last executing test programs: 22m33.603156855s ago: executing program 1 (id=899): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x32, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 22m32.810939014s ago: executing program 1 (id=905): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a01c0533e1cc2475a7931ae61919b99628d1bd11d310c94969064ca4a723b018fe1fffed8116d90fe2f692f83bc26c490866a1426c84bfbac5af1590d5ff409bfe372acebb5f7528cc8475a5d66c27421cdaebd80dcafa083de56acb4e81d6d38820a4bb8be3ff03d98d36b51b1104b03c306dbc063a9a3f3c44e6c12a276dcc658afc86272a82efaaf0f1d99514165fbc3259630c725d068848754b2a5ba009d95c", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a01c0533e1cc2475a7931ae61919b99628d1bd11d310c94969064ca4a723b018fe1fffed8116d90fe2f692f83bc26c490866a1426c84bfbac5af1590d5ff409bfe372acebb5f7528cc8475a5d66c27421cdaebd80dcafa083de56acb4e81d6d38820a4bb8be3ff03d98d36b51b1104b03c306dbc063a9a3f3c44e6c12a276dcc658afc86272a82efaaf0f1d99514165fbc3259630c725d068848754b2a5ba009d95c", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c0002800800", @ANYBLOB='\b'], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r12, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="120101020000ed20ba0d001040000102030109027c000301fe5006080b01020100200009040000000101200009240101040b1c00040c2403820403f84df25e"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xe5, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x7, 0x10, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x49}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0xa], 0xd}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x4, "be43"}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x4, 0xff, "6a9a1a98"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0xfd, "8429ca5d0d"}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0xff, "9854"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x2, 0x5, 0x9, 0x7, 0x3, 0x5], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0xff, 0x4, {0x7, 0x25, 0x1, 0x4, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x1, 0x80, "62540985"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x7, 0x1, 'e'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x81, "dc102048fcf144cb"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x10, 0x7, "de9c", "b33d54"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x9, 0x7, {0x7, 0x25, 0x1, 0x8, 0x4}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x0, 0x87, 0x40, 0xfe}, 0x7d, &(0x7f0000000080)={0x5, 0xf, 0x7d, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x205e, 0xf00, 0xc, [0xc008, 0xf, 0xe091]}, @ext_cap={0x7, 0x10, 0x2, 0x4cb6a926f8418bf2, 0x5, 0x2, 0xf4}, @generic={0x59, 0x10, 0xb, "2fec8e32e385009314e8a91939cb0e906983e3ee7e660e3514fe3edb674e30fda34397c188af53a7cbf577b7af08318952ac6cd89017942c67e048a3494b82e4b004c1f24e37b1292159d2068ba87c181dcd002a5dde"}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2401}}, {0xef, &(0x7f00000006c0)=@string={0xef, 0x3, "28e05765326dd82a83d91d7cf5e0e49f4867fab21494fbacbe25f54f15ddad976d7ebb814c0800d9f01c94a31943e4c7880b3e2fa83e7c53943ab83e28d982b69f7d39312f3d9967db3f6d14a963113a7f4f5beb733cb8b3e11a8ce5871f12334d0a7b643842ce4fdf3e293f5ff2b8ee449b3e8f8dc44f1534ca46b0f7cf76628b04ea7f5379db56a896f5279cda25747f288f934b59e8d5fd3bc6779550094e53a3357f2caeaaeb3345f9cceb0831974ece7cbc8f026633266210792affc7925b0a26fa2fb8d616fb06eef4c5bcc594eb0cc679d76368622eb947721ff7d6c8f285788323df7bb2045293ce3d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x804}}, {0x9, &(0x7f00000002c0)=@string={0x9, 0x3, "c556305534e3b6"}}, {0x2d, &(0x7f0000000300)=@string={0x2d, 0x3, "0e690468379d3eafc532cb9de709b16288b724b15ce3994ae6c75dc1823ae99749d478d12954bb498edbc9"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x804}}]}) 22m29.581555101s ago: executing program 1 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x1800) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x9, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x100e4, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 22m29.337704982s ago: executing program 1 (id=921): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x1, 0x1a}) 22m28.68123406s ago: executing program 1 (id=923): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000100", [0x8, 0xffffffff9673e35d]}}) 22m28.270836866s ago: executing program 1 (id=928): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}], 0x18}, 0x4040) 22m27.587879017s ago: executing program 32 (id=928): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}], 0x18}, 0x4040) 11m51.566847035s ago: executing program 4 (id=3592): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1) readahead(r0, 0x4, 0x7fff) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000a80)=0xe7) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfe, {0x20}, [@typed={0x12, 0x49, 0x0, 0x0, @str='/dev/swradio#\x00'}, @nested={0x24, 0x108, 0x0, 0x1, [@generic="22e7df4ebeb640cf614ef0f3495571a2", @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x83}, @nested={0x4, 0x13f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x20008055) unshare(0x22020400) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xf, [0x0, 0x2]}, @lsrr={0x83, 0x3, 0x61}, @timestamp_prespec={0x44, 0x4, 0xf5, 0x3, 0x7}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 11m51.148009919s ago: executing program 4 (id=3595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x44) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x3) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0xd}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 11m50.883719286s ago: executing program 4 (id=3596): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25, 0xfffffffffffffffe, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x222800, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4008af20, &(0x7f0000000a40)={0x0, 0x1, 0x0, [0xff, 0x7, 0x68d, 0x3, 0x401], [0x71bf62aa, 0x1, 0xffffffff, 0x5, 0x81, 0x81, 0x7, 0x8, 0xf841, 0x5, 0x101, 0x8, 0x7, 0x7, 0x9, 0x7, 0x100000001, 0x80000000000, 0x6, 0x9, 0x2, 0xba, 0x3, 0x7, 0x6, 0x3, 0x7f, 0x8001, 0xfffffffffffffff8, 0x4, 0x4, 0x19, 0x10000, 0x2, 0x0, 0x5, 0x2f8, 0x3, 0x100, 0xf9, 0xfff, 0x5, 0x9, 0x1, 0x100000000, 0xb, 0x100000001, 0x7, 0x40, 0x10, 0x6b0, 0xee0f, 0x1, 0xc3, 0x9de, 0x0, 0x7b2, 0x18000, 0x8, 0x6, 0xd, 0x8fe, 0x0, 0x100000000, 0x10000000, 0x7, 0x4, 0x1, 0x5, 0x5, 0xa97, 0xffff, 0x80, 0xfffffffffffffab4, 0x3, 0x4, 0x7, 0x4, 0x974b, 0x6, 0xff, 0xfffffffffffffff8, 0x36, 0xed6, 0x9, 0x9, 0x2b2c891e, 0x9, 0xffff, 0x3ff, 0x1ff, 0x0, 0x2, 0xee, 0x5cd, 0x4, 0x80, 0xfffffffffffff000, 0x0, 0x1, 0xffffffffffff7fff, 0x6, 0x0, 0x8, 0x4, 0x4, 0xeb51, 0xcdf, 0x2, 0x5, 0x5, 0x7, 0x9, 0x3, 0x5400000000000000, 0x1800000000, 0x7fffffff, 0x6, 0x5, 0x1, 0x6]}) 11m48.651661954s ago: executing program 4 (id=3607): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x4, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x5000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x10, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m46.944509424s ago: executing program 4 (id=3610): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1a000000040000000400000001000000a5010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001800000000000000000000000200000000000000"], 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 11m46.491539576s ago: executing program 4 (id=3612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2c8b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8010) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x100002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 11m45.45682901s ago: executing program 33 (id=3612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2c8b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8010) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x100002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 6m20.535284578s ago: executing program 2 (id=4870): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x20, 0x0}, &(0x7f00000002c0)="2b562b5c1e3c", 0x0, 0x0, 0x10, 0x0, 0x0}) 6m20.200154455s ago: executing program 2 (id=4874): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e244e2303000000f700"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20044000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="2b562b5c1e3c", 0x0, 0x0, 0x10, 0x0, 0x0}) 6m20.042675692s ago: executing program 2 (id=4876): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) r4 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x4c, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x2, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x9]}}) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="5ab6"], 0x1c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x50, 0x3, 0x0, 0x0, @msi={0x8, 0xfffffffa, 0x401, 0x9}}, {0x9, 0x1, 0x1, 0x0, @irqchip={0xb1ea, 0x2}}]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000100)={0x0, 0x8, 0xc}) 6m19.879523114s ago: executing program 2 (id=4879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$BLKCRYPTOPREPAREKEY(r1, 0xc040128b, &(0x7f0000000340)={&(0x7f0000000240)="f5bd3c8325", 0x5, &(0x7f0000000280)=""/75, 0x4b}) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') r3 = getpgrp(0x0) process_vm_writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/213, 0xd5}], 0x1, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6m19.599290099s ago: executing program 2 (id=4882): syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8010, r0, 0x0) 6m19.514404604s ago: executing program 2 (id=4884): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x600, 0x0}, &(0x7f00000002c0)="2b562b5c1e3c", 0x0, 0x0, 0x10, 0x0, 0x0}) 6m19.169228772s ago: executing program 34 (id=4884): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x600, 0x0}, &(0x7f00000002c0)="2b562b5c1e3c", 0x0, 0x0, 0x10, 0x0, 0x0}) 5m44.32652173s ago: executing program 7 (id=4990): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4c, 0x1, 0x82, "74495700ae7e000000fcff0d2089d6000000420b000004e2ff23000700004000", 0x32314d54}) 5m44.102301597s ago: executing program 7 (id=4993): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xd, 0x80) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0), 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x400, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x455965fb809f3fbf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x48081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000d4d1c0c106"], 0x20}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000340)={0x20, 0x2, &(0x7f0000000280)="3a0a6949d5d8fada924c1058df665d624678b452284ba415e6778ed032778a7334c0fc5df080352dd43a5ee3b5674ded94b766c019c224ad8ba2a566b67bb899123252361a0b0f72a8d6eeb77fa67ae9e0f031aadbaadb0bfe9f452654c81d30984f4bf90146955b04", 0x0, 0x1}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x23, 0xb6, {0xb6, 0x3, "d69ee3d92d6f819249458d6ecc0ad0d306f0f141a4208cf75a4306186f303303d01cb19f0f0ea720a57c588f5ea3ac75e420104dbfd471c76cfe254e7ef4f071be277e140edebc1e6695eaa31f8fbb37093526215a3d57deb74f877eb0ab07458514fc39e60ff5910994dcb8a5e0225ed01cbe0ed67306d37ceca873277875004622d73b41f93706e833d8726bdde3436dbfe9dc13913d13030ea516ce1776f6d3916c189bce97f5f1caa5d81a341ad97fd87698"}}, &(0x7f0000000100)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "957a27bdbc56175ce1a71b8f7e766700020000d086ba3b9316e92e7b14a3239da9ca671783300343c4b17678e371ae242b17e80d77bde34959442e735e8419f12c38c5d295307bda8ab622e1463d8d731e9c7830feda7a46ff9744c212d1c0c7cb5842c50d76000076cc"}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000500)={0x40, 0xa, 0xfb, "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"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "234cb6a83f18d1cf6500a0256ea9d9f57f36e8de0b1244af83da456c634e4f1cb247543a3e3eecf29878ed2b0a4cbd96b765c9cb743c05b77341b01a61294cae57df971c4a5f197de18871c7ac2e32280bd5da0d88b53dedf1a99eab05746c76bebf432757e1a06c18cff5e84c6313fa737342fed4b1e8f9c04fe34064360807fbabb86cb0c78aa816986aa5ab5f0ff9b9061203cae8f90591048f4dff7261353422e1b1ff804ad6ca926c6d439d3f20c49f15c258ee97d3f879c5bb825e452249edf6678008f05a0068fb8cfda3f9c90b4bd46ad158fdd50d22434682a64ecde590fe01ca00a5e934375ece7d4426003098e01fdd3659dccda51caca22306d8d50d91d7740324a37e077025561a43a047e7fd2c21238a80f490188832e267bc3ed87b16516a965ea1b0130a3ef97ecbf63dfe771c847c7966b315665c082637ddb7fd0e8e860ec67e3e9af3e06ea04bbcceabc68ada58f375852ceb80261239ce1c5ac8a3e186c041bb27af129846f710cbd498be12805515701a6be99a43dae065ba0f82f8dae51c6ce401bc3f87f8add552f7fa364ecf13c5d568a4d09bc822287eb9999834264badac600d004b01690ebaeee0a52c1ba7645fdb90cc528be4ae64e8ee334752cb96bf6b085350bcb49543809a4a68393c2763af93b2d7ebded42fad6e45df6d87a27bd4845a0a54ef88b90b45ce4e4bad2e5383979dc2a33eb7aed47faa469fc916bd9d0e810034e5607b088abb007ef9f436fca82952fc08991d88910040e21d62f889bc26481e44a6fb687429b6374247709bda27ce3504fa8bb55a9036a856b784b2b2f9491edf86b0ec8e0e676c6d3c7e32057d72c3977276ebdf5baabdf316ab9b94591b9270b7fb66dae8910a9b87278afd61b5f93e640613d7aa0418ce039c25b7a630fa3faa312e4b88b04e27cd86452b08eddfd745f29c5614b43057848c8297d7f9a69efd36076ed68525d0ea59b1d57a760ac0ad3612d0811244ea9d4cac3ea3c7c6ff27ac3999d72d08a1aed623a1105a4b676d02f44725f27ed1a6cc0e0fa2ab91f1f0d7fa96684b707216ef7a46e68f3f76d039b88c8fa419dd199b9620d7be8643537a06c2177d3f188ed13ffc54a34922dcc7fb107b1501e7f481349fa2f25d47dd04efe08ed64d0461a87a2f0af32dae42a8c6691a13ea6fa116ede00128ffcde41968ebb36c034e726427d6b9d11e2b715e24f0b3b1e673de62d44c491dbaab959e970f69db9f4e0c9fde7dfc16596bebce4dd0714633baae9165847c2cac373cdc229753236acce369f82ddede0eb23db8bfb55a4e2e8cc1c067b4cb54aaad830c7d77ae072ab6846f0da8a910c8c3f9c5d9e8f597c7e0f7996b4a1c7186d59545f42450d727b504083646827ea82cb9372f3274bd4a7486b0926329090821ba65fc2a96f40644a60f71dfab6bce"}, &(0x7f0000000200)={0x21, 0x0, 0x1, "92"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x0, 0xf, 0xb5, {0xb5, 0x3b, "1d9f2969a52a512ac0dd777dbd525de783b7e2c2e417fbccdc9a5008e14e1456bc10dfc64c8ad128a648d95109cbef77184818ef5f8177d04d77f19ca8a68443909b70fd94eacae934d02a3962cae1e1d44067130af8acfb9cebed9878c6e15aa48739f785f9f559b4b8920880c1097121dc80316e74dffb7b146479d5b3ef20d97c39d144dab55945854a29e8ba31817bb090726bc4ec4a0cc64b20109346a28b65f6f1189e5cde7aaef0fc8d0358b8febf6e"}}, &(0x7f0000000380)={0x0, 0x3, 0x8, @string={0x8, 0x3, "c565f7f3c89c"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="000f050000000515ceaadd0f050000dee475d9dd"], &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x60, 0x0, 0x8, "ed86786c", "272ff386"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x2, 0x19, 0x62, 0xeb, 0x5, 0x7}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c40)={0x40, 0x12, 0x2f, "0b1c9cdd06104ea6d86380a7effab6655a91cd6b17097cd0faded05059a2150391c9600edfdfcf571be31a6ae87772"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0xe0, 0x4}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "ff77"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "048e"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0xc3}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x3}}) 5m40.989021344s ago: executing program 7 (id=5001): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00'}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x13, r2, 0x0) fallocate(r2, 0x0, 0x9e1f, 0x575) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1b, r4}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xffe0}, {0x1}, {0x3, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x4000, 0x1fe00}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001240)={{r1}, r7, 0x10, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x8, 0x5, {0x2c, 0x3, 0xe, 0x101, 0x1}, [0x7, 0x6, 0x1010, 0x2e, 0x0]}}, @subvolid=0xd}) 5m40.471301686s ago: executing program 7 (id=5005): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000280)={0x14}, 0x14) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x200100, 0x180) 5m40.336668331s ago: executing program 7 (id=5007): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\v@+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00000000f0001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000787252414d36b9a34248e7dd442faa960ed14fdc6cd2ca14fb7fb57b26a3ad7fa749f341d4fefd00a9c5900a92656c751030941239cebbedb5c44f32a091da9f528142d9cf0bbdf92f08501c23b608dca50cb9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c0400000200000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d50e6f3a98d9"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000100)="00f0", 0x2, r6) (async) syz_emit_ethernet(0x68, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r7) r8 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r6) add_key$user(&(0x7f0000000040), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000600)="e45e6a16f15e1b4e45590f28aac5631b840756b2761935adbc46d159310e3b7207bde04b19c7ce44eeb3d9ff09e4e28e44072cd7b8640c9f341ac24b0727794d4afb66feb8228cfcd97c9389631ec6e3ac76cc13b2768684bc3e3507e08c950f73d37b9031fcec1fdc55738ea3f64ff0c937d75e855f7fe5f17436565ddb1dd804f6e75dcde00c03a45ece3a69e85e65f661eca13e77a67c83b42637f50b969f367261469742a3965ada8f108089c66005560f88a882a4d64fc5c02828eedde467886e86a6fd", 0xc6, r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r9, 0x0, 0x40) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) (async) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000080)=[0x6, 0x5, 0x9], &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000380)}) 5m39.96393408s ago: executing program 7 (id=5010): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012ff030000000000006962000000da0c000008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x4005}, 0x3e80cba263990d41) r1 = inotify_init1(0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@delchain={0x2c, 0x65, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0xfff2, 0xfff1}, {0xc, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x4890) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000516c08601a410b5800", [0x100000000, 0x7]}}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) read(r1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="980000003d00080b25bd7000fddbdf251e0000000600dd002d0000009bcdf4c16754d4213f79cdaa3b970a4c363a0266fe89eab91a7a920d0059b357d1c8152e7615380317cd5ad4b64b37f6184b6aa410f1cb22fe4131f4b20dd86ef5ec75c88cea4cf456a3bee6cffc07300cf35aee90436b9c2b07322ef6fba9f3d0617793a30dfa7afa7989162846effa191043d8a237c59290b782b4"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4001) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0x2, '\x00', @value=0x1}}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x103d41, 0xf5) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000020c0)=[{0x0}, {&(0x7f0000001c80)=""/24, 0x18}], 0x2}}], 0x1, 0x40, 0x0) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 5m39.291951606s ago: executing program 35 (id=5010): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012ff030000000000006962000000da0c000008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x4005}, 0x3e80cba263990d41) r1 = inotify_init1(0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@delchain={0x2c, 0x65, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0xfff2, 0xfff1}, {0xc, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x4890) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000516c08601a410b5800", [0x100000000, 0x7]}}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) read(r1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="980000003d00080b25bd7000fddbdf251e0000000600dd002d0000009bcdf4c16754d4213f79cdaa3b970a4c363a0266fe89eab91a7a920d0059b357d1c8152e7615380317cd5ad4b64b37f6184b6aa410f1cb22fe4131f4b20dd86ef5ec75c88cea4cf456a3bee6cffc07300cf35aee90436b9c2b07322ef6fba9f3d0617793a30dfa7afa7989162846effa191043d8a237c59290b782b4"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4001) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0x2, '\x00', @value=0x1}}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x103d41, 0xf5) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000020c0)=[{0x0}, {&(0x7f0000001c80)=""/24, 0x18}], 0x2}}], 0x1, 0x40, 0x0) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 14.078527561s ago: executing program 6 (id=6261): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2101, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5f92f86a17fd75b205a63f5886bb97a48a2e49ccb1a3a3a4d6c88f845aefaf36229821eec11815869ca99f92d4cd2b923628f805c16299f411e0162f78a080e5cda8a640e9fadbaf091130e194d3fab8"], 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c00000018dc4b80044d19e9e16df10a01030000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c", 0x7, 0xfffffffffffffffb) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 10.706015864s ago: executing program 6 (id=6272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000100)}], 0x2}, 0x4804) 9.619249815s ago: executing program 8 (id=6275): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) clock_gettime(0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x406543, 0x4) mknodat(r5, &(0x7f0000000040)='./file0\x00', 0x400, 0x103) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) 8.748020232s ago: executing program 6 (id=6280): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000f80)}}], 0x1, 0x84) r0 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000700000300031400000045f0fde100000000002f9078ac1414bbffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508300000000000000dcda08"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x7, 0x1, 0xfa14, 0xffffffff}, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) symlink(0x0, 0x0) socket(0x2c, 0x80000, 0x9) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x100, 0x200, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e00000010800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x448c0) write$dsp(r8, &(0x7f00000001c0)="5cba91", 0x3) 8.652928056s ago: executing program 8 (id=6281): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000000000000000ffffaa55", [0x8, 0xffffffff9673e35d]}}) 8.089643367s ago: executing program 8 (id=6284): unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) pipe2$watch_queue(&(0x7f0000000000), 0x80) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006300)={0x2020}, 0x2020) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'caif0\x00', 0x3}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x49, 0x0, 0x3e) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r8, 0x40046109, 0x0) close(r8) 6.858879185s ago: executing program 3 (id=6287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000180)={0x8, 'wlan0\x00', {'veth0\x00'}, 0x140}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x90000019}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.622773733s ago: executing program 5 (id=6288): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="7b186aee700d1c63c753d73fe57dded430d87af637744b7146b307fe66014f09c34d85ab83c5ed5642586b89f722fda65044822a5d8a665c8659794e3aa7425e804fee7bd119970304bda08d70964f49dd2fce3d3668cc9397d462af07336857a49314031f2e4bf3e014dd032112a13ea45e266920fffa8b11068dff192faea48fd27e66782b47f14b3bc0d5c35c1eaff7c80f94c5a08d810fb7bf7069b19186f968d3c26616252352e60da05b49062a380a58b7f18865f4e4a7072953a4a742a8351b10bd7a5258acb805e100dc7ada9b5a4348ffff132a8b5ccc07585ecab26db9912ff8e467f0a6ba4b7b", 0xec) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x800c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.399318851s ago: executing program 5 (id=6289): r0 = open(&(0x7f0000003ac0)='./file0\x00', 0x406a40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003a40)=@abs={0x0, 0x0, 0x4e22}, 0x35) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)=""/192, 0xc0}], 0x6, &(0x7f00000000c0)=""/11, 0xb}, 0x7}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/73, 0x49}, {&(0x7f0000000dc0)=""/25, 0x19}, {&(0x7f0000000e00)=""/193, 0xc1}, {&(0x7f0000000f00)=""/80, 0x50}, {&(0x7f0000000f80)=""/101, 0x65}], 0x8, &(0x7f0000001080)=""/29, 0x1d}, 0x8}, {{&(0x7f00000010c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000003780)=[{&(0x7f0000001140)=""/15, 0xf}, {&(0x7f0000001180)=""/51, 0x33}, {&(0x7f0000002200)=""/213, 0xd5}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/83, 0x53}, {&(0x7f0000003380)=""/244, 0xf4}, {&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/128, 0x80}, {&(0x7f0000003580)=""/255, 0xff}, {&(0x7f0000003680)=""/230, 0xe6}], 0xa, &(0x7f0000003840)=""/221, 0xdd}, 0x8}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0xc1105511, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x6a9}, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000140)=0xa) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200], [0x7fffffff, 0x80000004, 0xf, 0x3, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa518, 0xbcd, 0x5, 0x6, 0x824c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x3, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x2, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x3, 0x5ba9, 0x8, 0x2, 0x7, 0x9, 0xfffffffffffffb61, 0xfffffffffffffff7, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0x9, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0x7, 0xe648, 0x2, 0x2, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x1, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x40003, 0xb4000000, 0x0, 0x4, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0xfffffffffffffffa, 0xfffffffffffff36f, 0x4]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x3, 0x3, 0x0, &(0x7f00000011c0)=0x8, 0x3000000) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x73, 0x1, @local, @local, {[@dstopts]}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x204400, 0x0) 6.170070139s ago: executing program 6 (id=6290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000100)}], 0x2}, 0x4804) 5.389419649s ago: executing program 8 (id=6292): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x32}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120101025b0e8c10ef170c729051010203010902120001000000e70804"], &(0x7f0000000500)={0x0, 0x0, 0x5}) 4.902471707s ago: executing program 3 (id=6293): syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0xce22, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x3, 0xffffffff, "bd16bc02419c391d6ab287b20de43a889cb2071758ce3ddb6979bc35c3a05a7e", "0b420afd6476b00af3a2efb3e97b4dfd", {"0871caba2330cd331aec94c863f7f7be", "70fc1a30bd72aa31362aa32faa719e73"}}}}}}}, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = epoll_create1(0x80000) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) (async) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a) 4.875656716s ago: executing program 5 (id=6294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x9, &(0x7f0000000040)="1000000500ca32601f") r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0xa2000) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000400)={&(0x7f0000000180)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}, {0xc000, 0x10, 0x0, 0x0}, {0x5593, 0x5000, 0x0, 0x0}], 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_usb_connect$cdc_ecm(0x4, 0x65, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x1, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x9, 0x24, 0x6, 0x0, 0x0, "f57c308a"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xffff892f, 0x0, 0x0, 0x7}, [@acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x7, 0xc78}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfd, 0xa, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x81, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x10, 0x4, 0x3, 0x0, 0x40, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x2, [{0x2e, &(0x7f00000002c0)=@string={0x2e, 0x3, "17664afbdaff405afc48388748eddece09c8c7b8f8c0921aaa9c1a9fcc4f1c7eae13406dea42d21c9827af54"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x8, 0x0, 0x9, 0x7, 0xd, 0x1, 0x1, 0x10, 0xd, 0x4, 0x0, 0xfffff800, 0x10, 0x2, 0x7, 0xae, 0xf, '\x00', 0x5, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 4.616776897s ago: executing program 3 (id=6296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.448328524s ago: executing program 3 (id=6297): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000180)={0x8, 'wlan0\x00', {'veth0\x00'}, 0x140}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x90000019}) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 4.008842589s ago: executing program 6 (id=6298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x8091}, 0x48881) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r8}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002e00010027bd700000000000060000000000000004001e0056d760e2fdca8b336c776745484687ec6d7cb31fe45fc87679e6a5a0eec82a320bb1b7cca6f1b8a76d2f0d05251f7da827315f10729040edadc3d0ec48f33f0b6d056dc4da8c017cced0573f0820ae249a73b1aeaf83776f47bb45a57e591338a5e1bbc3f3ceb1cd8ee7e963d324010a5ac7b3daf2f6e1062f6a9349b98bd845ece3f02dca3036b56702285864fc9e830c04d3291d950ffa01c94d9d43749f08bed3"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.816302989s ago: executing program 0 (id=6299): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="7b186aee700d1c63c753d73fe57dded430d87af637744b7146b307fe66014f09c34d85ab83c5ed5642586b89f722fda65044822a5d8a665c8659794e3aa7425e804fee7bd119970304bda08d70964f49dd2fce3d3668cc9397d462af07336857a49314031f2e4bf3e014dd032112a13ea45e266920fffa8b11068dff192faea48fd27e66782b47f14b3bc0d5c35c1eaff7c80f94c5a08d810fb7bf7069b19186f968d3c26616252352e60da05b49062a380a58b7f18865f4e4a7072953a4a742a8351b10bd7a5258acb805e100dc7ada9b5a4348ffff132a8b5ccc07585ecab26db9912ff8e467f0a6ba4b7b", 0xec) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x800c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.715301853s ago: executing program 0 (id=6300): mq_unlink(&(0x7f0000000140)='{\\.\x00') (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = dup(r2) (async) r4 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0x34}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) (async) poll(&(0x7f0000000040)=[{r2, 0xa002}], 0x1, 0xd37) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) (async) syz_open_pts(r2, 0x80) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0xa, "00f2ff1701049b14c8d423dbb3ce00"}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180)=0x7, 0x4) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) dup3(r3, r3, 0x0) (async) read(r2, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd000000000000000000ff0200000000000000000000000000010400907800000000604aa09800003c0000000000ffff0000000000ff7f0000012f000400000000003300000400"/102], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000040)=""/253}, 0x20) 3.523586324s ago: executing program 0 (id=6301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x3fd4, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) recvmsg(r4, 0x0, 0x2000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x4010, r6, 0x8ad5d000) 3.522993053s ago: executing program 8 (id=6302): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0xdddd8000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) r6 = syz_io_uring_setup(0x1d24, &(0x7f00000002c0)={0x0, 0xb03e, 0x40, 0x0, 0x354}, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f00000003c0), 0x1) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.466682387s ago: executing program 0 (id=6303): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000840)={&(0x7f0000000440)=[{&(0x7f0000000540)="fecc67e3664c831cd805703e5ddc71fd8e8115a1b52246d411f58e0161b1f5bbc5f4330ef4380698845272a6ed33c45019c5a71c27a323e9f571e4044a35bb105ae691cc7dc785afaf9ec6802d48b328c7fe8cc8b2241c6b5a1c5f1164ce076e166b7c903e37d9b5db0943226f3560299172dbd6f2ff60cf50ab9d586cafe05172ffafeb671db8bd8b945179d85cd27be05649d691ff0cc3982ca0e3e9357023450d548c90234309f6e816c6ba03315e70965c7457fc6f7586ef0a7eaa5b7ad49a163125668c12372f291209605c4563d934636245136e9a2343833c5c5920133e5ca9109b93ef619e9f4f", 0xeb}, {&(0x7f0000000680)="bb37f22b10c1fb87c9474b61f97c7a49af89f9755ae1801fd31a907a0d66119cdcfbcce93a9f2f689d544ecc55dfb6445586e71ef05d0ab91c384c2b76c7279009d978fdc29af959654b4fa22f53af9dfc5d14c11f1bac920da6c2b0ca0ced849584b38cd99ab473bb0eaf062fc63927a7e2ec9b90bdbaa5688d7cc289b6ce4d47b461ab9c0dc3de5f9ede56ba813ec2a7cbc9d88508d721f6", 0x99}, {&(0x7f0000000740)="f3d785f7ed9d120ba8ee0c9861aef81303ddcef5513de09dd51764ae9ecca3ce852655ba33658b9ed8476f7637daa784b91c60ad8df1ae2da49e94d3300a5411121f9de28f6905fed276825877caa4a6de13f580d82fdfc37db2bd84ce7cbbaab92045df04b41fa45dcbeb54817d843723c80e96b481f23708258fb47f8dfecc3de05d2cc69b62fe8620bd94a33273338a0f4b6440ef88724b70b3e4abe1e1c0a9be2572085fb0385359afbada20a0b2b3fd51897431efe6bda3e4e675e711a098fa7d81320fa1249a53ec590127a5e0ff10851c7093501b7040e63890931320458ca3ab253564023c46e001797a", 0xee}], 0x3, 0x9, 0x0, 0x4, 0x8, 0x7fff, 0x6, 0x7}) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) (async) setns(r3, 0x2000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000240)={"72292fe1", 0x5, 0x60, 0x5, 0x8, 0xfff, "bc41b68c5c7c61c06e45e1b7bea765", "5f3d4fba", "d86b2edf", "f08573ec", ["1667a5cc092432ce8d83eeda", "9a88d313f616dfc4e0b90a83", "49fd1301064e32b8120fa9dc", "72687c0ac0ab6ef80829067b"]}) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="15e72abd7000fcdbdf251f"], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r8, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x6, 0x7}}) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff8acb}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x94}, 0x1, 0x0, 0x0, 0x44901}, 0x8000) 1.37572369s ago: executing program 6 (id=6304): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x100000000000, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffff8, 0x5, 0x0, 0x40000000000, 0x0, 0x0, 0x100, 0x0, 0x1000, 0x0, r2, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x7fffffffffffffed, 0x4, {0xffffffffffffffff, 0x3, 0x8, 0xffffffffffffff7a, 0x3ff, 0x4, {0x1, 0x8000000000000002, 0x12000000000000, 0x2000000fe2b260, 0x8, 0x58f, 0x1, 0x4, 0x660, 0x1000, 0x8007, r2, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x108, @tick=0x8, 0xc, {0x8, 0x5}, 0x80, 0x2, 0x8}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x91b47000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r7) 1.215196969s ago: executing program 0 (id=6305): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) clock_gettime(0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x406543, 0x4) mknodat(r5, &(0x7f0000000040)='./file0\x00', 0x400, 0x103) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) 1.069392814s ago: executing program 5 (id=6306): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)='q', 0x1}], 0x1}}], 0x1, 0x20001000) 995.997107ms ago: executing program 5 (id=6307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 937.709619ms ago: executing program 5 (id=6308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000100)}], 0x2}, 0x4804) 832.424208ms ago: executing program 3 (id=6309): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x81, 0x5, 0x800000000000009, 0x5, 0xfffffe0000100001, 0xfa11, 0xfffeffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000140), 0x0) socket(0x28, 0x5, 0x0) (async) r6 = socket(0x28, 0x5, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x200000c1) (async) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x200000c1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) 303.678735ms ago: executing program 0 (id=6310): syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377320200f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) (async) r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377320200f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x2bb1, 0x80b, 0xda6, 0x5, 0x8001, 0x103, 0xa, 0x1, 0x4, 0xd, 0x3ff, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 303.180282ms ago: executing program 8 (id=6311): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x3d) listen(r2, 0x802) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=6312): syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x16c08, 0x1e, 0x0, 0x12) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r4, 0x80079a0) splice(r4, 0x0, r2, 0x0, 0x100002, 0x9) r5 = getpid() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r5}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r6) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) kernel console output (not intermixed with test programs): 0][T16492] m920x_read = error: -19 [ 1580.895442][T16492] dvb-usb: error while querying for an remote control event. [ 1581.020551][T16492] m920x_read = error: -19 [ 1581.026387][T16492] dvb-usb: error while querying for an remote control event. [ 1581.144519][T16492] m920x_read = error: -19 [ 1581.152298][T16492] dvb-usb: error while querying for an remote control event. [ 1581.203357][T13325] usb 9-1: USB disconnect, device number 51 [ 1581.262184][T13325] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1581.283825][ T5921] m920x_read = error: -19 [ 1581.291464][ T5921] dvb-usb: error while querying for an remote control event. [ 1581.430205][ T5921] m920x_read = error: -19 [ 1581.436672][ T5921] dvb-usb: error while querying for an remote control event. [ 1581.458181][T28290] netlink: 'syz.5.6034': attribute type 32 has an invalid length. [ 1581.562496][ T5921] m920x_read = error: -19 [ 1581.566950][ T5921] dvb-usb: error while querying for an remote control event. [ 1581.584286][T28294] netlink: 'syz.5.6035': attribute type 10 has an invalid length. [ 1581.642185][T28294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.796583][T28294] bond0: (slave team0): Enslaving as an active interface with an up link [ 1581.796804][ T5921] m920x_read = error: -19 [ 1581.819222][T28295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1581.838852][T28295] team0: Port device batadv1 added [ 1581.844662][ T5921] dvb-usb: error while querying for an remote control event. [ 1581.961365][ T5921] m920x_read = error: -19 [ 1581.966785][ T5921] dvb-usb: error while querying for an remote control event. [ 1582.090257][T16492] m920x_read = error: -19 [ 1582.094701][T16492] dvb-usb: error while querying for an remote control event. [ 1582.127767][T28299] fuse: Bad value for 'fd' [ 1582.270042][T16492] m920x_read = error: -19 [ 1582.274481][T16492] dvb-usb: error while querying for an remote control event. [ 1582.420879][T16492] m920x_read = error: -19 [ 1582.425310][T16492] dvb-usb: error while querying for an remote control event. [ 1582.540128][T16492] m920x_read = error: -19 [ 1582.544636][T16492] dvb-usb: error while querying for an remote control event. [ 1582.758981][T28309] tmpfs: Unknown parameter 'fd' [ 1582.850742][ T5921] m920x_read = error: -19 [ 1582.855154][ T5921] dvb-usb: error while querying for an remote control event. [ 1582.994100][ T5921] m920x_read = error: -19 [ 1583.005689][ T5921] dvb-usb: error while querying for an remote control event. [ 1583.141119][ T5921] m920x_read = error: -19 [ 1583.145748][ T5921] dvb-usb: error while querying for an remote control event. [ 1583.270647][ T5921] m920x_read = error: -19 [ 1583.288503][ T5921] dvb-usb: error while querying for an remote control event. [ 1583.480039][T16492] m920x_read = error: -19 [ 1583.484796][T16492] dvb-usb: error while querying for an remote control event. [ 1583.631061][ T5937] m920x_read = error: -19 [ 1583.640004][ T5937] dvb-usb: error while querying for an remote control event. [ 1583.891053][ T5937] m920x_read = error: -19 [ 1583.895638][ T5937] dvb-usb: error while querying for an remote control event. [ 1583.901516][T28326] fuse: Bad value for 'fd' [ 1584.040010][ T5921] m920x_read = error: -19 [ 1584.044429][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.170522][T16482] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1584.210385][ T5921] m920x_read = error: -19 [ 1584.225053][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.357959][T16482] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1584.372744][ T5921] m920x_read = error: -19 [ 1584.377450][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.397750][T16482] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.427328][T16482] usb 9-1: Product: syz [ 1584.443974][T16482] usb 9-1: Manufacturer: syz [ 1584.460058][T16482] usb 9-1: SerialNumber: syz [ 1584.510197][ T5921] m920x_read = error: -19 [ 1584.518093][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.612811][T16482] usb 9-1: config 0 descriptor?? [ 1584.642555][T28338] ip6t_srh: unknown srh invflags 4000 [ 1584.660255][ T5921] m920x_read = error: -19 [ 1584.665610][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.705711][T16482] hub 9-1:0.0: bad descriptor, ignoring hub [ 1584.718441][T16482] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1584.802782][ T5921] m920x_read = error: -19 [ 1584.807587][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.909178][T16482] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1584.940183][ T5921] m920x_read = error: -19 [ 1584.946032][ T5921] dvb-usb: error while querying for an remote control event. [ 1584.965531][T16482] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1585.070202][ T5921] m920x_read = error: -19 [ 1585.074640][ T5921] dvb-usb: error while querying for an remote control event. [ 1585.099611][T16482] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1585.138163][T16482] usb 9-1: media controller created [ 1585.210204][T16492] m920x_read = error: -19 [ 1585.218762][T16492] dvb-usb: error while querying for an remote control event. [ 1585.287793][T16482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1585.360310][T16492] m920x_read = error: -19 [ 1585.364743][T16492] dvb-usb: error while querying for an remote control event. [ 1585.490416][T16492] m920x_read = error: -19 [ 1585.496760][T16492] dvb-usb: error while querying for an remote control event. [ 1585.660244][T16492] m920x_read = error: -19 [ 1585.676184][T16492] dvb-usb: error while querying for an remote control event. [ 1585.705302][T16482] DVB: Unable to find symbol dib7000p_attach() [ 1585.734333][T16482] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1585.810386][T16492] m920x_read = error: -19 [ 1585.830972][T16492] dvb-usb: error while querying for an remote control event. [ 1585.861479][T28381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.897659][T28381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.924117][T16482] rc_core: IR keymap rc-dib0700-rc5 not found [ 1585.950078][T16492] m920x_read = error: -19 [ 1585.951234][T16482] Registered IR keymap rc-empty [ 1585.963080][T16492] dvb-usb: error while querying for an remote control event. [ 1585.995881][T16482] dvb-usb: could not initialize remote control. [ 1586.031672][T16482] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1586.118428][T16492] m920x_read = error: -19 [ 1586.140286][T16492] dvb-usb: error while querying for an remote control event. [ 1586.350222][ T5921] m920x_read = error: -19 [ 1586.354657][ T5921] dvb-usb: error while querying for an remote control event. [ 1586.470350][T16492] m920x_read = error: -19 [ 1586.474793][T16492] dvb-usb: error while querying for an remote control event. [ 1586.632304][T16492] m920x_read = error: -19 [ 1586.637500][T16492] dvb-usb: error while querying for an remote control event. [ 1586.760078][T16492] m920x_read = error: -19 [ 1586.764920][T16492] dvb-usb: error while querying for an remote control event. [ 1586.880601][T16492] m920x_read = error: -19 [ 1586.885623][T16492] dvb-usb: error while querying for an remote control event. [ 1587.020049][T16492] m920x_read = error: -19 [ 1587.024706][T16492] dvb-usb: error while querying for an remote control event. [ 1587.145415][T16492] m920x_read = error: -19 [ 1587.155508][T16492] dvb-usb: error while querying for an remote control event. [ 1587.198574][T28414] FAULT_INJECTION: forcing a failure. [ 1587.198574][T28414] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.258180][T28414] CPU: 0 UID: 0 PID: 28414 Comm: syz.3.6061 Tainted: G L syzkaller #0 PREEMPT(full) [ 1587.258207][T28414] Tainted: [L]=SOFTLOCKUP [ 1587.258213][T28414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1587.258223][T28414] Call Trace: [ 1587.258230][T28414] [ 1587.258237][T28414] dump_stack_lvl+0xe8/0x150 [ 1587.258265][T28414] should_fail_ex+0x412/0x560 [ 1587.258293][T28414] should_failslab+0xa8/0x100 [ 1587.258317][T28414] __kmalloc_noprof+0xe8/0x760 [ 1587.258336][T28414] ? tomoyo_encode+0x28b/0x550 [ 1587.258357][T28414] tomoyo_encode+0x28b/0x550 [ 1587.258378][T28414] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1587.258401][T28414] ? tomoyo_path_number_perm+0x219/0x630 [ 1587.258430][T28414] tomoyo_path_number_perm+0x246/0x630 [ 1587.258454][T28414] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1587.258478][T28414] ? __lock_acquire+0x6b5/0x2cf0 [ 1587.258508][T28414] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1587.258545][T28414] ? __fget_files+0x2a/0x420 [ 1587.258562][T28414] ? __fget_files+0x2a/0x420 [ 1587.258575][T28414] ? __fget_files+0x3a0/0x420 [ 1587.258587][T28414] ? __fget_files+0x2a/0x420 [ 1587.258604][T28414] security_file_ioctl+0xc3/0x2a0 [ 1587.258627][T28414] __se_sys_ioctl+0x47/0x170 [ 1587.258649][T28414] do_syscall_64+0x14d/0xf80 [ 1587.258668][T28414] ? trace_irq_disable+0x3b/0x150 [ 1587.258682][T28414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.258699][T28414] ? clear_bhb_loop+0x40/0x90 [ 1587.258718][T28414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.258734][T28414] RIP: 0033:0x7f181e99c819 [ 1587.258749][T28414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.258763][T28414] RSP: 002b:00007f181f82d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1587.258781][T28414] RAX: ffffffffffffffda RBX: 00007f181ec15fa0 RCX: 00007f181e99c819 [ 1587.258793][T28414] RDX: 0000200000000440 RSI: 0000000000008b07 RDI: 0000000000000004 [ 1587.258805][T28414] RBP: 00007f181f82d090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.258815][T28414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.258824][T28414] R13: 00007f181ec16038 R14: 00007f181ec15fa0 R15: 00007f181ed3fa48 [ 1587.258848][T28414] [ 1587.258866][T28414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1587.492387][ T5921] m920x_read = error: -19 [ 1587.512091][ T5921] dvb-usb: error while querying for an remote control event. [ 1587.574427][T13325] usb 9-1: USB disconnect, device number 52 [ 1587.622535][ T5921] m920x_read = error: -19 [ 1587.626978][ T5921] dvb-usb: error while querying for an remote control event. [ 1587.639980][T16482] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1587.706681][T13325] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1587.781108][ T5921] m920x_read = error: -19 [ 1587.785516][ T5921] dvb-usb: error while querying for an remote control event. [ 1587.816149][T16482] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1587.852569][T16482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.909981][ T5921] m920x_read = error: -19 [ 1587.919211][ T5921] dvb-usb: error while querying for an remote control event. [ 1587.929285][T16482] usb 6-1: Product: syz [ 1587.940221][T16482] usb 6-1: Manufacturer: syz [ 1587.957415][T16482] usb 6-1: SerialNumber: syz [ 1588.040616][ T5921] m920x_read = error: -19 [ 1588.045118][ T5921] dvb-usb: error while querying for an remote control event. [ 1588.110081][T13325] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1588.170339][ T5921] m920x_read = error: -19 [ 1588.179105][ T5921] dvb-usb: error while querying for an remote control event. [ 1588.274909][T13325] usb 9-1: Using ep0 maxpacket: 32 [ 1588.293891][T13325] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.315342][T16492] m920x_read = error: -19 [ 1588.316513][T13325] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.329721][T16492] dvb-usb: error while querying for an remote control event. [ 1588.347542][T13325] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1588.360285][T13325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.383657][T13325] usb 9-1: config 0 descriptor?? [ 1588.440284][T16492] m920x_read = error: -19 [ 1588.444727][T16492] dvb-usb: error while querying for an remote control event. [ 1588.551173][T16482] rtl8150 6-1:1.0: couldn't reset the device [ 1588.557871][T16482] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1588.574145][T16482] usb 6-1: USB disconnect, device number 79 [ 1588.590316][T16492] m920x_read = error: -19 [ 1588.594793][T16492] dvb-usb: error while querying for an remote control event. [ 1588.729993][T16492] m920x_read = error: -19 [ 1588.734424][T16492] dvb-usb: error while querying for an remote control event. [ 1588.835994][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.848039][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.855771][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.863470][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.868789][T16492] m920x_read = error: -19 [ 1588.873319][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.887266][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.895127][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.902940][T13325] savu 0003:1E7D:2D5A.006B: unknown main item tag 0x0 [ 1588.931027][T13325] savu 0003:1E7D:2D5A.006B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 1589.044963][T13325] usb 9-1: USB disconnect, device number 53 [ 1589.146098][T28435] fido_id[28435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1589.278684][T16492] dvb-usb: error while querying for an remote control event. [ 1589.405014][ T5921] m920x_read = error: -19 [ 1589.409560][ T5921] dvb-usb: error while querying for an remote control event. [ 1589.520230][ T5921] m920x_read = error: -19 [ 1589.524673][ T5921] dvb-usb: error while querying for an remote control event. [ 1589.548536][ T5907] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1589.663379][ T5921] m920x_read = error: -19 [ 1589.667895][ T5921] dvb-usb: error while querying for an remote control event. [ 1589.852532][ T5921] m920x_read = error: -19 [ 1589.856957][ T5921] dvb-usb: error while querying for an remote control event. [ 1589.861764][ T5907] usb 6-1: config 53 has too many interfaces: 35, using maximum allowed: 32 [ 1589.952829][ T5907] usb 6-1: config 53 has an invalid descriptor of length 37, skipping remainder of the config [ 1589.965877][ T5907] usb 6-1: config 53 has 0 interfaces, different from the descriptor's value: 35 [ 1589.982641][ T5921] m920x_read = error: -19 [ 1589.987069][ T5921] dvb-usb: error while querying for an remote control event. [ 1590.010986][ T5907] usb 6-1: config 53 has too many interfaces: 35, using maximum allowed: 32 [ 1590.045459][ T5907] usb 6-1: config 53 has an invalid descriptor of length 37, skipping remainder of the config [ 1590.079171][ T5907] usb 6-1: config 53 has 0 interfaces, different from the descriptor's value: 35 [ 1590.099753][T26275] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1590.111969][ T5921] m920x_read = error: -19 [ 1590.127717][ T5907] usb 6-1: config 53 has too many interfaces: 35, using maximum allowed: 32 [ 1590.139209][ T5907] usb 6-1: config 53 has an invalid descriptor of length 37, skipping remainder of the config [ 1590.153796][ T5921] dvb-usb: error while querying for an remote control event. [ 1590.155877][ T5907] usb 6-1: config 53 has 0 interfaces, different from the descriptor's value: 35 [ 1590.269615][ T5907] usb 6-1: config 53 has too many interfaces: 35, using maximum allowed: 32 [ 1590.290302][ T5907] usb 6-1: config 53 has an invalid descriptor of length 37, skipping remainder of the config [ 1590.300711][ T5921] m920x_read = error: -19 [ 1590.300740][ T5921] dvb-usb: error while querying for an remote control event. [ 1590.313535][ T5907] usb 6-1: config 53 has 0 interfaces, different from the descriptor's value: 35 [ 1590.324531][ T5907] usb 6-1: config 53 has too many interfaces: 35, using maximum allowed: 32 [ 1590.335634][ T5907] usb 6-1: config 53 has an invalid descriptor of length 37, skipping remainder of the config [ 1590.362017][ T5907] usb 6-1: config 53 has 0 interfaces, different from the descriptor's value: 35 [ 1590.402685][ T5907] usb 6-1: New USB device found, idVendor=095e, idProduct=0283, bcdDevice=99.0b [ 1590.412656][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1590.420973][ T5937] m920x_read = error: -19 [ 1590.421003][ T5937] dvb-usb: error while querying for an remote control event. [ 1590.464337][ T5907] usb 6-1: Product: syz [ 1590.472707][ T5907] usb 6-1: Manufacturer: syz [ 1590.501101][ T5907] usb 6-1: SerialNumber: syz [ 1590.539992][ T5937] m920x_read = error: -19 [ 1590.544637][ T5937] dvb-usb: error while querying for an remote control event. [ 1590.690228][ T5937] m920x_read = error: -19 [ 1590.694747][ T5937] dvb-usb: error while querying for an remote control event. [ 1590.760196][ T5907] usb 6-1: USB disconnect, device number 80 [ 1590.830904][ T5937] m920x_read = error: -19 [ 1590.857805][ T5937] dvb-usb: error while querying for an remote control event. [ 1591.004510][ T5937] m920x_read = error: -19 [ 1591.008946][ T5937] dvb-usb: error while querying for an remote control event. [ 1591.103451][T28465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6074'. [ 1591.160090][ T5937] m920x_read = error: -19 [ 1591.176177][T28468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.207912][ T5937] dvb-usb: error while querying for an remote control event. [ 1591.239202][T28468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.420190][ T5907] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1591.439994][ T5937] m920x_read = error: -19 [ 1591.447968][ T5937] dvb-usb: error while querying for an remote control event. [ 1591.523445][T28473] FAULT_INJECTION: forcing a failure. [ 1591.523445][T28473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.550282][T28473] CPU: 1 UID: 0 PID: 28473 Comm: syz.3.6077 Tainted: G L syzkaller #0 PREEMPT(full) [ 1591.550313][T28473] Tainted: [L]=SOFTLOCKUP [ 1591.550320][T28473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1591.550330][T28473] Call Trace: [ 1591.550337][T28473] [ 1591.550344][T28473] dump_stack_lvl+0xe8/0x150 [ 1591.550372][T28473] should_fail_ex+0x412/0x560 [ 1591.550401][T28473] _copy_from_user+0x2d/0xb0 [ 1591.550422][T28473] ___sys_sendmsg+0x1c6/0x360 [ 1591.550446][T28473] ? __pfx____sys_sendmsg+0x10/0x10 [ 1591.550492][T28473] ? __fget_files+0x2a/0x420 [ 1591.550508][T28473] ? __fget_files+0x3a0/0x420 [ 1591.550528][T28473] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1591.550551][T28473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1591.550578][T28473] ? __pfx_ksys_write+0x10/0x10 [ 1591.550603][T28473] do_syscall_64+0x14d/0xf80 [ 1591.550623][T28473] ? trace_irq_disable+0x3b/0x150 [ 1591.550637][T28473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.550653][T28473] ? clear_bhb_loop+0x40/0x90 [ 1591.550672][T28473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.550688][T28473] RIP: 0033:0x7f181e99c819 [ 1591.550703][T28473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.550717][T28473] RSP: 002b:00007f181f82d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.550733][T28473] RAX: ffffffffffffffda RBX: 00007f181ec15fa0 RCX: 00007f181e99c819 [ 1591.550745][T28473] RDX: 0000000020008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1591.550756][T28473] RBP: 00007f181f82d090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.550765][T28473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.550775][T28473] R13: 00007f181ec16038 R14: 00007f181ec15fa0 R15: 00007f181ed3fa48 [ 1591.550798][T28473] [ 1591.611101][ T5937] m920x_read = error: -19 [ 1591.618092][ T5907] usb 9-1: Using ep0 maxpacket: 8 [ 1591.630675][ T5937] dvb-usb: error while querying for an remote control event. [ 1591.723968][ T5907] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1591.815855][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.001793][ T5907] usb 9-1: Product: syz [ 1592.008405][ T5907] usb 9-1: Manufacturer: syz [ 1592.013683][ T5907] usb 9-1: SerialNumber: syz [ 1592.152323][ T5937] m920x_read = error: -19 [ 1592.156776][ T5937] dvb-usb: error while querying for an remote control event. [ 1592.270192][ T5937] m920x_read = error: -19 [ 1592.274626][ T5937] dvb-usb: error while querying for an remote control event. [ 1592.292078][ T5921] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1592.400365][ T5937] m920x_read = error: -19 [ 1592.405055][ T5937] dvb-usb: error while querying for an remote control event. [ 1592.450186][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 1592.459532][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.483777][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.520355][ T5937] m920x_read = error: -19 [ 1592.525027][ T5937] dvb-usb: error while querying for an remote control event. [ 1592.569213][ T5907] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 1592.585795][ T5907] usb 9-1: 2:1: cannot get freq (v2/v3): err -71 [ 1592.601583][ T5921] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1592.646888][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.680817][ T5937] m920x_read = error: -19 [ 1592.695186][ T5937] dvb-usb: error while querying for an remote control event. [ 1592.732521][ T5921] usb 6-1: config 0 descriptor?? [ 1592.793297][ T5907] usb 9-1: USB disconnect, device number 54 [ 1592.830032][ T5937] m920x_read = error: -19 [ 1592.858203][ T5937] dvb-usb: error while querying for an remote control event. [ 1592.883387][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1593.182705][ T5921] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 1593.205256][ T5921] savu 0003:1E7D:2D5A.006C: unknown main item tag 0x0 [ 1593.212640][ T5937] m920x_read = error: -19 [ 1593.220072][ T5937] dvb-usb: error while querying for an remote control event. [ 1593.259440][ T5921] savu 0003:1E7D:2D5A.006C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1593.330108][ T5921] m920x_read = error: -19 [ 1593.339951][ T5921] dvb-usb: error while querying for an remote control event. [ 1593.395266][ T5921] usb 6-1: USB disconnect, device number 81 [ 1593.550276][ T5937] m920x_read = error: -19 [ 1593.569986][ T5937] dvb-usb: error while querying for an remote control event. [ 1593.596166][T28489] fido_id[28489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1593.618127][T28495] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1593.690005][T19625] m920x_read = error: -19 [ 1593.694460][T19625] dvb-usb: error while querying for an remote control event. [ 1593.810015][ T5921] m920x_read = error: -19 [ 1593.814521][ T5921] dvb-usb: error while querying for an remote control event. [ 1593.823189][T28499] netlink: 'syz.3.6084': attribute type 21 has an invalid length. [ 1593.940596][ T5921] m920x_read = error: -19 [ 1593.945027][ T5921] dvb-usb: error while querying for an remote control event. [ 1594.120488][ T5921] m920x_read = error: -19 [ 1594.128385][ T5921] dvb-usb: error while querying for an remote control event. [ 1594.140861][ T5907] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1594.210169][T28512] netlink: 'syz.3.6088': attribute type 13 has an invalid length. [ 1594.240521][ T5921] m920x_read = error: -19 [ 1594.244990][ T5921] dvb-usb: error while querying for an remote control event. [ 1594.311139][T28513] FAULT_INJECTION: forcing a failure. [ 1594.311139][T28513] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.324122][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1594.334302][T28513] CPU: 1 UID: 0 PID: 28513 Comm: syz.6.6089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.334345][T28513] Tainted: [L]=SOFTLOCKUP [ 1594.334353][T28513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1594.334367][T28513] Call Trace: [ 1594.334376][T28513] [ 1594.334386][T28513] dump_stack_lvl+0xe8/0x150 [ 1594.334429][T28513] should_fail_ex+0x412/0x560 [ 1594.334470][T28513] should_failslab+0xa8/0x100 [ 1594.334500][T28513] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1594.334526][T28513] ? __alloc_skb+0x186/0x7d0 [ 1594.334551][T28513] ? __alloc_skb+0x1d0/0x7d0 [ 1594.334573][T28513] ? __local_bh_enable_ip+0xd0/0x130 [ 1594.334606][T28513] __alloc_skb+0x1d0/0x7d0 [ 1594.334634][T28513] netlink_sendmsg+0x5d4/0xb40 [ 1594.334668][T28513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1594.334694][T28513] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1594.334730][T28513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1594.334759][T28513] ____sys_sendmsg+0x972/0x9f0 [ 1594.334796][T28513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.334832][T28513] ? import_iovec+0x73/0xa0 [ 1594.334861][T28513] ___sys_sendmsg+0x2a5/0x360 [ 1594.334894][T28513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.334957][T28513] ? __fget_files+0x2a/0x420 [ 1594.334976][T28513] ? __fget_files+0x3a0/0x420 [ 1594.335006][T28513] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1594.335037][T28513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1594.335073][T28513] ? __pfx_ksys_write+0x10/0x10 [ 1594.335110][T28513] do_syscall_64+0x14d/0xf80 [ 1594.335137][T28513] ? trace_irq_disable+0x3b/0x150 [ 1594.335156][T28513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.335178][T28513] ? clear_bhb_loop+0x40/0x90 [ 1594.335204][T28513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.335225][T28513] RIP: 0033:0x7f696239c819 [ 1594.335246][T28513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.335265][T28513] RSP: 002b:00007f696319f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.335287][T28513] RAX: ffffffffffffffda RBX: 00007f6962615fa0 RCX: 00007f696239c819 [ 1594.335304][T28513] RDX: 0000000020008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1594.335318][T28513] RBP: 00007f696319f090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.335339][T28513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.335352][T28513] R13: 00007f6962616038 R14: 00007f6962615fa0 R15: 00007f696273fa48 [ 1594.335385][T28513] [ 1594.582518][ T5921] m920x_read = error: -19 [ 1594.586923][ T5921] dvb-usb: error while querying for an remote control event. [ 1594.700310][T19625] m920x_read = error: -19 [ 1594.704828][T19625] dvb-usb: error while querying for an remote control event. [ 1594.820886][ T5907] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1594.830161][T19625] m920x_read = error: -19 [ 1594.834591][T19625] dvb-usb: error while querying for an remote control event. [ 1594.970732][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1595.000201][T19625] m920x_read = error: -19 [ 1595.008251][T19625] dvb-usb: error while querying for an remote control event. [ 1595.111100][ T5907] usb usb9-port1: attempt power cycle [ 1595.142061][T19625] m920x_read = error: -19 [ 1595.154445][T19625] dvb-usb: error while querying for an remote control event. [ 1595.270370][T19625] m920x_read = error: -19 [ 1595.284035][T19625] dvb-usb: error while querying for an remote control event. [ 1595.420485][T19625] m920x_read = error: -19 [ 1595.426404][T19625] dvb-usb: error while querying for an remote control event. [ 1595.520045][ T5907] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1595.540695][ T5907] usb 9-1: device descriptor read/8, error -71 [ 1595.550052][T19625] m920x_read = error: -19 [ 1595.607852][T19625] dvb-usb: error while querying for an remote control event. [ 1595.740001][ T5921] m920x_read = error: -19 [ 1595.744489][ T5921] dvb-usb: error while querying for an remote control event. [ 1595.795209][ T5907] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1595.860882][ T5907] usb 9-1: device descriptor read/8, error -71 [ 1595.870103][T19625] m920x_read = error: -19 [ 1595.874575][T19625] dvb-usb: error while querying for an remote control event. [ 1595.980368][ T5907] usb usb9-port1: unable to enumerate USB device [ 1596.073676][ T5921] m920x_read = error: -19 [ 1596.078111][ T5921] dvb-usb: error while querying for an remote control event. [ 1596.204520][ T5921] m920x_read = error: -19 [ 1596.204552][ T5921] dvb-usb: error while querying for an remote control event. [ 1596.315022][T19625] m920x_read = error: -19 [ 1596.315046][T19625] dvb-usb: error while querying for an remote control event. [ 1596.423514][ T5937] m920x_read = error: -19 [ 1596.423539][ T5937] dvb-usb: error while querying for an remote control event. [ 1596.536279][ T5937] m920x_read = error: -19 [ 1596.540719][ T5937] dvb-usb: error while querying for an remote control event. [ 1596.660153][ T5937] m920x_read = error: -19 [ 1596.660210][ T5937] dvb-usb: error while querying for an remote control event. [ 1596.770160][ T5937] m920x_read = error: -19 [ 1596.770192][ T5937] dvb-usb: error while querying for an remote control event. [ 1596.880163][ T5921] m920x_read = error: -19 [ 1596.880195][ T5921] dvb-usb: error while querying for an remote control event. [ 1596.990101][ T5937] m920x_read = error: -19 [ 1596.990134][ T5937] dvb-usb: error while querying for an remote control event. [ 1597.105080][ T5921] m920x_read = error: -19 [ 1597.125476][ T5921] dvb-usb: error while querying for an remote control event. [ 1597.419246][ T5921] m920x_read = error: -19 [ 1597.429669][ T5921] dvb-usb: error while querying for an remote control event. [ 1597.540724][ T5921] m920x_read = error: -19 [ 1597.550853][ T5921] dvb-usb: error while querying for an remote control event. [ 1597.581725][T28549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1597.661307][ T5937] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1597.700330][ T5921] m920x_read = error: -19 [ 1597.704774][ T5921] dvb-usb: error while querying for an remote control event. [ 1597.745494][T28556] netdevsim netdevsim0: Direct firmware load for / [ 1597.745494][T28556] failed with error -2 [ 1597.780182][T28556] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1597.780182][T28556] [ 1597.830221][ T5921] m920x_read = error: -19 [ 1597.835123][ T5921] dvb-usb: error while querying for an remote control event. [ 1597.872753][ T5937] usb 9-1: config 0 has an invalid interface number: 254 but max is 0 [ 1597.890249][ T5937] usb 9-1: config 0 has no interface number 0 [ 1597.896655][ T5937] usb 9-1: config 0 interface 254 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1597.924422][ T5937] usb 9-1: config 0 interface 254 has no altsetting 0 [ 1598.119404][ T5921] m920x_read = error: -19 [ 1598.124028][ T5921] dvb-usb: error while querying for an remote control event. [ 1598.140615][ T5937] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1598.150137][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.197576][ T5937] usb 9-1: config 0 descriptor?? [ 1598.250549][T19625] m920x_read = error: -19 [ 1598.261266][T19625] dvb-usb: error while querying for an remote control event. [ 1598.370207][T19625] m920x_read = error: -19 [ 1598.374989][T19625] dvb-usb: error while querying for an remote control event. [ 1598.431389][T28547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.462601][T28547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.509967][T19625] m920x_read = error: -19 [ 1598.514484][T19625] dvb-usb: error while querying for an remote control event. [ 1598.546421][ T5937] usb 9-1: string descriptor 0 read error: -71 [ 1598.681840][ T5921] m920x_read = error: -19 [ 1598.686277][ T5921] dvb-usb: error while querying for an remote control event. [ 1598.725667][ T5937] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1598.755178][ T5937] gspca_sunplus: reg_w_riv err -71 [ 1598.776352][ T5937] sunplus 9-1:0.254: probe with driver sunplus failed with error -71 [ 1598.830428][ T5921] m920x_read = error: -19 [ 1598.839996][ T5921] dvb-usb: error while querying for an remote control event. [ 1598.879215][ T5937] usb 9-1: USB disconnect, device number 59 [ 1598.980637][ T5921] m920x_read = error: -19 [ 1598.987519][ T5921] dvb-usb: error while querying for an remote control event. [ 1599.120084][ T5921] m920x_read = error: -19 [ 1599.124750][ T5921] dvb-usb: error while querying for an remote control event. [ 1599.229967][ T5937] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1599.251059][ T5921] m920x_read = error: -19 [ 1599.255499][ T5921] dvb-usb: error while querying for an remote control event. [ 1599.304494][T28564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6101'. [ 1599.390161][ T5921] m920x_read = error: -19 [ 1599.390256][ T5921] dvb-usb: error while querying for an remote control event. [ 1599.415874][ T5937] usb 9-1: config 0 has an invalid interface number: 254 but max is 0 [ 1599.415907][ T5937] usb 9-1: config 0 has no interface number 0 [ 1599.415949][ T5937] usb 9-1: config 0 interface 254 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1599.415980][ T5937] usb 9-1: config 0 interface 254 has no altsetting 0 [ 1599.416015][ T5937] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1599.416042][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.431265][ T5937] usb 9-1: config 0 descriptor?? [ 1599.452038][ T5937] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1599.452869][ T5937] gspca_sunplus: reg_w_riv err -32 [ 1599.452957][ T5937] sunplus 9-1:0.254: probe with driver sunplus failed with error -32 [ 1599.501905][ T5937] m920x_read = error: -19 [ 1599.501936][ T5937] dvb-usb: error while querying for an remote control event. [ 1599.635992][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6106'. [ 1599.636027][T28592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1599.647991][ T5937] m920x_read = error: -19 [ 1599.648023][ T5937] dvb-usb: error while querying for an remote control event. [ 1599.688105][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6108'. [ 1599.758813][ T5937] m920x_read = error: -19 [ 1599.758844][ T5937] dvb-usb: error while querying for an remote control event. [ 1599.860876][ T5937] m920x_read = error: -19 [ 1599.860909][ T5937] dvb-usb: error while querying for an remote control event. [ 1599.970472][ T5937] m920x_read = error: -19 [ 1599.970505][ T5937] dvb-usb: error while querying for an remote control event. [ 1600.080298][ T5921] m920x_read = error: -19 [ 1600.080341][ T5921] dvb-usb: error while querying for an remote control event. [ 1600.190045][ T5921] m920x_read = error: -19 [ 1600.190077][ T5921] dvb-usb: error while querying for an remote control event. [ 1600.256407][T28603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1600.300110][ T5937] m920x_read = error: -19 [ 1600.309597][ T5937] dvb-usb: error while querying for an remote control event. [ 1600.441271][ T5921] m920x_read = error: -19 [ 1600.445848][ T5921] dvb-usb: error while querying for an remote control event. [ 1600.481808][ T5921] usb 9-1: USB disconnect, device number 60 [ 1600.576234][T16492] m920x_read = error: -19 [ 1600.589973][T16492] dvb-usb: error while querying for an remote control event. [ 1600.699951][T16492] m920x_read = error: -19 [ 1600.704477][T16492] dvb-usb: error while querying for an remote control event. [ 1601.179965][T16492] m920x_read = error: -19 [ 1601.184499][T16492] dvb-usb: error while querying for an remote control event. [ 1601.290730][ T5921] usb 9-1: new low-speed USB device number 61 using dummy_hcd [ 1601.310016][ T5937] m920x_read = error: -19 [ 1601.314505][ T5937] dvb-usb: error while querying for an remote control event. [ 1601.440094][ T5937] m920x_read = error: -19 [ 1601.444522][ T5921] usb 9-1: Invalid ep0 maxpacket: 32 [ 1601.450568][ T5937] dvb-usb: error while querying for an remote control event. [ 1601.590003][ T5937] m920x_read = error: -19 [ 1601.594461][ T5921] usb 9-1: new low-speed USB device number 62 using dummy_hcd [ 1601.602124][ T5937] dvb-usb: error while querying for an remote control event. [ 1601.613389][T28621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.640534][T28621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.730223][T16492] m920x_read = error: -19 [ 1601.734752][T16492] dvb-usb: error while querying for an remote control event. [ 1601.779904][ T5921] usb 9-1: Invalid ep0 maxpacket: 32 [ 1601.785820][ T5921] usb usb9-port1: attempt power cycle [ 1601.807044][T28625] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1601.860052][ T5937] m920x_read = error: -19 [ 1601.864580][ T5937] dvb-usb: error while querying for an remote control event. [ 1601.950884][T28629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6120'. [ 1601.961185][T28629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6120'. [ 1602.023854][ T5937] m920x_read = error: -19 [ 1602.031742][ T5937] dvb-usb: error while querying for an remote control event. [ 1602.150389][ T5921] usb 9-1: new low-speed USB device number 63 using dummy_hcd [ 1602.161987][T16492] m920x_read = error: -19 [ 1602.166784][T16492] dvb-usb: error while querying for an remote control event. [ 1602.182462][ T5921] usb 9-1: Invalid ep0 maxpacket: 32 [ 1602.310414][T16492] m920x_read = error: -19 [ 1602.314856][T16492] dvb-usb: error while querying for an remote control event. [ 1602.380641][ T5921] usb 9-1: new low-speed USB device number 64 using dummy_hcd [ 1602.413728][ T5921] usb 9-1: Invalid ep0 maxpacket: 32 [ 1602.420392][ T5921] usb usb9-port1: unable to enumerate USB device [ 1602.460689][ T5921] m920x_read = error: -19 [ 1602.478548][ T5921] dvb-usb: error while querying for an remote control event. [ 1602.620209][ T5921] m920x_read = error: -19 [ 1602.624938][ T5921] dvb-usb: error while querying for an remote control event. [ 1602.788154][ T5921] m920x_read = error: -19 [ 1602.794260][ T5921] dvb-usb: error while querying for an remote control event. [ 1602.910115][ T5921] m920x_read = error: -19 [ 1602.914523][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.021235][T28638] fuse: Bad value for 'fd' [ 1603.061606][T16492] m920x_read = error: -19 [ 1603.071270][T16492] dvb-usb: error while querying for an remote control event. [ 1603.210502][ T5921] m920x_read = error: -19 [ 1603.215288][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.349997][ T5921] m920x_read = error: -19 [ 1603.357079][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.470232][ T5921] m920x_read = error: -19 [ 1603.474942][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.535759][T28647] fuse: blksize only supported for fuseblk [ 1603.590429][ T5921] m920x_read = error: -19 [ 1603.595026][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.710004][ T5921] m920x_read = error: -19 [ 1603.714559][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.842804][ T5921] m920x_read = error: -19 [ 1603.847501][ T5921] dvb-usb: error while querying for an remote control event. [ 1603.973779][ T5921] m920x_read = error: -19 [ 1603.978545][ T5921] dvb-usb: error while querying for an remote control event. [ 1604.090248][T16492] m920x_read = error: -19 [ 1604.097211][T16492] dvb-usb: error while querying for an remote control event. [ 1604.146701][T28661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1604.157927][T28661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1604.167309][ T5921] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1604.210216][T16492] m920x_read = error: -19 [ 1604.214631][T16492] dvb-usb: error while querying for an remote control event. [ 1604.319941][ T5921] usb 9-1: Using ep0 maxpacket: 8 [ 1604.327526][ T5921] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1604.345021][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1604.355262][T16492] m920x_read = error: -19 [ 1604.359664][T16492] dvb-usb: error while querying for an remote control event. [ 1604.367601][ T5921] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1604.380777][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1604.435571][ T5921] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1604.499991][T16492] m920x_read = error: -19 [ 1604.504418][T16492] dvb-usb: error while querying for an remote control event. [ 1604.548718][ T5921] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1604.558329][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.618784][ T5921] usb 9-1: Product: syz [ 1604.623312][T16492] m920x_read = error: -19 [ 1604.627700][T16492] dvb-usb: error while querying for an remote control event. [ 1604.637945][ T5921] usb 9-1: Manufacturer: syz [ 1604.668066][ T5921] usb 9-1: SerialNumber: syz [ 1604.685783][ T5921] usb 9-1: config 0 descriptor?? [ 1604.759579][ T5921] kvaser_usb 9-1:0.0: error -EMSGSIZE: Cannot get software info [ 1604.773411][T16492] m920x_read = error: -19 [ 1604.777973][T16492] dvb-usb: error while querying for an remote control event. [ 1604.790246][ T5921] kvaser_usb 9-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1604.909980][T19624] m920x_read = error: -19 [ 1604.918116][T19624] dvb-usb: error while querying for an remote control event. [ 1604.957960][T28658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.968491][T28658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.989095][T28658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.002164][T28658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.020735][T28658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.040422][T19624] m920x_read = error: -19 [ 1605.042068][T28658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.056494][T19624] dvb-usb: error while querying for an remote control event. [ 1605.069008][T28658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.119086][T28658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.143722][T28658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.164772][T28658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.190028][T19624] m920x_read = error: -19 [ 1605.194466][T19624] dvb-usb: error while querying for an remote control event. [ 1605.204610][T19624] usb 9-1: USB disconnect, device number 65 [ 1605.310072][T16492] m920x_read = error: -19 [ 1605.314486][T16492] dvb-usb: error while querying for an remote control event. [ 1605.430558][T19624] m920x_read = error: -19 [ 1605.435318][T19624] dvb-usb: error while querying for an remote control event. [ 1605.550272][T19624] m920x_read = error: -19 [ 1605.554941][T19624] dvb-usb: error while querying for an remote control event. [ 1605.670150][T19624] m920x_read = error: -19 [ 1605.674890][T19624] dvb-usb: error while querying for an remote control event. [ 1605.690085][ T5921] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1605.794096][T19624] m920x_read = error: -19 [ 1605.805806][T19624] dvb-usb: error while querying for an remote control event. [ 1605.841452][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 1605.858657][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.880059][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.891258][ T5921] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1605.906899][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.927009][ T5921] usb 6-1: config 0 descriptor?? [ 1605.932324][T19624] m920x_read = error: -19 [ 1605.936826][T19624] dvb-usb: error while querying for an remote control event. [ 1606.055193][T28677] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1606.118139][T16482] IPVS: starting estimator thread 0... [ 1606.124169][T16492] m920x_read = error: -19 [ 1606.128649][T16492] dvb-usb: error while querying for an remote control event. [ 1606.130351][ T5907] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1606.230060][T28684] IPVS: using max 39 ests per chain, 93600 per kthread [ 1606.250483][T16492] m920x_read = error: -19 [ 1606.254964][T16492] dvb-usb: error while querying for an remote control event. [ 1606.324506][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1606.378003][T16492] m920x_read = error: -19 [ 1606.382695][T16492] dvb-usb: error while querying for an remote control event. [ 1606.400960][ T5921] hid_parser_main: 6 callbacks suppressed [ 1606.400977][ T5921] savu 0003:1E7D:2D5A.006D: unknown main item tag 0x0 [ 1606.417679][ T5921] savu 0003:1E7D:2D5A.006D: unknown main item tag 0x0 [ 1606.481899][ T5921] savu 0003:1E7D:2D5A.006D: unknown main item tag 0x0 [ 1606.501795][ T5921] savu 0003:1E7D:2D5A.006D: unknown main item tag 0x0 [ 1606.516573][ T5921] savu 0003:1E7D:2D5A.006D: unknown main item tag 0x0 [ 1606.524642][T16492] m920x_read = error: -19 [ 1606.529126][T16492] dvb-usb: error while querying for an remote control event. [ 1606.544152][ T5921] savu 0003:1E7D:2D5A.006D: unbalanced collection at end of report description [ 1606.596355][ T5921] savu 0003:1E7D:2D5A.006D: parse failed [ 1606.611686][ T5907] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1606.619769][ T5921] savu 0003:1E7D:2D5A.006D: probe with driver savu failed with error -22 [ 1606.640091][T16492] m920x_read = error: -19 [ 1606.644950][T16492] dvb-usb: error while querying for an remote control event. [ 1606.685876][ T5921] usb 6-1: USB disconnect, device number 82 [ 1606.762538][T16492] m920x_read = error: -19 [ 1606.766946][T16492] dvb-usb: error while querying for an remote control event. [ 1606.770558][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1606.901399][ T5907] usb usb9-port1: attempt power cycle [ 1606.903032][T16492] m920x_read = error: -19 [ 1606.919996][T16492] dvb-usb: error while querying for an remote control event. [ 1607.040042][T16492] m920x_read = error: -19 [ 1607.044524][T16492] dvb-usb: error while querying for an remote control event. [ 1607.190051][T16492] m920x_read = error: -19 [ 1607.194441][T16492] dvb-usb: error while querying for an remote control event. [ 1607.256541][T28696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.295395][T28696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.320489][ T5921] m920x_read = error: -19 [ 1607.324921][ T5921] dvb-usb: error while querying for an remote control event. [ 1607.402334][ T5907] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1607.440565][ T5921] m920x_read = error: -19 [ 1607.445187][ T5921] dvb-usb: error while querying for an remote control event. [ 1607.461182][ T5907] usb 9-1: device descriptor read/8, error -71 [ 1607.534966][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.541593][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.570096][ T5921] m920x_read = error: -19 [ 1607.574567][ T5921] dvb-usb: error while querying for an remote control event. [ 1607.582618][T28700] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1607.643130][T19763] IPVS: stop unused estimator thread 0... [ 1607.710026][ T5907] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1607.739994][ T5921] m920x_read = error: -19 [ 1607.744413][ T5921] dvb-usb: error while querying for an remote control event. [ 1607.753274][ T5907] usb 9-1: device descriptor read/8, error -71 [ 1607.779563][T28703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6142'. [ 1607.790390][T28703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6142'. [ 1607.891401][ T5921] m920x_read = error: -19 [ 1607.892462][ T5907] usb usb9-port1: unable to enumerate USB device [ 1607.895923][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.020267][ T5921] m920x_read = error: -19 [ 1608.024758][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.142210][ T5921] m920x_read = error: -19 [ 1608.150042][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.246906][T28722] fuse: Bad value for 'fd' [ 1608.290177][ T5921] m920x_read = error: -19 [ 1608.310097][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.430148][ T5921] m920x_read = error: -19 [ 1608.439978][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.519941][ T5907] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1608.560220][ T5921] m920x_read = error: -19 [ 1608.564619][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.693112][ T5907] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1608.700946][ T5921] m920x_read = error: -19 [ 1608.716035][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.716637][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.742696][ T5907] usb 6-1: Product: syz [ 1608.746954][ T5907] usb 6-1: Manufacturer: syz [ 1608.770997][ T5907] usb 6-1: SerialNumber: syz [ 1608.778198][ T5907] usb 6-1: config 0 descriptor?? [ 1608.786468][ T5907] hub 6-1:0.0: bad descriptor, ignoring hub [ 1608.801298][ T5907] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1608.850175][ T5921] m920x_read = error: -19 [ 1608.858308][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.979941][ T5921] m920x_read = error: -19 [ 1608.984378][ T5921] dvb-usb: error while querying for an remote control event. [ 1608.991236][ T5907] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1609.009485][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1609.029374][ T5907] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1609.038937][ T5907] usb 6-1: media controller created [ 1609.058125][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1609.109975][T19624] m920x_read = error: -19 [ 1609.114491][T19624] dvb-usb: error while querying for an remote control event. [ 1609.153754][ T5907] DVB: Unable to find symbol dib7000p_attach() [ 1609.160199][ T5907] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1609.190042][ T5921] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1609.229996][T19624] m920x_read = error: -19 [ 1609.234699][T19624] dvb-usb: error while querying for an remote control event. [ 1609.252562][ T5907] rc_core: IR keymap rc-dib0700-rc5 not found [ 1609.261309][ T5907] Registered IR keymap rc-empty [ 1609.268769][ T5907] dvb-usb: could not initialize remote control. [ 1609.280117][ T5907] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1609.297292][T16482] IPVS: starting estimator thread 0... [ 1609.333307][T28735] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1609.350216][T19624] m920x_read = error: -19 [ 1609.354676][T19624] dvb-usb: error while querying for an remote control event. [ 1609.362242][ T5921] usb 9-1: Using ep0 maxpacket: 32 [ 1609.369417][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.381829][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.391866][ T5921] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1609.402349][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.420142][ T5921] usb 9-1: config 0 descriptor?? [ 1609.425206][T28743] IPVS: using max 28 ests per chain, 67200 per kthread [ 1609.470067][T16492] m920x_read = error: -19 [ 1609.474618][T16492] dvb-usb: error while querying for an remote control event. [ 1609.590816][T16492] m920x_read = error: -19 [ 1609.595341][T16492] dvb-usb: error while querying for an remote control event. [ 1609.709995][T19624] m920x_read = error: -19 [ 1609.714671][T19624] dvb-usb: error while querying for an remote control event. [ 1609.830071][T19624] m920x_read = error: -19 [ 1609.842605][T19624] dvb-usb: error while querying for an remote control event. [ 1609.854701][ T5921] savu 0003:1E7D:2D5A.006E: unknown main item tag 0x0 [ 1609.870492][ T5921] savu 0003:1E7D:2D5A.006E: unknown main item tag 0x0 [ 1609.877750][ T5921] savu 0003:1E7D:2D5A.006E: unknown main item tag 0x0 [ 1609.887727][ T5921] savu 0003:1E7D:2D5A.006E: unknown main item tag 0x0 [ 1609.896154][ T5921] savu 0003:1E7D:2D5A.006E: unknown main item tag 0x0 [ 1609.911344][ T5921] savu 0003:1E7D:2D5A.006E: unbalanced collection at end of report description [ 1609.935933][ T5921] savu 0003:1E7D:2D5A.006E: parse failed [ 1609.950991][ T5921] savu 0003:1E7D:2D5A.006E: probe with driver savu failed with error -22 [ 1609.980061][T19624] m920x_read = error: -19 [ 1609.988841][T19624] dvb-usb: error while querying for an remote control event. [ 1610.041431][ T5921] usb 9-1: USB disconnect, device number 70 [ 1610.110672][T19624] m920x_read = error: -19 [ 1610.126612][T28746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1610.148389][T19624] dvb-usb: error while querying for an remote control event. [ 1610.188612][T28746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1610.270218][T19624] m920x_read = error: -19 [ 1610.278160][T19624] dvb-usb: error while querying for an remote control event. [ 1610.310162][T12662] IPVS: stop unused estimator thread 0... [ 1610.402289][T19624] m920x_read = error: -19 [ 1610.406878][T19624] dvb-usb: error while querying for an remote control event. [ 1610.469304][T28751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.518614][T28751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.540012][T19624] m920x_read = error: -19 [ 1610.544421][T19624] dvb-usb: error while querying for an remote control event. [ 1610.595711][T28752] netlink: 47 bytes leftover after parsing attributes in process `syz.3.6156'. [ 1610.677388][T19624] m920x_read = error: -19 [ 1610.694171][T19624] dvb-usb: error while querying for an remote control event. [ 1610.810681][T19624] m920x_read = error: -19 [ 1610.847162][T19624] dvb-usb: error while querying for an remote control event. [ 1610.896978][T28761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6158'. [ 1610.970143][T19624] m920x_read = error: -19 [ 1610.974712][T19624] dvb-usb: error while querying for an remote control event. [ 1611.090485][T19624] m920x_read = error: -19 [ 1611.106750][T19624] dvb-usb: error while querying for an remote control event. [ 1611.156527][T16482] usb 6-1: USB disconnect, device number 83 [ 1611.220054][T19624] m920x_read = error: -19 [ 1611.224544][T19624] dvb-usb: error while querying for an remote control event. [ 1611.298306][T16482] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1611.340376][T19624] m920x_read = error: -19 [ 1611.347392][T19624] dvb-usb: error while querying for an remote control event. [ 1611.460102][ T5921] m920x_read = error: -19 [ 1611.464673][ T5921] dvb-usb: error while querying for an remote control event. [ 1611.580094][T19624] m920x_read = error: -19 [ 1611.584659][T19624] dvb-usb: error while querying for an remote control event. [ 1611.720006][ T5921] m920x_read = error: -19 [ 1611.724657][ T5921] dvb-usb: error while querying for an remote control event. [ 1611.850020][ T5921] m920x_read = error: -19 [ 1611.854534][ T5921] dvb-usb: error while querying for an remote control event. [ 1611.990010][ T5921] m920x_read = error: -19 [ 1611.997167][ T5921] dvb-usb: error while querying for an remote control event. [ 1612.110659][ T5921] m920x_read = error: -19 [ 1612.119340][ T5921] dvb-usb: error while querying for an remote control event. [ 1612.244877][ T5921] m920x_read = error: -19 [ 1612.254498][ T5921] dvb-usb: error while querying for an remote control event. [ 1612.370129][ T5921] m920x_read = error: -19 [ 1612.374568][ T5921] dvb-usb: error while querying for an remote control event. [ 1612.422282][T28787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6166'. [ 1612.462630][T28787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1612.500149][ T5921] m920x_read = error: -19 [ 1612.504861][ T5921] dvb-usb: error while querying for an remote control event. [ 1612.620058][T19624] m920x_read = error: -19 [ 1612.624536][T19624] dvb-usb: error while querying for an remote control event. [ 1612.719942][ T5921] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1612.743445][T19624] m920x_read = error: -19 [ 1612.818043][T19624] dvb-usb: error while querying for an remote control event. [ 1612.940636][T19624] m920x_read = error: -19 [ 1612.948925][T19624] dvb-usb: error while querying for an remote control event. [ 1612.960139][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 1612.971748][ T5921] usb 6-1: too many configurations: 55, using maximum allowed: 8 [ 1612.986796][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.005691][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.029542][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.048525][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.068236][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.079727][T19624] m920x_read = error: -19 [ 1613.084535][T19624] dvb-usb: error while querying for an remote control event. [ 1613.166790][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.184141][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.199966][T16492] m920x_read = error: -19 [ 1613.204573][T16492] dvb-usb: error while querying for an remote control event. [ 1613.213648][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.224502][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.235291][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.250308][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.264106][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.281261][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.292991][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.304023][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.315125][ T5921] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1613.330159][T16492] m920x_read = error: -19 [ 1613.335443][T16492] dvb-usb: error while querying for an remote control event. [ 1613.346984][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1613.356621][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1613.365252][ T5921] usb 6-1: SerialNumber: syz [ 1613.470789][ T5921] m920x_read = error: -19 [ 1613.476000][ T5921] dvb-usb: error while querying for an remote control event. [ 1613.610473][ T5921] m920x_read = error: -19 [ 1613.616876][ T5921] dvb-usb: error while querying for an remote control event. [ 1613.628703][T28787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.639488][T28787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.668273][T16482] usb 6-1: USB disconnect, device number 84 [ 1613.731361][ T5921] m920x_read = error: -19 [ 1613.735797][ T5921] dvb-usb: error while querying for an remote control event. [ 1613.860030][ T5921] m920x_read = error: -19 [ 1613.864513][ T5921] dvb-usb: error while querying for an remote control event. [ 1613.922345][T28808] fuse: Bad value for 'fd' [ 1613.931207][T28809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.940358][T28809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.990300][ T5921] m920x_read = error: -19 [ 1613.994892][ T5921] dvb-usb: error while querying for an remote control event. [ 1614.075617][T28813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.119991][ T5921] m920x_read = error: -19 [ 1614.124570][ T5921] dvb-usb: error while querying for an remote control event. [ 1614.132250][T16492] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1614.154814][T28813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.250175][ T5921] m920x_read = error: -19 [ 1614.254809][ T5921] dvb-usb: error while querying for an remote control event. [ 1614.283370][T28808] ipip0: entered promiscuous mode [ 1614.295223][T28808] ipip0: entered allmulticast mode [ 1614.311154][T16492] usb 6-1: Using ep0 maxpacket: 16 [ 1614.334673][T16492] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.348189][T16492] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 1614.358073][T16492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.374516][T16492] usb 6-1: Product: syz [ 1614.401228][ T5921] m920x_read = error: -19 [ 1614.405664][ T5921] dvb-usb: error while querying for an remote control event. [ 1614.487565][T16492] usb 6-1: Manufacturer: syz [ 1614.505419][T16492] usb 6-1: SerialNumber: syz [ 1614.540204][T19624] m920x_read = error: -19 [ 1614.549479][T19624] dvb-usb: error while querying for an remote control event. [ 1614.585705][T16492] usb 6-1: bad CDC descriptors [ 1614.660017][T16492] m920x_read = error: -19 [ 1614.668257][T16492] dvb-usb: error while querying for an remote control event. [ 1614.791342][T25985] usb 6-1: USB disconnect, device number 85 [ 1614.799983][T16492] m920x_read = error: -19 [ 1614.804423][T16492] dvb-usb: error while querying for an remote control event. [ 1614.826807][T28830] dummy0: entered allmulticast mode [ 1614.842586][T28830] dummy0: left allmulticast mode [ 1614.929973][T16492] m920x_read = error: -19 [ 1614.937477][T16492] dvb-usb: error while querying for an remote control event. [ 1615.239588][T16492] m920x_read = error: -19 [ 1615.244296][T16492] dvb-usb: error while querying for an remote control event. [ 1615.390295][T16492] m920x_read = error: -19 [ 1615.397708][T16492] dvb-usb: error while querying for an remote control event. [ 1615.508830][T28842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3480241289 (13920965156 ns) > initial count (268 ns). Using initial count to start timer. [ 1615.528613][T16492] m920x_read = error: -19 [ 1615.536248][T16492] dvb-usb: error while querying for an remote control event. [ 1615.659954][T16492] m920x_read = error: -19 [ 1615.666755][T16492] dvb-usb: error while querying for an remote control event. [ 1615.898147][T16492] m920x_read = error: -19 [ 1615.904620][T16492] dvb-usb: error while querying for an remote control event. [ 1616.020113][T19624] m920x_read = error: -19 [ 1616.025016][T19624] dvb-usb: error while querying for an remote control event. [ 1616.032690][ T5921] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1616.150021][T19624] m920x_read = error: -19 [ 1616.155189][T19624] dvb-usb: error while querying for an remote control event. [ 1616.192644][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 1616.217168][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8968, setting to 1024 [ 1616.250875][ T5921] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1616.283870][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.292205][T19624] m920x_read = error: -19 [ 1616.299469][T19624] dvb-usb: error while querying for an remote control event. [ 1616.329444][ T5921] usb 9-1: config 0 descriptor?? [ 1616.430325][T19624] m920x_read = error: -19 [ 1616.443071][T19624] dvb-usb: error while querying for an remote control event. [ 1616.523167][T28852] kvm: Disabled LAPIC found during irq injection [ 1616.555420][ T5921] usbhid 9-1:0.0: can't add hid device: -71 [ 1616.562873][ T5921] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1616.580021][T19624] m920x_read = error: -19 [ 1616.586685][ T5921] usb 9-1: USB disconnect, device number 72 [ 1616.593413][T19624] dvb-usb: error while querying for an remote control event. [ 1616.780018][T19624] m920x_read = error: -19 [ 1616.786639][T19624] dvb-usb: error while querying for an remote control event. [ 1616.910427][T19624] m920x_read = error: -19 [ 1616.917602][T19624] dvb-usb: error while querying for an remote control event. [ 1617.039942][T19624] m920x_read = error: -19 [ 1617.044506][T19624] dvb-usb: error while querying for an remote control event. [ 1617.089986][ T5921] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1617.160313][T19624] m920x_read = error: -19 [ 1617.164798][T19624] dvb-usb: error while querying for an remote control event. [ 1617.249904][ T5921] usb 9-1: Using ep0 maxpacket: 32 [ 1617.258739][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 1617.272641][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8968, setting to 1024 [ 1617.284408][T19624] m920x_read = error: -19 [ 1617.288789][T19624] dvb-usb: error while querying for an remote control event. [ 1617.514763][ T5921] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1617.524335][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.540617][ T5921] usb 9-1: config 0 descriptor?? [ 1617.585316][T28868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.587879][ T5921] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1617.623365][T19624] m920x_read = error: -19 [ 1617.627801][T19624] dvb-usb: error while querying for an remote control event. [ 1617.638248][ T5921] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1617.689241][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1617.689255][ T30] audit: type=1326 audit(1774999015.453:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1617.732720][T28870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6188'. [ 1617.741991][T19624] m920x_read = error: -19 [ 1617.746406][T19624] dvb-usb: error while querying for an remote control event. [ 1617.755980][T28870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.766766][T28870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.777881][ T30] audit: type=1326 audit(1774999015.493:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1617.808067][ T30] audit: type=1326 audit(1774999015.493:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1617.871294][T19624] m920x_read = error: -19 [ 1617.875840][T19624] dvb-usb: error while querying for an remote control event. [ 1617.910073][ T30] audit: type=1326 audit(1774999015.493:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1617.990188][ T30] audit: type=1326 audit(1774999015.493:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1618.015945][T19624] m920x_read = error: -19 [ 1618.024680][T19624] dvb-usb: error while querying for an remote control event. [ 1618.059986][ T30] audit: type=1326 audit(1774999015.493:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1618.113424][ T30] audit: type=1326 audit(1774999015.493:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1618.150297][T19624] m920x_read = error: -19 [ 1618.154757][T19624] dvb-usb: error while querying for an remote control event. [ 1618.179939][ T30] audit: type=1326 audit(1774999015.493:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1618.229994][ T30] audit: type=1326 audit(1774999015.493:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1618.283940][T19624] m920x_read = error: -19 [ 1618.288506][T19624] dvb-usb: error while querying for an remote control event. [ 1618.297784][ T30] audit: type=1326 audit(1774999015.493:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.3.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f181e99c819 code=0x7ffc0000 [ 1618.353411][T28876] fuse: Unknown parameter 'rootmod;Ÿ÷°¤e' [ 1618.386574][T28876] x_tables: duplicate underflow at hook 1 [ 1618.400032][T19624] m920x_read = error: -19 [ 1618.405188][T19624] dvb-usb: error while querying for an remote control event. [ 1618.520050][T19624] m920x_read = error: -19 [ 1618.524578][T19624] dvb-usb: error while querying for an remote control event. [ 1618.570145][T28883] fuse: Bad value for 'fd' [ 1618.640007][T19624] m920x_read = error: -19 [ 1618.644539][T19624] dvb-usb: error while querying for an remote control event. [ 1618.657488][ T5921] usb 9-1: USB disconnect, device number 73 [ 1618.684598][ T5921] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1618.799934][T19624] m920x_read = error: -19 [ 1618.805660][T19624] dvb-usb: error while querying for an remote control event. [ 1618.950608][ T5921] m920x_read = error: -19 [ 1618.965082][ T5921] dvb-usb: error while querying for an remote control event. [ 1619.091703][ T5921] m920x_read = error: -19 [ 1619.097282][ T5921] dvb-usb: error while querying for an remote control event. [ 1619.210238][ T5921] m920x_read = error: -19 [ 1619.214680][ T5921] dvb-usb: error while querying for an remote control event. [ 1619.263868][T28894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6194'. [ 1619.349976][ T5921] m920x_read = error: -19 [ 1619.354377][ T5921] dvb-usb: error while querying for an remote control event. [ 1619.531850][T19624] m920x_read = error: -19 [ 1619.536405][T19624] dvb-usb: error while querying for an remote control event. [ 1619.651789][T19624] m920x_read = error: -19 [ 1619.663747][T19624] dvb-usb: error while querying for an remote control event. [ 1619.677203][T28900] IPVS: length: 139 != 8 [ 1619.780305][ T5921] m920x_read = error: -19 [ 1619.866049][ T5921] dvb-usb: error while querying for an remote control event. [ 1619.983537][ T5921] m920x_read = error: -19 [ 1619.987978][ T5921] dvb-usb: error while querying for an remote control event. [ 1620.190637][T28905] fuse: Bad value for 'fd' [ 1620.200084][ T5921] m920x_read = error: -19 [ 1620.204444][ T5921] dvb-usb: error while querying for an remote control event. [ 1620.381469][ T5921] m920x_read = error: -19 [ 1620.387021][ T5921] dvb-usb: error while querying for an remote control event. [ 1620.520336][ T5921] m920x_read = error: -19 [ 1620.528511][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'. [ 1620.542493][ T5921] dvb-usb: error while querying for an remote control event. [ 1620.670305][ T5921] m920x_read = error: -19 [ 1620.674862][ T5921] dvb-usb: error while querying for an remote control event. [ 1620.800258][ T5921] m920x_read = error: -19 [ 1620.804689][ T5921] dvb-usb: error while querying for an remote control event. [ 1620.920460][ T5921] m920x_read = error: -19 [ 1620.936475][ T5921] dvb-usb: error while querying for an remote control event. [ 1621.062416][ T5921] m920x_read = error: -19 [ 1621.066811][ T5921] dvb-usb: error while querying for an remote control event. [ 1621.430111][ T5921] m920x_read = error: -19 [ 1621.437397][ T5921] dvb-usb: error while querying for an remote control event. [ 1621.550607][ T5921] m920x_read = error: -19 [ 1621.555387][ T5921] dvb-usb: error while querying for an remote control event. [ 1621.685632][ T5921] m920x_read = error: -19 [ 1621.695490][ T5921] dvb-usb: error while querying for an remote control event. [ 1621.830230][ T5921] m920x_read = error: -19 [ 1621.834628][ T5921] dvb-usb: error while querying for an remote control event. [ 1622.100125][ T5921] m920x_read = error: -19 [ 1622.104732][ T5921] dvb-usb: error while querying for an remote control event. [ 1622.250462][ T5921] m920x_read = error: -19 [ 1622.256761][ T5921] dvb-usb: error while querying for an remote control event. [ 1622.390466][ T5921] m920x_read = error: -19 [ 1622.395314][ T5921] dvb-usb: error while querying for an remote control event. [ 1622.520244][ T5907] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1622.530276][ T5921] m920x_read = error: -19 [ 1622.534712][ T5921] dvb-usb: error while querying for an remote control event. [ 1622.680466][ T5907] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1622.753542][ T5921] m920x_read = error: -19 [ 1622.776115][ T5921] dvb-usb: error while querying for an remote control event. [ 1622.789963][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.806797][ T5907] usb 9-1: Product: syz [ 1622.817637][ T5907] usb 9-1: Manufacturer: syz [ 1622.840340][ T5907] usb 9-1: SerialNumber: syz [ 1622.946668][ T5907] usb 9-1: config 0 descriptor?? [ 1622.969247][ T5907] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1622.988845][ T5937] m920x_read = error: -19 [ 1622.993736][ T5937] dvb-usb: error while querying for an remote control event. [ 1623.021677][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1623.040399][ T5907] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1623.055794][ T5907] usb 9-1: media controller created [ 1623.104286][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1623.179931][T19624] m920x_read = error: -19 [ 1623.275154][T19624] dvb-usb: error while querying for an remote control event. [ 1623.363461][ T5907] DVB: Unable to find symbol mt352_attach() [ 1623.462752][ T5937] m920x_read = error: -19 [ 1623.467181][ T5937] dvb-usb: error while querying for an remote control event. [ 1623.670314][T19624] m920x_read = error: -19 [ 1623.688355][T19624] dvb-usb: error while querying for an remote control event. [ 1623.698741][ T5907] DVB: Unable to find symbol nxt6000_attach() [ 1623.705079][ T5907] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1623.718526][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input139 [ 1623.971814][ T5907] dvb-usb: schedule remote query interval to 1000 msecs. [ 1623.980809][ T5907] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1623.992645][ T5907] dvb-usb: bulk message failed: -22 (7/0) [ 1623.999546][ T5907] dvb-usb: bulk message failed: -22 (7/0) [ 1624.074924][ T5907] usb 9-1: USB disconnect, device number 74 [ 1624.083234][T28931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.110327][ T5937] m920x_read = error: -19 [ 1624.128911][ T5937] dvb-usb: error while querying for an remote control event. [ 1624.393035][T19624] m920x_read = error: -19 [ 1624.410297][T19624] dvb-usb: error while querying for an remote control event. [ 1624.516597][ T5907] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1624.599999][T19624] m920x_read = error: -19 [ 1624.616745][T19624] dvb-usb: error while querying for an remote control event. [ 1624.807187][T28945] fuse: Bad value for 'fd' [ 1624.926589][ T5937] m920x_read = error: -19 [ 1624.942330][ T5937] dvb-usb: error while querying for an remote control event. [ 1625.093091][T19624] m920x_read = error: -19 [ 1625.113503][T19624] dvb-usb: error while querying for an remote control event. [ 1625.260289][ T5937] m920x_read = error: -19 [ 1625.274950][ T5937] dvb-usb: error while querying for an remote control event. [ 1625.411003][ T5937] m920x_read = error: -19 [ 1625.449994][ T5937] dvb-usb: error while querying for an remote control event. [ 1625.570105][ T5937] m920x_read = error: -19 [ 1625.579642][ T5937] dvb-usb: error while querying for an remote control event. [ 1625.731103][ T5937] m920x_read = error: -19 [ 1625.735692][ T5937] dvb-usb: error while querying for an remote control event. [ 1625.984070][ T5937] m920x_read = error: -19 [ 1625.988497][ T5937] dvb-usb: error while querying for an remote control event. [ 1626.002021][T28963] fuse: Bad value for 'fd' [ 1626.102464][ T5937] m920x_read = error: -19 [ 1626.109052][ T5937] dvb-usb: error while querying for an remote control event. [ 1626.220747][T19624] m920x_read = error: -19 [ 1626.226431][T19624] dvb-usb: error while querying for an remote control event. [ 1626.323159][ T5937] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1626.340034][T19624] m920x_read = error: -19 [ 1626.344581][T19624] dvb-usb: error while querying for an remote control event. [ 1626.657256][T19624] m920x_read = error: -19 [ 1626.665890][T19624] dvb-usb: error while querying for an remote control event. [ 1626.766702][ T5937] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1626.777148][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.795512][T19624] m920x_read = error: -19 [ 1626.839947][ T5937] usb 6-1: Product: syz [ 1626.860152][T19624] dvb-usb: error while querying for an remote control event. [ 1626.870066][T25985] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1626.885381][ T5937] usb 6-1: Manufacturer: syz [ 1626.905151][ T5937] usb 6-1: SerialNumber: syz [ 1626.940277][ T5937] usb 6-1: config 0 descriptor?? [ 1626.959867][ T5937] hub 6-1:0.0: bad descriptor, ignoring hub [ 1626.978755][ T5937] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1627.032892][T19624] m920x_read = error: -19 [ 1627.049409][T19624] dvb-usb: error while querying for an remote control event. [ 1627.065679][T25985] usb 9-1: Using ep0 maxpacket: 16 [ 1627.134547][T25985] usb 9-1: config 0 has no interfaces? [ 1627.156299][T25985] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1627.183934][T25985] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1627.201098][T19624] m920x_read = error: -19 [ 1627.206475][T19624] dvb-usb: error while querying for an remote control event. [ 1627.206584][T25985] usb 9-1: Manufacturer: syz [ 1627.266248][T25985] usb 9-1: config 0 descriptor?? [ 1627.315814][ T5937] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1627.339999][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1627.364861][T19624] m920x_read = error: -19 [ 1627.369254][T19624] dvb-usb: error while querying for an remote control event. [ 1627.388020][ T5937] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1627.428804][ T5937] usb 6-1: media controller created [ 1627.498506][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1627.538420][T28967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1627.555309][T19624] m920x_read = error: -19 [ 1627.559722][T19624] dvb-usb: error while querying for an remote control event. [ 1627.712019][T19624] m920x_read = error: -19 [ 1627.716443][T19624] dvb-usb: error while querying for an remote control event. [ 1627.840759][T19624] m920x_read = error: -19 [ 1627.847558][T19624] dvb-usb: error while querying for an remote control event. [ 1627.971607][T19624] m920x_read = error: -19 [ 1627.976390][T19624] dvb-usb: error while querying for an remote control event. [ 1628.091034][T19624] m920x_read = error: -19 [ 1628.101285][T19624] dvb-usb: error while querying for an remote control event. [ 1628.240346][T19624] m920x_read = error: -19 [ 1628.245682][T19624] dvb-usb: error while querying for an remote control event. [ 1628.396454][T19624] m920x_read = error: -19 [ 1628.413107][ T5937] DVB: Unable to find symbol dib7000p_attach() [ 1628.421565][T19624] dvb-usb: error while querying for an remote control event. [ 1628.432917][ T5937] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1628.503929][T28976] fuse: Bad value for 'fd' [ 1628.590226][T19624] m920x_read = error: -19 [ 1628.594948][T19624] dvb-usb: error while querying for an remote control event. [ 1628.715952][T19624] m920x_read = error: -19 [ 1628.725482][T19624] dvb-usb: error while querying for an remote control event. [ 1628.789360][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6218'. [ 1628.800390][ T5937] rc_core: IR keymap rc-dib0700-rc5 not found [ 1628.807473][ T5937] Registered IR keymap rc-empty [ 1628.841519][ T5937] dvb-usb: could not initialize remote control. [ 1628.849988][T19624] m920x_read = error: -19 [ 1628.874102][T19624] dvb-usb: error while querying for an remote control event. [ 1628.927112][ T5937] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1629.050845][T19624] m920x_read = error: -19 [ 1629.058848][T19624] dvb-usb: error while querying for an remote control event. [ 1629.181552][T19624] m920x_read = error: -19 [ 1629.318972][T19624] dvb-usb: error while querying for an remote control event. [ 1629.430007][T19624] m920x_read = error: -19 [ 1629.434579][T19624] dvb-usb: error while querying for an remote control event. [ 1629.582276][ T5907] usb 9-1: USB disconnect, device number 75 [ 1629.601514][T19624] m920x_read = error: -19 [ 1629.606002][T19624] dvb-usb: error while querying for an remote control event. [ 1629.856568][T19624] m920x_read = error: -19 [ 1629.861255][T19624] dvb-usb: error while querying for an remote control event. [ 1630.230146][T19624] m920x_read = error: -19 [ 1630.235834][T19624] dvb-usb: error while querying for an remote control event. [ 1630.360530][ T5937] m920x_read = error: -19 [ 1630.365082][ T5937] dvb-usb: error while querying for an remote control event. [ 1630.510351][ T5937] m920x_read = error: -19 [ 1630.520778][ T5937] dvb-usb: error while querying for an remote control event. [ 1630.684278][ T5937] m920x_read = error: -19 [ 1630.688723][ T5937] dvb-usb: error while querying for an remote control event. [ 1630.796893][ T5907] usb 6-1: USB disconnect, device number 86 [ 1630.810399][ T5937] m920x_read = error: -19 [ 1630.814997][ T5937] dvb-usb: error while querying for an remote control event. [ 1630.932513][ T5907] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1630.958178][ T5937] m920x_read = error: -19 [ 1630.964884][ T5937] dvb-usb: error while querying for an remote control event. [ 1631.100028][ T5921] m920x_read = error: -19 [ 1631.104549][ T5921] dvb-usb: error while querying for an remote control event. [ 1631.230117][ T5921] m920x_read = error: -19 [ 1631.235038][ T5921] dvb-usb: error while querying for an remote control event. [ 1631.367519][ T5921] m920x_read = error: -19 [ 1631.372687][ T5921] dvb-usb: error while querying for an remote control event. [ 1631.520384][ T5921] m920x_read = error: -19 [ 1631.525020][ T5921] dvb-usb: error while querying for an remote control event. [ 1631.679230][ T5921] m920x_read = error: -19 [ 1631.690084][ T5907] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1631.702476][ T5921] dvb-usb: error while querying for an remote control event. [ 1631.899927][ T5907] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1631.953556][T19624] m920x_read = error: -19 [ 1631.961855][T19624] dvb-usb: error while querying for an remote control event. [ 1631.977985][ T5907] usb 6-1: config 1 has no interface number 0 [ 1632.011834][ T5907] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1632.039982][ T5907] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1632.067799][ T5907] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 1632.080103][T19624] m920x_read = error: -19 [ 1632.084854][T19624] dvb-usb: error while querying for an remote control event. [ 1632.146781][ T5907] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.220015][T19624] m920x_read = error: -19 [ 1632.224467][T19624] dvb-usb: error while querying for an remote control event. [ 1632.339857][ T5907] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1632.340160][T19624] m920x_read = error: -19 [ 1632.349127][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.349154][ T5907] usb 6-1: Product: syz [ 1632.349172][ T5907] usb 6-1: Manufacturer: syz [ 1632.385308][T19624] dvb-usb: error while querying for an remote control event. [ 1632.499994][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1632.500010][ T30] audit: type=1326 audit(1774999030.233:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126159c819 code=0x7ffc0000 [ 1632.549984][T19624] m920x_read = error: -19 [ 1632.554601][T19624] dvb-usb: error while querying for an remote control event. [ 1632.576337][ T30] audit: type=1326 audit(1774999030.233:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126159c819 code=0x7ffc0000 [ 1632.609706][ T5907] usb 6-1: SerialNumber: syz [ 1632.643773][ T30] audit: type=1326 audit(1774999030.233:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126159c819 code=0x7ffc0000 [ 1632.669587][T28995] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1632.677723][T28995] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1632.689055][T19624] m920x_read = error: -19 [ 1632.699024][T19624] dvb-usb: error while querying for an remote control event. [ 1632.722584][ T5907] usb 6-1: Error in usbnet_get_endpoints (-22) [ 1632.795444][ T30] audit: type=1326 audit(1774999030.233:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126159c819 code=0x7ffc0000 [ 1632.819260][T19624] m920x_read = error: -19 [ 1632.824015][T19624] dvb-usb: error while querying for an remote control event. [ 1632.940232][T19624] m920x_read = error: -19 [ 1632.944837][T19624] dvb-usb: error while querying for an remote control event. [ 1632.972815][ T30] audit: type=1326 audit(1774999030.233:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126159c819 code=0x7ffc0000 [ 1633.038684][ T30] audit: type=1326 audit(1774999030.233:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f126155d04e code=0x7ffc0000 [ 1633.064588][T19624] m920x_read = error: -19 [ 1633.073483][T19624] dvb-usb: error while querying for an remote control event. [ 1633.109403][T29010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1633.139156][ T30] audit: type=1326 audit(1774999030.233:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f126159c4ab code=0x7ffc0000 [ 1633.190405][T19624] m920x_read = error: -19 [ 1633.195211][T19624] dvb-usb: error while querying for an remote control event. [ 1633.228244][ T30] audit: type=1326 audit(1774999030.233:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f126159c4ab code=0x7ffc0000 [ 1633.274952][ T30] audit: type=1326 audit(1774999030.243:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f126159c4ab code=0x7ffc0000 [ 1633.321771][T19624] m920x_read = error: -19 [ 1633.328497][T19624] dvb-usb: error while querying for an remote control event. [ 1633.372178][ T30] audit: type=1326 audit(1774999030.243:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f126159c4ab code=0x7ffc0000 [ 1633.439996][T19624] m920x_read = error: -19 [ 1633.444597][T19624] dvb-usb: error while querying for an remote control event. [ 1633.581215][T19624] m920x_read = error: -19 [ 1633.585763][T19624] dvb-usb: error while querying for an remote control event. [ 1633.700020][T19624] m920x_read = error: -19 [ 1633.704595][T19624] dvb-usb: error while querying for an remote control event. [ 1633.820343][T19624] m920x_read = error: -19 [ 1633.825005][T19624] dvb-usb: error while querying for an remote control event. [ 1633.945301][T19624] m920x_read = error: -19 [ 1633.950126][T19624] dvb-usb: error while querying for an remote control event. [ 1634.070173][T19624] m920x_read = error: -19 [ 1634.075392][T19624] dvb-usb: error while querying for an remote control event. [ 1634.214641][T19624] m920x_read = error: -19 [ 1634.220051][T19624] dvb-usb: error while querying for an remote control event. [ 1634.330084][T19624] m920x_read = error: -19 [ 1634.334542][T19624] dvb-usb: error while querying for an remote control event. [ 1634.480036][T19624] m920x_read = error: -19 [ 1634.484601][T19624] dvb-usb: error while querying for an remote control event. [ 1634.596531][T29026] fuse: Bad value for 'fd' [ 1634.603038][T19624] usb 6-1: USB disconnect, device number 87 [ 1634.644339][ T5921] m920x_read = error: -19 [ 1634.648822][ T5921] dvb-usb: error while querying for an remote control event. [ 1634.686217][T29026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.695355][T29026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.790486][ T5921] m920x_read = error: -19 [ 1634.796641][ T5921] dvb-usb: error while querying for an remote control event. [ 1634.889632][T29035] veth1: Caught tx_queue_len zero misconfig [ 1634.908388][T29035] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1634.931109][ T5921] m920x_read = error: -19 [ 1634.937919][ T5921] dvb-usb: error while querying for an remote control event. [ 1635.061500][ T5937] m920x_read = error: -19 [ 1635.066259][ T5937] dvb-usb: error while querying for an remote control event. [ 1635.180561][ T5937] m920x_read = error: -19 [ 1635.185909][ T5937] dvb-usb: error while querying for an remote control event. [ 1635.319950][ T5937] m920x_read = error: -19 [ 1635.324874][ T5937] dvb-usb: error while querying for an remote control event. [ 1635.440047][ T5937] m920x_read = error: -19 [ 1635.445006][ T5937] dvb-usb: error while querying for an remote control event. [ 1635.559993][ T5937] m920x_read = error: -19 [ 1635.565969][ T5937] dvb-usb: error while querying for an remote control event. [ 1635.760144][ T5937] m920x_read = error: -19 [ 1635.764613][ T5937] dvb-usb: error while querying for an remote control event. [ 1635.880210][ T5921] m920x_read = error: -19 [ 1635.884841][ T5921] dvb-usb: error while querying for an remote control event. [ 1636.320168][ T5921] m920x_read = error: -19 [ 1636.324757][ T5921] dvb-usb: error while querying for an remote control event. [ 1636.509991][ T5921] m920x_read = error: -19 [ 1636.514858][ T5921] dvb-usb: error while querying for an remote control event. [ 1636.650450][ T5937] m920x_read = error: -19 [ 1636.654957][ T5937] dvb-usb: error while querying for an remote control event. [ 1636.770435][ T5937] m920x_read = error: -19 [ 1636.774989][ T5937] dvb-usb: error while querying for an remote control event. [ 1636.910015][ T5937] m920x_read = error: -19 [ 1636.915815][ T5937] dvb-usb: error while querying for an remote control event. [ 1637.040826][ T5937] m920x_read = error: -19 [ 1637.047847][ T5937] dvb-usb: error while querying for an remote control event. [ 1637.089120][T29053] loop4: detected capacity change from 0 to 7 [ 1637.100522][T29053] Dev loop4: unable to read RDB block 7 [ 1637.106205][T29053] loop4: unable to read partition table [ 1637.113973][T29053] loop4: partition table beyond EOD, truncated [ 1637.180067][ T5921] m920x_read = error: -19 [ 1637.184819][ T5921] dvb-usb: error while querying for an remote control event. [ 1637.197537][T29053] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1637.321412][ T5921] m920x_read = error: -19 [ 1637.325822][ T5921] dvb-usb: error while querying for an remote control event. [ 1637.450030][ T5921] m920x_read = error: -19 [ 1637.454561][ T5921] dvb-usb: error while querying for an remote control event. [ 1637.572167][ T5921] m920x_read = error: -19 [ 1637.576952][ T5921] dvb-usb: error while querying for an remote control event. [ 1637.617023][T29058] bond1: Removing last ns target with arp_interval on [ 1637.629977][ T5907] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1637.694816][ T5921] m920x_read = error: -19 [ 1637.699738][ T5921] dvb-usb: error while querying for an remote control event. [ 1637.742594][T29061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.755431][T29061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.789925][ T5907] usb 9-1: Using ep0 maxpacket: 16 [ 1637.801937][ T5907] usb 9-1: config 1 has an invalid interface number: 36 but max is 0 [ 1637.810748][ T5921] m920x_read = error: -19 [ 1637.815194][ T5921] dvb-usb: error while querying for an remote control event. [ 1637.890503][ T5907] usb 9-1: config 1 has no interface number 0 [ 1637.896696][ T5907] usb 9-1: config 1 interface 36 has no altsetting 0 [ 1637.926429][ T5907] usb 9-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c [ 1637.945069][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.959936][ T5907] usb 9-1: Product: syz [ 1637.969895][ T5907] usb 9-1: Manufacturer: syz [ 1637.984108][ T5907] usb 9-1: SerialNumber: syz [ 1638.020163][ T5921] m920x_read = error: -19 [ 1638.024779][ T5921] dvb-usb: error while querying for an remote control event. [ 1638.150250][ T5921] m920x_read = error: -19 [ 1638.154954][ T5921] dvb-usb: error while querying for an remote control event. [ 1638.246579][T29056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.264477][T29056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.270540][ T5921] m920x_read = error: -19 [ 1638.279156][ T5921] dvb-usb: error while querying for an remote control event. [ 1638.301240][ T5907] ax88179_178a 9-1:1.36: probe with driver ax88179_178a failed with error -22 [ 1638.315031][ T5907] usb 9-1: USB disconnect, device number 76 [ 1638.397522][ T5921] m920x_read = error: -19 [ 1638.404500][ T5921] dvb-usb: error while querying for an remote control event. [ 1638.473875][T29070] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1638.539985][ T5921] m920x_read = error: -19 [ 1638.544467][ T5921] dvb-usb: error while querying for an remote control event. [ 1638.581902][T29074] netlink: 'syz.3.6246': attribute type 1 has an invalid length. [ 1638.726122][ T5937] m920x_read = error: -19 [ 1638.734008][ T5937] dvb-usb: error while querying for an remote control event. [ 1638.897297][ T5937] m920x_read = error: -19 [ 1638.905193][T29079] misc userio: No port type given on /dev/userio [ 1638.914504][ T5937] dvb-usb: error while querying for an remote control event. [ 1639.040100][ T5921] m920x_read = error: -19 [ 1639.044615][ T5921] dvb-usb: error while querying for an remote control event. [ 1639.149911][ T5937] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1639.180330][ T5921] m920x_read = error: -19 [ 1639.184766][ T5921] dvb-usb: error while querying for an remote control event. [ 1639.218829][T29091] fuse: Bad value for 'fd' [ 1639.289970][ T5937] usb 6-1: device descriptor read/64, error -71 [ 1639.301309][ T5921] m920x_read = error: -19 [ 1639.305732][ T5921] dvb-usb: error while querying for an remote control event. [ 1639.430018][ T5921] m920x_read = error: -19 [ 1639.434528][ T5921] dvb-usb: error while querying for an remote control event. [ 1639.540028][ T5937] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1639.549956][ T5921] m920x_read = error: -19 [ 1639.554413][ T5921] dvb-usb: error while querying for an remote control event. [ 1639.670019][ T5921] m920x_read = error: -19 [ 1639.674455][ T5921] dvb-usb: error while querying for an remote control event. [ 1639.695910][ T5937] usb 6-1: device descriptor read/64, error -71 [ 1639.830807][ T5937] usb usb6-port1: attempt power cycle [ 1639.849587][ T5921] m920x_read = error: -19 [ 1639.858151][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.046644][ T5921] m920x_read = error: -19 [ 1640.060478][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.205502][ T5921] m920x_read = error: -19 [ 1640.213562][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.240028][ T5937] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1640.260807][ T5937] usb 6-1: device descriptor read/8, error -71 [ 1640.330926][ T5921] m920x_read = error: -19 [ 1640.335393][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.469974][ T5921] m920x_read = error: -19 [ 1640.482131][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.500675][ T5937] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1640.594158][ T5937] usb 6-1: device descriptor read/8, error -71 [ 1640.629975][ T5921] m920x_read = error: -19 [ 1640.634397][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.720542][ T5937] usb usb6-port1: unable to enumerate USB device [ 1640.760418][ T5921] m920x_read = error: -19 [ 1640.764810][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.882817][T29103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1640.930306][ T5921] m920x_read = error: -19 [ 1640.934890][ T5921] dvb-usb: error while querying for an remote control event. [ 1640.994888][T29105] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6256'. [ 1641.050081][ T5921] m920x_read = error: -19 [ 1641.054801][ T5921] dvb-usb: error while querying for an remote control event. [ 1641.180070][ T5921] m920x_read = error: -19 [ 1641.184614][ T5921] dvb-usb: error while querying for an remote control event. [ 1641.185658][T29108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1641.214511][T29108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1641.240175][T29108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1641.253552][T29108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1641.270240][T29108] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1641.288340][T29108] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1641.304837][ T5921] m920x_read = error: -19 [ 1641.309387][ T5921] dvb-usb: error while querying for an remote control event. [ 1641.436072][ T5921] m920x_read = error: -19 [ 1641.440654][ T5921] dvb-usb: error while querying for an remote control event. [ 1641.567984][ T5921] m920x_read = error: -19 [ 1641.574922][ T5921] dvb-usb: error while querying for an remote control event. [ 1641.667942][ T30] audit: type=1326 audit(1774999039.433:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1641.739970][ T5921] m920x_read = error: -19 [ 1641.744432][ T5921] dvb-usb: error while querying for an remote control event. [ 1641.938980][ T30] audit: type=1326 audit(1774999039.433:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1642.034331][T29126] bridge_slave_0: left allmulticast mode [ 1642.044950][T29126] bridge_slave_0: left promiscuous mode [ 1642.105444][T29126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.276650][T19624] m920x_read = error: -19 [ 1642.286247][T19624] dvb-usb: error while querying for an remote control event. [ 1642.299876][ T30] audit: type=1326 audit(1774999039.463:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1642.598574][ T5937] m920x_read = error: -19 [ 1642.603187][ T5937] dvb-usb: error while querying for an remote control event. [ 1642.643970][ T30] audit: type=1326 audit(1774999039.463:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1642.669499][ T30] audit: type=1326 audit(1774999039.463:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1642.678265][T29135] xt_hashlimit: size too large, truncated to 1048576 [ 1642.708259][T29126] bridge_slave_1: left allmulticast mode [ 1642.725993][T29126] bridge_slave_1: left promiscuous mode [ 1642.741503][ T5937] m920x_read = error: -19 [ 1642.745966][ T5937] dvb-usb: error while querying for an remote control event. [ 1642.763996][T29126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.909976][ T5937] m920x_read = error: -19 [ 1642.914502][ T5937] dvb-usb: error while querying for an remote control event. [ 1642.959231][ T30] audit: type=1326 audit(1774999039.463:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1642.995922][T29126] bond0: (slave bond_slave_0): Releasing backup interface [ 1643.017085][T29143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.070604][T29143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.110151][ T5937] m920x_read = error: -19 [ 1643.114860][ T5937] dvb-usb: error while querying for an remote control event. [ 1643.128107][ T30] audit: type=1326 audit(1774999039.483:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1643.196025][ T30] audit: type=1326 audit(1774999039.483:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1643.215610][T26275] Bluetooth: hci1: command 0x0406 tx timeout [ 1643.240762][ T5937] m920x_read = error: -19 [ 1643.250129][ T5907] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1643.264864][T29126] team0: Port device team_slave_0 removed [ 1643.282117][ T5937] dvb-usb: error while querying for an remote control event. [ 1643.289997][T26275] Bluetooth: hci2: command 0x0406 tx timeout [ 1643.292746][T11429] Bluetooth: hci5: command 0x0c1a tx timeout [ 1643.298972][T26275] Bluetooth: hci0: command 0x0406 tx timeout [ 1643.368030][ T30] audit: type=1326 audit(1774999039.483:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1643.420085][ T30] audit: type=1326 audit(1774999039.483:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29122 comm="syz.8.6262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd439c819 code=0x7ffc0000 [ 1643.442781][T16492] m920x_read = error: -19 [ 1643.447223][T16492] dvb-usb: error while querying for an remote control event. [ 1643.489483][ T5907] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1643.497473][T29126] team0: Port device 26±ÿþ€ removed [ 1643.508297][ T5907] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1643.552066][T29126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.559583][T29126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.561789][ T5907] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1643.567740][T16492] m920x_read = error: -19 [ 1643.631702][T16492] dvb-usb: error while querying for an remote control event. [ 1643.684239][T29126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.701881][ T5907] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1643.730710][T29126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.738181][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.750188][T16492] m920x_read = error: -19 [ 1643.756494][T29126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1643.781478][T16492] dvb-usb: error while querying for an remote control event. [ 1643.783075][ T5907] usb 9-1: Product: syz [ 1643.862447][ T5907] usb 9-1: Manufacturer: syz [ 1643.862476][ T5907] usb 9-1: SerialNumber: syz [ 1643.900484][ T5921] m920x_read = error: -19 [ 1643.900516][ T5921] dvb-usb: error while querying for an remote control event. [ 1644.013445][ T5921] m920x_read = error: -19 [ 1644.017968][ T5921] dvb-usb: error while querying for an remote control event. [ 1644.101783][T25985] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1644.140266][T16492] m920x_read = error: -19 [ 1644.144913][T16492] dvb-usb: error while querying for an remote control event. [ 1644.230867][ T5907] usb 9-1: Can't get UAC3 power state for id 10 [ 1644.279676][ T5907] usb 9-1: 2:0: failed to get current value for ch 0 (-71) [ 1644.369946][ T5937] m920x_read = error: -19 [ 1644.374400][ T5937] dvb-usb: error while querying for an remote control event. [ 1644.499953][T25985] usb 6-1: Using ep0 maxpacket: 16 [ 1644.507410][T25985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.520518][ T5937] m920x_read = error: -19 [ 1644.525996][ T5937] dvb-usb: error while querying for an remote control event. [ 1644.565136][T25985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.566476][T29168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.603901][ T5907] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1644.612390][T29168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.629446][T25985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1644.648913][T25985] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1644.690025][ T5937] m920x_read = error: -19 [ 1644.694492][ T5937] dvb-usb: error while querying for an remote control event. [ 1644.803476][T25985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.860339][ T5937] m920x_read = error: -19 [ 1644.864855][ T5937] dvb-usb: error while querying for an remote control event. [ 1644.892142][T25985] usb 6-1: config 0 descriptor?? [ 1644.956130][ T5907] usb 9-1: USB disconnect, device number 77 [ 1645.010157][ T5937] m920x_read = error: -19 [ 1645.014785][ T5937] dvb-usb: error while querying for an remote control event. [ 1645.048177][ T7698] udevd[7698]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.210451][ T5937] m920x_read = error: -19 [ 1645.214870][ T5937] dvb-usb: error while querying for an remote control event. [ 1645.371275][T29147] Bluetooth: hci5: command 0x0c1a tx timeout [ 1645.390481][ T5921] m920x_read = error: -19 [ 1645.395156][ T5921] dvb-usb: error while querying for an remote control event. [ 1645.419680][T25985] HID 045e:07da: Invalid code 65791 type 1 [ 1645.520509][ T5921] m920x_read = error: -19 [ 1645.539897][T25985] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.006F/input/input141 [ 1645.603023][T25985] microsoft 0003:045E:07DA.006F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1645.617643][T29185] syzkaller0: entered promiscuous mode [ 1645.644789][T29185] syzkaller0: entered allmulticast mode [ 1645.666122][ T5921] dvb-usb: error while querying for an remote control event. [ 1645.689413][T29183] fuse: Bad value for 'fd' [ 1645.722182][T25985] usb 6-1: USB disconnect, device number 92 [ 1645.856900][T29186] fido_id[29186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1645.920211][ T5921] m920x_read = error: -19 [ 1645.926082][ T5921] dvb-usb: error while querying for an remote control event. [ 1646.060067][ T5921] m920x_read = error: -19 [ 1646.064665][ T5921] dvb-usb: error while querying for an remote control event. [ 1646.190390][ T5921] m920x_read = error: -19 [ 1646.194977][ T5921] dvb-usb: error while querying for an remote control event. [ 1646.350561][ T5921] m920x_read = error: -19 [ 1646.355256][ T5921] dvb-usb: error while querying for an remote control event. [ 1646.500110][ T5937] m920x_read = error: -19 [ 1646.504573][ T5937] dvb-usb: error while querying for an remote control event. [ 1646.630002][ T5921] m920x_read = error: -19 [ 1646.637184][ T5921] dvb-usb: error while querying for an remote control event. [ 1646.761919][T29199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1646.773159][ T5921] m920x_read = error: -19 [ 1646.777598][ T5921] dvb-usb: error while querying for an remote control event. [ 1646.890329][ T5921] m920x_read = error: -19 [ 1646.896014][ T5921] dvb-usb: error while querying for an remote control event. [ 1647.042551][T29208] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6280'. [ 1647.051973][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6280'. [ 1647.094316][ T5921] m920x_read = error: -19 [ 1647.104070][ T5921] dvb-usb: error while querying for an remote control event. [ 1647.145563][T29211] loop2: detected capacity change from 0 to 7 [ 1647.153742][T29211] Dev loop2: unable to read RDB block 7 [ 1647.167480][T29211] loop2: AHDI p1 p2 p3 [ 1647.248051][ T5937] m920x_read = error: -19 [ 1647.252614][ T5937] dvb-usb: error while querying for an remote control event. [ 1647.265003][T29211] loop2: partition table partially beyond EOD, truncated [ 1647.300079][T29211] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1647.314304][T29211] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1647.380409][ T5921] m920x_read = error: -19 [ 1647.386969][ T5921] dvb-usb: error while querying for an remote control event. [ 1647.450225][T29147] Bluetooth: hci5: command 0x0c1a tx timeout [ 1647.500298][ T5921] m920x_read = error: -19 [ 1647.504889][ T5921] dvb-usb: error while querying for an remote control event. [ 1647.587340][T29217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.609306][T29217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.620376][ T5921] m920x_read = error: -19 [ 1647.624808][ T5921] dvb-usb: error while querying for an remote control event. [ 1647.745772][T29220] xt_hashlimit: size too large, truncated to 1048576 [ 1647.761822][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1647.761841][ T30] audit: type=1326 audit(1774999045.493:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1647.850387][ T30] audit: type=1326 audit(1774999045.493:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1647.854197][ T5921] m920x_read = error: -19 [ 1647.891184][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.085975][ T5921] m920x_read = error: -19 [ 1648.092983][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.157734][ T30] audit: type=1326 audit(1774999045.503:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1648.210126][ T5921] m920x_read = error: -19 [ 1648.220106][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.300367][ T30] audit: type=1326 audit(1774999045.503:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1648.340306][ T5921] m920x_read = error: -19 [ 1648.344908][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.470380][ T5921] m920x_read = error: -19 [ 1648.474952][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.499927][ T30] audit: type=1326 audit(1774999045.503:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1648.599963][ T5921] m920x_read = error: -19 [ 1648.610024][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.637863][ T30] audit: type=1326 audit(1774999045.503:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1648.704259][ T30] audit: type=1326 audit(1774999045.503:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1648.772253][ T5921] m920x_read = error: -19 [ 1648.776958][ T5921] dvb-usb: error while querying for an remote control event. [ 1648.830851][ T30] audit: type=1326 audit(1774999045.503:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1648.890140][ T5937] m920x_read = error: -19 [ 1648.894570][ T5937] dvb-usb: error while querying for an remote control event. [ 1648.987849][ T30] audit: type=1326 audit(1774999045.503:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1649.070068][ T5921] m920x_read = error: -19 [ 1649.074493][ T5921] dvb-usb: error while querying for an remote control event. [ 1649.147115][ T30] audit: type=1326 audit(1774999045.503:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.5.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853d9c819 code=0x7ffc0000 [ 1649.300093][ T5921] m920x_read = error: -19 [ 1649.304807][ T5921] dvb-usb: error while querying for an remote control event. [ 1649.430085][T19624] m920x_read = error: -19 [ 1649.448257][T19624] dvb-usb: error while querying for an remote control event. [ 1649.640001][T19624] m920x_read = error: -19 [ 1649.646662][T19624] dvb-usb: error while querying for an remote control event. [ 1649.801465][T19624] m920x_read = error: -19 [ 1649.820192][T19624] dvb-usb: error while querying for an remote control event. [ 1649.950153][T19624] m920x_read = error: -19 [ 1649.954650][T19624] dvb-usb: error while querying for an remote control event. [ 1650.070896][T19624] m920x_read = error: -19 [ 1650.085772][T19624] dvb-usb: error while querying for an remote control event. [ 1650.223694][T19624] m920x_read = error: -19 [ 1650.246190][T19624] dvb-usb: error while querying for an remote control event. [ 1650.394767][T19624] m920x_read = error: -19 [ 1650.399244][T19624] dvb-usb: error while querying for an remote control event. [ 1650.520064][T19624] m920x_read = error: -19 [ 1650.524463][T19624] dvb-usb: error while querying for an remote control event. [ 1650.640029][T19624] m920x_read = error: -19 [ 1650.644449][T19624] dvb-usb: error while querying for an remote control event. [ 1650.648418][ T5907] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1650.782635][T19624] m920x_read = error: -19 [ 1650.787081][T19624] dvb-usb: error while querying for an remote control event. [ 1650.821713][ T5907] usb 9-1: Using ep0 maxpacket: 8 [ 1650.829087][ T5907] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1650.861107][ T5907] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1650.886773][ T5907] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1650.908023][ T5907] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1650.919392][ T5907] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1650.934810][ T5907] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1650.940604][ T5937] m920x_read = error: -19 [ 1650.945986][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.948325][ T5937] dvb-usb: error while querying for an remote control event. [ 1650.957102][T25985] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1651.120012][ T5937] m920x_read = error: -19 [ 1651.126353][ T5937] dvb-usb: error while querying for an remote control event. [ 1651.152405][T25985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.190169][T25985] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1651.219427][ T5907] usb 9-1: GET_CAPABILITIES returned 0 [ 1651.229662][T29267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.247356][T25985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.256080][ T5907] usbtmc 9-1:16.0: can't read capabilities [ 1651.261657][T29267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.274436][ T5937] m920x_read = error: -19 [ 1651.282643][ T5937] dvb-usb: error while querying for an remote control event. [ 1651.307566][T25985] usb 6-1: config 0 descriptor?? [ 1651.310985][T29268] fuse: Bad value for 'fd' [ 1651.318093][T29260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1651.420341][ T5907] usb 9-1: USB disconnect, device number 78 [ 1651.430451][ T5937] m920x_read = error: -19 [ 1651.435505][ T5937] dvb-usb: error while querying for an remote control event. [ 1651.497183][T29268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.542033][T29268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.552802][T29256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.567257][T29256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.603331][T25985] usbhid 6-1:0.0: can't add hid device: -71 [ 1651.610075][ T5937] m920x_read = error: -19 [ 1651.614540][ T5937] dvb-usb: error while querying for an remote control event. [ 1651.620655][T25985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1651.660818][T25985] usb 6-1: USB disconnect, device number 93 [ 1651.754988][ T5937] m920x_read = error: -19 [ 1651.759482][ T5937] dvb-usb: error while querying for an remote control event. [ 1651.871545][ T5937] m920x_read = error: -19 [ 1651.876206][ T5937] dvb-usb: error while querying for an remote control event. [ 1652.000367][ T5937] m920x_read = error: -19 [ 1652.027278][ T5937] dvb-usb: error while querying for an remote control event. [ 1652.139957][T25985] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1652.153671][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1652.182719][ T5937] m920x_read = error: -19 [ 1652.190088][ T5937] dvb-usb: error while querying for an remote control event. [ 1652.367210][T19624] m920x_read = error: -19 [ 1652.396368][T19624] dvb-usb: error while querying for an remote control event. [ 1652.443876][T25985] usb 6-1: Using ep0 maxpacket: 16 [ 1652.459909][ T5937] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1652.497439][T25985] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.517470][T25985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1652.543609][T16492] m920x_read = error: -19 [ 1652.550908][T16492] dvb-usb: error while querying for an remote control event. [ 1652.670308][T19624] m920x_read = error: -19 [ 1652.675672][T19624] dvb-usb: error while querying for an remote control event. [ 1652.683402][ T5937] usb 9-1: Using ep0 maxpacket: 8 [ 1652.694988][ T5937] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1652.706472][T25985] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1652.708476][ T5937] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1652.715813][T25985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.773319][ T5937] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1652.805284][T19624] m920x_read = error: -19 [ 1652.810100][T19624] dvb-usb: error while querying for an remote control event. [ 1652.826849][ T5937] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1652.829583][T25985] usb 6-1: config 0 descriptor?? [ 1652.847579][ T5937] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1652.860194][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.933135][T19624] m920x_read = error: -19 [ 1652.937714][T19624] dvb-usb: error while querying for an remote control event. [ 1653.050662][T19624] m920x_read = error: -19 [ 1653.055133][T19624] dvb-usb: error while querying for an remote control event. [ 1653.088366][ T5937] usb 9-1: usb_control_msg returned -32 [ 1653.094749][ T5937] usbtmc 9-1:16.0: can't read capabilities [ 1653.276050][T25985] mcp2221 0003:04D8:00DD.0070: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1653.370091][T19624] m920x_read = error: -19 [ 1653.374892][T19624] dvb-usb: error while querying for an remote control event. [ 1653.443844][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1653.500121][T19624] m920x_read = error: -19 [ 1653.513548][T19624] dvb-usb: error while querying for an remote control event. [ 1653.670699][T19624] m920x_read = error: -19 [ 1653.678567][T29256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.687410][T19624] dvb-usb: error while querying for an remote control event. [ 1653.711678][T29256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.758259][T19624] usb 6-1: USB disconnect, device number 94 [ 1653.825449][T16492] m920x_read = error: -19 [ 1653.830071][T16492] dvb-usb: error while querying for an remote control event. [ 1653.950042][T16492] m920x_read = error: -19 [ 1653.955147][T16492] dvb-usb: error while querying for an remote control event. [ 1654.090118][T19624] m920x_read = error: -19 [ 1654.094659][T19624] dvb-usb: error while querying for an remote control event. [ 1654.210031][T19624] m920x_read = error: -19 [ 1654.214611][T19624] dvb-usb: error while querying for an remote control event. [ 1654.329984][T19624] m920x_read = error: -19 [ 1654.334503][T19624] dvb-usb: error while querying for an remote control event. [ 1654.453847][T19624] m920x_read = error: -19 [ 1654.464331][T19624] dvb-usb: error while querying for an remote control event. [ 1654.579983][T16492] m920x_read = error: -19 [ 1654.584491][T16492] dvb-usb: error while querying for an remote control event. [ 1654.709935][T16492] m920x_read = error: -19 [ 1654.718639][T16492] dvb-usb: error while querying for an remote control event. [ 1654.839945][T16492] m920x_read = error: -19 [ 1654.844620][T16492] dvb-usb: error while querying for an remote control event. [ 1655.010450][T16492] m920x_read = error: -19 [ 1655.014991][T16492] dvb-usb: error while querying for an remote control event. [ 1655.065662][T16492] usb 9-1: USB disconnect, device number 79 [ 1655.142736][ T5937] m920x_read = error: -19 [ 1655.147709][ T5937] dvb-usb: error while querying for an remote control event. [ 1655.261331][ T5937] m920x_read = error: -19 [ 1655.266004][ T5937] dvb-usb: error while querying for an remote control event. [ 1655.286120][T29321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.308757][T29321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.380499][ T5937] m920x_read = error: -19 [ 1655.385138][ T5937] dvb-usb: error while querying for an remote control event. [ 1655.500089][ T5937] m920x_read = error: -19 [ 1655.506786][ T5937] dvb-usb: error while querying for an remote control event. [ 1655.539933][T16492] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1655.630106][T19624] m920x_read = error: -19 [ 1655.634596][T19624] dvb-usb: error while querying for an remote control event. [ 1655.694191][T16492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.711303][T29325] [ 1655.713697][T29325] ===================================================== [ 1655.720737][T29325] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1655.728306][T29325] syzkaller #0 Tainted: G L [ 1655.734301][T29325] ----------------------------------------------------- [ 1655.741249][T29325] syz.3.6312/29325 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1655.748980][T29325] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1655.757620][T29325] [ 1655.757620][T29325] and this task is already holding: [ 1655.764992][T29325] ffff888076762020 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1655.773631][T29325] which would create a new lock dependency: [ 1655.779542][T29325] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1655.787134][T29325] [ 1655.787134][T29325] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1655.796629][T29325] (&client->buffer_lock){..-.}-{3:3} [ 1655.796673][T29325] [ 1655.796673][T29325] ... which became SOFTIRQ-irq-safe at: [ 1655.809893][T29325] lock_acquire+0xf0/0x2e0 [ 1655.814445][T29325] _raw_spin_lock+0x2e/0x40 [ 1655.819137][T29325] evdev_pass_values+0xb9/0xbd0 [ 1655.824336][T29325] evdev_events+0x1e6/0x340 [ 1655.828940][T29325] input_pass_values+0x288/0x890 [ 1655.834120][T29325] input_event_dispose+0x330/0x6b0 [ 1655.839361][T29325] input_event+0x89/0xe0 [ 1655.843744][T29325] rc_keydown+0x62/0x1e0 [ 1655.848147][T29325] imon_incoming_packet+0x1ecb/0x31c0 [ 1655.853755][T29325] usb_rx_callback_intf0+0xba/0x210 [ 1655.859140][T29325] __usb_hcd_giveback_urb+0x376/0x540 [ 1655.864697][T29325] dummy_timer+0xbbd/0x45d0 [ 1655.869318][T29325] __hrtimer_run_queues+0x53a/0xcc0 [ 1655.874641][T29325] hrtimer_run_softirq+0x182/0x5a0 [ 1655.879892][T29325] handle_softirqs+0x22a/0x870 [ 1655.884815][T29325] __irq_exit_rcu+0x5f/0x150 [ 1655.889556][T29325] irq_exit_rcu+0x9/0x30 [ 1655.893934][T29325] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1655.899716][T29325] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1655.905826][T29325] [ 1655.905826][T29325] to a SOFTIRQ-irq-unsafe lock: [ 1655.912855][T29325] (tasklist_lock){.+.+}-{3:3} [ 1655.912883][T29325] [ 1655.912883][T29325] ... which became SOFTIRQ-irq-unsafe at: [ 1655.925522][T29325] ... [ 1655.925533][T29325] lock_acquire+0xf0/0x2e0 [ 1655.932628][T29325] _raw_read_lock+0x36/0x50 [ 1655.937256][T29325] __do_wait+0xde/0x740 [ 1655.941509][T29325] do_wait+0x1e7/0x540 [ 1655.945688][T29325] kernel_wait+0xd6/0x1c0 [ 1655.950234][T29325] call_usermodehelper_exec_work+0xbe/0x230 [ 1655.956328][T29325] process_scheduled_works+0xb6e/0x18c0 [ 1655.961977][T29325] worker_thread+0xa53/0xfc0 [ 1655.966669][T29325] kthread+0x388/0x470 [ 1655.970861][T29325] ret_from_fork+0x51e/0xb90 [ 1655.975568][T29325] ret_from_fork_asm+0x1a/0x30 [ 1655.980436][T29325] [ 1655.980436][T29325] other info that might help us debug this: [ 1655.980436][T29325] [ 1655.990683][T29325] Chain exists of: [ 1655.990683][T29325] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1655.990683][T29325] [ 1656.003941][T29325] Possible interrupt unsafe locking scenario: [ 1656.003941][T29325] [ 1656.012370][T29325] CPU0 CPU1 [ 1656.017752][T29325] ---- ---- [ 1656.023198][T29325] lock(tasklist_lock); [ 1656.027469][T29325] local_irq_disable(); [ 1656.034270][T29325] lock(&client->buffer_lock); [ 1656.041668][T29325] lock(&f_owner->lock); [ 1656.048577][T29325] [ 1656.052070][T29325] lock(&client->buffer_lock); [ 1656.057190][T29325] [ 1656.057190][T29325] *** DEADLOCK *** [ 1656.057190][T29325] [ 1656.065675][T29325] 6 locks held by syz.3.6312/29325: [ 1656.070921][T29325] #0: ffff888033062420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1656.080141][T29325] #1: ffffffff8e900ef0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4de/0x1e80 [ 1656.089328][T29325] #2: ffff88802abdaf38 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4e8/0x1e80 [ 1656.098846][T29325] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1656.107931][T29325] #4: ffff888032d99f30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1656.117124][T29325] #5: ffff888076762020 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1656.126200][T29325] [ 1656.126200][T29325] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1656.136813][T29325] -> (&client->buffer_lock){..-.}-{3:3} { [ 1656.142778][T29325] IN-SOFTIRQ-W at: [ 1656.147093][T29325] lock_acquire+0xf0/0x2e0 [ 1656.153617][T29325] _raw_spin_lock+0x2e/0x40 [ 1656.160137][T29325] evdev_pass_values+0xb9/0xbd0 [ 1656.167025][T29325] evdev_events+0x1e6/0x340 [ 1656.173572][T29325] input_pass_values+0x288/0x890 [ 1656.180519][T29325] input_event_dispose+0x330/0x6b0 [ 1656.187736][T29325] input_event+0x89/0xe0 [ 1656.194006][T29325] rc_keydown+0x62/0x1e0 [ 1656.200294][T29325] imon_incoming_packet+0x1ecb/0x31c0 [ 1656.207682][T29325] usb_rx_callback_intf0+0xba/0x210 [ 1656.214931][T29325] __usb_hcd_giveback_urb+0x376/0x540 [ 1656.222331][T29325] dummy_timer+0xbbd/0x45d0 [ 1656.228853][T29325] __hrtimer_run_queues+0x53a/0xcc0 [ 1656.236109][T29325] hrtimer_run_softirq+0x182/0x5a0 [ 1656.243900][T29325] handle_softirqs+0x22a/0x870 [ 1656.250687][T29325] __irq_exit_rcu+0x5f/0x150 [ 1656.257321][T29325] irq_exit_rcu+0x9/0x30 [ 1656.263644][T29325] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1656.271327][T29325] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1656.279354][T29325] INITIAL USE at: [ 1656.283539][T29325] lock_acquire+0xf0/0x2e0 [ 1656.289909][T29325] _raw_spin_lock_irqsave+0x40/0x60 [ 1656.297063][T29325] evdev_ioctl_handler+0x1a49/0x1fe0 [ 1656.304439][T29325] __se_sys_ioctl+0xfc/0x170 [ 1656.311142][T29325] do_syscall_64+0x14d/0xf80 [ 1656.317689][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.325567][T29325] } [ 1656.328293][T29325] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1656.336886][T29325] -> (&new->fa_lock){....}-{3:3} { [ 1656.342158][T29325] INITIAL USE at: [ 1656.346209][T29325] lock_acquire+0xf0/0x2e0 [ 1656.352562][T29325] _raw_write_lock_irq+0x3d/0x50 [ 1656.359300][T29325] fasync_remove_entry+0xf1/0x1c0 [ 1656.366173][T29325] __fput+0x8a5/0xa70 [ 1656.372036][T29325] task_work_run+0x1d9/0x270 [ 1656.378382][T29325] get_signal+0x11eb/0x1330 [ 1656.384646][T29325] arch_do_signal_or_restart+0xbc/0x830 [ 1656.391953][T29325] exit_to_user_mode_loop+0x86/0x480 [ 1656.399083][T29325] do_syscall_64+0x32d/0xf80 [ 1656.405437][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.413108][T29325] INITIAL READ USE at: [ 1656.417543][T29325] lock_acquire+0xf0/0x2e0 [ 1656.424177][T29325] _raw_read_lock_irqsave+0x48/0x60 [ 1656.431601][T29325] kill_fasync+0x199/0x4d0 [ 1656.438209][T29325] fuse_abort_conn+0xfda/0x1340 [ 1656.445284][T29325] fuse_conn_abort_write+0x123/0x1a0 [ 1656.452756][T29325] vfs_write+0x29a/0xb90 [ 1656.459181][T29325] ksys_write+0x150/0x270 [ 1656.465703][T29325] do_syscall_64+0x14d/0xf80 [ 1656.472526][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.480600][T29325] } [ 1656.483211][T29325] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1656.492182][T29325] ... acquired at: [ 1656.496183][T29325] _raw_read_lock_irqsave+0x48/0x60 [ 1656.501753][T29325] kill_fasync+0x199/0x4d0 [ 1656.506362][T29325] evdev_pass_values+0x627/0xbd0 [ 1656.511517][T29325] evdev_events+0x1e6/0x340 [ 1656.516215][T29325] input_pass_values+0x288/0x890 [ 1656.521339][T29325] input_event_dispose+0x330/0x6b0 [ 1656.526662][T29325] input_inject_event+0x1dd/0x340 [ 1656.531894][T29325] evdev_write+0x325/0x4c0 [ 1656.536500][T29325] vfs_write+0x29a/0xb90 [ 1656.540944][T29325] ksys_write+0x150/0x270 [ 1656.545453][T29325] do_syscall_64+0x14d/0xf80 [ 1656.550233][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.556314][T29325] [ 1656.558644][T29325] -> (&f_owner->lock){....}-{3:3} { [ 1656.563892][T29325] INITIAL USE at: [ 1656.567793][T29325] lock_acquire+0xf0/0x2e0 [ 1656.573808][T29325] _raw_write_lock_irq+0x3d/0x50 [ 1656.580333][T29325] __f_setown+0x67/0x370 [ 1656.586358][T29325] fcntl_dirnotify+0x3f9/0x6a0 [ 1656.592732][T29325] do_fcntl+0x77e/0x1a20 [ 1656.598598][T29325] __se_sys_fcntl+0xc8/0x150 [ 1656.604774][T29325] do_syscall_64+0x14d/0xf80 [ 1656.610943][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.618412][T29325] INITIAL READ USE at: [ 1656.622746][T29325] lock_acquire+0xf0/0x2e0 [ 1656.629197][T29325] _raw_read_lock_irqsave+0x48/0x60 [ 1656.636441][T29325] send_sigio+0x38/0x370 [ 1656.642795][T29325] dnotify_handle_event+0x169/0x440 [ 1656.650110][T29325] fsnotify+0x168e/0x1ae0 [ 1656.656652][T29325] __fsnotify_parent+0x50d/0x620 [ 1656.663739][T29325] notify_change+0xc55/0xf40 [ 1656.670440][T29325] chmod_common+0x273/0x4a0 [ 1656.676989][T29325] do_fchmodat+0x12d/0x230 [ 1656.683423][T29325] __x64_sys_chmod+0x62/0x70 [ 1656.690029][T29325] do_syscall_64+0x14d/0xf80 [ 1656.696650][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.704592][T29325] } [ 1656.707141][T29325] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1656.716205][T29325] ... acquired at: [ 1656.720015][T29325] _raw_read_lock_irqsave+0x48/0x60 [ 1656.725400][T29325] send_sigio+0x38/0x370 [ 1656.729832][T29325] kill_fasync+0x24d/0x4d0 [ 1656.734445][T29325] lease_break_callback+0x26/0x30 [ 1656.739657][T29325] __break_lease+0x81c/0x1e80 [ 1656.744524][T29325] do_dentry_open+0x1010/0x14e0 [ 1656.749567][T29325] vfs_open+0x3b/0x340 [ 1656.753838][T29325] path_openat+0x2e08/0x3860 [ 1656.758784][T29325] do_file_open+0x23e/0x4a0 [ 1656.763467][T29325] do_sys_openat2+0x113/0x200 [ 1656.768332][T29325] __x64_sys_openat+0x138/0x170 [ 1656.773454][T29325] do_syscall_64+0x14d/0xf80 [ 1656.778492][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.784566][T29325] [ 1656.786911][T29325] [ 1656.786911][T29325] the dependencies between the lock to be acquired [ 1656.786920][T29325] and SOFTIRQ-irq-unsafe lock: [ 1656.800438][T29325] -> (tasklist_lock){.+.+}-{3:3} { [ 1656.805591][T29325] HARDIRQ-ON-R at: [ 1656.809588][T29325] lock_acquire+0xf0/0x2e0 [ 1656.815667][T29325] _raw_read_lock+0x36/0x50 [ 1656.822027][T29325] __do_wait+0xde/0x740 [ 1656.827890][T29325] do_wait+0x1e7/0x540 [ 1656.833618][T29325] kernel_wait+0xd6/0x1c0 [ 1656.839604][T29325] call_usermodehelper_exec_work+0xbe/0x230 [ 1656.847187][T29325] process_scheduled_works+0xb6e/0x18c0 [ 1656.854396][T29325] worker_thread+0xa53/0xfc0 [ 1656.860671][T29325] kthread+0x388/0x470 [ 1656.866413][T29325] ret_from_fork+0x51e/0xb90 [ 1656.872666][T29325] ret_from_fork_asm+0x1a/0x30 [ 1656.879125][T29325] SOFTIRQ-ON-R at: [ 1656.883129][T29325] lock_acquire+0xf0/0x2e0 [ 1656.889206][T29325] _raw_read_lock+0x36/0x50 [ 1656.895369][T29325] __do_wait+0xde/0x740 [ 1656.901200][T29325] do_wait+0x1e7/0x540 [ 1656.906943][T29325] kernel_wait+0xd6/0x1c0 [ 1656.912929][T29325] call_usermodehelper_exec_work+0xbe/0x230 [ 1656.920495][T29325] process_scheduled_works+0xb6e/0x18c0 [ 1656.927721][T29325] worker_thread+0xa53/0xfc0 [ 1656.933974][T29325] kthread+0x388/0x470 [ 1656.939696][T29325] ret_from_fork+0x51e/0xb90 [ 1656.945945][T29325] ret_from_fork_asm+0x1a/0x30 [ 1656.952380][T29325] INITIAL USE at: [ 1656.956293][T29325] lock_acquire+0xf0/0x2e0 [ 1656.962888][T29325] _raw_write_lock_irq+0x3d/0x50 [ 1656.969485][T29325] copy_process+0x247a/0x3cd0 [ 1656.975752][T29325] kernel_clone+0x248/0x8e0 [ 1656.981844][T29325] user_mode_thread+0x110/0x180 [ 1656.988273][T29325] rest_init+0x23/0x300 [ 1656.994002][T29325] start_kernel+0x385/0x3d0 [ 1657.000149][T29325] x86_64_start_reservations+0x24/0x30 [ 1657.007270][T29325] x86_64_start_kernel+0x143/0x1c0 [ 1657.014052][T29325] common_startup_64+0x13e/0x147 [ 1657.020579][T29325] INITIAL READ USE at: [ 1657.024926][T29325] lock_acquire+0xf0/0x2e0 [ 1657.031371][T29325] _raw_read_lock+0x36/0x50 [ 1657.038016][T29325] __do_wait+0xde/0x740 [ 1657.044193][T29325] do_wait+0x1e7/0x540 [ 1657.050286][T29325] kernel_wait+0xd6/0x1c0 [ 1657.056725][T29325] call_usermodehelper_exec_work+0xbe/0x230 [ 1657.064634][T29325] process_scheduled_works+0xb6e/0x18c0 [ 1657.072209][T29325] worker_thread+0xa53/0xfc0 [ 1657.078855][T29325] kthread+0x388/0x470 [ 1657.084953][T29325] ret_from_fork+0x51e/0xb90 [ 1657.091655][T29325] ret_from_fork_asm+0x1a/0x30 [ 1657.098474][T29325] } [ 1657.100983][T29325] ... key at: [] tasklist_lock+0x18/0x40 [ 1657.108854][T29325] ... acquired at: [ 1657.112766][T29325] _raw_read_lock+0x36/0x50 [ 1657.117471][T29325] send_sigio+0x101/0x370 [ 1657.122012][T29325] kill_fasync+0x24d/0x4d0 [ 1657.126977][T29325] lease_break_callback+0x26/0x30 [ 1657.132215][T29325] __break_lease+0x81c/0x1e80 [ 1657.137105][T29325] vfs_truncate+0x449/0x540 [ 1657.141827][T29325] do_sys_truncate+0xf3/0x1c0 [ 1657.146718][T29325] __x64_sys_truncate+0x5b/0x70 [ 1657.151981][T29325] do_syscall_64+0x14d/0xf80 [ 1657.156779][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.163044][T29325] [ 1657.165421][T29325] [ 1657.165421][T29325] stack backtrace: [ 1657.171343][T29325] CPU: 0 UID: 0 PID: 29325 Comm: syz.3.6312 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.171373][T29325] Tainted: [L]=SOFTLOCKUP [ 1657.171380][T29325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1657.171393][T29325] Call Trace: [ 1657.171402][T29325] [ 1657.171411][T29325] dump_stack_lvl+0xe8/0x150 [ 1657.171442][T29325] __lock_acquire+0x2a94/0x2cf0 [ 1657.171478][T29325] lock_acquire+0xf0/0x2e0 [ 1657.171500][T29325] ? send_sigio+0x101/0x370 [ 1657.171522][T29325] ? lock_acquire+0xf0/0x2e0 [ 1657.171546][T29325] _raw_read_lock+0x36/0x50 [ 1657.171567][T29325] ? send_sigio+0x101/0x370 [ 1657.171585][T29325] send_sigio+0x101/0x370 [ 1657.171606][T29325] kill_fasync+0x24d/0x4d0 [ 1657.171626][T29325] ? kill_fasync+0x53/0x4d0 [ 1657.171646][T29325] lease_break_callback+0x26/0x30 [ 1657.171667][T29325] __break_lease+0x81c/0x1e80 [ 1657.171702][T29325] ? __pfx___break_lease+0x10/0x10 [ 1657.171729][T29325] ? mnt_get_write_access+0x66/0x280 [ 1657.171752][T29325] ? mnt_get_write_access+0x213/0x280 [ 1657.171773][T29325] ? break_lease+0xfd/0x150 [ 1657.171794][T29325] vfs_truncate+0x449/0x540 [ 1657.171818][T29325] ? __pfx_vfs_truncate+0x10/0x10 [ 1657.171847][T29325] ? do_getname+0x151/0x250 [ 1657.171872][T29325] do_sys_truncate+0xf3/0x1c0 [ 1657.171893][T29325] ? __pfx_do_sys_truncate+0x10/0x10 [ 1657.171923][T29325] __x64_sys_truncate+0x5b/0x70 [ 1657.171945][T29325] do_syscall_64+0x14d/0xf80 [ 1657.171968][T29325] ? trace_irq_disable+0x3b/0x150 [ 1657.171985][T29325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.172003][T29325] ? clear_bhb_loop+0x40/0x90 [ 1657.172024][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.172042][T29325] RIP: 0033:0x7f181e99c819 [ 1657.172061][T29325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.172078][T29325] RSP: 002b:00007f181f7eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1657.172099][T29325] RAX: ffffffffffffffda RBX: 00007f181ec16180 RCX: 00007f181e99c819 [ 1657.172114][T29325] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000080 [ 1657.172126][T29325] RBP: 00007f181ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1657.172138][T29325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.172150][T29325] R13: 00007f181ec16218 R14: 00007f181ec16180 R15: 00007f181ed3fa48 [ 1657.172170][T29325] [ 1657.414514][T16492] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1657.423887][T16492] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.500632][T16492] usb 9-1: config 0 descriptor?? [ 1657.548848][T16492] pwc: Askey VC010 type 2 USB webcam detected. [ 1657.555934][ T5937] m920x_read = error: -19 [ 1657.560522][ T5937] dvb-usb: error while querying for an remote control event. [ 1657.670065][T19624] m920x_read = error: -19 [ 1657.674586][T19624] dvb-usb: error while querying for an remote control event. [ 1657.796175][T19624] m920x_read = error: -19 [ 1657.800752][T19624] dvb-usb: error while querying for an remote control event. [ 1657.910022][T19624] m920x_read = error: -19 [ 1657.914817][T19624] dvb-usb: error while querying for an remote control event. [ 1657.977677][T16492] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1657.985168][T16492] pwc: recv_control_msg error -32 req 02 val 2700 [ 1657.992985][T16492] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1658.000338][T16492] pwc: recv_control_msg error -32 req 04 val 1000 [ 1658.007283][T16492] pwc: recv_control_msg error -32 req 04 val 1300 [ 1658.014423][T16492] pwc: recv_control_msg error -32 req 04 val 1400 [ 1658.021658][T16492] pwc: recv_control_msg error -32 req 02 val 2000 [ 1658.029066][T16492] pwc: recv_control_msg error -32 req 02 val 2100 [ 1658.035784][T19624] m920x_read = error: -19 [ 1658.040372][T19624] dvb-usb: error while querying for an remote control event. [ 1658.048064][T16492] pwc: recv_control_msg error -32 req 04 val 1500 [ 1658.056240][T16492] pwc: recv_control_msg error -32 req 02 val 2500 [ 1658.063525][T16492] pwc: recv_control_msg error -32 req 02 val 2400 [ 1658.070935][T16492] pwc: recv_control_msg error -32 req 02 val 2600 [ 1658.077995][T16492] pwc: recv_control_msg error -32 req 02 val 2900 [ 1658.085286][T16492] pwc: recv_control_msg error -32 req 02 val 2800 [ 1658.092476][T16492] pwc: recv_control_msg error -32 req 04 val 1100 [ 1658.149991][T19624] m920x_read = error: -19 [ 1658.154488][T19624] dvb-usb: error while querying for an remote control event. [ 1658.201880][T16492] pwc: Registered as video103. [ 1658.207734][T16492] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input142 [ 1658.270311][T16492] m920x_read = error: -19 [ 1658.274916][T16492] dvb-usb: error while querying for an remote control event. [ 1658.390348][T16492] m920x_read = error: -19 [ 1658.394814][T16492] dvb-usb: error while querying for an remote control event. [ 1658.406102][ T5907] usb 9-1: USB disconnect, device number 80 [ 1658.510005][T16492] m920x_read = error: -19 [ 1658.514464][T16492] dvb-usb: error while querying for an remote control event. [ 1658.630277][T16492] m920x_read = error: -19 [ 1658.634728][T16492] dvb-usb: error while querying for an remote control event. [ 1658.751132][T16492] m920x_read = error: -19 [ 1658.755636][T16492] dvb-usb: error while querying for an remote control event. [ 1658.869999][T16492] m920x_read = error: -19 [ 1658.874960][T16492] dvb-usb: error while querying for an remote control event. [ 1658.990091][T16492] m920x_read = error: -19 [ 1658.994566][T16492] dvb-usb: error while querying for an remote control event. [ 1659.110375][T16492] m920x_read = error: -19 [ 1659.114839][T16492] dvb-usb: error while querying for an remote control event. [ 1659.230550][T16492] m920x_read = error: -19 [ 1659.234941][T16492] dvb-usb: error while querying for an remote control event. [ 1659.350004][T16492] m920x_read = error: -19 [ 1659.354456][T16492] dvb-usb: error while querying for an remote control event. [ 1659.470370][T16492] m920x_read = error: -19 [ 1659.474814][T16492] dvb-usb: error while querying for an remote control event. [ 1659.590485][T16492] m920x_read = error: -19 [ 1659.594906][T16492] dvb-usb: error while querying for an remote control event. [ 1659.710365][T16492] m920x_read = error: -19 [ 1659.714789][T16492] dvb-usb: error while querying for an remote control event. [ 1659.830232][T16492] m920x_read = error: -19 [ 1659.834618][T16492] dvb-usb: error while querying for an remote control event. [ 1659.951146][T16492] m920x_read = error: -19 [ 1659.955652][T16492] dvb-usb: error while querying for an remote control event. [ 1660.070226][T16492] m920x_read = error: -19 [ 1660.074636][T16492] dvb-usb: error while querying for an remote control event. [ 1660.190348][T16492] m920x_read = error: -19 [ 1660.194816][T16492] dvb-usb: error while querying for an remote control event. [ 1660.310324][T16492] m920x_read = error: -19 [ 1660.314819][T16492] dvb-usb: error while querying for an remote control event. [ 1660.430271][T16492] m920x_read = error: -19 [ 1660.434702][T16492] dvb-usb: error while querying for an remote control event. [ 1660.550365][T16492] m920x_read = error: -19 [ 1660.554828][T16492] dvb-usb: error while querying for an remote control event. [ 1660.670170][T16492] m920x_read = error: -19 [ 1660.674804][T16492] dvb-usb: error while querying for an remote control event. [ 1660.790009][T16492] m920x_read = error: -19 [ 1660.794401][T16492] dvb-usb: error while querying for an remote control event. [ 1660.910583][T16492] m920x_read = error: -19 [ 1660.915067][T16492] dvb-usb: error while querying for an remote control event. [ 1661.029982][T16492] m920x_read = error: -19 [ 1661.034379][T16492] dvb-usb: error while querying for an remote control event. [ 1661.150458][T16492] m920x_read = error: -19 [ 1661.154898][T16492] dvb-usb: error while querying for an remote control event. [ 1661.270431][T16492] m920x_read = error: -19 [ 1661.274837][T16492] dvb-usb: error while querying for an remote control event. [ 1661.390305][T16492] m920x_read = error: -19 [ 1661.394692][T16492] dvb-usb: error while querying for an remote control event. [ 1661.510350][T16492] m920x_read = error: -19 [ 1661.514783][T16492] dvb-usb: error while querying for an remote control event. [ 1661.630090][T16492] m920x_read = error: -19 [ 1661.635173][T16492] dvb-usb: error while querying for an remote control event. [ 1661.750492][T16492] m920x_read = error: -19 [ 1661.755197][T16492] dvb-usb: error while querying for an remote control event. [ 1661.870044][T16492] m920x_read = error: -19 [ 1661.874451][T16492] dvb-usb: error while querying for an remote control event. [ 1661.992492][T16492] m920x_read = error: -19 [ 1662.002478][T16492] dvb-usb: error while querying for an remote control event. [ 1662.120419][T16492] m920x_read = error: -19 [ 1662.124836][T16492] dvb-usb: error while querying for an remote control event. [ 1662.251289][T16492] m920x_read = error: -19 [ 1662.255700][T16492] dvb-usb: error while querying for an remote control event. [ 1662.370030][T16492] m920x_read = error: -19 [ 1662.374595][T16492] dvb-usb: error while querying for an remote control event. [ 1662.491130][T16492] m920x_read = error: -19 [ 1662.495531][T16492] dvb-usb: error while querying for an remote control event. [ 1662.610054][T16492] m920x_read = error: -19 [ 1662.614493][T16492] dvb-usb: error while querying for an remote control event. [ 1662.730620][T19624] m920x_read = error: -19 [ 1662.735180][T19624] dvb-usb: error while querying for an remote control event. [ 1662.850070][T19624] m920x_read = error: -19 [ 1662.854487][T19624] dvb-usb: error while querying for an remote control event. [ 1662.970319][T19624] m920x_read = error: -19 [ 1662.974730][T19624] dvb-usb: error while querying for an remote control event. [ 1663.090261][T19624] m920x_read = error: -19 [ 1663.094836][T19624] dvb-usb: error while querying for an remote control event. [ 1663.220958][T19624] m920x_read = error: -19 [ 1663.225392][T19624] dvb-usb: error while querying for an remote control event. [ 1663.340471][T19624] m920x_read = error: -19 [ 1663.344888][T19624] dvb-usb: error while querying for an remote control event. [ 1663.460339][T19624] m920x_read = error: -19 [ 1663.464900][T19624] dvb-usb: error while querying for an remote control event. [ 1663.580431][T19624] m920x_read = error: -19 [ 1663.584868][T19624] dvb-usb: error while querying for an remote control event. [ 1663.700091][T19624] m920x_read = error: -19 [ 1663.704481][T19624] dvb-usb: error while querying for an remote control event. [ 1663.820306][T19624] m920x_read = error: -19 [ 1663.824723][T19624] dvb-usb: error while querying for an remote control event. [ 1663.940264][T19624] m920x_read = error: -19 [ 1663.944701][T19624] dvb-usb: error while querying for an remote control event. [ 1664.070359][T19624] m920x_read = error: -19 [ 1664.074792][T19624] dvb-usb: error while querying for an remote control event. [ 1664.190861][T19624] m920x_read = error: -19 [ 1664.195355][T19624] dvb-usb: error while querying for an remote control event. [ 1664.310658][T19624] m920x_read = error: -19 [ 1664.315051][T19624] dvb-usb: error while querying for an remote control event. [ 1664.430659][T19624] m920x_read = error: -19 [ 1664.435109][T19624] dvb-usb: error while querying for an remote control event. [ 1664.550684][T19624] m920x_read = error: -19 [ 1664.555283][T19624] dvb-usb: error while querying for an remote control event. [ 1664.670013][T19624] m920x_read = error: -19 [ 1664.674457][T19624] dvb-usb: error while querying for an remote control event. [ 1664.790070][T19624] m920x_read = error: -19 [ 1664.794528][T19624] dvb-usb: error while querying for an remote control event. [ 1664.910104][T19624] m920x_read = error: -19 [ 1664.914526][T19624] dvb-usb: error while querying for an remote control event. [ 1665.030640][T19624] m920x_read = error: -19 [ 1665.035171][T19624] dvb-usb: error while querying for an remote control event. [ 1665.150247][T19624] m920x_read = error: -19 [ 1665.154685][T19624] dvb-usb: error while querying for an remote control event. [ 1665.270788][T19624] m920x_read = error: -19 [ 1665.275189][T19624] dvb-usb: error while querying for an remote control event. [ 1665.390496][T19624] m920x_read = error: -19 [ 1665.394932][T19624] dvb-usb: error while querying for an remote control event. [ 1665.510329][T19624] m920x_read = error: -19 [ 1665.514764][T19624] dvb-usb: error while querying for an remote control event. [ 1665.631769][T19624] m920x_read = error: -19 [ 1665.636170][T19624] dvb-usb: error while querying for an remote control event.