4bf8d169 [ 613.298277][T18356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.298293][T18356] RSP: 002b:00007f5c4ce5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.298315][T18356] RAX: ffffffffffffffda RBX: 00007f5c4c1a5fa0 RCX: 00007f5c4bf8d169 [ 613.298331][T18356] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 613.298344][T18356] RBP: 00007f5c4ce5a090 R08: 0000000000000000 R09: 0000000000000000 [ 613.298358][T18356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.298370][T18356] R13: 0000000000000000 R14: 00007f5c4c1a5fa0 R15: 00007f5c4c2cfa28 [ 613.298399][T18356] [ 613.638597][ T5890] usb 9-1: reset high-speed USB device number 16 using dummy_hcd [ 613.651661][ T5885] m920x_read = error: -19 [ 613.656126][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 613.730270][T13660] usb 1-1: Cannot read MAC address [ 613.735693][T13660] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 613.772307][ T3877] hsr_slave_0: left promiscuous mode [ 613.814264][ T3877] hsr_slave_1: left promiscuous mode [ 613.821535][ T5887] m920x_read = error: -19 [ 613.825978][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 613.835025][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.844541][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.866170][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.878140][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.945572][ T3877] veth1_macvtap: left promiscuous mode [ 613.953200][ T3877] veth0_macvtap: left promiscuous mode [ 613.967644][ T3877] veth1_vlan: left promiscuous mode [ 613.974415][ T3877] veth0_vlan: left promiscuous mode [ 613.998013][ T5887] m920x_read = error: -19 [ 614.002432][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 614.088107][T13613] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 614.177960][ T5887] m920x_read = error: -19 [ 614.182374][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 614.268200][T13613] usb 6-1: Using ep0 maxpacket: 16 [ 614.275547][T13613] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.306196][T13613] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.331070][T13613] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 614.343270][T13613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.374564][T13613] usb 6-1: config 0 descriptor?? [ 614.396000][ T5887] m920x_read = error: -19 [ 614.400617][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 614.499159][T18372] xt_bpf: check failed: parse error [ 614.565045][T18373] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3756'. [ 614.587975][ T5887] m920x_read = error: -19 [ 614.593206][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 614.628454][T18374] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3756'. [ 614.629486][T13613] usb 6-1: USB disconnect, device number 52 [ 614.757982][ T5887] m920x_read = error: -19 [ 614.767710][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 614.916643][T13611] usb 9-1: USB disconnect, device number 16 [ 614.938000][ T5887] m920x_read = error: -19 [ 614.942414][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 614.985377][ T3877] team0 (unregistering): Port device team_slave_1 removed [ 615.058116][ T3877] team0 (unregistering): Port device team_slave_0 removed [ 615.130743][ T5887] m920x_read = error: -19 [ 615.135164][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 615.301012][T13660] m920x_read = error: -19 [ 615.305749][T13660] dvb-usb: error -19 while querying for an remote control event. [ 615.309276][T13479] Bluetooth: hci1: command tx timeout [ 615.485209][T13660] m920x_read = error: -19 [ 615.491278][T13660] dvb-usb: error -19 while querying for an remote control event. [ 615.675450][T13660] m920x_read = error: -19 [ 615.680633][T13660] dvb-usb: error -19 while querying for an remote control event. [ 615.836719][T18312] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.848195][ T5888] m920x_read = error: -19 [ 615.852618][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 615.868398][T18312] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.875954][T18312] bridge_slave_0: entered allmulticast mode [ 615.892712][T18312] bridge_slave_0: entered promiscuous mode [ 616.027148][T18312] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.035062][T13660] m920x_read = error: -19 [ 616.047863][T13660] dvb-usb: error -19 while querying for an remote control event. [ 616.058013][T18312] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.072656][T18312] bridge_slave_1: entered allmulticast mode [ 616.094513][T18312] bridge_slave_1: entered promiscuous mode [ 616.239643][ T5888] m920x_read = error: -19 [ 616.244249][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 616.284048][T18312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.336611][T18312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.372510][ T5890] usb 2-1: USB disconnect, device number 36 [ 616.433111][ T5888] m920x_read = error: -19 [ 616.433608][T13611] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 616.449838][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 616.461775][ T10] usb 1-1: USB disconnect, device number 63 [ 616.532763][T18312] team0: Port device team_slave_0 added [ 616.563218][T18312] team0: Port device team_slave_1 added [ 616.580022][T13611] usb 9-1: device descriptor read/64, error -71 [ 616.638056][T13660] m920x_read = error: -19 [ 616.638692][T18312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.643254][T13660] dvb-usb: error -19 while querying for an remote control event. [ 616.651289][T18312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.686604][T18312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.713206][T18312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.727877][T18312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.795993][T18312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.838164][ T5888] m920x_read = error: -19 [ 616.842574][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 616.848069][T13611] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 617.008060][T13660] m920x_read = error: -19 [ 617.012491][T13660] dvb-usb: error -19 while querying for an remote control event. [ 617.018699][T13611] usb 9-1: device descriptor read/64, error -71 [ 617.136324][ T3877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.158316][T13611] usb usb9-port1: attempt power cycle [ 617.178076][ T5887] m920x_read = error: -19 [ 617.181218][T18312] hsr_slave_0: entered promiscuous mode [ 617.182472][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 617.197475][T18312] hsr_slave_1: entered promiscuous mode [ 617.218643][T18312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.226275][T18312] Cannot create hsr debugfs directory [ 617.298076][T13660] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 617.326254][ T3877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.345191][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.359039][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.375708][ T5888] m920x_read = error: -19 [ 617.380763][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.381601][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 617.388358][ T5844] Bluetooth: hci1: command tx timeout [ 617.411479][T15866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.424713][T15866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 617.434558][T15866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.457983][T13660] usb 2-1: Using ep0 maxpacket: 16 [ 617.469758][T13660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.508210][T13611] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 617.518015][T13660] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.538547][ T3877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.545143][T13660] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 617.560667][T13611] usb 9-1: device descriptor read/8, error -71 [ 617.577936][T13660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.608600][ T5888] m920x_read = error: -19 [ 617.613026][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 617.636902][T13660] usb 2-1: config 0 descriptor?? [ 617.717399][ T3877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.799106][ T5888] m920x_read = error: -19 [ 617.803515][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 617.829104][T13611] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 617.870960][T13611] usb 9-1: device descriptor read/8, error -71 [ 617.871640][ T5888] usb 2-1: USB disconnect, device number 37 [ 617.982163][T13611] usb usb9-port1: unable to enumerate USB device [ 617.998038][T13660] m920x_read = error: -19 [ 618.002451][T13660] dvb-usb: error -19 while querying for an remote control event. [ 618.188251][ T5888] m920x_read = error: -19 [ 618.192674][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 618.341480][ T3877] bridge_slave_1: left allmulticast mode [ 618.347207][ T3877] bridge_slave_1: left promiscuous mode [ 618.369270][T13660] m920x_read = error: -19 [ 618.373722][T13660] dvb-usb: error -19 while querying for an remote control event. [ 618.424927][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.457676][ T3877] bridge_slave_0: left allmulticast mode [ 618.467950][ T3877] bridge_slave_0: left promiscuous mode [ 618.473740][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.589858][T13660] m920x_read = error: -19 [ 618.594294][T13660] dvb-usb: error -19 while querying for an remote control event. [ 618.656215][T18437] xt_bpf: check failed: parse error [ 618.663718][T13479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 618.691045][T13479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 618.715305][T13479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 618.724762][T13479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 618.732539][T13479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 618.744062][T13479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 618.777944][T13660] m920x_read = error: -19 [ 618.782373][T13660] dvb-usb: error -19 while querying for an remote control event. [ 618.789285][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3769'. [ 618.841136][T18441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3769'. [ 618.955295][ T5885] m920x_read = error: -19 [ 618.962680][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 619.138047][T13660] m920x_read = error: -19 [ 619.142475][T13660] dvb-usb: error -19 while querying for an remote control event. [ 619.239070][ T3877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.251545][ T3877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.263498][ T3877] bond0 (unregistering): Released all slaves [ 619.333541][ T5888] m920x_read = error: -19 [ 619.345684][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 619.384491][ T3877] fþ²¹¥‰: left promiscuous mode [ 619.468972][T13479] Bluetooth: hci1: command tx timeout [ 619.528015][ T5888] m920x_read = error: -19 [ 619.532551][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 619.552660][T13479] Bluetooth: hci0: command tx timeout [ 619.719256][T13660] m920x_read = error: -19 [ 619.738051][T13660] dvb-usb: error -19 while querying for an remote control event. [ 619.898118][ T5885] m920x_read = error: -19 [ 619.907884][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 619.918509][ T5888] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 620.045024][T18415] chnl_net:caif_netlink_parms(): no params data found [ 620.088036][T13660] m920x_read = error: -19 [ 620.093216][T13660] dvb-usb: error -19 while querying for an remote control event. [ 620.108443][ T5888] usb 9-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 620.139271][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.159311][ T5888] usb 9-1: config 0 descriptor?? [ 620.175781][ T3877] hsr_slave_0: left promiscuous mode [ 620.179578][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input31 [ 620.200292][ T3877] hsr_slave_1: left promiscuous mode [ 620.206303][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.226999][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.235539][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.243343][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.264414][ T3877] veth1_macvtap: left promiscuous mode [ 620.272061][ T3877] veth0_macvtap: left promiscuous mode [ 620.277668][ T3877] veth1_vlan: left promiscuous mode [ 620.283262][ T3877] veth0_vlan: left promiscuous mode [ 620.288733][T13660] m920x_read = error: -19 [ 620.293088][T13660] dvb-usb: error -19 while querying for an remote control event. [ 620.393007][T13611] usb 9-1: USB disconnect, device number 21 [ 620.466375][T13660] m920x_read = error: -19 [ 620.470992][T13660] dvb-usb: error -19 while querying for an remote control event. [ 620.651518][T13660] m920x_read = error: -19 [ 620.655907][T13660] dvb-usb: error -19 while querying for an remote control event. [ 620.830284][T13479] Bluetooth: hci3: command tx timeout [ 620.831534][T13660] m920x_read = error: -19 [ 620.841285][T13660] dvb-usb: error -19 while querying for an remote control event. [ 620.889798][ T3877] team0 (unregistering): Port device team_slave_1 removed [ 620.957364][ T3877] team0 (unregistering): Port device team_slave_0 removed [ 621.023958][ T5888] m920x_read = error: -19 [ 621.028456][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 621.191937][ T5888] m920x_read = error: -19 [ 621.196350][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 621.248150][T13611] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 621.357992][ T5888] m920x_read = error: -19 [ 621.362510][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 621.430569][T13611] usb 9-1: Using ep0 maxpacket: 16 [ 621.445924][T13611] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.469024][T13611] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 621.491229][T13611] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 621.510432][T13611] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.529886][T13611] usb 9-1: config 0 descriptor?? [ 621.538047][ T5888] m920x_read = error: -19 [ 621.542566][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 621.628118][T13479] Bluetooth: hci0: command tx timeout [ 621.708033][ T5888] m920x_read = error: -19 [ 621.712577][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 621.726642][T18440] chnl_net:caif_netlink_parms(): no params data found [ 621.756034][T18312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 621.757393][ T5888] usb 9-1: USB disconnect, device number 22 [ 621.888149][T13660] m920x_read = error: -19 [ 621.892564][T13660] dvb-usb: error -19 while querying for an remote control event. [ 621.944695][T18312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 622.004490][T18312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 622.068671][ T5888] m920x_read = error: -19 [ 622.094465][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 622.102713][T18312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 622.258561][T18415] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.273715][T18415] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.285403][ T5888] m920x_read = error: -19 [ 622.298820][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 622.318124][T18415] bridge_slave_0: entered allmulticast mode [ 622.325359][T18415] bridge_slave_0: entered promiscuous mode [ 622.458837][ T5888] m920x_read = error: -19 [ 622.463275][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 622.478275][T18415] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.485442][T18415] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.490322][T18494] xt_bpf: check failed: parse error [ 622.518807][T18415] bridge_slave_1: entered allmulticast mode [ 622.525982][T18415] bridge_slave_1: entered promiscuous mode [ 622.564096][T18496] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3779'. [ 622.589869][T18440] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.597168][T18440] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.608478][T18440] bridge_slave_0: entered allmulticast mode [ 622.615307][T18498] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3779'. [ 622.624549][T18440] bridge_slave_0: entered promiscuous mode [ 622.657987][ T5888] m920x_read = error: -19 [ 622.662406][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 622.687726][T18440] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.704504][T18440] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.712345][T18440] bridge_slave_1: entered allmulticast mode [ 622.719787][T18440] bridge_slave_1: entered promiscuous mode [ 622.744194][T18415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.816926][T18440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.858866][ T5885] m920x_read = error: -19 [ 622.863281][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 622.873528][T18415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.908505][T13479] Bluetooth: hci3: command tx timeout [ 622.944184][T18440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.976888][T15866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 622.993258][T15866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 623.009869][T15866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 623.019500][T15866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 623.029778][T15866] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 623.037760][T15866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 623.039527][T18415] team0: Port device team_slave_0 added [ 623.057438][T18415] team0: Port device team_slave_1 added [ 623.068396][ T5885] m920x_read = error: -19 [ 623.072801][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 623.142856][T18440] team0: Port device team_slave_0 added [ 623.176275][T18440] team0: Port device team_slave_1 added [ 623.197217][T18415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.206891][T18415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.242058][T18415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.255004][T18415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.258124][ T5885] m920x_read = error: -19 [ 623.262392][T18415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.266494][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 623.292494][T18415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.439957][ T3877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.458942][T18440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.465943][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.523232][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3780'. [ 623.545977][ T5885] m920x_read = error: -19 [ 623.576039][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 623.596022][T18440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.658454][ T3877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.674951][T18440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.692132][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.708012][T15866] Bluetooth: hci0: command tx timeout [ 623.737970][T13660] m920x_read = error: -19 [ 623.742345][T13660] dvb-usb: error -19 while querying for an remote control event. [ 623.785671][T18440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.828186][T13611] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 623.839309][T18312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.892727][ T3877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.908392][ T5885] m920x_read = error: -19 [ 623.913333][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 623.988735][T13611] usb 9-1: device descriptor read/64, error -71 [ 624.056823][ T3877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.100343][ T5885] m920x_read = error: -19 [ 624.104724][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 624.168441][T18440] hsr_slave_0: entered promiscuous mode [ 624.177519][T18440] hsr_slave_1: entered promiscuous mode [ 624.192938][T18440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.201460][T18440] Cannot create hsr debugfs directory [ 624.216597][T18415] hsr_slave_0: entered promiscuous mode [ 624.225776][T18415] hsr_slave_1: entered promiscuous mode [ 624.238093][T13611] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 624.241124][T18415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.267429][T18415] Cannot create hsr debugfs directory [ 624.298208][ T5888] m920x_read = error: -19 [ 624.302632][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 624.388419][T13611] usb 9-1: device descriptor read/64, error -71 [ 624.446530][T18312] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.478026][ T5888] m920x_read = error: -19 [ 624.482521][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 624.512536][T13611] usb usb9-port1: attempt power cycle [ 624.668505][ T5888] m920x_read = error: -19 [ 624.672893][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 624.750240][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.756617][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.858191][ T5888] m920x_read = error: -19 [ 624.862589][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 624.878356][T13611] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 624.899334][T13611] usb 9-1: device descriptor read/8, error -71 [ 624.943713][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.950926][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.960390][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.967500][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.988012][T15866] Bluetooth: hci3: command tx timeout [ 624.999038][T18508] chnl_net:caif_netlink_parms(): no params data found [ 625.080449][ T5885] m920x_read = error: -19 [ 625.084880][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 625.120780][ T3877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.148276][T15866] Bluetooth: hci2: command tx timeout [ 625.154235][T13611] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 625.187007][T13611] usb 9-1: device descriptor read/8, error -71 [ 625.250924][ T5885] m920x_read = error: -19 [ 625.258098][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 625.340508][T13611] usb usb9-port1: unable to enumerate USB device [ 625.418136][ T5888] m920x_read = error: -19 [ 625.425851][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 625.455544][ T3877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.495233][T18312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.598593][T13660] m920x_read = error: -19 [ 625.603066][T13660] dvb-usb: error -19 while querying for an remote control event. [ 625.679167][ T3877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.778019][T13660] m920x_read = error: -19 [ 625.782395][T13660] dvb-usb: error -19 while querying for an remote control event. [ 625.797947][T15866] Bluetooth: hci0: command tx timeout [ 625.897613][ T3877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.977968][T13660] m920x_read = error: -19 [ 625.982385][T13660] dvb-usb: error -19 while querying for an remote control event. [ 626.044045][T18508] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.056472][T18508] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.077487][T18508] bridge_slave_0: entered allmulticast mode [ 626.094761][T18508] bridge_slave_0: entered promiscuous mode [ 626.148392][T13660] m920x_read = error: -19 [ 626.152861][T13660] dvb-usb: error -19 while querying for an remote control event. [ 626.161406][T18508] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.199658][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.206916][T18508] bridge_slave_1: entered allmulticast mode [ 626.227652][T18508] bridge_slave_1: entered promiscuous mode [ 626.300027][T18312] veth0_vlan: entered promiscuous mode [ 626.345263][T13660] m920x_read = error: -19 [ 626.352859][T13660] dvb-usb: error -19 while querying for an remote control event. [ 626.390432][T18508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.478261][T18508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.487760][ T3877] bridge_slave_1: left allmulticast mode [ 626.493847][ T3877] bridge_slave_1: left promiscuous mode [ 626.502918][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.513393][ T3877] bridge_slave_0: left allmulticast mode [ 626.518263][T13660] m920x_read = error: -19 [ 626.519718][ T3877] bridge_slave_0: left promiscuous mode [ 626.523505][T13660] dvb-usb: error -19 while querying for an remote control event. [ 626.530070][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.552672][ T3877] bridge_slave_1: left allmulticast mode [ 626.564457][ T3877] bridge_slave_1: left promiscuous mode [ 626.573749][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.586169][ T3877] bridge_slave_0: left allmulticast mode [ 626.592459][ T3877] bridge_slave_0: left promiscuous mode [ 626.598626][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.697986][ T5885] m920x_read = error: -19 [ 626.702428][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 626.888998][ T5885] m920x_read = error: -19 [ 626.893418][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 627.075865][T15866] Bluetooth: hci3: command tx timeout [ 627.076993][ T5885] m920x_read = error: -19 [ 627.096228][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 627.228305][T15866] Bluetooth: hci2: command tx timeout [ 627.260947][T13660] m920x_read = error: -19 [ 627.265392][T13660] dvb-usb: error -19 while querying for an remote control event. [ 627.438169][T13660] m920x_read = error: -19 [ 627.442685][T13660] dvb-usb: error -19 while querying for an remote control event. [ 627.477990][T13613] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 627.618100][T13660] m920x_read = error: -19 [ 627.622541][T13660] dvb-usb: error -19 while querying for an remote control event. [ 627.658068][T13613] usb 9-1: device descriptor read/64, error -71 [ 627.676348][ T3877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.692879][ T3877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.704116][ T3877] bond0 (unregistering): Released all slaves [ 627.795134][T13660] m920x_read = error: -19 [ 627.799904][T13660] dvb-usb: error -19 while querying for an remote control event. [ 627.893764][ T3877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.902578][T13613] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 627.917005][ T3877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.928958][ T3877] bond0 (unregistering): Released all slaves [ 627.968136][ T5885] m920x_read = error: -19 [ 627.972551][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 628.039811][T18508] team0: Port device team_slave_0 added [ 628.055610][T13613] usb 9-1: device descriptor read/64, error -71 [ 628.150838][ T5885] m920x_read = error: -19 [ 628.155358][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 628.182029][T13613] usb usb9-port1: attempt power cycle [ 628.241349][T18415] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 628.254128][T18312] veth1_vlan: entered promiscuous mode [ 628.267567][T18508] team0: Port device team_slave_1 added [ 628.307978][T18415] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 628.338055][T13660] m920x_read = error: -19 [ 628.342458][T13660] dvb-usb: error -19 while querying for an remote control event. [ 628.367666][T18508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.375219][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.401442][T18508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.460483][T18415] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 628.471834][T18415] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 628.489186][T18508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.507716][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.534914][T13660] m920x_read = error: -19 [ 628.539690][T13613] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 628.557994][T13660] dvb-usb: error -19 while querying for an remote control event. [ 628.566046][T18508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.578803][T13613] usb 9-1: device descriptor read/8, error -71 [ 628.694562][T18508] hsr_slave_0: entered promiscuous mode [ 628.701965][T18508] hsr_slave_1: entered promiscuous mode [ 628.708210][T18508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.715824][T18508] Cannot create hsr debugfs directory [ 628.722828][ T5885] m920x_read = error: -19 [ 628.734377][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 628.828131][T13613] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 628.856611][T18312] veth0_macvtap: entered promiscuous mode [ 628.864860][T13613] usb 9-1: device descriptor read/8, error -71 [ 628.908669][ T5885] m920x_read = error: -19 [ 628.913087][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 628.933810][T18312] veth1_macvtap: entered promiscuous mode [ 628.998661][T13613] usb usb9-port1: unable to enumerate USB device [ 629.102665][ T5885] m920x_read = error: -19 [ 629.107638][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 629.175345][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.194592][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.205694][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.216421][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.226742][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.240806][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.251044][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.261951][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.273438][T18312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.281002][T13660] m920x_read = error: -19 [ 629.285708][T13660] dvb-usb: error -19 while querying for an remote control event. [ 629.318546][T15866] Bluetooth: hci2: command tx timeout [ 629.334954][T18440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 629.352877][T18440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 629.400851][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.413574][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.425807][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.437555][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.453645][T13660] m920x_read = error: -19 [ 629.458174][T13660] dvb-usb: error -19 while querying for an remote control event. [ 629.465950][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.477527][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.488468][T18312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.498992][T18312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.510068][T18312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.531998][T18440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 629.569675][T18312] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.579776][T18312] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.590582][T18312] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.600356][T18312] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.620413][T13660] m920x_read = error: -19 [ 629.627609][T13660] dvb-usb: error -19 while querying for an remote control event. [ 629.651048][ T3877] hsr_slave_0: left promiscuous mode [ 629.656956][ T3877] hsr_slave_1: left promiscuous mode [ 629.664121][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.677045][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.685226][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.693182][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.704936][ T3877] hsr_slave_0: left promiscuous mode [ 629.711929][ T3877] hsr_slave_1: left promiscuous mode [ 629.719072][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.726591][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.734812][ T3877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.742735][ T3877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.778541][ T3877] veth1_macvtap: left promiscuous mode [ 629.788573][ T3877] veth0_macvtap: left promiscuous mode [ 629.794250][ T3877] veth1_vlan: left promiscuous mode [ 629.800043][T13660] m920x_read = error: -19 [ 629.804426][T13660] dvb-usb: error -19 while querying for an remote control event. [ 629.812681][ T3877] veth0_vlan: left promiscuous mode [ 629.825638][ T3877] veth1_macvtap: left promiscuous mode [ 629.831429][ T3877] veth0_macvtap: left promiscuous mode [ 629.837179][ T3877] veth1_vlan: left promiscuous mode [ 629.842726][ T3877] veth0_vlan: left promiscuous mode [ 629.978296][T13660] m920x_read = error: -19 [ 629.985645][T13660] dvb-usb: error -19 while querying for an remote control event. [ 630.176388][T13660] m920x_read = error: -19 [ 630.184742][T13660] dvb-usb: error -19 while querying for an remote control event. [ 630.350512][T13660] m920x_read = error: -19 [ 630.354898][T13660] dvb-usb: error -19 while querying for an remote control event. [ 630.522707][T13660] m920x_read = error: -19 [ 630.527174][T13660] dvb-usb: error -19 while querying for an remote control event. [ 630.626793][ T3877] team0 (unregistering): Port device team_slave_1 removed [ 630.701021][T13660] m920x_read = error: -19 [ 630.705423][T13660] dvb-usb: error -19 while querying for an remote control event. [ 630.710022][ T3877] team0 (unregistering): Port device team_slave_0 removed [ 630.873608][T13660] m920x_read = error: -19 [ 630.892913][T13660] dvb-usb: error -19 while querying for an remote control event. [ 631.064683][T13660] m920x_read = error: -19 [ 631.071115][T13660] dvb-usb: error -19 while querying for an remote control event. [ 631.237971][T13660] m920x_read = error: -19 [ 631.242372][T13660] dvb-usb: error -19 while querying for an remote control event. [ 631.398381][T15866] Bluetooth: hci2: command tx timeout [ 631.414458][T13660] m920x_read = error: -19 [ 631.419331][T13660] dvb-usb: error -19 while querying for an remote control event. [ 631.583345][T13660] m920x_read = error: -19 [ 631.587771][T13660] dvb-usb: error -19 while querying for an remote control event. [ 631.749984][T13660] m920x_read = error: -19 [ 631.754385][T13660] dvb-usb: error -19 while querying for an remote control event. [ 631.847413][ T3877] team0 (unregistering): Port device team_slave_1 removed [ 631.906667][ T3877] team0 (unregistering): Port device team_slave_0 removed [ 631.950187][T13660] m920x_read = error: -19 [ 631.954670][T13660] dvb-usb: error -19 while querying for an remote control event. [ 632.124282][T13660] m920x_read = error: -19 [ 632.129308][T13660] dvb-usb: error -19 while querying for an remote control event. [ 632.293170][ T5885] m920x_read = error: -19 [ 632.299536][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 632.466293][ T5885] m920x_read = error: -19 [ 632.470832][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 632.567231][T18440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.645853][ T5885] m920x_read = error: -19 [ 632.650388][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 632.685244][T18415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.817971][ T5885] m920x_read = error: -19 [ 632.823163][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 632.853470][T18415] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.882353][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.889501][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.912325][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.919541][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.028008][T13660] m920x_read = error: -19 [ 633.040612][T13660] dvb-usb: error -19 while querying for an remote control event. [ 633.062849][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.082903][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.117099][T18415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.196899][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.206810][ T5890] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 633.219622][T13660] m920x_read = error: -19 [ 633.228324][T13660] dvb-usb: error -19 while querying for an remote control event. [ 633.236767][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.293696][T18508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 633.340054][T18415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.368120][ T5890] usb 9-1: Using ep0 maxpacket: 16 [ 633.399478][T13660] m920x_read = error: -19 [ 633.403898][T13660] dvb-usb: error -19 while querying for an remote control event. [ 633.410760][ T5890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.432431][T18508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 633.440481][ T5890] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.450077][ T5890] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 633.464234][T18508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 633.474069][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.518372][ T5890] usb 9-1: config 0 descriptor?? [ 633.537340][T18440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.566222][T18508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 633.570817][T18537] program syz.9.3736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.588306][ T5885] m920x_read = error: -19 [ 633.593178][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 633.632712][T18415] veth0_vlan: entered promiscuous mode [ 633.657677][T18440] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.699515][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.706775][T12537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.722551][T18415] veth1_vlan: entered promiscuous mode [ 633.736169][ T5887] usb 9-1: USB disconnect, device number 31 [ 633.746690][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.753926][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.758202][ T5888] m920x_read = error: -19 [ 633.775963][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 633.828351][T13660] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 633.893497][T18440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.894079][ T3877] IPVS: stop unused estimator thread 0... [ 633.944014][T18508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.958678][ T5885] m920x_read = error: -19 [ 633.964417][T18415] veth0_macvtap: entered promiscuous mode [ 633.972409][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 633.993057][T13660] usb 10-1: Using ep0 maxpacket: 16 [ 633.995749][T18415] veth1_macvtap: entered promiscuous mode [ 634.012445][T18508] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.025233][T13660] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.040960][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.048255][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.063617][T13660] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.074070][T13660] usb 10-1: config 0 interface 0 has no altsetting 0 [ 634.086534][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.093669][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.106563][T13660] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 634.116951][T13660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.133315][T13660] usb 10-1: config 0 descriptor?? [ 634.138760][ T5885] m920x_read = error: -19 [ 634.143138][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 634.161415][T18440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.181583][T18415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.194458][T18415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.207151][T18415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.218737][T18415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.231360][T18415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.242099][T18415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.254103][T18415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.308423][ T5888] m920x_read = error: -19 [ 634.312948][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 634.321601][T18415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.353294][T18415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.379131][T18415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.394631][T18415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.404724][T18415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.417841][T18415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.429721][T18415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.459413][T18415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.471060][T18415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.483451][T18415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.493072][T18415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.508806][ T5888] m920x_read = error: -19 [ 634.513239][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 634.688230][ T5885] m920x_read = error: -19 [ 634.692648][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 634.795922][T18440] veth0_vlan: entered promiscuous mode [ 634.807589][T18440] veth1_vlan: entered promiscuous mode [ 634.879075][ T58] usb 10-1: USB disconnect, device number 15 [ 634.917155][ T5890] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 634.921524][ T5885] m920x_read = error: -19 [ 634.944078][ T5885] dvb-usb: error -19 while querying for an remote control event. [ 635.024897][T18508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.072092][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.107607][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.109506][ T58] m920x_read = error: -19 [ 635.120128][ T58] dvb-usb: error -19 while querying for an remote control event. [ 635.185350][T18440] veth0_macvtap: entered promiscuous mode [ 635.237529][T18508] veth0_vlan: entered promiscuous mode [ 635.267140][T18440] veth1_macvtap: entered promiscuous mode [ 635.273940][ T3877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.288195][T13660] m920x_read = error: -19 [ 635.288413][ T5890] usb 9-1: Using ep0 maxpacket: 16 [ 635.292583][T13660] dvb-usb: error -19 while querying for an remote control event. [ 635.307952][ T3877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.321397][T18508] veth1_vlan: entered promiscuous mode [ 635.364875][ T5890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.405771][ T5890] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.424007][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.433098][ T5890] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 635.452585][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.489387][ T5890] usb 9-1: config 0 descriptor?? [ 635.510706][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.520911][ T58] m920x_read = error: -19 [ 635.525392][ T58] dvb-usb: error -19 while querying for an remote control event. [ 635.553818][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.566145][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.578195][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.591000][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.604050][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.616115][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.631927][T18440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.673717][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.728038][ T58] m920x_read = error: -19 [ 635.732465][ T58] dvb-usb: error -19 while querying for an remote control event. [ 635.740746][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.781387][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.805525][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.817959][ T5885] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 635.845685][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.885248][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.938032][ T5888] m920x_read = error: -19 [ 635.942474][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 635.955092][T18440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.010148][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 636.026262][T18440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.038863][ T5885] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 636.065886][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.074788][T18440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.118027][ T58] m920x_read = error: -19 [ 636.122463][ T58] dvb-usb: error -19 while querying for an remote control event. [ 636.131400][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3762'. [ 636.132399][ T5885] usb 10-1: config 0 descriptor?? [ 636.196423][T18544] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 636.210953][T18440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.266742][T18440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.308122][ T58] m920x_read = error: -19 [ 636.315433][ T58] dvb-usb: error -19 while querying for an remote control event. [ 636.351188][T18440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.361171][T18440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.384101][T18508] veth0_macvtap: entered promiscuous mode [ 636.471546][T18508] veth1_macvtap: entered promiscuous mode [ 636.525269][ T26] m920x_read = error: -19 [ 636.535230][ T26] dvb-usb: error -19 while querying for an remote control event. [ 636.639675][ T5885] elan 0003:04F3:0755.0026: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 636.720702][ T5887] m920x_read = error: -19 [ 636.735405][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 636.782254][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.799762][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.821543][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.843722][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.868147][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.892478][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.902663][ T5887] m920x_read = error: -19 [ 636.907011][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 636.933125][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.957931][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.981420][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.997073][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.010551][T18508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.061945][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.073754][ T5887] m920x_read = error: -19 [ 637.078962][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 637.089566][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.100133][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.111439][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.122388][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.133772][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.144297][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.155718][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.166207][T18508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.177611][T18508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.224523][T18508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.248048][ T58] m920x_read = error: -19 [ 637.252439][ T58] dvb-usb: error -19 while querying for an remote control event. [ 637.346725][T18508] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.360693][T12538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.376849][T12538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.385207][T18508] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.465747][ T5888] m920x_read = error: -19 [ 637.477968][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 637.506807][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3790'. [ 637.510861][ T5888] usb 9-1: USB disconnect, device number 32 [ 637.522621][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3790'. [ 637.523620][T18508] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.546093][T18508] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.586735][T18559] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.3790' sets config #2 [ 637.638792][ T5952] m920x_read = error: -19 [ 637.643224][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 637.701048][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.764940][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.818129][ T5952] m920x_read = error: -19 [ 637.822551][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 637.877542][ T30] audit: type=1326 audit(1742844319.976:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18560 comm="syz.8.3791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b3bd8d169 code=0x0 [ 637.944463][T12537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.964127][T12537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.098093][ T5887] m920x_read = error: -19 [ 638.104733][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 638.146542][ T3877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.256812][ T3877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.278033][ T5887] m920x_read = error: -19 [ 638.282680][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 638.468895][ T5887] m920x_read = error: -19 [ 638.475435][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 638.570301][ T5890] usb 10-1: USB disconnect, device number 16 [ 638.680050][ T58] m920x_read = error: -19 [ 638.684543][ T58] dvb-usb: error -19 while querying for an remote control event. [ 638.763917][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3778'. [ 638.878744][ T5887] m920x_read = error: -19 [ 638.883157][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 639.079031][ T5888] m920x_read = error: -19 [ 639.079355][ T5890] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 639.083705][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 639.302408][ T5890] usb 10-1: Using ep0 maxpacket: 16 [ 639.318057][ T5888] m920x_read = error: -19 [ 639.322480][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 639.349297][ T5890] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.398329][ T5890] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.429884][ T5890] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 639.460307][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.507967][ T5890] usb 10-1: config 0 descriptor?? [ 639.527986][ T5888] m920x_read = error: -19 [ 639.578523][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 639.758775][ T9] usb 10-1: USB disconnect, device number 17 [ 639.778943][ T58] m920x_read = error: -19 [ 639.788534][ T58] dvb-usb: error -19 while querying for an remote control event. [ 640.018077][ T5888] m920x_read = error: -19 [ 640.217951][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 640.428166][ T5888] m920x_read = error: -19 [ 640.432715][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 640.598054][ T5888] m920x_read = error: -19 [ 640.658878][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 640.826222][ T5888] m920x_read = error: -19 [ 640.854582][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 641.238076][ T5888] m920x_read = error: -19 [ 641.242485][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 641.578288][ T5888] m920x_read = error: -19 [ 641.590373][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 641.859142][ T58] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 642.109058][ T5888] m920x_read = error: -19 [ 642.113574][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 642.197996][T13479] Bluetooth: hci4: command 0x0406 tx timeout [ 642.247919][ T58] usb 4-1: device descriptor read/64, error -71 [ 642.278021][ T5888] m920x_read = error: -19 [ 642.282659][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 642.296195][T18635] input: syz0 as /devices/virtual/input/input32 [ 642.478092][ T5888] m920x_read = error: -19 [ 642.482739][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 642.511088][ T58] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 642.588851][ T5886] IPVS: starting estimator thread 0... [ 642.658684][ T58] usb 4-1: device descriptor read/64, error -71 [ 642.688076][ T5888] m920x_read = error: -19 [ 642.694033][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 642.718538][T18640] IPVS: using max 20 ests per chain, 48000 per kthread [ 642.789078][ T58] usb usb4-port1: attempt power cycle [ 642.838085][ T5890] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 642.868001][ T26] m920x_read = error: -19 [ 642.876565][ T26] dvb-usb: error -19 while querying for an remote control event. [ 643.004663][ T5890] usb 10-1: Using ep0 maxpacket: 8 [ 643.019839][ T5890] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 643.036276][ T5890] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 643.045246][ T5890] usb 10-1: Product: syz [ 643.048065][ T26] m920x_read = error: -19 [ 643.049886][ T5890] usb 10-1: Manufacturer: syz [ 643.053871][ T26] dvb-usb: error -19 while querying for an remote control event. [ 643.071326][ T5890] usb 10-1: SerialNumber: syz [ 643.080214][ T5890] usb 10-1: config 0 descriptor?? [ 643.097084][ T5890] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 643.098901][ T5888] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 643.137975][ T58] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 643.158559][ T58] usb 4-1: device descriptor read/8, error -71 [ 643.247948][ T5887] m920x_read = error: -19 [ 643.252382][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 643.277909][ T5888] usb 9-1: Using ep0 maxpacket: 16 [ 643.285197][ T5888] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.302932][ T5890] gspca_zc3xx: reg_w_i err -71 [ 643.308091][ T5888] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 643.317128][ T5888] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 643.335445][ T5890] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 643.358440][ T5890] usb 10-1: USB disconnect, device number 18 [ 643.390988][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.418232][ T58] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 643.428131][ T5887] m920x_read = error: -19 [ 643.432811][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 643.442457][ T5888] usb 9-1: config 0 descriptor?? [ 643.459462][ T58] usb 4-1: device descriptor read/8, error -71 [ 643.581260][ T58] usb usb4-port1: unable to enumerate USB device [ 643.613246][ T58] m920x_read = error: -19 [ 643.617682][ T58] dvb-usb: error -19 while querying for an remote control event. [ 643.666083][ T58] usb 9-1: USB disconnect, device number 33 [ 643.798443][ T5888] m920x_read = error: -19 [ 643.802870][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 643.998174][ T58] m920x_read = error: -19 [ 644.011421][ T58] dvb-usb: error -19 while querying for an remote control event. [ 644.068928][T18684] block device autoloading is deprecated and will be removed. [ 644.105410][T18684] syz.7.3814: attempt to access beyond end of device [ 644.105410][T18684] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 644.204233][ T5888] m920x_read = error: -19 [ 644.218074][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 644.408114][ T58] m920x_read = error: -19 [ 644.412673][ T58] dvb-usb: error -19 while querying for an remote control event. [ 644.598238][ T26] m920x_read = error: -19 [ 644.608588][ T26] dvb-usb: error -19 while querying for an remote control event. [ 644.624307][ T5888] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 644.708971][ T58] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 644.779005][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 644.796081][ T26] m920x_read = error: -19 [ 644.802209][ T26] dvb-usb: error -19 while querying for an remote control event. [ 644.823878][ T5888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.845166][ T5888] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 644.880835][ T5888] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.895403][ T5888] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.907556][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.919988][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.928198][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.938893][ T5888] usb 8-1: Product: syz [ 644.943233][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.957047][ T5888] usb 8-1: Manufacturer: syz [ 644.967589][ T5888] usb 8-1: SerialNumber: syz [ 644.982607][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.997987][ T5887] m920x_read = error: -19 [ 645.002771][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 645.042279][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.061000][ T58] usb 7-1: config 0 descriptor?? [ 645.207987][ T5887] m920x_read = error: -19 [ 645.238464][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 645.259851][ T5888] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 645.370855][ T5888] usb 8-1: USB disconnect, device number 17 [ 645.441607][ T5952] m920x_read = error: -19 [ 645.446074][ T5952] dvb-usb: error -19 while querying for an remote control event. [ 645.484965][ T58] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 645.496714][T18735] netlink: 'syz.9.3827': attribute type 24 has an invalid length. [ 645.541098][ T58] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 645.668781][ T5888] m920x_read = error: -19 [ 645.673817][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.690763][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 645.808048][ T5890] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 645.848319][ T9] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 645.869352][ T5888] m920x_read = error: -19 [ 645.874473][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 646.006229][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 646.030118][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 646.038729][ T5888] m920x_read = error: -19 [ 646.041766][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 646.047983][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 646.070958][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.091602][ T5890] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 646.111484][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.126464][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.144214][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 646.155962][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.169448][ T5890] usb 10-1: config 0 descriptor?? [ 646.205646][ T9] usb 9-1: config 0 descriptor?? [ 646.238055][ T5888] m920x_read = error: -19 [ 646.247206][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 646.389896][ T5890] ath6kl: Failed to submit usb control message: -71 [ 646.413256][ T5890] ath6kl: unable to send the bmi data to the device: -71 [ 646.419991][ T5888] m920x_read = error: -19 [ 646.428038][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 646.456964][ T5890] ath6kl: Unable to send get target info: -71 [ 646.463480][ T5886] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 646.483903][ T9] usb 9-1: USB disconnect, device number 34 [ 646.492842][ T5890] ath6kl: Failed to init ath6kl core: -71 [ 646.500245][ T5890] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 646.537909][ T5890] usb 10-1: USB disconnect, device number 19 [ 646.598111][ T5888] m920x_read = error: -19 [ 646.602977][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 646.647876][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 646.669786][ T5886] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 646.692891][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.724767][ T5886] usb 4-1: Product: syz [ 646.729143][ T5886] usb 4-1: Manufacturer: syz [ 646.733792][ T5886] usb 4-1: SerialNumber: syz [ 646.777957][ T5888] m920x_read = error: -19 [ 646.782669][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 646.785932][ T5886] usb 4-1: config 0 descriptor?? [ 646.815360][ T5887] usb 7-1: USB disconnect, device number 30 [ 646.959196][ T5888] m920x_read = error: -19 [ 646.963806][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 647.027524][T18758] netlink: 'syz.3.3833': attribute type 12 has an invalid length. [ 647.050036][ T5887] usb 4-1: USB disconnect, device number 63 [ 647.133564][T18780] fuse: Bad value for 'fd' [ 647.139751][ T5888] m920x_read = error: -19 [ 647.144163][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 647.368121][ T5888] m920x_read = error: -19 [ 647.372562][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 647.407231][T18789] netlink: 1284 bytes leftover after parsing attributes in process `syz.9.3836'. [ 647.426947][T18789] openvswitch: netlink: EtherType 0 is less than min 600 [ 647.558564][ T5887] m920x_read = error: -19 [ 647.563105][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 647.754862][ T5887] m920x_read = error: -19 [ 647.760036][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 647.948169][ T5887] m920x_read = error: -19 [ 647.973017][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 648.178308][ T5886] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 648.188070][ T5888] m920x_read = error: -19 [ 648.208005][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 648.377984][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 648.398472][ T5887] m920x_read = error: -19 [ 648.400276][ T5886] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.402972][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 648.435111][ T5886] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.480792][ T5886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 648.516439][ T5886] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 648.551470][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.578933][ T5886] usb 4-1: config 0 descriptor?? [ 648.618936][ T5887] m920x_read = error: -19 [ 648.628113][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 648.735905][T18823] FAULT_INJECTION: forcing a failure. [ 648.735905][T18823] name failslab, interval 1, probability 0, space 0, times 0 [ 648.788014][ T5888] m920x_read = error: -19 [ 648.791327][T18825] fuse: Bad value for 'fd' [ 648.792611][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 648.835888][T18823] CPU: 1 UID: 0 PID: 18823 Comm: syz.8.3845 Not tainted 6.14.0-syzkaller #0 [ 648.835919][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 648.835933][T18823] Call Trace: [ 648.835942][T18823] [ 648.835951][T18823] dump_stack_lvl+0x241/0x360 [ 648.835986][T18823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.836011][T18823] ? __pfx__printk+0x10/0x10 [ 648.836036][T18823] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 648.836068][T18823] ? __pfx___might_resched+0x10/0x10 [ 648.836107][T18823] should_fail_ex+0x40a/0x550 [ 648.836144][T18823] should_failslab+0xac/0x100 [ 648.836176][T18823] __kmalloc_node_noprof+0xe1/0x4d0 [ 648.836205][T18823] ? __kvmalloc_node_noprof+0x72/0x190 [ 648.836244][T18823] __kvmalloc_node_noprof+0x72/0x190 [ 648.836278][T18823] hash_netnet_create+0x96b/0x16a0 [ 648.836305][T18823] ? __pfx_lock_acquire+0x10/0x10 [ 648.836337][T18823] ? ip_set_create+0x48a/0x1960 [ 648.836375][T18823] ? __pfx_hash_netnet_create+0x10/0x10 [ 648.836403][T18823] ? __pfx_hash_netnet_create+0x10/0x10 [ 648.836425][T18823] ip_set_create+0xa78/0x1960 [ 648.836461][T18823] ? ip_set_create+0x48a/0x1960 [ 648.836497][T18823] ? __pfx_ip_set_create+0x10/0x10 [ 648.836559][T18823] ? nfnetlink_rcv_msg+0x225/0x1180 [ 648.836592][T18823] nfnetlink_rcv_msg+0xbec/0x1180 [ 648.836624][T18823] ? nfnetlink_rcv_msg+0x225/0x1180 [ 648.836677][T18823] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 648.836709][T18823] ? stack_trace_save+0x118/0x1d0 [ 648.836761][T18823] ? dev_hard_start_xmit+0x27a/0x7d0 [ 648.836784][T18823] ? __dev_queue_xmit+0x1b73/0x3f50 [ 648.836808][T18823] ? __netlink_deliver_tap+0x561/0x7f0 [ 648.836831][T18823] ? netlink_deliver_tap+0x19d/0x1b0 [ 648.836853][T18823] ? netlink_unicast+0x7c4/0x990 [ 648.836874][T18823] ? netlink_sendmsg+0x8de/0xcb0 [ 648.836897][T18823] ? __sock_sendmsg+0x221/0x270 [ 648.836929][T18823] ? ____sys_sendmsg+0x53a/0x860 [ 648.836950][T18823] ? __sys_sendmsg+0x269/0x350 [ 648.836987][T18823] netlink_rcv_skb+0x206/0x480 [ 648.837015][T18823] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 648.837049][T18823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 648.837097][T18823] ? apparmor_capable+0x13b/0x1b0 [ 648.837126][T18823] ? bpf_lsm_capable+0x9/0x10 [ 648.837157][T18823] ? security_capable+0x7e/0x2d0 [ 648.837196][T18823] nfnetlink_rcv+0x297/0x2ab0 [ 648.837233][T18823] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 648.837266][T18823] ? __dev_queue_xmit+0x2f4/0x3f50 [ 648.837293][T18823] ? __dev_queue_xmit+0x1775/0x3f50 [ 648.837318][T18823] ? kasan_save_track+0x51/0x80 [ 648.837347][T18823] ? ____sys_sendmsg+0x53a/0x860 [ 648.837373][T18823] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 648.837404][T18823] ? __dev_queue_xmit+0x2f4/0x3f50 [ 648.837433][T18823] ? __pfx___dev_queue_xmit+0x10/0x10 [ 648.837475][T18823] ? ref_tracker_free+0x643/0x7e0 [ 648.837498][T18823] ? __asan_memcpy+0x40/0x70 [ 648.837518][T18823] ? __pfx_ref_tracker_free+0x10/0x10 [ 648.837537][T18823] ? __skb_clone+0x5c/0x6c0 [ 648.837577][T18823] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.837602][T18823] ? skb_clone+0x240/0x390 [ 648.837627][T18823] ? __pfx_lock_release+0x10/0x10 [ 648.837660][T18823] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 648.837697][T18823] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.837727][T18823] netlink_unicast+0x7f6/0x990 [ 648.837759][T18823] ? __pfx_netlink_unicast+0x10/0x10 [ 648.837781][T18823] ? __virt_addr_valid+0x45f/0x530 [ 648.837801][T18823] ? __phys_addr_symbol+0x2f/0x70 [ 648.837820][T18823] ? __check_object_size+0x47a/0x730 [ 648.837855][T18823] netlink_sendmsg+0x8de/0xcb0 [ 648.837894][T18823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.837926][T18823] ? aa_sock_msg_perm+0x91/0x160 [ 648.837964][T18823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.837988][T18823] __sock_sendmsg+0x221/0x270 [ 648.838019][T18823] ____sys_sendmsg+0x53a/0x860 [ 648.838052][T18823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.838079][T18823] ? __fget_files+0x2a/0x410 [ 648.838110][T18823] ? __fget_files+0x2a/0x410 [ 648.838147][T18823] __sys_sendmsg+0x269/0x350 [ 648.838175][T18823] ? __pfx___sys_sendmsg+0x10/0x10 [ 648.838212][T18823] ? do_sys_openat2+0x17a/0x1d0 [ 648.838271][T18823] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 648.838306][T18823] ? do_syscall_64+0x100/0x230 [ 648.838331][T18823] ? do_syscall_64+0xb6/0x230 [ 648.838355][T18823] do_syscall_64+0xf3/0x230 [ 648.838375][T18823] ? clear_bhb_loop+0x35/0x90 [ 648.838409][T18823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.838439][T18823] RIP: 0033:0x7f9b3bd8d169 [ 648.838459][T18823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.838479][T18823] RSP: 002b:00007f9b3cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.838504][T18823] RAX: ffffffffffffffda RBX: 00007f9b3bfa5fa0 RCX: 00007f9b3bd8d169 [ 648.838520][T18823] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 648.838534][T18823] RBP: 00007f9b3cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 648.838547][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.838560][T18823] R13: 0000000000000000 R14: 00007f9b3bfa5fa0 R15: 00007f9b3c0cfa28 [ 648.838591][T18823] [ 649.039193][ T5886] hid (null): unknown global tag 0xe [ 649.209546][ T5888] m920x_read = error: -19 [ 649.537206][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 649.570512][ T5886] hid (null): invalid report_count -1628606755 [ 649.578933][ T5886] hid (null): unknown global tag 0xc [ 649.584461][ T5886] hid (null): invalid report_count 46586 [ 649.593929][ T5886] hid (null): unknown global tag 0xe [ 649.602589][ T5886] hid (null): unknown global tag 0xe3 [ 649.608183][ T5890] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 649.635750][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3851'. [ 649.650212][ T5886] usb 4-1: USB disconnect, device number 64 [ 649.723394][ T5887] m920x_read = error: -19 [ 649.728313][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 649.738946][ T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 649.789875][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.801808][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.830180][ T5890] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.860047][ T5890] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.869719][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.893964][ T5890] usb 10-1: config 0 descriptor?? [ 649.898094][ T5887] m920x_read = error: -19 [ 649.903452][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 649.949222][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 649.976959][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.028226][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.049001][ T9] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 650.091568][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.098302][ T5887] m920x_read = error: -19 [ 650.104065][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 650.137666][ T9] usb 9-1: config 0 descriptor?? [ 650.288171][ T5887] m920x_read = error: -19 [ 650.298029][T18849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 650.314458][ T5890] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 650.314805][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 650.328816][T18853] FAULT_INJECTION: forcing a failure. [ 650.328816][T18853] name failslab, interval 1, probability 0, space 0, times 0 [ 650.385417][ T5890] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 650.399134][T18853] CPU: 0 UID: 0 PID: 18853 Comm: syz.3.3853 Not tainted 6.14.0-syzkaller #0 [ 650.399161][T18853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 650.399175][T18853] Call Trace: [ 650.399184][T18853] [ 650.399193][T18853] dump_stack_lvl+0x241/0x360 [ 650.399231][T18853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.399256][T18853] ? __pfx__printk+0x10/0x10 [ 650.399280][T18853] ? __kmalloc_cache_noprof+0x48/0x390 [ 650.399313][T18853] ? __pfx___might_resched+0x10/0x10 [ 650.399342][T18853] ? flow_indr_dev_setup_offload+0x48/0x660 [ 650.399374][T18853] should_fail_ex+0x40a/0x550 [ 650.399411][T18853] should_failslab+0xac/0x100 [ 650.399442][T18853] __kmalloc_cache_noprof+0x70/0x390 [ 650.399472][T18853] ? flow_indr_dev_setup_offload+0x24f/0x660 [ 650.399504][T18853] flow_indr_dev_setup_offload+0x24f/0x660 [ 650.399534][T18853] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 650.399567][T18853] tcf_block_offload_cmd+0x31f/0x470 [ 650.399604][T18853] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 650.399641][T18853] ? __pfx_down_write+0x10/0x10 [ 650.399667][T18853] ? __kmalloc_cache_noprof+0x243/0x390 [ 650.399695][T18853] ? tcf_block_get_ext+0x86c/0x1670 [ 650.399723][T18853] tcf_block_get_ext+0xe97/0x1670 [ 650.399762][T18853] tcf_block_get+0xf8/0x150 [ 650.399789][T18853] ? __pfx_tcf_block_get+0x10/0x10 [ 650.399813][T18853] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 650.399842][T18853] ? __hrtimer_init+0x170/0x250 [ 650.399871][T18853] ? __pfx_cake_init+0x10/0x10 [ 650.399897][T18853] cake_init+0x1ec/0x920 [ 650.399924][T18853] ? qdisc_alloc+0x7dd/0xa80 [ 650.399958][T18853] ? __pfx_cake_init+0x10/0x10 [ 650.399993][T18853] qdisc_create+0x9d4/0x11a0 [ 650.400024][T18853] ? __pfx_qdisc_create+0x10/0x10 [ 650.400049][T18853] ? lockdep_rtnl_is_held+0x26/0x40 [ 650.400075][T18853] tc_modify_qdisc+0xbbb/0x1f10 [ 650.400126][T18853] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 650.400186][T18853] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 650.400222][T18853] rtnetlink_rcv_msg+0x73f/0xcf0 [ 650.400248][T18853] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 650.400281][T18853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.400318][T18853] ? ref_tracker_free+0x643/0x7e0 [ 650.400347][T18853] netlink_rcv_skb+0x206/0x480 [ 650.400375][T18853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.400406][T18853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 650.400457][T18853] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.400486][T18853] netlink_unicast+0x7f6/0x990 [ 650.400520][T18853] ? __pfx_netlink_unicast+0x10/0x10 [ 650.400540][T18853] ? __virt_addr_valid+0x45f/0x530 [ 650.400562][T18853] ? __phys_addr_symbol+0x2f/0x70 [ 650.400582][T18853] ? __check_object_size+0x47a/0x730 [ 650.400615][T18853] netlink_sendmsg+0x8de/0xcb0 [ 650.400656][T18853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.400688][T18853] ? aa_sock_msg_perm+0x91/0x160 [ 650.400727][T18853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.400752][T18853] __sock_sendmsg+0x221/0x270 [ 650.400786][T18853] ____sys_sendmsg+0x53a/0x860 [ 650.400831][T18853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.400852][T18853] ? __fget_files+0x2a/0x410 [ 650.400886][T18853] ? __fget_files+0x2a/0x410 [ 650.400924][T18853] __sys_sendmsg+0x269/0x350 [ 650.400952][T18853] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.400994][T18853] ? do_sys_openat2+0x17a/0x1d0 [ 650.401053][T18853] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.401088][T18853] ? do_syscall_64+0x100/0x230 [ 650.401112][T18853] ? do_syscall_64+0xb6/0x230 [ 650.401135][T18853] do_syscall_64+0xf3/0x230 [ 650.401156][T18853] ? clear_bhb_loop+0x35/0x90 [ 650.401191][T18853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.401220][T18853] RIP: 0033:0x7f165dd8d169 [ 650.401239][T18853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.401257][T18853] RSP: 002b:00007f165eb41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.401281][T18853] RAX: ffffffffffffffda RBX: 00007f165dfa6080 RCX: 00007f165dd8d169 [ 650.401297][T18853] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 650.401311][T18853] RBP: 00007f165eb41090 R08: 0000000000000000 R09: 0000000000000000 [ 650.401325][T18853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.401338][T18853] R13: 0000000000000000 R14: 00007f165dfa6080 R15: 00007f165e0cfa28 [ 650.401370][T18853] [ 650.828837][ T5887] m920x_read = error: -19 [ 650.833239][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 650.985969][ T9] corsair 0003:1B1C:1B02.002A: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 650.998361][ T5888] m920x_read = error: -19 [ 650.998418][ T5888] dvb-usb: error -19 while querying for an remote control event. [ 651.119179][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3850'. [ 651.158300][ T5887] m920x_read = error: -19 [ 651.163414][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 651.193828][T18840] FAULT_INJECTION: forcing a failure. [ 651.193828][T18840] name failslab, interval 1, probability 0, space 0, times 0 [ 651.368076][ T5887] m920x_read = error: -19 [ 651.372783][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 651.383044][T18879] FAULT_INJECTION: forcing a failure. [ 651.383044][T18879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.427524][T18840] CPU: 1 UID: 0 PID: 18840 Comm: syz.8.3850 Not tainted 6.14.0-syzkaller #0 [ 651.427556][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 651.427570][T18840] Call Trace: [ 651.427589][T18840] [ 651.427599][T18840] dump_stack_lvl+0x241/0x360 [ 651.427634][T18840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.427659][T18840] ? __pfx__printk+0x10/0x10 [ 651.427684][T18840] ? __kmalloc_noprof+0xb5/0x4c0 [ 651.427714][T18840] ? __pfx___might_resched+0x10/0x10 [ 651.427749][T18840] should_fail_ex+0x40a/0x550 [ 651.427785][T18840] should_failslab+0xac/0x100 [ 651.427814][T18840] __kmalloc_noprof+0xdd/0x4c0 [ 651.427841][T18840] ? rfkill_alloc+0xb0/0x2e0 [ 651.427873][T18840] rfkill_alloc+0xb0/0x2e0 [ 651.427908][T18840] wiphy_new_nm+0x1084/0x19a0 [ 651.427929][T18840] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 651.427959][T18840] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 651.427990][T18840] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 651.428025][T18840] mac80211_hwsim_new_radio+0x203/0x4a40 [ 651.428064][T18840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 651.428105][T18840] ? _printk+0xd5/0x120 [ 651.428126][T18840] ? __nla_validate_parse+0x2817/0x3290 [ 651.428151][T18840] ? __pfx__printk+0x10/0x10 [ 651.428170][T18840] ? stack_depot_save_flags+0x37/0x940 [ 651.428205][T18840] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 651.428234][T18840] ? rcu_is_watching+0x15/0xb0 [ 651.428276][T18840] ? do_trace_netlink_extack+0x8b/0x1f0 [ 651.428320][T18840] hwsim_new_radio_nl+0xece/0x2290 [ 651.428360][T18840] ? __pfx___nla_validate_parse+0x10/0x10 [ 651.428388][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.428449][T18840] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 651.428491][T18840] genl_rcv_msg+0xb1f/0xec0 [ 651.428552][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.428621][T18840] ? __pfx_lock_acquire+0x10/0x10 [ 651.428654][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.428683][T18840] ? __pfx___might_resched+0x10/0x10 [ 651.428723][T18840] netlink_rcv_skb+0x206/0x480 [ 651.428749][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.428784][T18840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.428830][T18840] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 651.428869][T18840] genl_rcv+0x28/0x40 [ 651.428898][T18840] netlink_unicast+0x7f6/0x990 [ 651.428931][T18840] ? __pfx_netlink_unicast+0x10/0x10 [ 651.428950][T18840] ? __virt_addr_valid+0x45f/0x530 [ 651.428973][T18840] ? __phys_addr_symbol+0x2f/0x70 [ 651.428992][T18840] ? __check_object_size+0x47a/0x730 [ 651.429026][T18840] netlink_sendmsg+0x8de/0xcb0 [ 651.429067][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.429098][T18840] ? aa_sock_msg_perm+0x91/0x160 [ 651.429136][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.429160][T18840] __sock_sendmsg+0x221/0x270 [ 651.429194][T18840] ____sys_sendmsg+0x53a/0x860 [ 651.429228][T18840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.429249][T18840] ? __fget_files+0x2a/0x410 [ 651.429283][T18840] ? __fget_files+0x2a/0x410 [ 651.429322][T18840] __sys_sendmsg+0x269/0x350 [ 651.429352][T18840] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.429390][T18840] ? do_sys_openat2+0x17a/0x1d0 [ 651.429450][T18840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.429484][T18840] ? do_syscall_64+0x100/0x230 [ 651.429509][T18840] ? do_syscall_64+0xb6/0x230 [ 651.429533][T18840] do_syscall_64+0xf3/0x230 [ 651.429552][T18840] ? clear_bhb_loop+0x35/0x90 [ 651.429609][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.429639][T18840] RIP: 0033:0x7f9b3bd8d169 [ 651.429659][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.429678][T18840] RSP: 002b:00007f9b3cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.429701][T18840] RAX: ffffffffffffffda RBX: 00007f9b3bfa5fa0 RCX: 00007f9b3bd8d169 [ 651.429718][T18840] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 651.429733][T18840] RBP: 00007f9b3cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 651.429746][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.429759][T18840] R13: 0000000000000000 R14: 00007f9b3bfa5fa0 R15: 00007f9b3c0cfa28 [ 651.429792][T18840] [ 651.466554][T18879] CPU: 0 UID: 0 PID: 18879 Comm: syz.7.3855 Not tainted 6.14.0-syzkaller #0 [ 651.466589][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 651.466604][T18879] Call Trace: [ 651.466613][T18879] [ 651.466623][T18879] dump_stack_lvl+0x241/0x360 [ 651.466655][T18879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.466681][T18879] ? __pfx__printk+0x10/0x10 [ 651.466705][T18879] ? __pfx_lock_release+0x10/0x10 [ 651.466747][T18879] should_fail_ex+0x40a/0x550 [ 651.466784][T18879] _copy_from_user+0x2d/0xb0 [ 651.466815][T18879] copy_msghdr_from_user+0xae/0x680 [ 651.466855][T18879] ? __pfx___might_resched+0x10/0x10 [ 651.466888][T18879] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 651.466916][T18879] ? __fget_files+0x2a/0x410 [ 651.466953][T18879] ? __sys_sendmmsg+0x392/0x720 [ 651.466978][T18879] ? __might_fault+0xaa/0x120 [ 651.467003][T18879] __sys_sendmmsg+0x32b/0x720 [ 651.467039][T18879] ? __pfx___sys_sendmmsg+0x10/0x10 [ 651.467076][T18879] ? __pfx_lock_release+0x10/0x10 [ 651.467106][T18879] ? kstrtouint_from_user+0x128/0x190 [ 651.467154][T18879] ? ksys_write+0x22a/0x2b0 [ 651.467177][T18879] ? __pfx_lock_release+0x10/0x10 [ 651.467215][T18879] ? sb_end_write+0xe9/0x1c0 [ 651.467247][T18879] ? vfs_write+0x7fa/0xd10 [ 651.467272][T18879] ? __mutex_unlock_slowpath+0x227/0x800 [ 651.467334][T18879] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.467369][T18879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.467404][T18879] ? do_syscall_64+0x100/0x230 [ 651.467429][T18879] __x64_sys_sendmmsg+0xa0/0xb0 [ 651.467456][T18879] do_syscall_64+0xf3/0x230 [ 651.467476][T18879] ? clear_bhb_loop+0x35/0x90 [ 651.467511][T18879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.467542][T18879] RIP: 0033:0x7f9e0178d169 [ 651.467562][T18879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.467581][T18879] RSP: 002b:00007f9e02658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 651.467606][T18879] RAX: ffffffffffffffda RBX: 00007f9e019a5fa0 RCX: 00007f9e0178d169 [ 651.467624][T18879] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 651.467639][T18879] RBP: 00007f9e02658090 R08: 0000000000000000 R09: 0000000000000000 [ 651.467654][T18879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.467669][T18879] R13: 0000000000000000 R14: 00007f9e019a5fa0 R15: 00007f9e01acfa28 [ 651.467699][T18879] [ 652.133216][T18840] INFO: trying to register non-static key. [ 652.139076][T18840] The code is fine but needs lockdep annotation, or maybe [ 652.146184][T18840] you didn't initialize this object before use? [ 652.152418][T18840] turning off the locking correctness validator. [ 652.158745][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.8.3850 Not tainted 6.14.0-syzkaller #0 [ 652.158777][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 652.158788][T18840] Call Trace: [ 652.158820][T18840] [ 652.158828][T18840] dump_stack_lvl+0x241/0x360 [ 652.158852][T18840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.158871][T18840] ? __pfx__printk+0x10/0x10 [ 652.158890][T18840] ? __is_module_percpu_address+0x213/0x370 [ 652.158914][T18840] ? __is_kernel_percpu_address+0x115/0x250 [ 652.158939][T18840] assign_lock_key+0x241/0x280 [ 652.158957][T18840] ? __pfx_assign_lock_key+0x10/0x10 [ 652.158978][T18840] register_lock_class+0x1cf/0x980 [ 652.159005][T18840] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.159033][T18840] ? __pfx_register_lock_class+0x10/0x10 [ 652.159061][T18840] ? mark_lock+0x9a/0x360 [ 652.159077][T18840] __lock_acquire+0xf3/0x2100 [ 652.159101][T18840] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.159126][T18840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.159154][T18840] lock_acquire+0x1ed/0x550 [ 652.159181][T18840] ? cfg80211_dev_free+0x33/0x2d0 [ 652.159201][T18840] ? __pfx_lock_acquire+0x10/0x10 [ 652.159226][T18840] ? dump_stack_lvl+0x301/0x360 [ 652.159245][T18840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.159265][T18840] _raw_spin_lock_irqsave+0xd5/0x120 [ 652.159288][T18840] ? cfg80211_dev_free+0x33/0x2d0 [ 652.159308][T18840] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 652.159330][T18840] ? devres_release_all+0x1eb/0x250 [ 652.159352][T18840] ? device_release+0x66/0x1c0 [ 652.159371][T18840] ? __pfx_wiphy_dev_release+0x10/0x10 [ 652.159391][T18840] cfg80211_dev_free+0x33/0x2d0 [ 652.159407][T18840] ? trace_kmalloc+0x1f/0xd0 [ 652.159438][T18840] ? __pfx_wiphy_dev_release+0x10/0x10 [ 652.159461][T18840] device_release+0x99/0x1c0 [ 652.159483][T18840] kobject_put+0x22f/0x480 [ 652.159501][T18840] wiphy_new_nm+0x16ea/0x19a0 [ 652.159517][T18840] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 652.159539][T18840] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 652.159573][T18840] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 652.159600][T18840] mac80211_hwsim_new_radio+0x203/0x4a40 [ 652.159622][T18840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.159649][T18840] ? _printk+0xd5/0x120 [ 652.159664][T18840] ? __nla_validate_parse+0x2817/0x3290 [ 652.159683][T18840] ? __pfx__printk+0x10/0x10 [ 652.159697][T18840] ? stack_depot_save_flags+0x37/0x940 [ 652.159728][T18840] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 652.159749][T18840] ? rcu_is_watching+0x15/0xb0 [ 652.159767][T18840] ? do_trace_netlink_extack+0x8b/0x1f0 [ 652.159786][T18840] hwsim_new_radio_nl+0xece/0x2290 [ 652.159818][T18840] ? __pfx___nla_validate_parse+0x10/0x10 [ 652.159837][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 652.159874][T18840] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 652.159903][T18840] genl_rcv_msg+0xb1f/0xec0 [ 652.159931][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.159965][T18840] ? __pfx_lock_acquire+0x10/0x10 [ 652.159991][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 652.160014][T18840] ? __pfx___might_resched+0x10/0x10 [ 652.160039][T18840] netlink_rcv_skb+0x206/0x480 [ 652.160059][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.160084][T18840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 652.160108][T18840] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 652.160137][T18840] genl_rcv+0x28/0x40 [ 652.160160][T18840] netlink_unicast+0x7f6/0x990 [ 652.160181][T18840] ? __pfx_netlink_unicast+0x10/0x10 [ 652.160197][T18840] ? __virt_addr_valid+0x45f/0x530 [ 652.160213][T18840] ? __phys_addr_symbol+0x2f/0x70 [ 652.160228][T18840] ? __check_object_size+0x47a/0x730 [ 652.160251][T18840] netlink_sendmsg+0x8de/0xcb0 [ 652.160280][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.160302][T18840] ? aa_sock_msg_perm+0x91/0x160 [ 652.160329][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.160349][T18840] __sock_sendmsg+0x221/0x270 [ 652.160373][T18840] ____sys_sendmsg+0x53a/0x860 [ 652.160397][T18840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.160416][T18840] ? __fget_files+0x2a/0x410 [ 652.160440][T18840] ? __fget_files+0x2a/0x410 [ 652.160466][T18840] __sys_sendmsg+0x269/0x350 [ 652.160485][T18840] ? __pfx___sys_sendmsg+0x10/0x10 [ 652.160507][T18840] ? do_sys_openat2+0x17a/0x1d0 [ 652.160544][T18840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.160571][T18840] ? do_syscall_64+0x100/0x230 [ 652.160587][T18840] ? do_syscall_64+0xb6/0x230 [ 652.160603][T18840] do_syscall_64+0xf3/0x230 [ 652.160618][T18840] ? clear_bhb_loop+0x35/0x90 [ 652.160644][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.160669][T18840] RIP: 0033:0x7f9b3bd8d169 [ 652.160687][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.160701][T18840] RSP: 002b:00007f9b3cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.160719][T18840] RAX: ffffffffffffffda RBX: 00007f9b3bfa5fa0 RCX: 00007f9b3bd8d169 [ 652.160732][T18840] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 652.160743][T18840] RBP: 00007f9b3cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 652.160754][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.160764][T18840] R13: 0000000000000000 R14: 00007f9b3bfa5fa0 R15: 00007f9b3c0cfa28 [ 652.160782][T18840] [ 652.161671][T18840] ------------[ cut here ]------------ [ 652.680198][T18840] WARNING: CPU: 0 PID: 18840 at net/wireless/core.c:1197 cfg80211_dev_free+0x2ba/0x2d0 [ 652.689855][T18840] Modules linked in: [ 652.693769][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.8.3850 Not tainted 6.14.0-syzkaller #0 [ 652.702450][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 652.712603][T18840] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 652.718337][T18840] Code: da f6 49 8b be e0 08 00 00 e8 92 37 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 37 cf f6 e8 97 80 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 652.737952][T18840] RSP: 0018:ffffc900046d6e20 EFLAGS: 00010093 [ 652.744034][T18840] RAX: ffffffff8b4e5f39 RBX: ffff88804d2906a8 RCX: ffff88805974bc00 [ 652.752011][T18840] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900046d6d00 [ 652.759988][T18840] RBP: 1ffffffff194d1ac R08: 0000000000000003 R09: fffff520008dada0 [ 652.767963][T18840] R10: dffffc0000000000 R11: fffff520008dada0 R12: ffff88804d2906b8 [ 652.775938][T18840] R13: dffffc0000000000 R14: ffff88804d290000 R15: 0000000000000246 [ 652.783916][T18840] FS: 00007f9b3cc276c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 652.792857][T18840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.799451][T18840] CR2: 00007fdf0d066440 CR3: 000000007ed04000 CR4: 00000000003526f0 [ 652.807438][T18840] Call Trace: [ 652.810727][T18840] [ 652.813668][T18840] ? __warn+0x165/0x4d0 [ 652.817838][T18840] ? cfg80211_dev_free+0x2ba/0x2d0 [ 652.823044][T18840] ? report_bug+0x2b3/0x500 [ 652.827561][T18840] ? cfg80211_dev_free+0x2ba/0x2d0 [ 652.832677][T18840] ? handle_bug+0x60/0x90 [ 652.837010][T18840] ? exc_invalid_op+0x1a/0x50 [ 652.841697][T18840] ? asm_exc_invalid_op+0x1a/0x20 [ 652.846737][T18840] ? cfg80211_dev_free+0x2b9/0x2d0 [ 652.851866][T18840] ? cfg80211_dev_free+0x2ba/0x2d0 [ 652.856982][T18840] ? trace_kmalloc+0x1f/0xd0 [ 652.861583][T18840] ? __pfx_wiphy_dev_release+0x10/0x10 [ 652.867056][T18840] device_release+0x99/0x1c0 [ 652.871755][T18840] kobject_put+0x22f/0x480 [ 652.876180][T18840] wiphy_new_nm+0x16ea/0x19a0 [ 652.880866][T18840] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 652.887383][T18840] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 652.892769][T18840] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 652.898619][T18840] mac80211_hwsim_new_radio+0x203/0x4a40 [ 652.904263][T18840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.910611][T18840] ? _printk+0xd5/0x120 [ 652.914779][T18840] ? __nla_validate_parse+0x2817/0x3290 [ 652.920334][T18840] ? __pfx__printk+0x10/0x10 [ 652.924922][T18840] ? stack_depot_save_flags+0x37/0x940 [ 652.930397][T18840] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 652.936482][T18840] ? rcu_is_watching+0x15/0xb0 [ 652.941256][T18840] ? do_trace_netlink_extack+0x8b/0x1f0 [ 652.946811][T18840] hwsim_new_radio_nl+0xece/0x2290 [ 652.951936][T18840] ? __pfx___nla_validate_parse+0x10/0x10 [ 652.957666][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 652.963234][T18840] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 652.969576][T18840] genl_rcv_msg+0xb1f/0xec0 [ 652.974101][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.979156][T18840] ? __pfx_lock_acquire+0x10/0x10 [ 652.984215][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 652.989810][T18840] ? __pfx___might_resched+0x10/0x10 [ 652.995137][T18840] netlink_rcv_skb+0x206/0x480 [ 652.999943][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.004983][T18840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.010289][T18840] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 653.015771][T18840] genl_rcv+0x28/0x40 [ 653.019770][T18840] netlink_unicast+0x7f6/0x990 [ 653.024549][T18840] ? __pfx_netlink_unicast+0x10/0x10 [ 653.029840][T18840] ? __virt_addr_valid+0x45f/0x530 [ 653.034956][T18840] ? __phys_addr_symbol+0x2f/0x70 [ 653.039991][T18840] ? __check_object_size+0x47a/0x730 [ 653.045294][T18840] netlink_sendmsg+0x8de/0xcb0 [ 653.050092][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.055395][T18840] ? aa_sock_msg_perm+0x91/0x160 [ 653.060352][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.065646][T18840] __sock_sendmsg+0x221/0x270 [ 653.070618][T18840] ____sys_sendmsg+0x53a/0x860 [ 653.075394][T18840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.080687][T18840] ? __fget_files+0x2a/0x410 [ 653.085310][T18840] ? __fget_files+0x2a/0x410 [ 653.090005][T18840] __sys_sendmsg+0x269/0x350 [ 653.094609][T18840] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.099741][T18840] ? do_sys_openat2+0x17a/0x1d0 [ 653.104624][T18840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 653.110992][T18840] ? do_syscall_64+0x100/0x230 [ 653.115770][T18840] ? do_syscall_64+0xb6/0x230 [ 653.120452][T18840] do_syscall_64+0xf3/0x230 [ 653.125223][T18840] ? clear_bhb_loop+0x35/0x90 [ 653.129920][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.135826][T18840] RIP: 0033:0x7f9b3bd8d169 [ 653.140254][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.159871][T18840] RSP: 002b:00007f9b3cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.168299][T18840] RAX: ffffffffffffffda RBX: 00007f9b3bfa5fa0 RCX: 00007f9b3bd8d169 [ 653.176708][T18840] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 653.184714][T18840] RBP: 00007f9b3cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 653.192690][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.200668][T18840] R13: 0000000000000000 R14: 00007f9b3bfa5fa0 R15: 00007f9b3c0cfa28 [ 653.208656][T18840] [ 653.211695][T18840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 653.218978][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.8.3850 Not tainted 6.14.0-syzkaller #0 [ 653.227653][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 653.237715][T18840] Call Trace: [ 653.241005][T18840] [ 653.243965][T18840] dump_stack_lvl+0x241/0x360 [ 653.248658][T18840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.253864][T18840] ? __pfx__printk+0x10/0x10 [ 653.258466][T18840] ? _printk+0xd5/0x120 [ 653.262633][T18840] ? __init_begin+0x41000/0x41000 [ 653.267674][T18840] ? vscnprintf+0x5d/0x90 [ 653.272013][T18840] panic+0x349/0x880 [ 653.275917][T18840] ? __warn+0x174/0x4d0 [ 653.280102][T18840] ? __pfx_panic+0x10/0x10 [ 653.284534][T18840] __warn+0x344/0x4d0 [ 653.288543][T18840] ? cfg80211_dev_free+0x2ba/0x2d0 [ 653.293663][T18840] report_bug+0x2b3/0x500 [ 653.298016][T18840] ? cfg80211_dev_free+0x2ba/0x2d0 [ 653.303154][T18840] handle_bug+0x60/0x90 [ 653.307314][T18840] exc_invalid_op+0x1a/0x50 [ 653.311826][T18840] asm_exc_invalid_op+0x1a/0x20 [ 653.316697][T18840] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 653.322423][T18840] Code: da f6 49 8b be e0 08 00 00 e8 92 37 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 37 cf f6 e8 97 80 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 653.342038][T18840] RSP: 0018:ffffc900046d6e20 EFLAGS: 00010093 [ 653.348125][T18840] RAX: ffffffff8b4e5f39 RBX: ffff88804d2906a8 RCX: ffff88805974bc00 [ 653.356101][T18840] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900046d6d00 [ 653.364115][T18840] RBP: 1ffffffff194d1ac R08: 0000000000000003 R09: fffff520008dada0 [ 653.372097][T18840] R10: dffffc0000000000 R11: fffff520008dada0 R12: ffff88804d2906b8 [ 653.380072][T18840] R13: dffffc0000000000 R14: ffff88804d290000 R15: 0000000000000246 [ 653.388049][T18840] ? cfg80211_dev_free+0x2b9/0x2d0 [ 653.393195][T18840] ? trace_kmalloc+0x1f/0xd0 [ 653.397803][T18840] ? __pfx_wiphy_dev_release+0x10/0x10 [ 653.403277][T18840] device_release+0x99/0x1c0 [ 653.407899][T18840] kobject_put+0x22f/0x480 [ 653.412358][T18840] wiphy_new_nm+0x16ea/0x19a0 [ 653.417065][T18840] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 653.423590][T18840] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 653.428993][T18840] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 653.434821][T18840] mac80211_hwsim_new_radio+0x203/0x4a40 [ 653.440472][T18840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 653.446815][T18840] ? _printk+0xd5/0x120 [ 653.450999][T18840] ? __nla_validate_parse+0x2817/0x3290 [ 653.456578][T18840] ? __pfx__printk+0x10/0x10 [ 653.461188][T18840] ? stack_depot_save_flags+0x37/0x940 [ 653.466665][T18840] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 653.472772][T18840] ? rcu_is_watching+0x15/0xb0 [ 653.477561][T18840] ? do_trace_netlink_extack+0x8b/0x1f0 [ 653.483126][T18840] hwsim_new_radio_nl+0xece/0x2290 [ 653.488259][T18840] ? __pfx___nla_validate_parse+0x10/0x10 [ 653.493991][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 653.499564][T18840] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 653.505909][T18840] genl_rcv_msg+0xb1f/0xec0 [ 653.510436][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.515494][T18840] ? __pfx_lock_acquire+0x10/0x10 [ 653.520542][T18840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 653.526104][T18840] ? __pfx___might_resched+0x10/0x10 [ 653.531403][T18840] netlink_rcv_skb+0x206/0x480 [ 653.536182][T18840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.541307][T18840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.546601][T18840] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 653.552080][T18840] genl_rcv+0x28/0x40 [ 653.556076][T18840] netlink_unicast+0x7f6/0x990 [ 653.560855][T18840] ? __pfx_netlink_unicast+0x10/0x10 [ 653.566144][T18840] ? __virt_addr_valid+0x45f/0x530 [ 653.571310][T18840] ? __phys_addr_symbol+0x2f/0x70 [ 653.576355][T18840] ? __check_object_size+0x47a/0x730 [ 653.581665][T18840] netlink_sendmsg+0x8de/0xcb0 [ 653.586466][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.591771][T18840] ? aa_sock_msg_perm+0x91/0x160 [ 653.596741][T18840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.602609][T18840] __sock_sendmsg+0x221/0x270 [ 653.607490][T18840] ____sys_sendmsg+0x53a/0x860 [ 653.612716][T18840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.618379][T18840] ? __fget_files+0x2a/0x410 [ 653.623178][T18840] ? __fget_files+0x2a/0x410 [ 653.627798][T18840] __sys_sendmsg+0x269/0x350 [ 653.632420][T18840] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.637551][T18840] ? do_sys_openat2+0x17a/0x1d0 [ 653.642426][T18840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 653.648786][T18840] ? do_syscall_64+0x100/0x230 [ 653.653563][T18840] ? do_syscall_64+0xb6/0x230 [ 653.658280][T18840] do_syscall_64+0xf3/0x230 [ 653.662797][T18840] ? clear_bhb_loop+0x35/0x90 [ 653.667497][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.673422][T18840] RIP: 0033:0x7f9b3bd8d169 [ 653.677846][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.697479][T18840] RSP: 002b:00007f9b3cc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.705910][T18840] RAX: ffffffffffffffda RBX: 00007f9b3bfa5fa0 RCX: 00007f9b3bd8d169 [ 653.713896][T18840] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 653.721878][T18840] RBP: 00007f9b3cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 653.729859][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.737838][T18840] R13: 0000000000000000 R14: 00007f9b3bfa5fa0 R15: 00007f9b3c0cfa28 [ 653.745820][T18840] [ 653.749218][T18840] Kernel Offset: disabled [ 653.753555][T18840] Rebooting in 86400 seconds..