last executing test programs: 5m17.873109146s ago: executing program 3 (id=7818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xc3ffffff}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 5m17.3313643s ago: executing program 3 (id=7819): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)="6bfa9f399d24e0b958bfe2bf4cd494bf85056c019d5a767dcb6d0490cee343029ca14b59a68286573b8cb0ce7e0b787b96bf257a6355dbb288f8a076001874588f061a127da3e0a3839c53e24160517f661d4f7a87", 0x55}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x700, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 5m17.023992771s ago: executing program 3 (id=7820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000fffffffc7400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 5m16.518750362s ago: executing program 3 (id=7823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000008e04"]) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x1000) read(r5, &(0x7f0000000140)=""/95, 0x5f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x1000, 0xfffffffc, 'syz0\x00'}, 0x2, 0x40, 0x5, 0x0, 0x0, 0x1000, 'syz0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@remote, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x3}}, 0xe8) r6 = openat$sysctl(0xffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000001780)=[{0x0}], 0x1, 0x1ff, 0x10000) close(r1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000040)={0xc, 0x0, 0xfffe0000, 0x4a5, 0x229}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001fe82d0c50a9e48192e99fb1e911d400000002408000240000000030c00038005000100430000000c000480060006003f1700000900010073797a30000000000900020073797a0000000000140000001100010000000000460900000000000a4e9384c3974591d37b0c08967a4259a43a080431d061abe02f818e8817d3dd6dbede93021056cd3f674367305c4fed89dcabeecd4697dfff8875eec9c2d1fe7fd2ce4bb24a1085fad3d72ab85df275ef51c62db241b38acdf02a"], 0x94}}, 0x0) 5m16.064633534s ago: executing program 3 (id=7826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @empty}, 0x1c) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) shutdown(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) 5m15.638522905s ago: executing program 3 (id=7828): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x30, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8, {0x4, 0x0, 0x3, 0x4}}]}], {0x2, 0x0, 0x8}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = signalfd4(r4, &(0x7f0000000180)={[0x8, 0xe]}, 0x8, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r8, 0x4, 0x7, 0x1, 0x5, 0x2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x1, 0x7ee}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r8, 0x4, 0x7, 0x1, 0x5, 0x2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x1, 0x7ee}}) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000021d46bfffff2ac14142500000000000000000000000000000000000000009201000000000000a39b00000000f2ffffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000400000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m0.271692731s ago: executing program 32 (id=7828): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x30, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8, {0x4, 0x0, 0x3, 0x4}}]}], {0x2, 0x0, 0x8}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = signalfd4(r4, &(0x7f0000000180)={[0x8, 0xe]}, 0x8, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r8, 0x4, 0x7, 0x1, 0x5, 0x2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x1, 0x7ee}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r8, 0x4, 0x7, 0x1, 0x5, 0x2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x1, 0x7ee}}) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000021d46bfffff2ac14142500000000000000000000000000000000000000009201000000000000a39b00000000f2ffffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000400000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.464351347s ago: executing program 4 (id=9133): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00'}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x7fffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x4000, 0xdffffffd, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000001c0)) msgctl$IPC_RMID(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x80dd}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) 8.054066313s ago: executing program 4 (id=9137): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002300)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa8, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x2) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = openat$sequencer(0xffffff9c, &(0x7f00000006c0), 0x802, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000780)={"746b4e12547c26954ea71995d47ada45f14e5ed110e74e946adc93c46504", 0xfffffff7, 0x0, 0x1, 0x4, 0xfffffbe8, 0x8, 0xfff, 0x9a6db77bcec2fe5f, [0x3ff, 0x400000, 0x5, 0x90b6, 0x4, 0x6, 0xffff, 0x8, 0x7, 0xa, 0x6, 0x1, 0x0, 0x8, 0x6, 0x2, 0x3, 0x400, 0x6]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000300), 0x2000000000000110) 5.75386527s ago: executing program 4 (id=9152): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) iopl(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0xa4}, {0x6}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) syz_io_uring_setup(0x3c93, &(0x7f00000005c0)={0x0, 0xe9fb, 0xf29d0fd6cc88b08b, 0x2, 0x188}, &(0x7f00000004c0), &(0x7f0000000640)) r2 = io_uring_setup(0x5ae8, &(0x7f0000000700)={0x0, 0x5522, 0x1, 0x3, 0x17d}) r3 = io_uring_setup(0x543e, &(0x7f0000000680)={0x0, 0xfffffffc, 0x1000, 0x0, 0xffffffff, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="980000006800010028bd7000fbdbdf250a0000000000000004000b00080001000000000004000b000600030000000000060003000000000004000400040004002c000c800600010000000000080002000200000008000300d30b0000060001000300000008000300070000002c000200010000000500000000000000070000000000000003000000010000000900000001000000010000007ecd68cf1eefe9262a371181e0ce22fed823cce3d28cb22fae50e54d2c67c2f99fa98b3a71fdb53c7035f951d0ad0af3fd642a437dc1092443d18ebcc5658efbd307a919d6595f8439"], 0x98}}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="992e01a1ff738f2aa082fb9c007e2b1904a4a7acb64381cbe459ff8eed7d718fd84a0fa2e7c0bda29b2ca9818896ab2bc7fbacdf1d1e5632bfe1d12f0dbf850e54e4c9e12c8cee41a584bd3fd9ae062aecab4bd6f24d85f41c763e0570cbc1447771ca1201a6fb8ffd37b432fb1a9e97a0a6f436dc8016e950c500", @ANYRES64=r4, @ANYBLOB="00012cbd7000fddbdf2501000000050004000100000005000400010000000900010073797a32000000001400020073797a6b616c6c6572300000000000000900030073797a320000000014000200697036677265746170300000000000000900030073797a3100000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r6, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) r7 = eventfd(0x7) io_submit(r5, 0x2, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x42, r7, 0x0, 0xfffffffffffffd93}, &(0x7f0000000540)={0x0, 0x0, 0x8000000, 0x5, 0x0, r7, 0x0, 0x0, 0x7, 0x0, 0x3, r7}]) syz_emit_ethernet(0x102, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x9, 0x0, 0x200008a, 0x0, 0x0, 0x2000000}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getgroups(0x0, 0x0) 4.763604114s ago: executing program 4 (id=9159): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x68000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bind$packet(r3, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) fremovexattr(r5, &(0x7f00000003c0)=ANY=[]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12011001ec037e08fb09beeb8dd40102030109021b00010700f0090904c0070197000000000501022000800702"], 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x7f) r9 = accept4(r8, 0x0, 0x0, 0x800) write(r9, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000140)=0x2, 0x4) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000300)="7310048a6151f2278e04bc4b37d30bff54adf4e359387642f3b9d9abdbd0bc6182e60eec535e171d4b545576f5a5c59f33d6fc1e5b030c81b2b760d53e997730ff7993d2935064dd18198b8b8b894f41875a5564b9de890b8ef78db37c04ad6c801bd919fb12d541533913041ed169b8f64e2b2d2f14d8ab1b2d75eaed6e65c8449073615d18dcf9eb13595402776a46c7faac63740b2de72409f1", 0x9b, 0xfffffffffffffffe) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r10, 0x0, 0x48a, &(0x7f0000000000)={0x62}, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYRES32=r4], 0x6c}}, 0x30044855) r12 = dup2(r7, r5) readv(r12, &(0x7f0000000740)=[{&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f0000000540)=""/14, 0xe}], 0x5) r13 = socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x5, &(0x7f0000000000)=0x9a01, 0x4) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r13, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3.453790629s ago: executing program 1 (id=9165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 3.220810773s ago: executing program 1 (id=9167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) read$FUSE(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x43d05}, [@IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x4c}}, 0x0) 3.068718969s ago: executing program 1 (id=9168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x2}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x94}}, 0x0) 3.040527794s ago: executing program 0 (id=9169): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x4, 0x1}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x4, 0x1}, 0x100, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0xfffc}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0xfffc}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0xfffffcef, 0x5, 0x8c49}, @TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1) 2.943723634s ago: executing program 1 (id=9171): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000006000a000000", @ANYRES32=r0, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.937095542s ago: executing program 5 (id=9172): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='totmaps\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x800043, 0x0, 0x1, 0x3}, 0x32) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x56601aa580da604f, 0x2}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x56601aa580da604f, 0x2}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000003c0)={0x2a, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) (async) connect$inet(r8, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r8, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x46) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x46) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) 2.85284491s ago: executing program 2 (id=9173): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x18, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c15000000000000000000000000c0", 0x30314142}) 2.78845289s ago: executing program 1 (id=9174): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x3f) write$apparmor_current(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="7006726d70726f63ecf8992003000000"], 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(0x0, 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006301200000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @mcast1, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x4040) shutdown(r1, 0x1) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 2.726301949s ago: executing program 0 (id=9175): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000, 0x93}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001142f00002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0xfffd) 2.725319822s ago: executing program 2 (id=9176): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x1fe, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.656644306s ago: executing program 0 (id=9177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.464184527s ago: executing program 0 (id=9178): socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x184) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x2a, 0x4000000000000ffb, 0x0, 0x0, 0x9, 0xc, "faf98317e5a114d989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfff, 0x40000000a]}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="c71eff92ecaa3f527aff0b520dcf2528f18c23f89da06f1215f5dd98375cf926969301734c810c8578f97da733bb2f51282257b96a5a209d1e31b90e51731b47e6e8e6b94d490dfa439d45c1032bbf9e208339c2b9cafb5ba535dbe6565496cd89e421c8957655552ec7058ff548cfaf86d470e11c5fd2f98986d4b0fbe6490c2490a0573118bb62", 0x88}, {&(0x7f0000000600)="005e8e8a50747025c2eff984fc6af8d0336985d174a399407e68", 0x1a}, {&(0x7f0000002d80)="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", 0xd73}, {&(0x7f00000004c0)}], 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) (async) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440), &(0x7f0000002d00)) (async) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8", 0x1}], 0x1}, 0x0, 0x24004890}) 1.797080564s ago: executing program 5 (id=9179): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x34, '\x00'}], 0x10}}], 0x1, 0x4001200) 1.76841064s ago: executing program 2 (id=9180): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010004b0400000000ffdbdf257a000000", @ANYRES32=r3, @ANYBLOB="00420100084806000a000100aaaaaaaaaa28000008000a00cb99cbcf42e5bb065ddd5d414a352b494cfe0cdbaf0932cd7e006544fd3bf81821eb184624a9ced9e175e29c0559ff0b7fe9dc9f4630a4b88763ce2803c840105d6c23bb55a2abb45e10", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') getrandom(&(0x7f0000000380)=""/54, 0x36, 0x3) (async) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000002c0)={0x0, 0x3}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xe, &(0x7f0000000140)=[{0x6, 0x4, 0x4}, {0x8, 0x24d9, 0xc75}, {0xb4, 0x8, 0x95d}, {0x4, 0x100, 0x3}, {0x7fffffff, 0x1a6, 0x8}, {0x4, 0x9, 0x5}, {0x81, 0xb, 0x5}, {0x8, 0x391d174e, 0x7ff}, {0x3, 0x1, 0x401}], 0x9, 0x7, 0x40, 0x40, 0x20, 0x4f}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000013c0)={&(0x7f00000003c0)=""/4096, 0x220000, 0x0, 0xff800000, 0x2}, 0x1c) 1.308942389s ago: executing program 2 (id=9181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x2}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x94}}, 0x0) 1.264089274s ago: executing program 5 (id=9182): mmap(&(0x7f000039d000/0x4000)=nil, 0x4000, 0x300000d, 0x12, 0xffffffffffffffff, 0xffffd009) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x214, 0x188, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x180, 0xffffff7a, 0xffffffff, 0x180, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x5, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x6, 0x3}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@icmp={{0x24}, {0x12, "b2fa", 0x1}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x0, 0x4}, {0x3, 0x5, 0x2}, 0x3, 0x5f}}}], {{'\x00', 0x0, 0x70, 0x94, 0x1000000}, {0x24}}}}, 0x270) madvise(&(0x7f0000388000/0x2000)=nil, 0x2000, 0x11) remap_file_pages(&(0x7f0000769000/0x3000)=nil, 0x3000, 0x0, 0x8, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) landlock_restrict_self(r2, 0x2) write(r1, &(0x7f0000000000)="5bcfb5a698b3c97e0be39ddf8ca6b31c6ce5e740b04692303624f10b73a2cc80794bd0d110c3844c4257427f7e", 0x2d) 1.176089275s ago: executing program 4 (id=9183): lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000004) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000200)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0}) 1.074847804s ago: executing program 2 (id=9184): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "d9464b450de1d737", "3359d902681f5edf578a9612b31fdc27", "b28532e4", "691fe6b135e0ea35"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0xff, 0x4) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0b1c4369d03760250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d64500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374cb4a964a02447a25df8a69ea917deb7ba193b3e6372fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}}) (async) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000140)=0x8003, 0x400006) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000001c00)=""/4108, 0x100c, 0x5) (async) accept4(r1, &(0x7f0000000200)=@ieee802154, &(0x7f00000002c0)=0x80, 0x80000) 1.04407801s ago: executing program 5 (id=9185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000002100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x68, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "00e1eef2000000000000000000038000"}]}}}}}}}, 0x0) 977.087246ms ago: executing program 0 (id=9186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000030}, 0x804) (fail_nth: 5) 798.432144ms ago: executing program 1 (id=9187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xeba29a643382782d}, 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)={0x144, 0x2, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x225}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4c}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, @CTA_NAT_SRC={0xd4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008018}, 0x40080c0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000400)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010200000000000000000a0040000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028008000100e00000010c00018008000140ac1414aa05000500020000000500010006000000f55653538264ac0182b002c28a5c910e6c6344df1ba253ca594afc5bfd8fe96b1a3d538778e497fd16cf0858c8dcc6b628b091cc65d3235e03e2a4c55bd03d22fe5a076a598fe4409d2a6602d8003cb4d17f73950b3eeec850ae15ad8c70aa1281c6e8d893c677932f576d60846a036a709b59cc1248b0e52c03ffacda9ded854f511e50"], 0x64}}, 0x20000004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000004c0)=""/127, &(0x7f0000000200)=0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60156909001b2f00fc02000000000000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000c850cac200"/130], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x14d002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) syz_io_uring_setup(0x6bf7, &(0x7f0000000800)={0x0, 0x20d2, 0x8, 0x3, 0x3e1}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES32=0x1, @ANYBLOB="020e004000001f00000097d01de4ff0100000080", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRES16=r0, @ANYBLOB="559db0647064c1c95915f7464c8e1fb14933f1f405df252e1616580899c3d9098b214b3e4968a5e5c716fbd4caf25f6fa6d3b48231fa40e1115e99825604f9788accbe7ae704ee9cb16679523d0723a080a784314b4f59e49d6efb167a543a072a2e14f52eeac4a2622bd6be8a26108fbd38837e5539ccac23c7f4d965d6dfd7cd150fc1561abd6f02f5844a28bcf772ae0bad5b3e8e3beff837b25d55dc5e52", @ANYRES32=r0], 0x50) syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902990003010000000904000000010100000a240100000002010211240600000500000000000000000000000c2407000000003e8e7a70e108240400005cc3bc090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000e24020100011002e53a08000000072401000000000905820908"], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r9}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x1c) r10 = syz_open_dev$dri(&(0x7f0000000600), 0x239, 0x101000) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000001c0)={0x0}) 734.831321ms ago: executing program 5 (id=9188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 96.782232ms ago: executing program 2 (id=9189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f000000c280)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="de5d39f4fabeccad5933437969b1de46ed8e7512e1f1e24c5db07bfe0074fe755e564409d891db09862c5ed277375908efc8ea955f1b1d0ab1ede72e8984c18e7a5fa2da91e214e3250816b387a7b6b9d66272b4d4dce5a4724eb737a7ecf63c76952a63b08f8dca37c471d947303ae2f3eda754c4ae6235f1a64f6b50d435cf475acdfcee639df0d2d2c7a89b51fcdcb5c660", 0x93}, {&(0x7f0000000600)="c88f5892600c91861373a8f16cc949b360e871fa84ed696c46445d485bd2a40378462d99fbce5ede343c2667c6834d4e39707def3071a69eeb225a24ef03874369ca193038ded9283a6fa1a15b56a13c84ed2a9f4231c0ea6cefc7ddf4b78cf1653d393bbb0fc508ea21ed50fd205a56ef5b93e8bca4b3560258499fe8a4777e31611ea01f185e4c4991059fc1b90348607b5791d6d06f432baab8d45fb4642f5ab4ce92d5b4c86b69eeb591b4eb8aa2fa5cf6bbdb", 0xb5}, {&(0x7f0000000540)="25a47aa559c8be0e9b82191f749929be7d7b8523b511d7903a6a926d4ca987540828a26241b9a13a8372e473700ddc680de19d81e6624e7439e681a063bc5e", 0x3f}, {&(0x7f0000000280)="6baaac67ef71a32e5310c2e08e2f3ca21da1ef6872948e00045832359fc024b53b45c3a2bbcbcde3ac118a75fb", 0x2d}, {&(0x7f00000006c0)="fdba5dc988f45e28b477e1fe7695e693acc53d77880db1a83b1f31c0a53aec447c220fa92ca0cb2a2532a6fb6b916800d4e28d6103177e5581f31de06da03a6b3d67f887f100de4ba3e5fc78754574a64f8b3e77ef17fd67552ad3350857de176afd3d85325d5d94b9bc555fc2c1b5040deefb851eb119f088f9bb914b1fc06a26f31f8e9f43fa7fe3055c7e73f09f4583877715", 0x94}, {&(0x7f0000000780)="518dfd3c783c5dd20302b39a54878abbf5b65c98dd4a07046b0afb369703b9dc981a0e6b4d1e86c9667fe66c1a4a7c44099e4345e8443570fda98716457e6c7eebd468cfec4020b6978c0d853e4a0355c83769c3498844e812049055c3445738004ebb90d92295fc9a4b65a87432499504a81eebd2a636c64a82a50e2277eb2950cf04e231d2ac652eee79c12bda26fe847b03c8cc11a117a20bdc026e5ef52f23bd853f37827e0510f240abd7146400f05006e0864db3e497b399399d8b6a470be59fb35a56aa819a0e150f8cc629887a56859b7ad3f479393b5901c4c89b2776c4f29a2f87fc31", 0xe8}, {&(0x7f0000000380)="459cc2a39e448fca2a7c7bb80e87481baaac7f048134ba9e1421875d128d9680a7d26c1c997b3a4aa2efce3eb51ba3eb5812d2b9ebd995d575f72a93990a0accb439e063353329f1dfdb904a30823adf9ad049a430139b74f80d54ae24268e5d72a1e879c875a7b0", 0x68}, {&(0x7f00000002c0)="66c4303ce6d6434ce6866ee8ab02ec0805c06d36baa12d547fc1cb6e9b65172d2abe9efd8c1e49afb5bb7a77", 0x2c}], 0x8, &(0x7f0000000880)=[@rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r1, r1, r1]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xe0, 0x20004084}}, {{&(0x7f000000a100)=@file={0x43f3cd8dcef4e818, './file0\x00'}, 0x6e, &(0x7f000000a180), 0x0, &(0x7f000000a200)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x4c, 0x4a080}}], 0x2, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0xa, 0x2) 93.946708ms ago: executing program 4 (id=9190): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00120000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 90.947209ms ago: executing program 0 (id=9191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x138, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x264}}, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x4, "4039823a"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x20, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2002b00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10b) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000000)='\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000003e000/0x10000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x9b, 0x0, 0x0, 0x0, 0xe4}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x31, &(0x7f0000001500)={0x0, 0x0}, 0x10) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000030}, 0x804) 0s ago: executing program 5 (id=9192): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket(0x40000000015, 0x80000, 0xfffffff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0008000100000000003d0000004500004900000008ac1414aa00000600", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="34a9e254d7099c5607189f3a5624b94b05eb30a8"], 0x57) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000000c0)={0x2, 0xd, 0x5, 0x1, 0xffffff75, 0x0, &(0x7f00000003c0)="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"}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008004) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r8 = io_uring_setup(0x7d1, 0x0) close_range(r8, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e27, 0x6, @private0, 0x6}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000b00), 0x8001, 0x0) ioctl$LOOP_GET_STATUS64(r10, 0x4c05, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): : -19 [ 2117.876351][T28722] dvb-usb: error while querying for an remote control event. [ 2117.906650][ T4545] netlink: 'syz.5.8898': attribute type 1 has an invalid length. [ 2117.914731][ T4545] netlink: 'syz.5.8898': attribute type 1 has an invalid length. [ 2117.997603][T16642] m920x_read = error: -19 [ 2118.003559][T16642] dvb-usb: error while querying for an remote control event. [ 2118.035913][ T4547] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8897'. [ 2118.306906][T16642] m920x_read = error: -19 [ 2118.311319][T16642] dvb-usb: error while querying for an remote control event. [ 2118.596212][T16642] m920x_read = error: -19 [ 2118.599960][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8899'. [ 2118.600627][T16642] dvb-usb: error while querying for an remote control event. [ 2118.643675][ T4550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8899'. [ 2118.726356][T16642] m920x_read = error: -19 [ 2118.730744][T16642] dvb-usb: error while querying for an remote control event. [ 2118.917826][T16642] m920x_read = error: -19 [ 2118.946443][ T5200] Dev loop6: unable to read RDB block 1 [ 2118.952035][ T5200] loop6: unable to read partition table [ 2118.958256][T16642] dvb-usb: error while querying for an remote control event. [ 2118.990349][ T5200] loop6: partition table beyond EOD, truncated [ 2119.019734][T16642] usb 5-1: USB disconnect, device number 42 [ 2119.076967][ T5917] m920x_read = error: -19 [ 2119.082960][ T5917] dvb-usb: error while querying for an remote control event. [ 2119.241890][ T5917] m920x_read = error: -19 [ 2119.246540][ T5917] dvb-usb: error while querying for an remote control event. [ 2119.356971][T16642] m920x_read = error: -19 [ 2119.361403][T16642] dvb-usb: error while querying for an remote control event. [ 2119.526279][T16642] m920x_read = error: -19 [ 2119.531865][T16642] dvb-usb: error while querying for an remote control event. [ 2119.593243][ T4555] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 2119.637157][ T6398] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2119.646346][ T6398] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2119.660405][T16642] m920x_read = error: -19 [ 2119.670466][T16642] dvb-usb: error while querying for an remote control event. [ 2119.725291][ T6398] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2119.842371][T16642] m920x_read = error: -19 [ 2119.874799][T16642] dvb-usb: error while querying for an remote control event. [ 2119.893688][ T6398] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2120.006706][T16642] m920x_read = error: -19 [ 2120.136318][T16642] dvb-usb: error while querying for an remote control event. [ 2120.345354][T16642] m920x_read = error: -19 [ 2120.375010][T16642] dvb-usb: error while querying for an remote control event. [ 2120.444427][ T4570] netlink: 'syz.2.8903': attribute type 1 has an invalid length. [ 2120.462607][ T4570] netlink: 'syz.2.8903': attribute type 1 has an invalid length. [ 2120.496182][ T5917] m920x_read = error: -19 [ 2120.500592][ T5917] dvb-usb: error while querying for an remote control event. [ 2120.741536][ T5917] m920x_read = error: -19 [ 2120.800475][ T5917] dvb-usb: error while querying for an remote control event. [ 2120.927088][ T860] m920x_read = error: -19 [ 2120.931954][ T860] dvb-usb: error while querying for an remote control event. [ 2120.988429][ T5832] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2121.057080][ T860] m920x_read = error: -19 [ 2121.061468][ T860] dvb-usb: error while querying for an remote control event. [ 2121.195025][ T860] m920x_read = error: -19 [ 2121.204941][ T860] dvb-usb: error while querying for an remote control event. [ 2121.237691][ T5832] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 2121.246119][ T5832] usb 6-1: config 0 has no interface number 0 [ 2121.263380][ T5832] usb 6-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 2121.303863][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.326150][ T860] m920x_read = error: -19 [ 2121.331348][ T860] dvb-usb: error while querying for an remote control event. [ 2121.358089][ T5832] usb 6-1: config 0 descriptor?? [ 2121.379143][ T5832] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 2121.458546][ T860] m920x_read = error: -19 [ 2121.463040][ T860] dvb-usb: error while querying for an remote control event. [ 2121.576526][ T860] m920x_read = error: -19 [ 2121.580945][ T860] dvb-usb: error while querying for an remote control event. [ 2121.599528][ T5832] gspca_sn9c20x: Write register 1000 failed -71 [ 2121.635517][ T5832] gspca_sn9c20x: Device initialization failed [ 2121.676641][ T5832] gspca_sn9c20x 6-1:0.47: probe with driver gspca_sn9c20x failed with error -71 [ 2121.716409][ T5832] usb 6-1: USB disconnect, device number 28 [ 2121.739753][ T860] m920x_read = error: -19 [ 2121.744149][ T860] dvb-usb: error while querying for an remote control event. [ 2121.794743][ T4582] netlink: 'syz.2.8908': attribute type 27 has an invalid length. [ 2121.924711][T16642] m920x_read = error: -19 [ 2121.930348][T16642] dvb-usb: error while querying for an remote control event. [ 2121.974096][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8909'. [ 2122.129263][ T4593] m920x_read = error: -19 [ 2122.133877][ T4593] dvb-usb: error while querying for an remote control event. [ 2122.285314][ T4598] m920x_read = error: -19 [ 2122.290911][ T4598] dvb-usb: error while querying for an remote control event. [ 2122.304810][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.394787][ T4582] veth0: left promiscuous mode [ 2122.403588][ T4582] veth0: left allmulticast mode [ 2122.627453][ T5890] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2122.651758][T11664] m920x_read = error: -19 [ 2122.693895][T11664] dvb-usb: error while querying for an remote control event. [ 2122.803681][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2122.878566][ T5890] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2122.887624][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2122.900325][ T4595] m920x_read = error: -19 [ 2122.903948][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2122.931440][ T4595] dvb-usb: error while querying for an remote control event. [ 2122.937726][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2122.949532][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.958728][ T5890] usb 2-1: Product: syz [ 2122.983633][ T5890] usb 2-1: Manufacturer: syz [ 2123.006997][ T5890] usb 2-1: SerialNumber: syz [ 2123.033489][ T5890] hub 2-1:1.0: bad descriptor, ignoring hub [ 2123.047607][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2123.055107][ T5890] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2123.062597][T11131] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2123.128555][ T5953] m920x_read = error: -19 [ 2123.134813][ T5953] dvb-usb: error while querying for an remote control event. [ 2123.336238][T11131] usb 5-1: Using ep0 maxpacket: 8 [ 2123.347531][T11131] usb 5-1: config 5 has an invalid interface number: 67 but max is 0 [ 2123.355825][T11131] usb 5-1: config 5 has no interface number 0 [ 2123.367769][T11131] usb 5-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=37.04 [ 2123.453630][T11131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.464835][ T5890] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2123.506918][T11131] quatech2 5-1:5.67: Quatech 2nd gen USB to Serial Driver converter detected [ 2123.566587][T28722] m920x_read = error: -19 [ 2123.572742][T28722] dvb-usb: error while querying for an remote control event. [ 2123.770701][ T860] m920x_read = error: -19 [ 2123.775409][ T860] dvb-usb: error while querying for an remote control event. [ 2123.803032][ T4582] bridge0: left allmulticast mode [ 2123.811105][ T4582] macvtap1: left promiscuous mode [ 2123.817011][ T4582] macvtap1: left allmulticast mode [ 2123.904808][ T4600] m920x_read = error: -19 [ 2123.913991][T15976] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.928455][ T4600] dvb-usb: error while querying for an remote control event. [ 2123.958028][T15976] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.991259][T15976] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.053386][T15976] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.089723][ T4598] m920x_read = error: -19 [ 2124.106348][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.236429][ T4598] m920x_read = error: -19 [ 2124.241058][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.360143][ T4598] m920x_read = error: -19 [ 2124.369867][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.398946][ T4605] usb 2-1: reset high-speed USB device number 67 using dummy_hcd [ 2124.486745][ T4598] m920x_read = error: -19 [ 2124.491560][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.616182][ T4598] m920x_read = error: -19 [ 2124.620812][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.736470][ T4598] m920x_read = error: -19 [ 2124.741138][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.838273][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8910'. [ 2124.856270][ T4598] m920x_read = error: -19 [ 2124.860847][ T4598] dvb-usb: error while querying for an remote control event. [ 2124.903591][ T4624] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.8910'. [ 2124.916227][ T4624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8910'. [ 2124.976266][ T4600] m920x_read = error: -19 [ 2124.980785][ T4600] dvb-usb: error while querying for an remote control event. [ 2124.991489][ T4642] netlink: 1884 bytes leftover after parsing attributes in process `syz.1.8910'. [ 2125.111515][ T4600] m920x_read = error: -19 [ 2125.117783][ T4600] dvb-usb: error while querying for an remote control event. [ 2125.246848][ T4600] m920x_read = error: -19 [ 2125.251240][ T4600] dvb-usb: error while querying for an remote control event. [ 2125.376373][ T4598] m920x_read = error: -19 [ 2125.380962][ T4598] dvb-usb: error while querying for an remote control event. [ 2125.474847][T11131] usb 5-1: qt2_attach - failed to power on unit: -71 [ 2125.487900][T11131] quatech2 5-1:5.67: probe with driver quatech2 failed with error -71 [ 2125.506411][ T4598] m920x_read = error: -19 [ 2125.510863][ T4598] dvb-usb: error while querying for an remote control event. [ 2125.590825][T11131] usb 5-1: USB disconnect, device number 43 [ 2125.636298][ T4600] m920x_read = error: -19 [ 2125.640766][ T4600] dvb-usb: error while querying for an remote control event. [ 2125.777719][ T4600] m920x_read = error: -19 [ 2125.782526][ T4600] dvb-usb: error while querying for an remote control event. [ 2125.928122][ T4598] m920x_read = error: -19 [ 2125.932660][ T4598] dvb-usb: error while querying for an remote control event. [ 2126.057035][ T4598] m920x_read = error: -19 [ 2126.061529][ T4598] dvb-usb: error while querying for an remote control event. [ 2126.105956][ T4653] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8920'. [ 2126.146169][ T4600] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2126.266429][ T4598] m920x_read = error: -19 [ 2126.270861][ T4598] dvb-usb: error while querying for an remote control event. [ 2126.329922][ T860] usb 2-1: USB disconnect, device number 67 [ 2126.408042][ T5917] m920x_read = error: -19 [ 2126.430685][ T860] usblp0: removed [ 2126.439594][ T4600] usb 5-1: Using ep0 maxpacket: 8 [ 2126.494075][ T5917] dvb-usb: error while querying for an remote control event. [ 2126.583340][ T4600] usb 5-1: config 127 has an invalid interface number: 87 but max is 1 [ 2126.625969][ T4600] usb 5-1: config 127 has an invalid interface number: 147 but max is 1 [ 2126.679789][ T4600] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2126.690566][ T4598] m920x_read = error: -19 [ 2126.694945][ T4598] dvb-usb: error while querying for an remote control event. [ 2126.697393][ T4662] netlink: 'syz.1.8922': attribute type 10 has an invalid length. [ 2126.725440][ T4662] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 2126.736711][ T4600] usb 5-1: config 127 has no interface number 0 [ 2126.747479][ T4600] usb 5-1: config 127 has no interface number 1 [ 2126.761019][ T4600] usb 5-1: config 127 interface 147 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2126.794770][ T4600] usb 5-1: config 127 interface 87 has no altsetting 0 [ 2126.816871][ T4600] usb 5-1: config 127 interface 147 has no altsetting 0 [ 2126.827360][ T4600] usb 5-1: New USB device found, idVendor=19d2, idProduct=1151, bcdDevice=49.f1 [ 2126.836803][ T4600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.853214][ T4598] m920x_read = error: -19 [ 2126.862649][ T4619] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2126.870608][ T4598] dvb-usb: error while querying for an remote control event. [ 2126.896491][ T4600] usb 5-1: Product: syz [ 2126.901163][ T4600] usb 5-1: Manufacturer: syz [ 2126.953274][ T4600] usb 5-1: SerialNumber: syz [ 2127.006232][ T860] m920x_read = error: -19 [ 2127.076344][ T860] dvb-usb: error while querying for an remote control event. [ 2127.086073][ T4619] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 2127.100053][ T4619] usb 6-1: config 0 has no interface number 0 [ 2127.116196][ T4619] usb 6-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 2127.145847][ T4619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.178887][ T4619] usb 6-1: config 0 descriptor?? [ 2127.182321][ T4664] pim6reg1: entered promiscuous mode [ 2127.194331][ T4664] pim6reg1: entered allmulticast mode [ 2127.197773][ T4619] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 2127.201368][ T860] m920x_read = error: -19 [ 2127.211788][ T860] dvb-usb: error while querying for an remote control event. [ 2127.326440][ T860] m920x_read = error: -19 [ 2127.330980][ T860] dvb-usb: error while querying for an remote control event. [ 2127.396431][ T4619] gspca_sn9c20x: Write register 1000 failed -71 [ 2127.402754][ T4619] gspca_sn9c20x: Device initialization failed [ 2127.436382][ T4619] gspca_sn9c20x 6-1:0.47: probe with driver gspca_sn9c20x failed with error -71 [ 2127.467944][ T860] m920x_read = error: -19 [ 2127.472429][ T860] dvb-usb: error while querying for an remote control event. [ 2127.496963][ T4619] usb 6-1: USB disconnect, device number 29 [ 2127.637021][ T4598] m920x_read = error: -19 [ 2127.641522][ T4598] dvb-usb: error while querying for an remote control event. [ 2127.728629][ T4669] FAULT_INJECTION: forcing a failure. [ 2127.728629][ T4669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2127.763367][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: syz.2.8925 Not tainted syzkaller #0 PREEMPT(full) [ 2127.763394][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2127.763407][ T4669] Call Trace: [ 2127.763415][ T4669] [ 2127.763425][ T4669] dump_stack_lvl+0x189/0x250 [ 2127.763458][ T4669] ? __pfx____ratelimit+0x10/0x10 [ 2127.763488][ T4669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2127.763521][ T4669] ? __pfx__printk+0x10/0x10 [ 2127.763542][ T4669] ? __might_fault+0xb0/0x130 [ 2127.763580][ T4669] should_fail_ex+0x414/0x560 [ 2127.763615][ T4669] _copy_from_iter+0x1de/0x1790 [ 2127.763643][ T4669] ? rcu_is_watching+0x15/0xb0 [ 2127.763670][ T4669] ? kmalloc_reserve+0xbd/0x290 [ 2127.763688][ T4669] ? __pfx__copy_from_iter+0x10/0x10 [ 2127.763712][ T4669] ? __build_skb_around+0x262/0x3f0 [ 2127.763745][ T4669] ? netlink_sendmsg+0x642/0xb30 [ 2127.763762][ T4669] ? skb_put+0x11b/0x210 [ 2127.763784][ T4669] netlink_sendmsg+0x6b2/0xb30 [ 2127.763811][ T4669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2127.763834][ T4669] ? __import_iovec+0x5d4/0x7f0 [ 2127.763855][ T4669] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2127.763883][ T4669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2127.763900][ T4669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2127.763920][ T4669] __sock_sendmsg+0x21c/0x270 [ 2127.763948][ T4669] ____sys_sendmsg+0x505/0x830 [ 2127.763974][ T4669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2127.764009][ T4669] ___sys_sendmsg+0x21f/0x2a0 [ 2127.764031][ T4669] ? __pfx____sys_sendmsg+0x10/0x10 [ 2127.764086][ T4669] ? __fget_files+0x2a/0x420 [ 2127.764103][ T4669] ? __fget_files+0x3a0/0x420 [ 2127.764131][ T4669] __sys_sendmsg+0x164/0x220 [ 2127.764154][ T4669] ? __pfx___sys_sendmsg+0x10/0x10 [ 2127.764182][ T4669] ? __pfx_ksys_write+0x10/0x10 [ 2127.764213][ T4669] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2127.764243][ T4669] ? lockdep_hardirqs_on+0x9c/0x150 [ 2127.764284][ T4669] __do_fast_syscall_32+0xb6/0x2b0 [ 2127.764312][ T4669] ? lockdep_hardirqs_on+0x9c/0x150 [ 2127.764340][ T4669] do_fast_syscall_32+0x34/0x80 [ 2127.764368][ T4669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2127.764389][ T4669] RIP: 0023:0xf70ed539 [ 2127.764405][ T4669] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2127.764421][ T4669] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2127.764440][ T4669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2127.764453][ T4669] RDX: 00000000000400d4 RSI: 0000000000000000 RDI: 0000000000000000 [ 2127.764464][ T4669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2127.764474][ T4669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2127.764485][ T4669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2127.764519][ T4669] [ 2128.089190][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8924'. [ 2128.105794][ T4670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8924'. [ 2128.179829][ T4598] m920x_read = error: -19 [ 2128.184276][ T4598] dvb-usb: error while querying for an remote control event. [ 2128.230689][ T4667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8924'. [ 2128.296402][ T860] m920x_read = error: -19 [ 2128.300822][ T860] dvb-usb: error while querying for an remote control event. [ 2128.420931][ T860] m920x_read = error: -19 [ 2128.425401][ T860] dvb-usb: error while querying for an remote control event. [ 2128.630161][ T4681] netlink: 'syz.5.8929': attribute type 27 has an invalid length. [ 2128.734463][ T860] m920x_read = error: -19 [ 2128.751033][ T860] dvb-usb: error while querying for an remote control event. [ 2129.248610][ T4600] option 5-1:127.87: GSM modem (1-port) converter detected [ 2129.347370][ T4600] option 5-1:127.147: GSM modem (1-port) converter detected [ 2129.422226][ T4600] usb 5-1: USB disconnect, device number 44 [ 2129.829668][ T4600] option 5-1:127.87: device disconnected [ 2129.843813][ T4600] option 5-1:127.147: device disconnected [ 2129.952393][ T4598] m920x_read = error: -19 [ 2129.968465][ T4598] dvb-usb: error while querying for an remote control event. [ 2130.216123][ T4600] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2130.288064][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2130.354237][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2130.377617][ T4598] m920x_read = error: -19 [ 2130.385566][ T4598] dvb-usb: error while querying for an remote control event. [ 2130.465143][ T4600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2130.484060][ T4600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 64255, setting to 64 [ 2130.548087][ T4600] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2130.570035][ T5917] m920x_read = error: -19 [ 2130.581203][ T4600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.592125][ T5917] dvb-usb: error while querying for an remote control event. [ 2130.616887][ T4600] usb 5-1: config 0 descriptor?? [ 2130.777879][ T4596] m920x_read = error: -19 [ 2130.822292][ T4596] dvb-usb: error while querying for an remote control event. [ 2130.884946][ T4681] vlan0: left promiscuous mode [ 2131.020128][ T4595] m920x_read = error: -19 [ 2131.037370][ T4595] dvb-usb: error while querying for an remote control event. [ 2131.140381][ T4681] veth2: left promiscuous mode [ 2131.145342][ T4681] veth2: left allmulticast mode [ 2131.157659][T11664] m920x_read = error: -19 [ 2131.173327][ T4681] ipip0: left promiscuous mode [ 2131.179621][ T4681] ipip0: left allmulticast mode [ 2131.189935][T11664] dvb-usb: error while querying for an remote control event. [ 2131.408628][T16642] m920x_read = error: -19 [ 2131.413083][T16642] dvb-usb: error while querying for an remote control event. [ 2131.486607][ T6393] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2131.522384][ T6393] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.536951][T28722] m920x_read = error: -19 [ 2131.543669][T28722] dvb-usb: error while querying for an remote control event. [ 2131.584327][ T6393] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2131.603851][ T6393] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.614697][ T6393] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2131.662071][ T6393] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.674964][ T6393] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2131.684367][ T6393] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.802906][ T4701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8934'. [ 2131.829177][T16642] m920x_read = error: -19 [ 2131.831560][ T4703] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8935'. [ 2131.833671][T16642] dvb-usb: error while querying for an remote control event. [ 2131.893144][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8933'. [ 2131.902632][ T4703] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8935'. [ 2131.987462][T16642] m920x_read = error: -19 [ 2131.991858][T16642] dvb-usb: error while querying for an remote control event. [ 2132.186878][ T5953] m920x_read = error: -19 [ 2132.193522][ T5953] dvb-usb: error while querying for an remote control event. [ 2132.316229][ T5953] m920x_read = error: -19 [ 2132.321574][ T5953] dvb-usb: error while querying for an remote control event. [ 2132.336822][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8937'. [ 2132.440647][ T5953] m920x_read = error: -19 [ 2132.446795][ T5953] dvb-usb: error while querying for an remote control event. [ 2132.516157][ T4621] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2132.556282][ T860] m920x_read = error: -19 [ 2132.589765][ T860] dvb-usb: error while querying for an remote control event. [ 2132.603197][ T5953] usb 5-1: USB disconnect, device number 45 [ 2132.677299][ T4621] usb 2-1: Using ep0 maxpacket: 32 [ 2132.716414][ T860] m920x_read = error: -19 [ 2132.720908][ T860] dvb-usb: error while querying for an remote control event. [ 2132.932390][ T4621] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2132.934499][ T860] m920x_read = error: -19 [ 2132.947310][ T4621] usb 2-1: config 0 has no interface number 0 [ 2132.953426][ T4621] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2132.955387][ T860] dvb-usb: error while querying for an remote control event. [ 2132.983769][ T4727] FAULT_INJECTION: forcing a failure. [ 2132.983769][ T4727] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.022880][ T4727] CPU: 1 UID: 0 PID: 4727 Comm: syz.5.8940 Not tainted syzkaller #0 PREEMPT(full) [ 2133.022910][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2133.022924][ T4727] Call Trace: [ 2133.022933][ T4727] [ 2133.022944][ T4727] dump_stack_lvl+0x189/0x250 [ 2133.022985][ T4727] ? __pfx____ratelimit+0x10/0x10 [ 2133.023015][ T4727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.023044][ T4727] ? __pfx__printk+0x10/0x10 [ 2133.023073][ T4727] ? __pfx___might_resched+0x10/0x10 [ 2133.023094][ T4727] ? fs_reclaim_acquire+0x7d/0x100 [ 2133.023120][ T4727] should_fail_ex+0x414/0x560 [ 2133.023158][ T4727] should_failslab+0xa8/0x100 [ 2133.023181][ T4727] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2133.023213][ T4727] ? io_wq_create+0x6b/0x7b0 [ 2133.023247][ T4727] io_wq_create+0x6b/0x7b0 [ 2133.023273][ T4727] ? __init_waitqueue_head+0xa9/0x150 [ 2133.023305][ T4727] io_uring_alloc_task_context+0x25d/0x570 [ 2133.023329][ T4727] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 2133.023362][ T4727] __io_uring_add_tctx_node+0x33e/0x4e0 [ 2133.023395][ T4727] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 2133.023422][ T4727] ? __fget_files+0x2a/0x420 [ 2133.023446][ T4727] ? __fget_files+0x2a/0x420 [ 2133.023470][ T4727] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 2133.023502][ T4727] __se_sys_io_uring_enter+0x24fc/0x2b20 [ 2133.023550][ T4727] ? ksys_write+0x1cb/0x250 [ 2133.023581][ T4727] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2133.023606][ T4727] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2133.023635][ T4727] ? __pfx_vfs_write+0x10/0x10 [ 2133.023666][ T4727] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2133.023703][ T4727] ? __fget_files+0x3a0/0x420 [ 2133.023730][ T4727] ? fput+0xa0/0xd0 [ 2133.023754][ T4727] ? ksys_write+0x22a/0x250 [ 2133.023793][ T4727] ? exc_page_fault+0x82/0x100 [ 2133.023820][ T4727] ? __pfx_ksys_write+0x10/0x10 [ 2133.023851][ T4727] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2133.023887][ T4727] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2133.023917][ T4727] __do_fast_syscall_32+0xb6/0x2b0 [ 2133.023945][ T4727] ? lockdep_hardirqs_on+0x9c/0x150 [ 2133.023982][ T4727] do_fast_syscall_32+0x34/0x80 [ 2133.024011][ T4727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2133.024034][ T4727] RIP: 0023:0xf700d539 [ 2133.024050][ T4727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2133.024066][ T4727] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2133.024085][ T4727] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f6 [ 2133.024098][ T4727] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 2133.024109][ T4727] RBP: 0000000000000300 R08: 0000000000000000 R09: 0000000000000000 [ 2133.024121][ T4727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2133.024132][ T4727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2133.024158][ T4727] [ 2133.316362][ T860] m920x_read = error: -19 [ 2133.320748][ T860] dvb-usb: error while querying for an remote control event. [ 2133.441537][T16642] m920x_read = error: -19 [ 2133.445929][T16642] dvb-usb: error while querying for an remote control event. [ 2133.701702][ T5953] m920x_read = error: -19 [ 2133.736047][ T5953] dvb-usb: error while querying for an remote control event. [ 2133.745901][ T4621] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2133.755268][ T4621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.763761][ T4621] usb 2-1: Product: syz [ 2133.768877][ T4621] usb 2-1: Manufacturer: syz [ 2133.773473][ T4621] usb 2-1: SerialNumber: syz [ 2133.787614][ T4621] usb 2-1: config 0 descriptor?? [ 2133.983358][T16642] m920x_read = error: -19 [ 2134.054651][T16642] dvb-usb: error while querying for an remote control event. [ 2134.176331][ T5953] m920x_read = error: -19 [ 2134.180863][ T5953] dvb-usb: error while querying for an remote control event. [ 2134.331546][ T5953] m920x_read = error: -19 [ 2134.336378][ T5953] dvb-usb: error while querying for an remote control event. [ 2134.418627][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.430374][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.456731][ T5953] m920x_read = error: -19 [ 2134.461254][ T5953] dvb-usb: error while querying for an remote control event. [ 2134.596249][ T860] m920x_read = error: -19 [ 2134.613440][ T860] dvb-usb: error while querying for an remote control event. [ 2134.778868][ T5953] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2135.047937][ T4751] netlink: 'syz.0.8946': attribute type 1 has an invalid length. [ 2135.060570][ T4751] netlink: 'syz.0.8946': attribute type 1 has an invalid length. [ 2135.167546][ T860] m920x_read = error: -19 [ 2135.172189][ T860] dvb-usb: error while querying for an remote control event. [ 2135.196808][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.217472][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.472796][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.496449][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.523263][ T5953] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 2135.541983][ T5953] usb 6-1: config 0 has no interface number 0 [ 2135.553340][ T5953] usb 6-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 2135.578595][ T860] m920x_read = error: -19 [ 2135.643367][ T860] dvb-usb: error while querying for an remote control event. [ 2135.656135][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.776373][ T860] m920x_read = error: -19 [ 2135.782704][ T5953] usb 6-1: config 0 descriptor?? [ 2135.787960][ T860] dvb-usb: error while querying for an remote control event. [ 2135.799617][ T5953] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 2135.926312][T16642] m920x_read = error: -19 [ 2135.930737][T16642] dvb-usb: error while querying for an remote control event. [ 2135.996284][T28595] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 2136.015237][ T5953] gspca_sn9c20x: Write register 1000 failed -71 [ 2136.021889][ T5953] gspca_sn9c20x: Device initialization failed [ 2136.028380][ T5953] gspca_sn9c20x 6-1:0.47: probe with driver gspca_sn9c20x failed with error -71 [ 2136.040718][ T5953] usb 6-1: USB disconnect, device number 30 [ 2136.067596][T16642] m920x_read = error: -19 [ 2136.072072][T16642] dvb-usb: error while querying for an remote control event. [ 2136.157262][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.186673][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.208023][T16642] m920x_read = error: -19 [ 2136.212506][T16642] dvb-usb: error while querying for an remote control event. [ 2136.258060][T28595] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2136.267922][T28595] usb 5-1: can't read configurations, error -71 [ 2136.389145][T16642] m920x_read = error: -19 [ 2136.393647][T16642] dvb-usb: error while querying for an remote control event. [ 2136.473192][ T4621] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2136.506502][ T5953] m920x_read = error: -19 [ 2136.511033][ T5953] dvb-usb: error while querying for an remote control event. [ 2136.518598][ T4621] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2136.518622][ T4621] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2136.518719][ T4621] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2136.583958][ T4621] usb 2-1: USB disconnect, device number 68 [ 2136.766137][T16642] m920x_read = error: -19 [ 2136.770588][T16642] dvb-usb: error while querying for an remote control event. [ 2136.793681][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2136.896854][ T5953] m920x_read = error: -19 [ 2136.901300][ T5953] dvb-usb: error while querying for an remote control event. [ 2136.917727][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8953'. [ 2136.989379][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8953'. [ 2137.056721][ T5953] m920x_read = error: -19 [ 2137.061136][ T5953] dvb-usb: error while querying for an remote control event. [ 2137.196351][ T5953] m920x_read = error: -19 [ 2137.205133][ T5953] dvb-usb: error while querying for an remote control event. [ 2137.350883][T16642] m920x_read = error: -19 [ 2137.355499][T16642] dvb-usb: error while querying for an remote control event. [ 2137.486433][T16642] m920x_read = error: -19 [ 2137.490952][T16642] dvb-usb: error while querying for an remote control event. [ 2137.511707][ T4776] team0: Port device team_slave_0 removed [ 2137.609186][T16642] m920x_read = error: -19 [ 2137.613577][T16642] dvb-usb: error while querying for an remote control event. [ 2137.756932][T16642] m920x_read = error: -19 [ 2137.761347][T16642] dvb-usb: error while querying for an remote control event. [ 2137.931064][T16642] m920x_read = error: -19 [ 2137.942301][T16642] dvb-usb: error while querying for an remote control event. [ 2138.087606][T16642] m920x_read = error: -19 [ 2138.092279][T16642] dvb-usb: error while querying for an remote control event. [ 2138.296991][T16642] m920x_read = error: -19 [ 2138.356334][T16642] dvb-usb: error while querying for an remote control event. [ 2138.496819][ T5953] m920x_read = error: -19 [ 2138.576083][ T5953] dvb-usb: error while querying for an remote control event. [ 2138.646188][ T4621] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2138.716370][ T5953] m920x_read = error: -19 [ 2138.721067][ T5953] dvb-usb: error while querying for an remote control event. [ 2138.847998][ T4621] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 2138.856683][ T4621] usb 6-1: config 0 has no interface number 0 [ 2138.858177][ T5953] m920x_read = error: -19 [ 2138.862825][ T4621] usb 6-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 2138.875102][ T5953] dvb-usb: error while querying for an remote control event. [ 2138.973807][ T4621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.027692][T16642] m920x_read = error: -19 [ 2139.032103][T16642] dvb-usb: error while querying for an remote control event. [ 2139.039484][ T4621] usb 6-1: config 0 descriptor?? [ 2139.043609][ T4621] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 2139.186886][T16642] m920x_read = error: -19 [ 2139.191296][T16642] dvb-usb: error while querying for an remote control event. [ 2139.273050][ T4621] gspca_sn9c20x: Write register 1000 failed -71 [ 2139.285907][ T4621] gspca_sn9c20x: Device initialization failed [ 2139.306168][T16642] m920x_read = error: -19 [ 2139.310628][T16642] dvb-usb: error while querying for an remote control event. [ 2139.361348][ T4621] gspca_sn9c20x 6-1:0.47: probe with driver gspca_sn9c20x failed with error -71 [ 2139.438690][ T4621] usb 6-1: USB disconnect, device number 31 [ 2139.445739][T16642] m920x_read = error: -19 [ 2139.464427][T16642] dvb-usb: error while querying for an remote control event. [ 2139.479254][ T4816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8967'. [ 2139.626319][ T860] m920x_read = error: -19 [ 2139.630710][ T860] dvb-usb: error while querying for an remote control event. [ 2139.836915][ T860] m920x_read = error: -19 [ 2139.841509][ T860] dvb-usb: error while querying for an remote control event. [ 2139.872707][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8970'. [ 2139.890583][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8969'. [ 2139.926931][ T4820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2140.326347][ T860] m920x_read = error: -19 [ 2140.330754][ T860] dvb-usb: error while querying for an remote control event. [ 2140.486544][ T5953] m920x_read = error: -19 [ 2140.492028][ T5953] dvb-usb: error while querying for an remote control event. [ 2140.539266][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8973'. [ 2140.541456][ T4831] tipc: Enabling of bearer rejected, already enabled [ 2140.597510][T16642] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 2140.636356][ T5953] m920x_read = error: -19 [ 2140.640744][ T5953] dvb-usb: error while querying for an remote control event. [ 2140.688467][ T4836] FAULT_INJECTION: forcing a failure. [ 2140.688467][ T4836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.766343][ T5953] m920x_read = error: -19 [ 2140.770838][ T5953] dvb-usb: error while querying for an remote control event. [ 2140.776111][ T4836] CPU: 1 UID: 0 PID: 4836 Comm: syz.5.8976 Not tainted syzkaller #0 PREEMPT(full) [ 2140.776142][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2140.776158][ T4836] Call Trace: [ 2140.776168][ T4836] [ 2140.776177][ T4836] dump_stack_lvl+0x189/0x250 [ 2140.776215][ T4836] ? __pfx____ratelimit+0x10/0x10 [ 2140.776247][ T4836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2140.776277][ T4836] ? __pfx__printk+0x10/0x10 [ 2140.776301][ T4836] ? __might_fault+0xb0/0x130 [ 2140.776345][ T4836] should_fail_ex+0x414/0x560 [ 2140.776386][ T4836] _copy_from_iter+0x1de/0x1790 [ 2140.776421][ T4836] ? rcu_is_watching+0x15/0xb0 [ 2140.776452][ T4836] ? kmalloc_reserve+0xbd/0x290 [ 2140.776475][ T4836] ? __pfx__copy_from_iter+0x10/0x10 [ 2140.776505][ T4836] ? __build_skb_around+0x262/0x3f0 [ 2140.776546][ T4836] ? netlink_sendmsg+0x642/0xb30 [ 2140.776569][ T4836] ? skb_put+0x11b/0x210 [ 2140.776603][ T4836] netlink_sendmsg+0x6b2/0xb30 [ 2140.776636][ T4836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2140.776680][ T4836] ? __import_iovec+0x5d4/0x7f0 [ 2140.776708][ T4836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2140.776744][ T4836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2140.776768][ T4836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2140.776794][ T4836] __sock_sendmsg+0x21c/0x270 [ 2140.776830][ T4836] ____sys_sendmsg+0x505/0x830 [ 2140.776862][ T4836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2140.776907][ T4836] ___sys_sendmsg+0x21f/0x2a0 [ 2140.776937][ T4836] ? __pfx____sys_sendmsg+0x10/0x10 [ 2140.777004][ T4836] ? __fget_files+0x2a/0x420 [ 2140.777035][ T4836] ? __fget_files+0x3a0/0x420 [ 2140.777070][ T4836] __sys_sendmsg+0x164/0x220 [ 2140.777098][ T4836] ? __pfx___sys_sendmsg+0x10/0x10 [ 2140.777134][ T4836] ? __pfx_ksys_write+0x10/0x10 [ 2140.777172][ T4836] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2140.777209][ T4836] ? lockdep_hardirqs_on+0x9c/0x150 [ 2140.777246][ T4836] __do_fast_syscall_32+0xb6/0x2b0 [ 2140.777283][ T4836] ? lockdep_hardirqs_on+0x9c/0x150 [ 2140.777321][ T4836] do_fast_syscall_32+0x34/0x80 [ 2140.777356][ T4836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2140.777384][ T4836] RIP: 0023:0xf700d539 [ 2140.777405][ T4836] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2140.777425][ T4836] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2140.777450][ T4836] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 2140.777466][ T4836] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2140.777482][ T4836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2140.777497][ T4836] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2140.777510][ T4836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2140.777545][ T4836] [ 2140.804636][ T4838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8975'. [ 2140.889088][T16642] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 2141.086200][ T5953] m920x_read = error: -19 [ 2141.090576][ T5953] dvb-usb: error while querying for an remote control event. [ 2141.127130][T16642] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.146161][T16642] usb 3-1: config 7 has no interface number 0 [ 2141.153926][T16642] usb 3-1: config 7 interface 192 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2141.184273][T16642] usb 3-1: config 7 interface 192 has no altsetting 0 [ 2141.209097][ T860] m920x_read = error: -19 [ 2141.213520][ T860] dvb-usb: error while querying for an remote control event. [ 2141.260699][T16642] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 2141.276117][T16642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.284143][T16642] usb 3-1: Product: syz [ 2141.302995][T16642] usb 3-1: Manufacturer: syz [ 2141.317682][T16642] usb 3-1: SerialNumber: syz [ 2141.327325][ T860] m920x_read = error: -19 [ 2141.331702][ T860] dvb-usb: error while querying for an remote control event. [ 2141.456233][ T860] m920x_read = error: -19 [ 2141.460624][ T860] dvb-usb: error while querying for an remote control event. [ 2141.610062][ T860] m920x_read = error: -19 [ 2141.614446][ T860] dvb-usb: error while querying for an remote control event. [ 2141.701405][ T4826] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2141.780051][T16642] m920x_read = error: -19 [ 2141.784473][T16642] dvb-usb: error while querying for an remote control event. [ 2141.824331][ T4820] kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 2141.857693][ T4820] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2141.881149][ T4820] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2141.978881][ T4820] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 2142.012836][T16642] m920x_read = error: -19 [ 2142.038894][T16642] dvb-usb: error while querying for an remote control event. [ 2142.177913][T16642] m920x_read = error: -19 [ 2142.187572][T16642] dvb-usb: error while querying for an remote control event. [ 2142.339461][ T860] m920x_read = error: -19 [ 2142.343870][ T860] dvb-usb: error while querying for an remote control event. [ 2142.356476][T16642] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2142.728507][ T5953] m920x_read = error: -19 [ 2142.733878][ T5953] dvb-usb: error while querying for an remote control event. [ 2142.768727][ T5890] usb 3-1: USB disconnect, device number 40 [ 2142.808633][T16642] usb 6-1: config 0 has an invalid interface number: 47 but max is 0 [ 2142.817303][T16642] usb 6-1: config 0 has no interface number 0 [ 2142.844276][T16642] usb 6-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 2142.856504][ T5953] m920x_read = error: -19 [ 2142.860919][ T5953] dvb-usb: error while querying for an remote control event. [ 2142.921766][T16642] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.046436][ T5953] m920x_read = error: -19 [ 2143.050838][ T5953] dvb-usb: error while querying for an remote control event. [ 2143.059868][T16642] usb 6-1: config 0 descriptor?? [ 2143.067591][T16642] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 2143.356119][ T5953] m920x_read = error: -19 [ 2143.376370][ T5953] dvb-usb: error while querying for an remote control event. [ 2143.496238][T16642] gspca_sn9c20x: Write register 1000 failed -71 [ 2143.516140][T16642] gspca_sn9c20x: Device initialization failed [ 2143.537320][ T5953] m920x_read = error: -19 [ 2143.541706][ T5953] dvb-usb: error while querying for an remote control event. [ 2143.549254][T16642] gspca_sn9c20x 6-1:0.47: probe with driver gspca_sn9c20x failed with error -71 [ 2143.596329][T16642] usb 6-1: USB disconnect, device number 32 [ 2143.677044][ T5953] m920x_read = error: -19 [ 2143.697113][ T5953] dvb-usb: error while querying for an remote control event. [ 2143.816222][ T5953] m920x_read = error: -19 [ 2143.820659][ T5953] dvb-usb: error while querying for an remote control event. [ 2143.937086][T16642] m920x_read = error: -19 [ 2143.941504][T16642] dvb-usb: error while querying for an remote control event. [ 2144.025544][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'. [ 2144.105033][T16642] m920x_read = error: -19 [ 2144.126521][T16642] dvb-usb: error while querying for an remote control event. [ 2144.141919][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8990'. [ 2144.234185][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8990'. [ 2144.266135][ T5953] m920x_read = error: -19 [ 2144.270820][ T5953] dvb-usb: error while querying for an remote control event. [ 2144.576467][T16642] m920x_read = error: -19 [ 2144.580952][T16642] dvb-usb: error while querying for an remote control event. [ 2144.642514][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2144.730433][T16642] m920x_read = error: -19 [ 2144.739736][T16642] dvb-usb: error while querying for an remote control event. [ 2144.833158][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'. [ 2144.913462][T16642] m920x_read = error: -19 [ 2144.933935][T16642] dvb-usb: error while querying for an remote control event. [ 2145.207728][ T5953] m920x_read = error: -19 [ 2145.212135][ T5953] dvb-usb: error while querying for an remote control event. [ 2145.341626][ T5953] m920x_read = error: -19 [ 2145.342301][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8992'. [ 2145.346201][ T5953] dvb-usb: error while querying for an remote control event. [ 2145.465579][ T5953] m920x_read = error: -19 [ 2145.482604][ T5953] dvb-usb: error while querying for an remote control event. [ 2145.874257][ T5953] m920x_read = error: -19 [ 2145.889340][ T5953] dvb-usb: error while querying for an remote control event. [ 2146.002745][ T4908] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8995'. [ 2146.013944][ T5953] m920x_read = error: -19 [ 2146.021972][ T5953] dvb-usb: error while querying for an remote control event. [ 2146.176454][ T5953] m920x_read = error: -19 [ 2146.183953][ T5953] dvb-usb: error while querying for an remote control event. [ 2146.564711][ T5953] m920x_read = error: -19 [ 2146.569137][ T5953] dvb-usb: error while querying for an remote control event. [ 2146.583888][ T4891] team0: Port device team_slave_0 removed [ 2146.687283][ T5953] m920x_read = error: -19 [ 2146.691656][ T5953] dvb-usb: error while querying for an remote control event. [ 2146.806741][ T5953] m920x_read = error: -19 [ 2146.811148][ T5953] dvb-usb: error while querying for an remote control event. [ 2146.936480][ T5953] m920x_read = error: -19 [ 2146.947016][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.066267][ T5953] m920x_read = error: -19 [ 2147.070858][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.196221][ T5953] m920x_read = error: -19 [ 2147.233645][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.376382][ T5953] m920x_read = error: -19 [ 2147.380857][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.539171][ T5953] m920x_read = error: -19 [ 2147.543570][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.670985][ T5953] m920x_read = error: -19 [ 2147.790412][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.909810][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9003'. [ 2147.918976][ T5953] m920x_read = error: -19 [ 2147.923349][ T5953] dvb-usb: error while querying for an remote control event. [ 2147.952517][ T4931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9003'. [ 2148.037464][ T5953] m920x_read = error: -19 [ 2148.041999][ T5953] dvb-usb: error while querying for an remote control event. [ 2148.167055][ T5953] m920x_read = error: -19 [ 2148.172186][ T5953] dvb-usb: error while querying for an remote control event. [ 2148.306435][ T5953] m920x_read = error: -19 [ 2148.310866][ T5953] dvb-usb: error while querying for an remote control event. [ 2148.436213][ T5953] m920x_read = error: -19 [ 2148.440636][ T5953] dvb-usb: error while querying for an remote control event. [ 2148.493470][ T4942] batadv0: entered promiscuous mode [ 2148.510658][ T4942] macvtap1: entered promiscuous mode [ 2148.529022][ T4942] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2148.557587][ T860] m920x_read = error: -19 [ 2148.563250][ T860] dvb-usb: error while querying for an remote control event. [ 2148.564375][ T4942] batadv0: left promiscuous mode [ 2148.710636][ T860] m920x_read = error: -19 [ 2148.715045][ T860] dvb-usb: error while querying for an remote control event. [ 2149.092992][ T860] m920x_read = error: -19 [ 2149.112764][ T860] dvb-usb: error while querying for an remote control event. [ 2149.420328][ T860] m920x_read = error: -19 [ 2149.440722][ T860] dvb-usb: error while querying for an remote control event. [ 2149.566170][ T860] m920x_read = error: -19 [ 2149.593041][ T860] dvb-usb: error while querying for an remote control event. [ 2149.795303][T16642] m920x_read = error: -19 [ 2150.113234][T16642] dvb-usb: error while querying for an remote control event. [ 2150.239282][T16642] m920x_read = error: -19 [ 2150.243870][T16642] dvb-usb: error while querying for an remote control event. [ 2150.386738][T16642] m920x_read = error: -19 [ 2150.398859][T16642] dvb-usb: error while querying for an remote control event. [ 2150.537325][T16642] m920x_read = error: -19 [ 2150.549576][T16642] dvb-usb: error while querying for an remote control event. [ 2150.673407][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 2150.673424][ T30] audit: type=1326 audit(1762877314.916:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.2.9012" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x0 [ 2150.716530][T16642] m920x_read = error: -19 [ 2150.721430][T16642] dvb-usb: error while querying for an remote control event. [ 2150.867205][ T5953] m920x_read = error: -19 [ 2150.871686][ T5953] dvb-usb: error while querying for an remote control event. [ 2150.998966][ T5953] m920x_read = error: -19 [ 2151.004088][ T5953] dvb-usb: error while querying for an remote control event. [ 2151.016389][T16642] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2151.186610][ T5953] m920x_read = error: -19 [ 2151.191056][ T5953] dvb-usb: error while querying for an remote control event. [ 2151.216215][T16642] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.247459][T16642] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2151.276282][T16642] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2151.311336][T16642] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.345340][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9018'. [ 2151.354962][ T5953] m920x_read = error: -19 [ 2151.363037][ T5953] dvb-usb: error while querying for an remote control event. [ 2151.417572][T16642] usb 6-1: config 0 descriptor?? [ 2151.468744][T16642] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2151.495359][T16642] dvb-usb: bulk message failed: -22 (3/0) [ 2151.517096][T16642] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2151.536273][ T5953] m920x_read = error: -19 [ 2151.540958][ T5953] dvb-usb: error while querying for an remote control event. [ 2151.565130][T16642] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2151.602437][T16642] usb 6-1: media controller created [ 2151.652665][T16642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2151.666735][ T5953] m920x_read = error: -19 [ 2151.671149][ T5953] dvb-usb: error while querying for an remote control event. [ 2151.726683][T16642] dvb-usb: bulk message failed: -22 (6/0) [ 2151.746774][T16642] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2151.764368][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9019'. [ 2151.777002][T16642] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129 [ 2151.796818][T11664] m920x_read = error: -19 [ 2151.801254][T11664] dvb-usb: error while querying for an remote control event. [ 2151.824635][T16642] dvb-usb: schedule remote query interval to 150 msecs. [ 2151.849693][T16642] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2152.538070][ T4981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9019'. [ 2152.547548][T11664] m920x_read = error: -19 [ 2152.562820][T11664] dvb-usb: error while querying for an remote control event. [ 2152.570538][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 2152.581395][ T5953] dvb-usb: error while querying for an remote control event. [ 2152.706262][ T5953] m920x_read = error: -19 [ 2152.710716][ T5953] dvb-usb: error while querying for an remote control event. [ 2152.786190][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 2152.800905][ T5953] dvb-usb: error while querying for an remote control event. [ 2152.809565][ T4987] loop2: detected capacity change from 0 to 7 [ 2152.829468][ T4987] Dev loop2: unable to read RDB block 7 [ 2152.835082][ T4987] loop2: AHDI p1 p2 p3 [ 2152.846323][T11664] m920x_read = error: -19 [ 2152.854500][T11664] dvb-usb: error while querying for an remote control event. [ 2152.865862][ T4987] loop2: partition table partially beyond EOD, truncated [ 2152.883905][ T4987] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2152.903851][ T4987] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2152.977755][T16642] m920x_read = error: -19 [ 2152.982294][T16642] dvb-usb: error while querying for an remote control event. [ 2152.989884][T11664] dvb-usb: bulk message failed: -22 (1/0) [ 2152.996101][T11664] dvb-usb: error while querying for an remote control event. [ 2153.086268][ T5953] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2153.106512][T16642] m920x_read = error: -19 [ 2153.111000][T16642] dvb-usb: error while querying for an remote control event. [ 2153.126675][T11664] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2153.156939][T16642] dvb-usb: bulk message failed: -22 (1/0) [ 2153.162755][T16642] dvb-usb: error while querying for an remote control event. [ 2153.195925][T30883] usb 6-1: USB disconnect, device number 33 [ 2153.226329][T16642] m920x_read = error: -19 [ 2153.230733][T16642] dvb-usb: error while querying for an remote control event. [ 2153.239577][T30883] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2153.239910][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 2153.265721][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.281844][T11664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2153.294668][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.306284][T11664] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 2153.315513][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2153.329297][T11664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.339692][ T5953] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2153.350014][T11664] usb 3-1: config 0 descriptor?? [ 2153.355741][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.366442][T16642] m920x_read = error: -19 [ 2153.370814][T16642] dvb-usb: error while querying for an remote control event. [ 2153.383542][ T5953] usb 2-1: config 0 descriptor?? [ 2153.486300][T16642] m920x_read = error: -19 [ 2153.490707][T16642] dvb-usb: error while querying for an remote control event. [ 2153.569334][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9024'. [ 2153.606723][ T860] m920x_read = error: -19 [ 2153.611282][ T860] dvb-usb: error while querying for an remote control event. [ 2153.660906][ T4991] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2153.737479][ T860] m920x_read = error: -19 [ 2153.743477][ T860] dvb-usb: error while querying for an remote control event. [ 2153.858149][T16642] m920x_read = error: -19 [ 2153.871084][T16642] dvb-usb: error while querying for an remote control event. [ 2153.930846][ T5953] microsoft 0003:045E:07DA.00B9: unknown main item tag 0x0 [ 2153.940937][ T5953] microsoft 0003:045E:07DA.00B9: unknown main item tag 0x0 [ 2153.953522][ T5953] microsoft 0003:045E:07DA.00B9: unknown main item tag 0x0 [ 2153.967444][ T5953] microsoft 0003:045E:07DA.00B9: unknown main item tag 0x0 [ 2153.975958][ T5953] microsoft 0003:045E:07DA.00B9: unknown main item tag 0x0 [ 2153.992917][T11664] logitech 0003:046D:C626.00BA: unbalanced delimiter at end of report description [ 2154.012876][ T5953] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00B9/input/input130 [ 2154.036407][T16642] m920x_read = error: -19 [ 2154.040817][T16642] dvb-usb: error while querying for an remote control event. [ 2154.068635][T11664] logitech 0003:046D:C626.00BA: parse failed [ 2154.074782][T11664] logitech 0003:046D:C626.00BA: probe with driver logitech failed with error -22 [ 2154.152732][ T5953] microsoft 0003:045E:07DA.00B9: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2154.186184][T11664] m920x_read = error: -19 [ 2154.190581][T11664] dvb-usb: error while querying for an remote control event. [ 2154.260249][ T5953] usb 2-1: USB disconnect, device number 69 [ 2154.280039][T16642] usb 3-1: USB disconnect, device number 41 [ 2154.392267][T11664] m920x_read = error: -19 [ 2154.408080][T11664] dvb-usb: error while querying for an remote control event. [ 2154.516219][T11664] m920x_read = error: -19 [ 2154.520781][T11664] dvb-usb: error while querying for an remote control event. [ 2154.636326][T11664] m920x_read = error: -19 [ 2154.640741][T11664] dvb-usb: error while querying for an remote control event. [ 2154.987405][ T5953] m920x_read = error: -19 [ 2154.991939][ T5953] dvb-usb: error while querying for an remote control event. [ 2155.342687][ T5953] m920x_read = error: -19 [ 2155.366486][ T5953] dvb-usb: error while querying for an remote control event. [ 2155.756764][T16642] m920x_read = error: -19 [ 2155.761173][T16642] dvb-usb: error while querying for an remote control event. [ 2156.051552][ T5953] m920x_read = error: -19 [ 2156.069393][ T5953] dvb-usb: error while querying for an remote control event. [ 2156.226521][ T5953] m920x_read = error: -19 [ 2156.236216][ T5953] dvb-usb: error while querying for an remote control event. [ 2156.366227][ T5953] m920x_read = error: -19 [ 2156.370625][ T5953] dvb-usb: error while querying for an remote control event. [ 2156.526101][ T5953] m920x_read = error: -19 [ 2156.530458][ T5953] dvb-usb: error while querying for an remote control event. [ 2156.696260][ T5953] m920x_read = error: -19 [ 2156.702042][ T5953] dvb-usb: error while querying for an remote control event. [ 2156.816279][ T5953] m920x_read = error: -19 [ 2156.841849][ T5953] dvb-usb: error while querying for an remote control event. [ 2157.010791][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9034'. [ 2157.019912][T11664] m920x_read = error: -19 [ 2157.024557][T11664] dvb-usb: error while querying for an remote control event. [ 2157.037403][ T5028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9034'. [ 2157.167134][T16642] m920x_read = error: -19 [ 2157.181349][T23194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2157.198542][T16642] dvb-usb: error while querying for an remote control event. [ 2157.211860][T23194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2157.220876][T23194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2157.229373][T23194] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2157.251299][T23194] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2157.312852][ T5039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2157.320035][ T5041] FAULT_INJECTION: forcing a failure. [ 2157.320035][ T5041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.337382][T16642] m920x_read = error: -19 [ 2157.344211][T16642] dvb-usb: error while querying for an remote control event. [ 2157.360598][ T5041] CPU: 0 UID: 0 PID: 5041 Comm: syz.0.9038 Not tainted syzkaller #0 PREEMPT(full) [ 2157.360625][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2157.360638][ T5041] Call Trace: [ 2157.360647][ T5041] [ 2157.360655][ T5041] dump_stack_lvl+0x189/0x250 [ 2157.360688][ T5041] ? __pfx____ratelimit+0x10/0x10 [ 2157.360715][ T5041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2157.360742][ T5041] ? __pfx__printk+0x10/0x10 [ 2157.360776][ T5041] should_fail_ex+0x414/0x560 [ 2157.360812][ T5041] _copy_to_user+0x31/0xb0 [ 2157.360840][ T5041] csum_and_copy_to_iter+0x278/0x1c40 [ 2157.360886][ T5041] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2157.360913][ T5041] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2157.360934][ T5041] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 2157.360966][ T5041] ? __skb_recv_udp+0x4be/0x980 [ 2157.360989][ T5041] ? __skb_recv_udp+0x88b/0x980 [ 2157.361013][ T5041] __skb_datagram_iter+0x89f/0x990 [ 2157.361039][ T5041] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 2157.361065][ T5041] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 2157.361093][ T5041] ? csum_partial+0x239/0x2c0 [ 2157.361121][ T5041] skb_copy_and_csum_datagram_msg+0x1b8/0x440 [ 2157.361151][ T5041] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 2157.361179][ T5041] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2157.361215][ T5041] udpv6_recvmsg+0x660/0x1590 [ 2157.361258][ T5041] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 2157.361287][ T5041] ? aa_sk_perm+0x81e/0x950 [ 2157.361313][ T5041] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 2157.361338][ T5041] inet6_recvmsg+0x1ee/0x6b0 [ 2157.361360][ T5041] ? __pfx_aa_sk_perm+0x10/0x10 [ 2157.361391][ T5041] ? __pfx_inet6_recvmsg+0x10/0x10 [ 2157.361417][ T5041] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2157.361436][ T5041] ? security_socket_recvmsg+0x7e/0x2e0 [ 2157.361462][ T5041] sock_recvmsg+0x105/0x270 [ 2157.361494][ T5041] sock_read_iter+0x231/0x2f0 [ 2157.361523][ T5041] ? __pfx_sock_read_iter+0x10/0x10 [ 2157.361559][ T5041] ? bpf_lsm_file_permission+0x9/0x20 [ 2157.361581][ T5041] ? security_file_permission+0x75/0x290 [ 2157.361614][ T5041] vfs_read+0x55a/0xa30 [ 2157.361653][ T5041] ? __pfx_vfs_read+0x10/0x10 [ 2157.361692][ T5041] ? __fget_files+0x2a/0x420 [ 2157.361721][ T5041] ksys_read+0x145/0x250 [ 2157.361749][ T5041] ? exc_page_fault+0x82/0x100 [ 2157.361778][ T5041] ? __pfx_ksys_read+0x10/0x10 [ 2157.361809][ T5041] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2157.361842][ T5041] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.361881][ T5041] __do_fast_syscall_32+0xb6/0x2b0 [ 2157.361932][ T5041] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.361966][ T5041] do_fast_syscall_32+0x34/0x80 [ 2157.361998][ T5041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2157.362035][ T5041] RIP: 0023:0xf70dd539 [ 2157.362054][ T5041] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2157.362072][ T5041] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2157.362094][ T5041] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002540 [ 2157.362109][ T5041] RDX: 000000000000ff6b RSI: 0000000000000000 RDI: 0000000000000000 [ 2157.362121][ T5041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2157.362133][ T5041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2157.362146][ T5041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2157.362177][ T5041] [ 2157.816952][T16642] m920x_read = error: -19 [ 2157.821341][T16642] dvb-usb: error while querying for an remote control event. [ 2157.936467][T16642] m920x_read = error: -19 [ 2157.944928][T16642] dvb-usb: error while querying for an remote control event. [ 2158.002150][ T5037] chnl_net:caif_netlink_parms(): no params data found [ 2158.056282][T16642] m920x_read = error: -19 [ 2158.060664][T16642] dvb-usb: error while querying for an remote control event. [ 2158.190479][T16642] m920x_read = error: -19 [ 2158.195275][T16642] dvb-usb: error while querying for an remote control event. [ 2158.274825][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.291193][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.300367][ T5037] bridge_slave_0: entered allmulticast mode [ 2158.308740][ T5037] bridge_slave_0: entered promiscuous mode [ 2158.317814][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.325086][ T5037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.332417][T11664] m920x_read = error: -19 [ 2158.336935][T11664] dvb-usb: error while querying for an remote control event. [ 2158.344628][ T5037] bridge_slave_1: entered allmulticast mode [ 2158.352804][ T5037] bridge_slave_1: entered promiscuous mode [ 2158.421726][ T5037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2158.438750][ T5037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2158.449481][ T5059] vivid-004: disconnect [ 2158.465738][T16642] m920x_read = error: -19 [ 2158.475677][T16642] dvb-usb: error while querying for an remote control event. [ 2158.501737][ T5037] team0: Port device team_slave_0 added [ 2158.524907][ T5037] team0: Port device team_slave_1 added [ 2158.586602][T16642] m920x_read = error: -19 [ 2158.591150][T16642] dvb-usb: error while querying for an remote control event. [ 2158.612927][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2158.627034][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2158.684357][ T5037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2158.706287][T16642] m920x_read = error: -19 [ 2158.709170][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2158.711372][T16642] dvb-usb: error while querying for an remote control event. [ 2158.725814][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2158.764207][ T5037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2158.779537][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.790768][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.804594][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.818108][ T5061] vivid-004: reconnect [ 2158.823670][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.833557][ T5953] m920x_read = error: -19 [ 2158.838015][ T5953] dvb-usb: error while querying for an remote control event. [ 2158.838543][ T5061] vivid-004: disconnect [ 2158.849153][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.862397][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.874067][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.899609][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9043'. [ 2158.929890][ T5059] bridge0: left promiscuous mode [ 2158.941824][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2158.949377][ T5953] m920x_read = error: -19 [ 2158.953859][ T5953] dvb-usb: error while querying for an remote control event. [ 2158.965953][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 2158.979560][ T5059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2159.043942][ T5059] vivid-004: reconnect [ 2159.066427][ T5953] m920x_read = error: -19 [ 2159.070988][ T5953] dvb-usb: error while querying for an remote control event. [ 2159.196111][ T5953] m920x_read = error: -19 [ 2159.200524][ T5953] dvb-usb: error while querying for an remote control event. [ 2159.282218][ T5037] hsr_slave_0: entered promiscuous mode [ 2159.292193][T23194] Bluetooth: hci0: command tx timeout [ 2159.297030][ T5037] hsr_slave_1: entered promiscuous mode [ 2159.307431][ T5037] debugfs: 'hsr0' already exists in 'hsr' [ 2159.313191][ T5037] Cannot create hsr debugfs directory [ 2159.356359][T16642] m920x_read = error: -19 [ 2159.360998][T16642] dvb-usb: error while querying for an remote control event. [ 2159.643881][T16642] m920x_read = error: -19 [ 2159.652623][T16642] dvb-usb: error while querying for an remote control event. [ 2159.793193][ T6393] bond0: (slave bond_slave_0): interface is now down [ 2159.803983][ T5069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2159.812730][ T6393] bond0: (slave bond_slave_1): interface is now down [ 2159.836454][ T860] m920x_read = error: -19 [ 2159.840899][ T860] dvb-usb: error while querying for an remote control event. [ 2159.879801][ T5069] 8021q: adding VLAN 0 to HW filter on device team0 [ 2159.886046][ T6393] bond0: (slave vxlan0): interface is now down [ 2159.903649][ T5069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2159.944638][ T6393] bond0: (slave bond_slave_0): interface is now down [ 2159.967049][ T6393] bond0: (slave bond_slave_1): interface is now down [ 2159.996122][ T860] m920x_read = error: -19 [ 2160.000639][ T860] dvb-usb: error while querying for an remote control event. [ 2160.027677][ T6393] bond0: (slave vxlan0): interface is now down [ 2160.066308][ T6393] bond0: (slave bond_slave_0): interface is now down [ 2160.076306][ T6393] bond0: (slave bond_slave_1): interface is now down [ 2160.087396][ T6393] bond0: (slave vxlan0): interface is now down [ 2160.107565][ T6393] bond0: (slave bond_slave_0): interface is now down [ 2160.116616][ T6393] bond0: (slave bond_slave_1): interface is now down [ 2160.123405][ T6393] bond0: (slave vxlan0): interface is now down [ 2160.176954][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.183313][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.208362][T15976] bond0: (slave bond_slave_0): interface is now down [ 2160.216208][ T860] m920x_read = error: -19 [ 2160.270385][T15976] bond0: (slave bond_slave_1): interface is now down [ 2160.271247][ T860] dvb-usb: error while querying for an remote control event. [ 2160.330042][T15976] bond0: (slave vxlan0): interface is now down [ 2160.416268][T15976] bond0: (slave bond_slave_0): interface is now down [ 2160.426104][T15976] bond0: (slave bond_slave_1): interface is now down [ 2160.426149][ T860] m920x_read = error: -19 [ 2160.432798][T15976] bond0: (slave vxlan0): interface is now down [ 2160.526147][ T860] dvb-usb: error while querying for an remote control event. [ 2160.550521][ T6395] bond0: (slave bond_slave_0): interface is now down [ 2160.766216][ T860] m920x_read = error: -19 [ 2160.784783][ T6395] bond0: (slave bond_slave_1): interface is now down [ 2160.816340][ T860] dvb-usb: error while querying for an remote control event. [ 2160.876145][ T6395] bond0: (slave vxlan0): interface is now down [ 2160.913361][ T6395] bond0: (slave bond_slave_0): interface is now down [ 2160.927153][ T860] m920x_read = error: -19 [ 2160.931542][ T860] dvb-usb: error while querying for an remote control event. [ 2160.989723][ T6395] bond0: (slave bond_slave_1): interface is now down [ 2161.033075][ T6395] bond0: (slave vxlan0): interface is now down [ 2161.066702][ T860] m920x_read = error: -19 [ 2161.071415][ T860] dvb-usb: error while querying for an remote control event. [ 2161.076564][ T6395] bond0: (slave bond_slave_0): interface is now down [ 2161.097114][ T6395] bond0: (slave bond_slave_1): interface is now down [ 2161.103810][ T6395] bond0: (slave vxlan0): interface is now down [ 2161.196652][T27672] bond0: (slave bond_slave_0): interface is now down [ 2161.225703][T27672] bond0: (slave bond_slave_1): interface is now down [ 2161.264495][T27672] bond0: (slave vxlan0): interface is now down [ 2161.266234][ T860] m920x_read = error: -19 [ 2161.275049][ T860] dvb-usb: error while querying for an remote control event. [ 2161.307140][ T6393] bond0: (slave bond_slave_0): interface is now down [ 2161.316521][ T6393] bond0: (slave bond_slave_1): interface is now down [ 2161.335453][ T6393] bond0: (slave vxlan0): interface is now down [ 2161.367053][T23194] Bluetooth: hci0: command tx timeout [ 2161.368719][ T4524] bond0: (slave bond_slave_0): interface is now down [ 2161.391405][ T4524] bond0: (slave bond_slave_1): interface is now down [ 2161.448860][ T4524] bond0: (slave vxlan0): interface is now down [ 2161.476548][ T5953] m920x_read = error: -19 [ 2161.481000][ T5953] dvb-usb: error while querying for an remote control event. [ 2161.506335][ T4524] bond0: (slave bond_slave_0): interface is now down [ 2161.544138][ T4524] bond0: (slave bond_slave_1): interface is now down [ 2161.561572][ T4524] bond0: (slave vxlan0): interface is now down [ 2161.596688][T27672] bond0: (slave bond_slave_0): interface is now down [ 2161.603615][T27672] bond0: (slave bond_slave_1): interface is now down [ 2161.627627][ T5089] ip6gretap0: entered promiscuous mode [ 2161.643418][T27672] bond0: (slave vxlan0): interface is now down [ 2161.650203][ T5953] m920x_read = error: -19 [ 2161.654574][ T5953] dvb-usb: error while querying for an remote control event. [ 2161.656341][ T5089] macsec1: entered promiscuous mode [ 2161.707420][ T50] bond0: (slave bond_slave_0): interface is now down [ 2161.719571][ T50] bond0: (slave bond_slave_1): interface is now down [ 2161.720962][ T5092] Invalid logical block size (117440512) [ 2161.766139][ T50] bond0: (slave vxlan0): interface is now down [ 2161.804458][ T5953] m920x_read = error: -19 [ 2161.806129][ T50] bond0: (slave bond_slave_0): interface is now down [ 2161.809785][ T5953] dvb-usb: error while querying for an remote control event. [ 2161.815519][ T50] bond0: (slave bond_slave_1): interface is now down [ 2161.815537][ T50] bond0: (slave vxlan0): interface is now down [ 2161.851090][T27672] bond0: (slave bond_slave_0): interface is now down [ 2161.896389][ T5089] ip6gretap0: left promiscuous mode [ 2161.902149][T27672] bond0: (slave bond_slave_1): interface is now down [ 2161.909413][T27672] bond0: (slave vxlan0): interface is now down [ 2161.945703][T15975] bond0: (slave bond_slave_0): interface is now down [ 2161.966339][ T5953] m920x_read = error: -19 [ 2161.970732][ T5953] dvb-usb: error while querying for an remote control event. [ 2161.979026][T15975] bond0: (slave bond_slave_1): interface is now down [ 2161.988744][T15975] bond0: (slave vxlan0): interface is now down [ 2162.016341][T15975] bond0: (slave bond_slave_0): interface is now down [ 2162.032394][T15975] bond0: (slave bond_slave_1): interface is now down [ 2162.048811][T15975] bond0: (slave vxlan0): interface is now down [ 2162.070209][T15975] bond0: (slave bond_slave_0): interface is now down [ 2162.093989][T15975] bond0: (slave bond_slave_1): interface is now down [ 2162.116135][ T5953] m920x_read = error: -19 [ 2162.119780][T15975] bond0: (slave vxlan0): interface is now down [ 2162.120519][ T5953] dvb-usb: error while querying for an remote control event. [ 2162.208516][ T50] bond0: (slave bond_slave_0): interface is now down [ 2162.218427][ T50] bond0: (slave bond_slave_1): interface is now down [ 2162.225161][ T50] bond0: (slave vxlan0): interface is now down [ 2162.246303][ T860] m920x_read = error: -19 [ 2162.250720][ T860] dvb-usb: error while querying for an remote control event. [ 2162.255566][ T50] bond0: now running without any active interface! [ 2162.376442][ T860] m920x_read = error: -19 [ 2162.380849][ T860] dvb-usb: error while querying for an remote control event. [ 2162.603887][ T5105] __nla_validate_parse: 9 callbacks suppressed [ 2162.603921][ T5105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9054'. [ 2162.620199][ T860] m920x_read = error: -19 [ 2162.624593][ T860] dvb-usb: error while querying for an remote control event. [ 2162.627929][ T5037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.774096][ T5037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.787223][ T860] m920x_read = error: -19 [ 2162.791675][ T860] dvb-usb: error while querying for an remote control event. [ 2162.945297][ T860] m920x_read = error: -19 [ 2162.950771][ T860] dvb-usb: error while querying for an remote control event. [ 2163.022007][ T5037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.085848][ T860] m920x_read = error: -19 [ 2163.093630][ T860] dvb-usb: error while querying for an remote control event. [ 2163.499825][T23194] Bluetooth: hci0: command tx timeout [ 2163.502163][ T5037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.646980][ T860] m920x_read = error: -19 [ 2163.668337][ T860] dvb-usb: error while querying for an remote control event. [ 2163.788922][ T860] m920x_read = error: -19 [ 2164.076072][ T860] dvb-usb: error while querying for an remote control event. [ 2164.230072][ T5953] m920x_read = error: -19 [ 2164.236292][ T5953] dvb-usb: error while querying for an remote control event. [ 2164.373524][T16642] m920x_read = error: -19 [ 2164.383899][T16642] dvb-usb: error while querying for an remote control event. [ 2164.516758][T16642] m920x_read = error: -19 [ 2164.521179][T16642] dvb-usb: error while querying for an remote control event. [ 2164.706292][T16642] m920x_read = error: -19 [ 2164.710711][T16642] dvb-usb: error while querying for an remote control event. [ 2164.764034][ T5037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2164.857788][ T5037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2164.896505][T16642] m920x_read = error: -19 [ 2164.941379][T16642] dvb-usb: error while querying for an remote control event. [ 2164.981473][ T5037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2165.014548][ T5037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2165.106555][ T5953] m920x_read = error: -19 [ 2165.111124][ T5953] dvb-usb: error while querying for an remote control event. [ 2165.283843][ T5138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9059'. [ 2165.315918][ T5953] m920x_read = error: -19 [ 2165.386652][ T5953] dvb-usb: error while querying for an remote control event. [ 2165.518118][ T5037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2165.527510][T23194] Bluetooth: hci0: command tx timeout [ 2165.556651][ T5953] m920x_read = error: -19 [ 2165.561053][ T5953] dvb-usb: error while querying for an remote control event. [ 2165.650720][ T5037] 8021q: adding VLAN 0 to HW filter on device team0 [ 2165.677144][ T5953] m920x_read = error: -19 [ 2165.683450][ T5953] dvb-usb: error while querying for an remote control event. [ 2165.699838][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.707031][T15975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2165.795812][ T5152] input: syz0 as /devices/virtual/input/input131 [ 2165.814892][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.822202][T15975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2165.836765][ T5953] m920x_read = error: -19 [ 2165.841301][ T5953] dvb-usb: error while querying for an remote control event. [ 2165.966174][ T5953] m920x_read = error: -19 [ 2165.992925][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.054526][ T5037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2166.129838][ T5037] veth0_vlan: entered promiscuous mode [ 2166.136863][ T5953] m920x_read = error: -19 [ 2166.141787][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.146317][ T5890] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2166.173221][ T5037] veth1_vlan: entered promiscuous mode [ 2166.306314][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 2166.322110][ T5890] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2166.338934][ T5890] usb 3-1: config 0 has no interface number 0 [ 2166.339016][ T5953] m920x_read = error: -19 [ 2166.376851][ T5890] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2166.378904][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.390142][ T5890] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 8256, setting to 1024 [ 2166.407717][ T5890] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2166.466158][ T5890] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2166.496727][ T5953] m920x_read = error: -19 [ 2166.501161][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.502768][ T5890] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2166.518386][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.537550][ T5890] usb 3-1: Product: syz [ 2166.541918][ T5890] usb 3-1: Manufacturer: syz [ 2166.546964][ T5890] usb 3-1: SerialNumber: syz [ 2166.562187][ T5890] usb 3-1: config 0 descriptor?? [ 2166.577154][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2166.584573][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2166.637107][ T5953] m920x_read = error: -19 [ 2166.641503][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.695253][ T5037] veth0_macvtap: entered promiscuous mode [ 2166.760186][ T5037] veth1_macvtap: entered promiscuous mode [ 2166.776230][ T5953] m920x_read = error: -19 [ 2166.782515][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.818501][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2166.847258][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2166.891048][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2166.916308][ T5953] m920x_read = error: -19 [ 2166.930944][ T5953] dvb-usb: error while querying for an remote control event. [ 2166.983777][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2167.031070][T27672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.073673][T27672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.076775][ T5953] m920x_read = error: -19 [ 2167.097915][ T5953] dvb-usb: error while querying for an remote control event. [ 2167.127934][T27672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.157795][ T4524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.204104][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2167.211383][ T5173] bridge0: port 2(bridge_slave_1) entered listening state [ 2167.223353][T11664] m920x_read = error: -19 [ 2167.227977][T11664] dvb-usb: error while querying for an remote control event. [ 2167.269876][ T5173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2167.396259][ T5953] m920x_read = error: -19 [ 2167.429975][ T5953] dvb-usb: error while querying for an remote control event. [ 2167.604718][ T5953] m920x_read = error: -19 [ 2167.621527][ T5953] dvb-usb: error while querying for an remote control event. [ 2167.759100][ T5953] m920x_read = error: -19 [ 2167.763627][ T5953] dvb-usb: error while querying for an remote control event. [ 2167.815279][T27672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2167.841994][T27672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2167.876610][ T5953] m920x_read = error: -19 [ 2167.881120][ T5953] dvb-usb: error while querying for an remote control event. [ 2167.996369][T11664] m920x_read = error: -19 [ 2168.001014][T11664] dvb-usb: error while querying for an remote control event. [ 2168.130265][T11664] m920x_read = error: -19 [ 2168.135462][T11664] dvb-usb: error while querying for an remote control event. [ 2168.184929][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2168.197906][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2168.201121][ T5198] FAULT_INJECTION: forcing a failure. [ 2168.201121][ T5198] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.247914][T11664] m920x_read = error: -19 [ 2168.252424][T11664] dvb-usb: error while querying for an remote control event. [ 2168.266120][ T5198] CPU: 0 UID: 0 PID: 5198 Comm: syz.5.9075 Not tainted syzkaller #0 PREEMPT(full) [ 2168.266145][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2168.266159][ T5198] Call Trace: [ 2168.266168][ T5198] [ 2168.266178][ T5198] dump_stack_lvl+0x189/0x250 [ 2168.266210][ T5198] ? __pfx____ratelimit+0x10/0x10 [ 2168.266237][ T5198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2168.266265][ T5198] ? __pfx__printk+0x10/0x10 [ 2168.266291][ T5198] ? __lock_acquire+0xab9/0xd20 [ 2168.266318][ T5198] should_fail_ex+0x414/0x560 [ 2168.266353][ T5198] should_failslab+0xa8/0x100 [ 2168.266377][ T5198] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2168.266408][ T5198] ? skb_clone+0x212/0x3a0 [ 2168.266437][ T5198] skb_clone+0x212/0x3a0 [ 2168.266465][ T5198] __netlink_deliver_tap+0x404/0x850 [ 2168.266504][ T5198] ? netlink_deliver_tap+0x2e/0x1b0 [ 2168.266526][ T5198] netlink_deliver_tap+0x19c/0x1b0 [ 2168.266549][ T5198] netlink_unicast+0x7fa/0x9e0 [ 2168.266594][ T5198] ? __pfx_netlink_unicast+0x10/0x10 [ 2168.266644][ T5198] ? netlink_sendmsg+0x642/0xb30 [ 2168.266669][ T5198] ? skb_put+0x11b/0x210 [ 2168.266694][ T5198] netlink_sendmsg+0x805/0xb30 [ 2168.266727][ T5198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2168.266757][ T5198] ? __import_iovec+0x5d4/0x7f0 [ 2168.266783][ T5198] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2168.266816][ T5198] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2168.266837][ T5198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2168.266861][ T5198] __sock_sendmsg+0x21c/0x270 [ 2168.266894][ T5198] ____sys_sendmsg+0x505/0x830 [ 2168.266924][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2168.266966][ T5198] ___sys_sendmsg+0x21f/0x2a0 [ 2168.266993][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 2168.267057][ T5198] ? __fget_files+0x2a/0x420 [ 2168.267077][ T5198] ? __fget_files+0x3a0/0x420 [ 2168.267110][ T5198] __sys_sendmsg+0x164/0x220 [ 2168.267135][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 2168.267170][ T5198] ? __pfx_ksys_write+0x10/0x10 [ 2168.267203][ T5198] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2168.267237][ T5198] ? lockdep_hardirqs_on+0x9c/0x150 [ 2168.267272][ T5198] __do_fast_syscall_32+0xb6/0x2b0 [ 2168.267305][ T5198] ? lockdep_hardirqs_on+0x9c/0x150 [ 2168.267339][ T5198] do_fast_syscall_32+0x34/0x80 [ 2168.267370][ T5198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2168.267396][ T5198] RIP: 0023:0xf700d539 [ 2168.267416][ T5198] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2168.267434][ T5198] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2168.267457][ T5198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2168.267471][ T5198] RDX: 00000000000400d4 RSI: 0000000000000000 RDI: 0000000000000000 [ 2168.267484][ T5198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2168.267497][ T5198] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2168.267510][ T5198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2168.267544][ T5198] [ 2168.576024][T11664] m920x_read = error: -19 [ 2168.580417][T11664] dvb-usb: error while querying for an remote control event. [ 2168.787273][ T5953] m920x_read = error: -19 [ 2168.791692][ T5953] dvb-usb: error while querying for an remote control event. [ 2168.907262][ T5953] m920x_read = error: -19 [ 2168.911700][ T5953] dvb-usb: error while querying for an remote control event. [ 2168.960633][ T5890] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 2169.017559][ T5890] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 2169.036441][ T5953] m920x_read = error: -19 [ 2169.040892][ T5953] dvb-usb: error while querying for an remote control event. [ 2169.058915][ T5890] usb 3-1: USB disconnect, device number 42 [ 2169.065537][ T5207] loop4: detected capacity change from 0 to 7 [ 2169.079378][ T5207] Dev loop4: unable to read RDB block 7 [ 2169.084978][ T5207] loop4: unable to read partition table [ 2169.138957][ T5207] loop4: partition table beyond EOD, truncated [ 2169.145183][ T5207] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2169.217133][ T5953] m920x_read = error: -19 [ 2169.221806][ T5953] dvb-usb: error while querying for an remote control event. [ 2169.376141][T11664] m920x_read = error: -19 [ 2169.380536][T11664] dvb-usb: error while querying for an remote control event. [ 2169.516721][T11664] m920x_read = error: -19 [ 2169.521317][T11664] dvb-usb: error while querying for an remote control event. [ 2169.656247][T16642] m920x_read = error: -19 [ 2169.660633][T16642] dvb-usb: error while querying for an remote control event. [ 2169.730891][ T5227] usb usb8: usbfs: process 5227 (syz.0.9081) did not claim interface 0 before use [ 2169.786925][T16642] m920x_read = error: -19 [ 2169.791554][T16642] dvb-usb: error while querying for an remote control event. [ 2169.838414][ T30] audit: type=1400 audit(1762877333.956:4403): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5217 comm="syz.0.9081" [ 2169.889877][ T5229] SET target dimension over the limit! [ 2169.909326][T16642] m920x_read = error: -19 [ 2169.918347][T16642] dvb-usb: error while querying for an remote control event. [ 2170.056263][T11664] m920x_read = error: -19 [ 2170.061069][T11664] dvb-usb: error while querying for an remote control event. [ 2170.186480][T11664] m920x_read = error: -19 [ 2170.190979][T11664] dvb-usb: error while querying for an remote control event. [ 2170.226502][T16642] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2170.359336][T11664] m920x_read = error: -19 [ 2170.364181][T11664] dvb-usb: error while querying for an remote control event. [ 2170.401749][ T5236] netlink: 'syz.5.9087': attribute type 10 has an invalid length. [ 2170.410635][T16642] usb 3-1: device descriptor read/64, error -71 [ 2170.487104][ T4601] m920x_read = error: -19 [ 2170.491617][ T4601] dvb-usb: error while querying for an remote control event. [ 2170.629419][T11664] m920x_read = error: -19 [ 2170.633823][T11664] dvb-usb: error while querying for an remote control event. [ 2170.656913][T16642] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2170.747354][ T5248] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.9092'. [ 2170.759155][T11664] m920x_read = error: -19 [ 2170.763543][T11664] dvb-usb: error while querying for an remote control event. [ 2170.798639][T16642] usb 3-1: device descriptor read/64, error -71 [ 2170.896409][T11664] m920x_read = error: -19 [ 2170.900777][T11664] dvb-usb: error while querying for an remote control event. [ 2170.917922][T16642] usb usb3-port1: attempt power cycle [ 2170.973851][ T5253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9094'. [ 2171.046578][ T4601] m920x_read = error: -19 [ 2171.050989][ T4601] dvb-usb: error while querying for an remote control event. [ 2171.104935][ T5257] netlink: 'syz.0.9096': attribute type 1 has an invalid length. [ 2171.115394][ T5259] netlink: 'syz.0.9096': attribute type 1 has an invalid length. [ 2171.180535][ T5263] vlan0: entered promiscuous mode [ 2171.186815][ T4601] m920x_read = error: -19 [ 2171.187631][ T5263] team0: Device vlan0 is up. Set it down before adding it as a team port [ 2171.191193][ T4601] dvb-usb: error while querying for an remote control event. [ 2171.208418][T11664] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 2171.225701][ T5264] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 2171.238417][ T5264] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 2171.239256][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9096'. [ 2171.250990][ T5264] bond2: (slave xfrm1): making interface the new active one [ 2171.267624][ T5264] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 2171.276103][T16642] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2171.305071][ T5257] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 2171.317024][T16642] usb 3-1: device descriptor read/8, error -71 [ 2171.326333][ T4601] m920x_read = error: -19 [ 2171.330729][ T4601] dvb-usb: error while querying for an remote control event. [ 2171.341262][ T5257] bond2 (unregistering): Released all slaves [ 2171.378274][T11664] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 2171.386729][T11664] usb 5-1: config 0 has no interface number 0 [ 2171.393223][T11664] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2171.426214][T11664] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2171.448929][ T5953] m920x_read = error: -19 [ 2171.453315][ T5953] dvb-usb: error while querying for an remote control event. [ 2171.475070][T11664] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 2171.497497][T11664] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2171.516464][T11664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.537163][T11664] usb 5-1: Product: syz [ 2171.541462][T11664] usb 5-1: Manufacturer: syz [ 2171.547369][T11664] usb 5-1: SerialNumber: syz [ 2171.558155][T11664] usb 5-1: config 0 descriptor?? [ 2171.564588][ T5252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2171.582605][ T5252] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2171.590089][ T5953] m920x_read = error: -19 [ 2171.594870][ T5953] dvb-usb: error while querying for an remote control event. [ 2171.602535][T16642] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2171.612217][T11664] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2171.636700][T11664] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2171.657400][T16642] usb 3-1: device descriptor read/8, error -71 [ 2171.886286][ T5890] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2171.887499][T11664] m920x_read = error: -19 [ 2171.904699][T16642] usb usb3-port1: unable to enumerate USB device [ 2171.926287][T11664] dvb-usb: error while querying for an remote control event. [ 2172.059876][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2172.071810][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 64509, setting to 64 [ 2172.083710][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2172.093507][T11664] m920x_read = error: -19 [ 2172.099029][T11664] dvb-usb: error while querying for an remote control event. [ 2172.100664][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.122244][ T5890] usb 2-1: config 0 descriptor?? [ 2172.217209][T11664] m920x_read = error: -19 [ 2172.221705][T11664] dvb-usb: error while querying for an remote control event. [ 2172.339679][T11664] m920x_read = error: -19 [ 2172.344178][T11664] dvb-usb: error while querying for an remote control event. [ 2172.453609][T11664] usb 5-1: USB disconnect, device number 48 [ 2172.538023][T16642] m920x_read = error: -19 [ 2172.552738][T16642] dvb-usb: error while querying for an remote control event. [ 2172.563222][T11664] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2172.579136][T11664] cyberjack 5-1:0.69: device disconnected [ 2172.679774][ T5953] m920x_read = error: -19 [ 2172.684320][ T5953] dvb-usb: error while querying for an remote control event. [ 2172.798421][T11664] m920x_read = error: -19 [ 2172.802992][T11664] dvb-usb: error while querying for an remote control event. [ 2172.851350][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9106'. [ 2172.875177][ T5288] netlink: 'syz.4.9106': attribute type 7 has an invalid length. [ 2172.885503][ T5288] netlink: 'syz.4.9106': attribute type 8 has an invalid length. [ 2172.894124][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9106'. [ 2172.913018][ T5288] gretap0: entered promiscuous mode [ 2172.923738][ T5288] batadv_slave_1: entered promiscuous mode [ 2172.930969][ T5953] m920x_read = error: -19 [ 2172.935331][ T5953] dvb-usb: error while querying for an remote control event. [ 2173.013466][ T5288] batadv_slave_1: left promiscuous mode [ 2173.039527][ T5288] gretap0: left promiscuous mode [ 2173.076530][ T4602] m920x_read = error: -19 [ 2173.081099][ T4602] dvb-usb: error while querying for an remote control event. [ 2173.197438][ T4602] m920x_read = error: -19 [ 2173.201812][ T4602] dvb-usb: error while querying for an remote control event. [ 2173.387173][ T5890] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2173.396507][ T4602] m920x_read = error: -19 [ 2173.400902][ T4602] dvb-usb: error while querying for an remote control event. [ 2173.527077][ T5953] m920x_read = error: -19 [ 2173.531740][ T5953] dvb-usb: error while querying for an remote control event. [ 2173.618295][ T5890] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 2173.640339][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.076178][ T4602] m920x_read = error: -19 [ 2174.083276][ T4602] dvb-usb: error while querying for an remote control event. [ 2174.140936][ T5890] usb 3-1: config 0 descriptor?? [ 2174.187056][ T5890] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 2174.216305][ T5953] m920x_read = error: -19 [ 2174.220752][ T5953] dvb-usb: error while querying for an remote control event. [ 2174.284577][ T5890] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input132 [ 2174.339169][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9112'. [ 2174.348849][ T5953] m920x_read = error: -19 [ 2174.353342][ T5953] dvb-usb: error while querying for an remote control event. [ 2174.476314][ T5953] m920x_read = error: -19 [ 2174.482011][ T5953] dvb-usb: error while querying for an remote control event. [ 2174.498328][ T5304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9112'. [ 2174.544686][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.584679][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.626658][ T4602] m920x_read = error: -19 [ 2174.631175][ T4602] dvb-usb: error while querying for an remote control event. [ 2174.648792][ T5953] usb 3-1: USB disconnect, device number 47 [ 2174.776721][ T4602] m920x_read = error: -19 [ 2174.784275][ T4602] dvb-usb: error while querying for an remote control event. [ 2174.884331][ T4602] usb 2-1: USB disconnect, device number 70 [ 2174.928694][ T5953] m920x_read = error: -19 [ 2174.934951][ T5953] dvb-usb: error while querying for an remote control event. [ 2175.097642][ T5953] m920x_read = error: -19 [ 2175.102038][ T5953] dvb-usb: error while querying for an remote control event. [ 2175.405555][ T5953] m920x_read = error: -19 [ 2175.410255][ T5953] dvb-usb: error while querying for an remote control event. [ 2175.548546][ T5953] m920x_read = error: -19 [ 2175.557468][ T5953] dvb-usb: error while querying for an remote control event. [ 2175.696371][T11664] m920x_read = error: -19 [ 2175.700867][T11664] dvb-usb: error while querying for an remote control event. [ 2175.901132][T11664] m920x_read = error: -19 [ 2175.905652][T11664] dvb-usb: error while querying for an remote control event. [ 2176.028804][ T5953] m920x_read = error: -19 [ 2176.033273][ T5953] dvb-usb: error while querying for an remote control event. [ 2176.194449][T11664] m920x_read = error: -19 [ 2176.206524][T11664] dvb-usb: error while querying for an remote control event. [ 2176.265297][ T5338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9123'. [ 2176.275676][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.283275][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.318868][ T5953] m920x_read = error: -19 [ 2176.323261][ T5953] dvb-usb: error while querying for an remote control event. [ 2176.436179][T11664] m920x_read = error: -19 [ 2176.447031][T11664] dvb-usb: error while querying for an remote control event. [ 2176.556791][ T5953] m920x_read = error: -19 [ 2176.561202][ T5953] dvb-usb: error while querying for an remote control event. [ 2176.587161][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9125'. [ 2176.616805][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9125'. [ 2176.670042][ T5342] bridge0: entered promiscuous mode [ 2176.716941][ T5342] ip6gretap0: entered promiscuous mode [ 2176.727312][ T5953] m920x_read = error: -19 [ 2176.731722][ T5953] dvb-usb: error while querying for an remote control event. [ 2176.775868][ T5342] debugfs: 'hsr1' already exists in 'hsr' [ 2176.838845][ T5342] Cannot create hsr debugfs directory [ 2176.854389][ T5342] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 2176.896232][ T4602] m920x_read = error: -19 [ 2176.900601][ T4602] dvb-usb: error while querying for an remote control event. [ 2177.036429][ T4602] m920x_read = error: -19 [ 2177.040849][ T4602] dvb-usb: error while querying for an remote control event. [ 2177.277018][T11664] m920x_read = error: -19 [ 2177.281421][T11664] dvb-usb: error while querying for an remote control event. [ 2177.417799][T11664] m920x_read = error: -19 [ 2177.422290][T11664] dvb-usb: error while querying for an remote control event. [ 2177.610900][T11664] m920x_read = error: -19 [ 2177.623382][T11664] dvb-usb: error while querying for an remote control event. [ 2177.757886][T11664] m920x_read = error: -19 [ 2177.762395][T11664] dvb-usb: error while querying for an remote control event. [ 2177.878315][T11664] m920x_read = error: -19 [ 2177.878339][T11664] dvb-usb: error while querying for an remote control event. [ 2177.986275][T11664] m920x_read = error: -19 [ 2177.996188][T11664] dvb-usb: error while querying for an remote control event. [ 2178.129430][T11664] m920x_read = error: -19 [ 2178.133990][T11664] dvb-usb: error while querying for an remote control event. [ 2178.266372][T11664] m920x_read = error: -19 [ 2178.270779][T11664] dvb-usb: error while querying for an remote control event. [ 2178.393390][ T5377] "syz.4.9137" (5377) uses obsolete ecb(arc4) skcipher [ 2178.396584][T11664] m920x_read = error: -19 [ 2178.404768][T11664] dvb-usb: error while querying for an remote control event. [ 2178.477538][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9139'. [ 2178.526183][T11664] m920x_read = error: -19 [ 2178.530632][T11664] dvb-usb: error while querying for an remote control event. [ 2178.566484][ T5890] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2178.650853][T11664] m920x_read = error: -19 [ 2178.655338][T11664] dvb-usb: error while querying for an remote control event. [ 2178.738450][ T5890] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2178.753072][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9140'. [ 2178.764417][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.767212][ T5953] m920x_read = error: -19 [ 2178.775185][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.786113][ T5953] dvb-usb: error while querying for an remote control event. [ 2178.792927][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.809708][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.820723][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.832270][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.840997][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.850574][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.865579][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.875434][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.886916][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.900936][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.908874][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.916699][ T4602] m920x_read = error: -19 [ 2178.919293][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.922427][ T4602] dvb-usb: error while querying for an remote control event. [ 2178.933051][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.934352][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.956598][T11664] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2178.956981][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.978168][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.990120][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2179.003004][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2179.014606][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2179.022307][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2179.049849][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2179.061591][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2179.100524][ T4602] m920x_read = error: -19 [ 2179.102124][ T5890] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2179.109613][ T4602] dvb-usb: error while querying for an remote control event. [ 2179.114284][ T5890] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2179.129853][T11664] usb 6-1: Using ep0 maxpacket: 16 [ 2179.132810][T11664] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2179.147066][T11664] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2179.148736][ T5402] tipc: Enabling of bearer rejected, failed to enable media [ 2179.158127][T11664] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2179.165402][ T5890] usb 5-1: Product: syz [ 2179.179834][T11664] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2179.193777][ T5890] usb 5-1: Manufacturer: syz [ 2179.198911][ T5890] usb 5-1: SerialNumber: syz [ 2179.201174][T11664] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2179.218837][ T5890] usb 5-1: config 0 descriptor?? [ 2179.235213][ T5890] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2179.239765][T11664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.251359][T11664] usb 6-1: Product: syz [ 2179.255617][T11664] usb 6-1: Manufacturer: syz [ 2179.260480][ T4602] m920x_read = error: -19 [ 2179.265548][ T4602] dvb-usb: error while querying for an remote control event. [ 2179.276259][T11664] usb 6-1: SerialNumber: syz [ 2179.386190][ T4602] m920x_read = error: -19 [ 2179.390810][ T4602] dvb-usb: error while querying for an remote control event. [ 2179.498488][T11664] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 34 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2179.510462][T16642] m920x_read = error: -19 [ 2179.514836][T16642] dvb-usb: error while querying for an remote control event. [ 2179.618838][ T5890] usb 5-1: USB disconnect, device number 49 [ 2179.626555][T11664] m920x_read = error: -19 [ 2179.630924][T11664] dvb-usb: error while querying for an remote control event. [ 2179.641817][ T5890] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2179.696283][ T4602] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2179.746675][T11664] m920x_read = error: -19 [ 2179.754746][T11664] dvb-usb: error while querying for an remote control event. [ 2179.813030][ T5412] FAULT_INJECTION: forcing a failure. [ 2179.813030][ T5412] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.827623][ T5412] CPU: 1 UID: 0 PID: 5412 Comm: syz.1.9149 Not tainted syzkaller #0 PREEMPT(full) [ 2179.827651][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2179.827666][ T5412] Call Trace: [ 2179.827675][ T5412] [ 2179.827685][ T5412] dump_stack_lvl+0x189/0x250 [ 2179.827722][ T5412] ? __pfx____ratelimit+0x10/0x10 [ 2179.827752][ T5412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2179.827783][ T5412] ? __pfx__printk+0x10/0x10 [ 2179.827824][ T5412] ? __lock_acquire+0xab9/0xd20 [ 2179.827854][ T5412] should_fail_ex+0x414/0x560 [ 2179.827903][ T5412] should_failslab+0xa8/0x100 [ 2179.827928][ T5412] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2179.827958][ T5412] ? skb_clone+0x212/0x3a0 [ 2179.827990][ T5412] skb_clone+0x212/0x3a0 [ 2179.828018][ T5412] __netlink_deliver_tap+0x404/0x850 [ 2179.828053][ T5412] ? netlink_deliver_tap+0x2e/0x1b0 [ 2179.828076][ T5412] netlink_deliver_tap+0x19c/0x1b0 [ 2179.828098][ T5412] netlink_unicast+0x7fa/0x9e0 [ 2179.828138][ T5412] ? __pfx_netlink_unicast+0x10/0x10 [ 2179.828171][ T5412] ? netlink_sendmsg+0x642/0xb30 [ 2179.828191][ T5412] ? skb_put+0x11b/0x210 [ 2179.828215][ T5412] netlink_sendmsg+0x805/0xb30 [ 2179.828247][ T5412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2179.828272][ T5412] ? __import_iovec+0x5d4/0x7f0 [ 2179.828297][ T5412] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2179.828331][ T5412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2179.828351][ T5412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2179.828373][ T5412] __sock_sendmsg+0x21c/0x270 [ 2179.828406][ T5412] ____sys_sendmsg+0x505/0x830 [ 2179.828436][ T5412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2179.828477][ T5412] ___sys_sendmsg+0x21f/0x2a0 [ 2179.828503][ T5412] ? __pfx____sys_sendmsg+0x10/0x10 [ 2179.828566][ T5412] ? __fget_files+0x2a/0x420 [ 2179.828587][ T5412] ? __fget_files+0x3a0/0x420 [ 2179.828619][ T5412] __sys_sendmsg+0x164/0x220 [ 2179.828645][ T5412] ? __pfx___sys_sendmsg+0x10/0x10 [ 2179.828677][ T5412] ? __pfx_ksys_write+0x10/0x10 [ 2179.828712][ T5412] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2179.828745][ T5412] ? lockdep_hardirqs_on+0x9c/0x150 [ 2179.828778][ T5412] __do_fast_syscall_32+0xb6/0x2b0 [ 2179.828809][ T5412] ? lockdep_hardirqs_on+0x9c/0x150 [ 2179.828844][ T5412] do_fast_syscall_32+0x34/0x80 [ 2179.828885][ T5412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2179.828911][ T5412] RIP: 0023:0xf7f14539 [ 2179.828929][ T5412] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2179.828949][ T5412] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2179.828972][ T5412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 2179.828988][ T5412] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2179.829001][ T5412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2179.829014][ T5412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2179.829027][ T5412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2179.829060][ T5412] [ 2179.887146][T11664] m920x_read = error: -19 [ 2180.163947][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2180.175909][ T4602] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 2180.186397][ T4602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.194969][ T30] audit: type=1326 audit(1762877344.426:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.220536][ T4602] usb 3-1: config 0 descriptor?? [ 2180.226614][ T30] audit: type=1326 audit(1762877344.426:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.266220][T11664] dvb-usb: error while querying for an remote control event. [ 2180.280887][ T30] audit: type=1326 audit(1762877344.436:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.303726][ T30] audit: type=1326 audit(1762877344.436:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.325795][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.341365][ T30] audit: type=1326 audit(1762877344.436:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.387143][T11664] m920x_read = error: -19 [ 2180.391621][T11664] dvb-usb: error while querying for an remote control event. [ 2180.433403][ T30] audit: type=1326 audit(1762877344.436:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.456689][ T30] audit: type=1326 audit(1762877344.436:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.478882][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.498043][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9146'. [ 2180.507634][T11664] m920x_read = error: -19 [ 2180.512039][T11664] dvb-usb: error while querying for an remote control event. [ 2180.532175][ T30] audit: type=1326 audit(1762877344.436:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.555769][ T30] audit: type=1326 audit(1762877344.466:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.578080][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.586207][ T5421] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2180.608147][ T30] audit: type=1326 audit(1762877344.466:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.1.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2180.632951][T11664] m920x_read = error: -19 [ 2180.642852][T11664] dvb-usb: error while querying for an remote control event. [ 2180.776159][T11664] m920x_read = error: -19 [ 2180.780669][T11664] dvb-usb: error while querying for an remote control event. [ 2180.867971][ T4602] logitech 0003:046D:C626.00BB: unbalanced delimiter at end of report description [ 2180.881207][ T4602] logitech 0003:046D:C626.00BB: parse failed [ 2180.888352][ T4602] logitech 0003:046D:C626.00BB: probe with driver logitech failed with error -22 [ 2180.900750][T11664] m920x_read = error: -19 [ 2180.905133][T11664] dvb-usb: error while querying for an remote control event. [ 2180.929440][ T5426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9154'. [ 2181.017378][ T4602] m920x_read = error: -19 [ 2181.021790][ T4602] dvb-usb: error while querying for an remote control event. [ 2181.067820][ T5890] usb 3-1: USB disconnect, device number 48 [ 2181.146592][ T4602] m920x_read = error: -19 [ 2181.151075][ T4602] dvb-usb: error while querying for an remote control event. [ 2181.270750][ T4602] m920x_read = error: -19 [ 2181.279653][ T4602] dvb-usb: error while querying for an remote control event. [ 2181.426253][ T4602] m920x_read = error: -19 [ 2181.430665][ T4602] dvb-usb: error while querying for an remote control event. [ 2181.546376][ T4602] m920x_read = error: -19 [ 2181.551729][ T4602] dvb-usb: error while querying for an remote control event. [ 2181.676275][ T5953] m920x_read = error: -19 [ 2181.680834][ T5953] dvb-usb: error while querying for an remote control event. [ 2181.797455][ T5953] m920x_read = error: -19 [ 2181.802023][ T5953] dvb-usb: error while querying for an remote control event. [ 2181.886600][ T4602] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 2181.936150][ T5953] m920x_read = error: -19 [ 2181.940649][ T5953] dvb-usb: error while querying for an remote control event. [ 2182.052401][ T4602] usb 5-1: config 7 has an invalid interface number: 192 but max is 0 [ 2182.071222][ T4602] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.085120][T11664] m920x_read = error: -19 [ 2182.089702][T11664] dvb-usb: error while querying for an remote control event. [ 2182.106330][ T4602] usb 5-1: config 7 has no interface number 0 [ 2182.112731][ T4602] usb 5-1: config 7 interface 192 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2182.136536][ T4602] usb 5-1: config 7 interface 192 has no altsetting 0 [ 2182.148401][ T4602] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 2182.158015][ T4602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.166255][ T4602] usb 5-1: Product: syz [ 2182.171676][ T4602] usb 5-1: Manufacturer: syz [ 2182.181782][ T4602] usb 5-1: SerialNumber: syz [ 2182.217001][T11664] m920x_read = error: -19 [ 2182.221673][T11664] dvb-usb: error while querying for an remote control event. [ 2182.336920][ T4602] m920x_read = error: -19 [ 2182.341662][ T4602] dvb-usb: error while querying for an remote control event. [ 2182.410853][ T4602] usb 6-1: USB disconnect, device number 34 [ 2182.439679][ T4602] usblp1: removed [ 2182.471164][T11664] m920x_read = error: -19 [ 2182.483520][T11664] dvb-usb: error while querying for an remote control event. [ 2182.540736][ T5455] trusted_key: encrypted_key: master key parameter 'ñ' is invalid [ 2182.567314][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 2182.627849][T16642] m920x_read = error: -19 [ 2182.632242][T16642] dvb-usb: error while querying for an remote control event. [ 2182.766740][T11664] m920x_read = error: -19 [ 2182.772633][T11664] dvb-usb: error while querying for an remote control event. [ 2182.896260][T11664] m920x_read = error: -19 [ 2182.901277][T11664] dvb-usb: error while querying for an remote control event. [ 2183.026138][T11664] m920x_read = error: -19 [ 2183.030869][T11664] dvb-usb: error while querying for an remote control event. [ 2183.146352][T11664] m920x_read = error: -19 [ 2183.150894][T11664] dvb-usb: error while querying for an remote control event. [ 2183.250359][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9171'. [ 2183.267876][T11664] m920x_read = error: -19 [ 2183.274687][T11664] dvb-usb: error while querying for an remote control event. [ 2183.409937][T11664] m920x_read = error: -19 [ 2183.418842][T11664] dvb-usb: error while querying for an remote control event. [ 2183.464160][ T5485] loop2: detected capacity change from 0 to 7 [ 2183.472866][ T5485] Dev loop2: unable to read RDB block 7 [ 2183.479755][ T5485] loop2: unable to read partition table [ 2183.510257][ T5485] loop2: partition table beyond EOD, truncated [ 2183.517109][ T5485] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2183.536181][T11664] m920x_read = error: -19 [ 2183.541101][T11664] dvb-usb: error while querying for an remote control event. [ 2183.556100][T28595] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2183.625019][ T5200] Dev loop2: unable to read RDB block 7 [ 2183.630977][ T5200] loop2: unable to read partition table [ 2183.637344][ T5200] loop2: partition table beyond EOD, truncated [ 2183.666672][ T5490] usb usb8: usbfs: process 5490 (syz.1.9174) did not claim interface 0 before use [ 2183.726434][T11664] m920x_read = error: -19 [ 2183.730954][T11664] dvb-usb: error while querying for an remote control event. [ 2183.757012][T28595] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.802815][T28595] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2183.849066][T16642] m920x_read = error: -19 [ 2183.853636][T16642] dvb-usb: error while querying for an remote control event. [ 2183.862168][T28595] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2183.873965][T28595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2183.888625][T28595] usb 6-1: SerialNumber: syz [ 2183.976410][T11664] m920x_read = error: -19 [ 2183.980846][T11664] dvb-usb: error while querying for an remote control event. [ 2184.096491][T11664] m920x_read = error: -19 [ 2184.101085][T11664] dvb-usb: error while querying for an remote control event. [ 2184.226605][T11664] m920x_read = error: -19 [ 2184.231016][T11664] dvb-usb: error while querying for an remote control event. [ 2184.274492][T28595] usb 6-1: 0:2 : does not exist [ 2184.283712][T28595] usb 6-1: unit 5 not found! [ 2184.576193][T11664] m920x_read = error: -19 [ 2184.580605][T11664] dvb-usb: error while querying for an remote control event. [ 2184.592903][T28595] usb 6-1: USB disconnect, device number 35 [ 2184.648456][T23478] udevd[23478]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2184.689512][ T5509] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 2184.727235][T11664] m920x_read = error: -19 [ 2184.746882][T11664] dvb-usb: error while querying for an remote control event. [ 2184.785816][ T5890] usb 5-1: USB disconnect, device number 50 [ 2184.856333][T16642] m920x_read = error: -19 [ 2184.860781][T16642] dvb-usb: error while querying for an remote control event. [ 2185.026930][T11664] m920x_read = error: -19 [ 2185.039182][T11664] dvb-usb: error while querying for an remote control event. [ 2185.298441][T11664] m920x_read = error: -19 [ 2185.317647][ T5527] FAULT_INJECTION: forcing a failure. [ 2185.317647][ T5527] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.332531][T11664] dvb-usb: error while querying for an remote control event. [ 2185.395912][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.0.9186 Not tainted syzkaller #0 PREEMPT(full) [ 2185.395941][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2185.395959][ T5527] Call Trace: [ 2185.395967][ T5527] [ 2185.395976][ T5527] dump_stack_lvl+0x189/0x250 [ 2185.396011][ T5527] ? __pfx____ratelimit+0x10/0x10 [ 2185.396038][ T5527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2185.396067][ T5527] ? __pfx__printk+0x10/0x10 [ 2185.396092][ T5527] ? __lock_acquire+0xab9/0xd20 [ 2185.396133][ T5527] should_fail_ex+0x414/0x560 [ 2185.396170][ T5527] should_failslab+0xa8/0x100 [ 2185.396194][ T5527] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2185.396224][ T5527] ? skb_clone+0x212/0x3a0 [ 2185.396272][ T5527] skb_clone+0x212/0x3a0 [ 2185.396301][ T5527] __netlink_deliver_tap+0x404/0x850 [ 2185.396337][ T5527] ? netlink_deliver_tap+0x2e/0x1b0 [ 2185.396360][ T5527] netlink_deliver_tap+0x19c/0x1b0 [ 2185.396383][ T5527] netlink_unicast+0x7fa/0x9e0 [ 2185.396424][ T5527] ? __pfx_netlink_unicast+0x10/0x10 [ 2185.396457][ T5527] ? netlink_sendmsg+0x642/0xb30 [ 2185.396476][ T5527] ? skb_put+0x11b/0x210 [ 2185.396501][ T5527] netlink_sendmsg+0x805/0xb30 [ 2185.396533][ T5527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2185.396558][ T5527] ? __import_iovec+0x5d4/0x7f0 [ 2185.396583][ T5527] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2185.396623][ T5527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2185.396643][ T5527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2185.396666][ T5527] __sock_sendmsg+0x21c/0x270 [ 2185.396697][ T5527] ____sys_sendmsg+0x505/0x830 [ 2185.396728][ T5527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2185.396770][ T5527] ___sys_sendmsg+0x21f/0x2a0 [ 2185.396796][ T5527] ? __pfx____sys_sendmsg+0x10/0x10 [ 2185.396856][ T5527] ? __fget_files+0x2a/0x420 [ 2185.396876][ T5527] ? __fget_files+0x3a0/0x420 [ 2185.396908][ T5527] __sys_sendmsg+0x164/0x220 [ 2185.396933][ T5527] ? __pfx___sys_sendmsg+0x10/0x10 [ 2185.396966][ T5527] ? __pfx_ksys_write+0x10/0x10 [ 2185.397000][ T5527] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2185.397035][ T5527] ? lockdep_hardirqs_on+0x9c/0x150 [ 2185.397069][ T5527] __do_fast_syscall_32+0xb6/0x2b0 [ 2185.397102][ T5527] ? lockdep_hardirqs_on+0x9c/0x150 [ 2185.397143][ T5527] do_fast_syscall_32+0x34/0x80 [ 2185.397175][ T5527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2185.397201][ T5527] RIP: 0023:0xf70dd539 [ 2185.397219][ T5527] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2185.397237][ T5527] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2185.397260][ T5527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2185.397275][ T5527] RDX: 0000000000000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 2185.397287][ T5527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2185.397300][ T5527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2185.397313][ T5527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2185.397346][ T5527] [ 2185.692347][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.796506][ T5531] input: syz0 as /devices/virtual/input/input133 [ 2185.969833][ T4602] m920x_read = error: -19 [ 2185.974250][ T4602] dvb-usb: error while querying for an remote control event. [ 2186.090099][T11664] m920x_read = error: -19 [ 2186.104022][T11664] dvb-usb: error while querying for an remote control event. [ 2186.163512][ T5537] [ 2186.165901][ T5537] ====================================================== [ 2186.172974][ T5537] WARNING: possible circular locking dependency detected [ 2186.180010][ T5537] syzkaller #0 Not tainted [ 2186.184427][ T5537] ------------------------------------------------------ [ 2186.191441][ T5537] syz.4.9190/5537 is trying to acquire lock: [ 2186.197423][ T5537] ffff888026fba218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 2186.209627][ T5537] [ 2186.209627][ T5537] but task is already holding lock: [ 2186.217002][ T5537] ffff88805195b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 2186.226893][ T5537] [ 2186.226893][ T5537] which lock already depends on the new lock. [ 2186.226893][ T5537] [ 2186.237305][ T5537] [ 2186.237305][ T5537] the existing dependency chain (in reverse order) is: [ 2186.246322][ T5537] [ 2186.246322][ T5537] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 2186.254589][ T5537] lock_acquire+0x120/0x360 [ 2186.259621][ T5537] _raw_spin_lock+0x2e/0x40 [ 2186.264658][ T5537] sch_direct_xmit+0x153/0x4b0 [ 2186.270110][ T5537] __dev_queue_xmit+0x1857/0x3b50 [ 2186.275661][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.281308][ T5537] ip6_output+0x340/0x550 [ 2186.286171][ T5537] NF_HOOK+0x9e/0x380 [ 2186.290683][ T5537] mld_sendpack+0x8d4/0xe60 [ 2186.295718][ T5537] mld_ifc_work+0x83e/0xd60 [ 2186.300754][ T5537] process_scheduled_works+0xae1/0x17b0 [ 2186.306824][ T5537] worker_thread+0x8a0/0xda0 [ 2186.311942][ T5537] kthread+0x711/0x8a0 [ 2186.316549][ T5537] ret_from_fork+0x4bc/0x870 [ 2186.321669][ T5537] ret_from_fork_asm+0x1a/0x30 [ 2186.326967][ T5537] [ 2186.326967][ T5537] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 2186.337327][ T5537] validate_chain+0xb9b/0x2140 [ 2186.342629][ T5537] __lock_acquire+0xab9/0xd20 [ 2186.347837][ T5537] lock_acquire+0x120/0x360 [ 2186.352867][ T5537] _raw_spin_lock+0x2e/0x40 [ 2186.357900][ T5537] __dev_queue_xmit+0x22b7/0x3b50 [ 2186.363458][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.369098][ T5537] ip6_output+0x340/0x550 [ 2186.373984][ T5537] ndisc_send_skb+0xbce/0x1510 [ 2186.379281][ T5537] ndisc_solicit+0x444/0x610 [ 2186.384396][ T5537] __neigh_event_send+0xf70/0x1560 [ 2186.390068][ T5537] neigh_resolve_output+0x198/0x750 [ 2186.395795][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.401451][ T5537] ip6_output+0x340/0x550 [ 2186.406307][ T5537] ip6_send_skb+0x1d5/0x390 [ 2186.411337][ T5537] icmp6_send+0x12c6/0x1940 [ 2186.416369][ T5537] ip6_link_failure+0x3b/0x4c0 [ 2186.421665][ T5537] ip_tunnel_xmit+0x175b/0x2390 [ 2186.427072][ T5537] __gre_xmit+0x19a/0x240 [ 2186.431927][ T5537] erspan_xmit+0xa04/0x1220 [ 2186.436975][ T5537] dev_hard_start_xmit+0x2d7/0x830 [ 2186.442612][ T5537] sch_direct_xmit+0x241/0x4b0 [ 2186.447914][ T5537] __qdisc_run+0xb16/0x15f0 [ 2186.452940][ T5537] __dev_queue_xmit+0x1056/0x3b50 [ 2186.458484][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.464132][ T5537] ip6_output+0x340/0x550 [ 2186.468988][ T5537] ip6_mr_output+0x4e9/0x1100 [ 2186.474200][ T5537] rawv6_send_hdrinc+0xe16/0x17a0 [ 2186.479752][ T5537] rawv6_sendmsg+0x12ee/0x1830 [ 2186.485085][ T5537] __sock_sendmsg+0x19c/0x270 [ 2186.490304][ T5537] ____sys_sendmsg+0x505/0x830 [ 2186.495601][ T5537] ___sys_sendmsg+0x21f/0x2a0 [ 2186.500807][ T5537] __sys_sendmsg+0x164/0x220 [ 2186.505920][ T5537] __do_fast_syscall_32+0xb6/0x2b0 [ 2186.511566][ T5537] do_fast_syscall_32+0x34/0x80 [ 2186.516953][ T5537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2186.523818][ T5537] [ 2186.523818][ T5537] other info that might help us debug this: [ 2186.523818][ T5537] [ 2186.534058][ T5537] Possible unsafe locking scenario: [ 2186.534058][ T5537] [ 2186.541515][ T5537] CPU0 CPU1 [ 2186.546883][ T5537] ---- ---- [ 2186.552249][ T5537] lock(&qdisc_xmit_lock_key#4); [ 2186.557287][ T5537] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 2186.566935][ T5537] lock(&qdisc_xmit_lock_key#4); [ 2186.574553][ T5537] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 2186.581680][ T5537] [ 2186.581680][ T5537] *** DEADLOCK *** [ 2186.581680][ T5537] [ 2186.589828][ T5537] 12 locks held by syz.4.9190/5537: [ 2186.595043][ T5537] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 2186.604802][ T5537] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 2186.614212][ T5537] #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 2186.623287][ T5537] #3: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 2186.633229][ T5537] #4: ffff88805195b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 2186.643522][ T5537] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 2186.652664][ T5537] #6: ffff88802f6581e0 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 2186.662074][ T5537] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 2186.671344][ T5537] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 2186.680430][ T5537] #9: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 2186.689932][ T5537] #10: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 2186.699087][ T5537] #11: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 2186.709118][ T5537] [ 2186.709118][ T5537] stack backtrace: [ 2186.715004][ T5537] CPU: 0 UID: 0 PID: 5537 Comm: syz.4.9190 Not tainted syzkaller #0 PREEMPT(full) [ 2186.715024][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2186.715035][ T5537] Call Trace: [ 2186.715043][ T5537] [ 2186.715050][ T5537] dump_stack_lvl+0x189/0x250 [ 2186.715077][ T5537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2186.715100][ T5537] ? __pfx__printk+0x10/0x10 [ 2186.715117][ T5537] ? print_lock_name+0xde/0x100 [ 2186.715134][ T5537] print_circular_bug+0x2ee/0x310 [ 2186.715158][ T5537] check_noncircular+0x134/0x160 [ 2186.715181][ T5537] validate_chain+0xb9b/0x2140 [ 2186.715202][ T5537] ? lockdep_unlock+0x89/0x120 [ 2186.715240][ T5537] __lock_acquire+0xab9/0xd20 [ 2186.715258][ T5537] ? __dev_queue_xmit+0x22b7/0x3b50 [ 2186.715278][ T5537] lock_acquire+0x120/0x360 [ 2186.715293][ T5537] ? __dev_queue_xmit+0x22b7/0x3b50 [ 2186.715314][ T5537] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 2186.715335][ T5537] ? check_noncircular+0xe0/0x160 [ 2186.715357][ T5537] _raw_spin_lock+0x2e/0x40 [ 2186.715378][ T5537] ? __dev_queue_xmit+0x22b7/0x3b50 [ 2186.715397][ T5537] __dev_queue_xmit+0x22b7/0x3b50 [ 2186.715420][ T5537] ? __dev_queue_xmit+0x27b/0x3b50 [ 2186.715443][ T5537] ? neigh_resolve_output+0x438/0x750 [ 2186.715469][ T5537] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2186.715489][ T5537] ? read_seqbegin+0x122/0x250 [ 2186.715512][ T5537] ? neigh_resolve_output+0x438/0x750 [ 2186.715536][ T5537] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.715559][ T5537] ? read_seqbegin+0x1ac/0x250 [ 2186.715582][ T5537] ? __pfx_read_seqbegin+0x10/0x10 [ 2186.715605][ T5537] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2186.715622][ T5537] ? eth_header+0x11b/0x200 [ 2186.715659][ T5537] ? __asan_memcpy+0x40/0x70 [ 2186.715692][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.715724][ T5537] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2186.715751][ T5537] ? ip6_mtu+0x7d/0x490 [ 2186.715772][ T5537] ? ip6_mtu+0x38c/0x490 [ 2186.715795][ T5537] ? ip6_finish_output+0x2ef/0x4e0 [ 2186.715818][ T5537] ? ip6_output+0x126/0x550 [ 2186.715841][ T5537] ip6_output+0x340/0x550 [ 2186.715865][ T5537] ndisc_send_skb+0xbce/0x1510 [ 2186.715885][ T5537] ? ndisc_send_skb+0x1e4/0x1510 [ 2186.715906][ T5537] ? __pfx_ndisc_send_skb+0x10/0x10 [ 2186.715925][ T5537] ? __pfx_dst_output+0x10/0x10 [ 2186.715946][ T5537] ? ipv6_get_lladdr+0x2b/0x3f0 [ 2186.715963][ T5537] ? ipv6_get_lladdr+0x2b/0x3f0 [ 2186.715981][ T5537] ? ipv6_get_lladdr+0x2b/0x3f0 [ 2186.716001][ T5537] ? ipv6_get_lladdr+0x378/0x3f0 [ 2186.716021][ T5537] ? ipv6_get_lladdr+0x2b/0x3f0 [ 2186.716041][ T5537] ndisc_solicit+0x444/0x610 [ 2186.716068][ T5537] ? __pfx_ndisc_solicit+0x10/0x10 [ 2186.716096][ T5537] ? __neigh_event_send+0xf08/0x1560 [ 2186.716126][ T5537] ? __pfx_ndisc_solicit+0x10/0x10 [ 2186.716151][ T5537] __neigh_event_send+0xf70/0x1560 [ 2186.716184][ T5537] ? ___neigh_create+0x1c83/0x2260 [ 2186.716215][ T5537] neigh_resolve_output+0x198/0x750 [ 2186.716260][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.716304][ T5537] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2186.716337][ T5537] ? ip6_mtu+0x7d/0x490 [ 2186.716362][ T5537] ? ip6_mtu+0x38c/0x490 [ 2186.716388][ T5537] ? ip6_finish_output+0x2ef/0x4e0 [ 2186.716411][ T5537] ? ip6_output+0x126/0x550 [ 2186.716434][ T5537] ip6_output+0x340/0x550 [ 2186.716456][ T5537] ? ip6_send_skb+0x10f/0x390 [ 2186.716482][ T5537] ip6_send_skb+0x1d5/0x390 [ 2186.716509][ T5537] icmp6_send+0x12c6/0x1940 [ 2186.716527][ T5537] ? __skb_flow_dissect+0x22d5/0x68b0 [ 2186.716545][ T5537] ? icmp6_send+0x1e9/0x1940 [ 2186.716570][ T5537] ? __pfx_icmp6_send+0x10/0x10 [ 2186.716587][ T5537] ? __lock_acquire+0xab9/0xd20 [ 2186.716613][ T5537] ? ip6_neigh_lookup+0x14e/0x470 [ 2186.716633][ T5537] ? ip6_neigh_lookup+0x14e/0x470 [ 2186.716651][ T5537] ? ip6_neigh_lookup+0x397/0x470 [ 2186.716669][ T5537] ? ip6_neigh_lookup+0x14e/0x470 [ 2186.716688][ T5537] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 2186.716706][ T5537] ? is_bpf_text_address+0x26/0x2b0 [ 2186.716728][ T5537] ip6_link_failure+0x3b/0x4c0 [ 2186.716749][ T5537] ip_tunnel_xmit+0x175b/0x2390 [ 2186.716776][ T5537] ? arch_stack_walk+0xfc/0x150 [ 2186.716798][ T5537] ? ip_tunnel_xmit+0x130/0x2390 [ 2186.716825][ T5537] ? stack_trace_save+0x9c/0xe0 [ 2186.716851][ T5537] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 2186.716875][ T5537] ? gre_build_header+0x31c/0xa40 [ 2186.716898][ T5537] ? check_noncircular+0xe0/0x160 [ 2186.716921][ T5537] ? __pfx_gre_build_header+0x10/0x10 [ 2186.716946][ T5537] ? __pfx_skb_network_protocol+0x10/0x10 [ 2186.716967][ T5537] __gre_xmit+0x19a/0x240 [ 2186.716993][ T5537] ? __pfx___gre_xmit+0x10/0x10 [ 2186.717015][ T5537] ? __asan_memset+0x22/0x50 [ 2186.717037][ T5537] ? erspan_build_header+0x19c/0x370 [ 2186.717064][ T5537] erspan_xmit+0xa04/0x1220 [ 2186.717092][ T5537] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 2186.717117][ T5537] ? __pfx_erspan_xmit+0x10/0x10 [ 2186.717140][ T5537] ? __lock_acquire+0xab9/0xd20 [ 2186.717160][ T5537] dev_hard_start_xmit+0x2d7/0x830 [ 2186.717186][ T5537] sch_direct_xmit+0x241/0x4b0 [ 2186.717213][ T5537] ? __pfx_sch_direct_xmit+0x10/0x10 [ 2186.717247][ T5537] __qdisc_run+0xb16/0x15f0 [ 2186.717272][ T5537] ? __dev_queue_xmit+0xce1/0x3b50 [ 2186.717297][ T5537] __dev_queue_xmit+0x1056/0x3b50 [ 2186.717318][ T5537] ? register_lock_class+0x51/0x320 [ 2186.717337][ T5537] ? __dev_queue_xmit+0x27b/0x3b50 [ 2186.717363][ T5537] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2186.717384][ T5537] ? read_seqbegin+0x122/0x250 [ 2186.717408][ T5537] ? neigh_resolve_output+0x438/0x750 [ 2186.717432][ T5537] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.717458][ T5537] ? read_seqbegin+0x1ac/0x250 [ 2186.717482][ T5537] ? __pfx_read_seqbegin+0x10/0x10 [ 2186.717506][ T5537] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2186.717524][ T5537] ? eth_header+0x11b/0x200 [ 2186.717542][ T5537] ? __asan_memcpy+0x40/0x70 [ 2186.717574][ T5537] ip6_finish_output2+0xfb3/0x1480 [ 2186.717605][ T5537] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2186.717632][ T5537] ? ip6_mtu+0x7d/0x490 [ 2186.717653][ T5537] ? ip6_mtu+0x38c/0x490 [ 2186.717676][ T5537] ? ip6_finish_output+0x2ef/0x4e0 [ 2186.717699][ T5537] ? ip6_output+0x126/0x550 [ 2186.717721][ T5537] ip6_output+0x340/0x550 [ 2186.717746][ T5537] ip6_mr_output+0x4e9/0x1100 [ 2186.717775][ T5537] ? ip6_mr_output+0x1ca/0x1100 [ 2186.717801][ T5537] ? __pfx_ip6_mr_output+0x10/0x10 [ 2186.717841][ T5537] ? ip6t_do_table+0x1db/0x1560 [ 2186.717866][ T5537] ? __pfx_ip6t_do_table+0x10/0x10 [ 2186.717895][ T5537] ? skb_dst+0x4f/0xd0 [ 2186.717911][ T5537] ? dst_output+0x17b/0x1c0 [ 2186.717927][ T5537] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 2186.717945][ T5537] rawv6_send_hdrinc+0xe16/0x17a0 [ 2186.717968][ T5537] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 2186.717986][ T5537] ? txopt_get+0x335/0x3f0 [ 2186.718003][ T5537] ? __pfx_dst_output+0x10/0x10 [ 2186.718019][ T5537] ? __pfx_txopt_get+0x10/0x10 [ 2186.718038][ T5537] rawv6_sendmsg+0x12ee/0x1830 [ 2186.718061][ T5537] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2186.718086][ T5537] ? __pfx_aa_sk_perm+0x10/0x10 [ 2186.718111][ T5537] ? sock_rps_record_flow+0x19/0x410 [ 2186.718138][ T5537] ? inet_sendmsg+0x2f4/0x370 [ 2186.718152][ T5537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2186.718170][ T5537] __sock_sendmsg+0x19c/0x270 [ 2186.718194][ T5537] ____sys_sendmsg+0x505/0x830 [ 2186.718213][ T5537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2186.718240][ T5537] ? __pfx_futex_wake_mark+0x10/0x10 [ 2186.718259][ T5537] ___sys_sendmsg+0x21f/0x2a0 [ 2186.718277][ T5537] ? __pfx____sys_sendmsg+0x10/0x10 [ 2186.718307][ T5537] ? __fget_files+0x2a/0x420 [ 2186.718323][ T5537] ? __fget_files+0x3a0/0x420 [ 2186.718342][ T5537] __sys_sendmsg+0x164/0x220 [ 2186.718359][ T5537] ? __pfx___sys_sendmsg+0x10/0x10 [ 2186.718380][ T5537] ? rcu_is_watching+0x15/0xb0 [ 2186.718400][ T5537] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2186.718426][ T5537] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.718451][ T5537] __do_fast_syscall_32+0xb6/0x2b0 [ 2186.718478][ T5537] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.718502][ T5537] do_fast_syscall_32+0x34/0x80 [ 2186.718527][ T5537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2186.718548][ T5537] RIP: 0023:0xf7fc7539 [ 2186.718563][ T5537] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2186.718578][ T5537] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2186.718596][ T5537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2186.718608][ T5537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2186.718618][ T5537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2186.718628][ T5537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2186.718639][ T5537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2186.718655][ T5537] [ 2187.555332][ C0] vkms_vblank_simulate: vblank timer overrun [ 2187.570035][T11664] m920x_read = error: -19 [ 2187.574513][T11664] dvb-usb: error while querying for an remote control event. [ 2187.686464][ T4602] m920x_read = error: -19 [ 2187.690863][ T4602] dvb-usb: error while querying for an remote control event. [ 2187.777461][ T5953] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2187.832905][ T4602] m920x_read = error: -19 [ 2187.837402][ T4602] dvb-usb: error while querying for an remote control event. [ 2187.946416][ T4602] m920x_read = error: -19 [ 2187.950818][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.066360][ T4602] m920x_read = error: -19 [ 2188.070762][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.186213][ T4602] m920x_read = error: -19 [ 2188.190612][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.306104][ T4602] m920x_read = error: -19 [ 2188.310511][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.426163][ T4602] m920x_read = error: -19 [ 2188.430571][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.546133][ T4602] m920x_read = error: -19 [ 2188.550530][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.583931][T27672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.676186][ T4602] m920x_read = error: -19 [ 2188.680585][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.750914][T27672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.796765][ T4602] m920x_read = error: -19 [ 2188.801170][ T4602] dvb-usb: error while querying for an remote control event. [ 2188.852862][T27672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.918385][ T5953] m920x_read = error: -19 [ 2188.922795][ T5953] dvb-usb: error while querying for an remote control event. [ 2188.942613][T27672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.028463][T27672] bridge_slave_1: left allmulticast mode [ 2189.034426][T27672] bridge_slave_1: left promiscuous mode [ 2189.041748][T27672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.052182][T27672] bridge_slave_0: left allmulticast mode [ 2189.058353][T11664] m920x_read = error: -19 [ 2189.062714][T11664] dvb-usb: error while querying for an remote control event. [ 2189.071512][T27672] bridge_slave_0: left promiscuous mode [ 2189.077637][T27672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.186774][T11664] m920x_read = error: -19 [ 2189.191156][T11664] dvb-usb: error while querying for an remote control event. [ 2189.223384][T27672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2189.234096][T27672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2189.244262][T27672] bond0 (unregistering): Released all slaves [ 2189.306412][T11664] m920x_read = error: -19 [ 2189.310820][T11664] dvb-usb: error while querying for an remote control event. [ 2189.426125][ T5953] m920x_read = error: -19 [ 2189.430552][ T5953] dvb-usb: error while querying for an remote control event. [ 2189.471201][T27672] hsr_slave_0: left promiscuous mode [ 2189.477464][T27672] hsr_slave_1: left promiscuous mode [ 2189.483426][T27672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2189.494789][T27672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2189.504169][T27672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2189.512421][T27672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2189.526169][T27672] veth1_macvtap: left promiscuous mode [ 2189.532905][T27672] veth0_macvtap: left promiscuous mode [ 2189.539197][T27672] veth1_vlan: left promiscuous mode [ 2189.546175][ T5953] m920x_read = error: -19 [ 2189.550552][ T5953] dvb-usb: error while querying for an remote control event. [ 2189.676772][ T5953] m920x_read = error: -19 [ 2189.681177][ T5953] dvb-usb: error while querying for an remote control event. [ 2189.768058][T27672] team0 (unregistering): Port device team_slave_1 removed [ 2189.797985][T27672] team0 (unregistering): Port device team_slave_0 removed [ 2189.806134][ T5953] m920x_read = error: -19 [ 2189.810519][ T5953] dvb-usb: error while querying for an remote control event. [ 2189.926992][ T5953] m920x_read = error: -19 [ 2189.931388][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.046804][ T5953] m920x_read = error: -19 [ 2190.051218][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.168262][ T5953] m920x_read = error: -19 [ 2190.172662][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.224675][T27672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.236445][T27672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.282318][T27672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.287066][ T4602] m920x_read = error: -19 [ 2190.297161][T27672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.299368][ T4602] dvb-usb: error while querying for an remote control event. [ 2190.381936][T27672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.392620][T27672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.416301][ T5953] m920x_read = error: -19 [ 2190.420716][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.442505][T27672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.456598][T27672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.536273][ T5953] m920x_read = error: -19 [ 2190.540687][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.554833][T27672] bridge_slave_1: left allmulticast mode [ 2190.564745][T27672] bridge_slave_1: left promiscuous mode [ 2190.571968][T27672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.582309][T27672] bridge_slave_0: left allmulticast mode [ 2190.588257][T27672] bridge_slave_0: left promiscuous mode [ 2190.593996][T27672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.667100][ T5953] m920x_read = error: -19 [ 2190.671492][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.806630][ T5953] m920x_read = error: -19 [ 2190.811055][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.926152][ T5953] m920x_read = error: -19 [ 2190.930642][ T5953] dvb-usb: error while querying for an remote control event. [ 2190.949638][T27672] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 2191.046109][ T5953] m920x_read = error: -19 [ 2191.050535][ T5953] dvb-usb: error while querying for an remote control event. [ 2191.111250][T27672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2191.125016][T27672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2191.135268][T27672] bond0 (unregistering): Released all slaves [ 2191.166296][ T5953] m920x_read = error: -19 [ 2191.170701][ T5953] dvb-usb: error while querying for an remote control event. [ 2191.286864][ T5953] m920x_read = error: -19 [ 2191.295243][ T5953] dvb-usb: error while querying for an remote control event. [ 2191.374266][T27672] hsr_slave_0: left promiscuous mode [ 2191.380633][T27672] hsr_slave_1: left promiscuous mode [ 2191.393601][T27672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2191.401351][T27672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2191.408797][ T5953] m920x_read = error: -19 [ 2191.413156][ T5953] dvb-usb: error while querying for an remote control event. [ 2191.421869][T27672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2191.429730][T27672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2191.444400][T27672] veth1_macvtap: left promiscuous mode [ 2191.450643][T27672] veth0_macvtap: left promiscuous mode [ 2191.456346][T27672] veth1_vlan: left promiscuous mode [ 2191.461664][T27672] veth0_vlan: left promiscuous mode [ 2191.537088][ T5953] m920x_read = error: -19 [ 2191.541594][ T5953] dvb-usb: error while querying for an remote control event. [ 2191.645595][T27672] team0 (unregistering): Port device team_slave_1 removed [ 2191.656229][ T5953] m920x_read = error: -19 [ 2191.660626][ T5953] dvb-usb: error while querying for an remote control event. [ 2191.684648][T27672] team0 (unregistering): Port device team_slave_0 removed [ 2191.777382][T11664] m920x_read = error: -19 [ 2191.781780][T11664] dvb-usb: error while querying for an remote control event. [ 2191.896426][ T4602] m920x_read = error: -19 [ 2191.900824][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.020641][ T4602] m920x_read = error: -19 [ 2192.025051][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.166604][ T4602] m920x_read = error: -19 [ 2192.170984][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.286295][ T4602] m920x_read = error: -19 [ 2192.290700][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.406165][ T4602] m920x_read = error: -19 [ 2192.410567][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.527797][ T4602] m920x_read = error: -19 [ 2192.532209][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.646104][ T4602] m920x_read = error: -19 [ 2192.650512][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.766169][ T4602] m920x_read = error: -19 [ 2192.770573][ T4602] dvb-usb: error while querying for an remote control event. [ 2192.888848][ T4602] m920x_read = error: -19 [ 2192.893272][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.006507][ T4602] m920x_read = error: -19 [ 2193.012320][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.126408][ T4602] m920x_read = error: -19 [ 2193.131044][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.246304][ T4602] m920x_read = error: -19 [ 2193.250706][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.367318][ T4602] m920x_read = error: -19 [ 2193.371712][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.486828][ T4602] m920x_read = error: -19 [ 2193.491224][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.606331][ T5953] m920x_read = error: -19 [ 2193.610759][ T5953] dvb-usb: error while querying for an remote control event. [ 2193.727227][ T5953] m920x_read = error: -19 [ 2193.731608][ T5953] dvb-usb: error while querying for an remote control event. [ 2193.846441][ T4602] m920x_read = error: -19 [ 2193.850926][ T4602] dvb-usb: error while querying for an remote control event. [ 2193.966259][ T4602] m920x_read = error: -19 [ 2193.970698][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.087981][ T4602] m920x_read = error: -19 [ 2194.092474][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.206369][ T4602] m920x_read = error: -19 [ 2194.210797][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.326272][ T4602] m920x_read = error: -19 [ 2194.330815][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.446457][ T4602] m920x_read = error: -19 [ 2194.450851][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.566222][ T4602] m920x_read = error: -19 [ 2194.570692][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.686360][ T4602] m920x_read = error: -19 [ 2194.690761][ T4602] dvb-usb: error while querying for an remote control event. [ 2194.808106][T16642] m920x_read = error: -19 [ 2194.812506][T16642] dvb-usb: error while querying for an remote control event. [ 2194.926371][T16642] m920x_read = error: -19 [ 2194.930760][T16642] dvb-usb: error while querying for an remote control event. [ 2195.046340][T16642] m920x_read = error: -19 [ 2195.050744][T16642] dvb-usb: error while querying for an remote control event. [ 2195.167064][T16642] m920x_read = error: -19 [ 2195.171442][T16642] dvb-usb: error while querying for an remote control event. [ 2195.286405][T16642] m920x_read = error: -19 [ 2195.290815][T16642] dvb-usb: error while querying for an remote control event. [ 2195.406947][T16642] m920x_read = error: -19 [ 2195.411344][T16642] dvb-usb: error while querying for an remote control event. [ 2195.526323][T16642] m920x_read = error: -19 [ 2195.530794][T16642] dvb-usb: error while querying for an remote control event. [ 2195.646816][T16642] m920x_read = error: -19 [ 2195.651188][T16642] dvb-usb: error while querying for an remote control event. [ 2195.766340][T16642] m920x_read = error: -19 [ 2195.770788][T16642] dvb-usb: error while querying for an remote control event. [ 2195.886588][T16642] m920x_read = error: -19 [ 2195.890977][T16642] dvb-usb: error while querying for an remote control event. [ 2196.011557][T16642] m920x_read = error: -19 [ 2196.016182][T16642] dvb-usb: error while querying for an remote control event. [ 2196.126316][T16642] m920x_read = error: -19 [ 2196.130814][T16642] dvb-usb: error while querying for an remote control event.