last executing test programs: 6m40.661655826s ago: executing program 1 (id=1471): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone(0x400000f5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2, 0x2, 0x5) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40060900) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) 6m37.505736557s ago: executing program 1 (id=1489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)) (async) r3 = syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) io_uring_enter(r3, 0x53d1, 0x0, 0x4, 0x0, 0x0) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0x6000, 0x2, 0x80000000, 0x4, 0x2, 0x6, 0x1313}, 0x0) (async) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0x6000, 0x2, 0x80000000, 0x4, 0x2, 0x6, 0x1313}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r8 = userfaultfd(0x80000) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x560ec88c1e2304ce}) preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000440)=""/140, 0x8c}], 0x1, 0xf, 0x0) (async) preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000440)=""/140, 0x8c}], 0x1, 0xf, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r6, 0x0}]) (async) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r6, 0x0}]) memfd_secret(0x0) unshare(0x40000000) 6m35.767000264s ago: executing program 1 (id=1491): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) mlock(&(0x7f0000277000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m35.018739318s ago: executing program 1 (id=1495): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r2, 0x5420, &(0x7f0000000200)) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xd0f785e2fc518d55, "00004fbe"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}]}}, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000600)={0x1, 0x3, 0x6, 0x56, 0xdf56, 0x51}) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000180)="3515090000bb", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 6m31.596408864s ago: executing program 1 (id=1512): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) 6m30.482976365s ago: executing program 1 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001400000128bd7000fcdbdf2502270dc8", @ANYRES32=r1, @ANYBLOB="08000400e0000001140061637365633000000000000000000008000a0000000000000000"], 0x3c}}, 0x0) mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x7, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, 0x0, 0xfdef) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a4002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x200, 0x1, &(0x7f0000000340)=[r8], &(0x7f00000002c0)=[0x1], &(0x7f0000000200), &(0x7f0000000280), 0x0, 0x4}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x101}]}}}]}, 0x40}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffff8, 0x3, 0xfffffffd, 0x1000, 0x64c, 0xe11, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000021}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x4, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) 6m30.482547558s ago: executing program 32 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001400000128bd7000fcdbdf2502270dc8", @ANYRES32=r1, @ANYBLOB="08000400e0000001140061637365633000000000000000000008000a0000000000000000"], 0x3c}}, 0x0) mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x7, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, 0x0, 0xfdef) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a4002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x200, 0x1, &(0x7f0000000340)=[r8], &(0x7f00000002c0)=[0x1], &(0x7f0000000200), &(0x7f0000000280), 0x0, 0x4}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x101}]}}}]}, 0x40}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffff8, 0x3, 0xfffffffd, 0x1000, 0x64c, 0xe11, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000021}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x4, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) 20.559751394s ago: executing program 3 (id=2904): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001380), 0x5d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$watch_queue(r2, &(0x7f0000000240)=""/232, 0xe8) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x98f907, 0x0, '\x00', @value64=0xc4ab}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r3 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000005000000080000000100000080000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f00000000c0)=""/4096, 0x1000) 18.065648887s ago: executing program 3 (id=2907): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 17.858286291s ago: executing program 3 (id=2909): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 17.702594202s ago: executing program 3 (id=2911): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 17.096267606s ago: executing program 3 (id=2914): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003904ffffffffffffffff00000000", @ANYRES32, @ANYBLOB="00000000000000002800128b0b000100697036677265000018000280060003ff010000000400120006000e4fa2de882ae3196af0696c2ed03c270822cc4be30efe56bbcc44adaf687f9ad1d3b98983d1b82d7a06a7acd62910f40cc402a902221c6e3d5e5d36dbf73a79895eabf0238054dff1ebfc2307d998ad54276488fae5156b20a2c4fa46e3a1bf9e568beb81d215b983e7147738fb"], 0x48}}, 0x0) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000200)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x11, r0, 0x0) 16.856428035s ago: executing program 3 (id=2915): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 12.080538904s ago: executing program 0 (id=2934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r1, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="1b0000000000000800001b7a941615e9a02703091d994e99b90a00"/36, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r8, &(0x7f0000000200)=""/208, 0xd0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x0, @tick=0xfff, 0x0, {0x1}, 0x2}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r7, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x24, 0x0, 0x4, {0x0, 0x4}}, 0x0}) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x10e) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r10, @ANYRES32=r11], 0x0) inotify_add_watch(r10, &(0x7f0000002240)='./file0\x00', 0x1100004a) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r13, 0x2202, 0x0) 8.489519716s ago: executing program 5 (id=2949): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x3000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8000, 0x20000002, 0x0, 0x0, 0x7, 0x0, 0x2, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x3562, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x3, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x10001, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xde, 0x20000000, 0x0, 0x0, 0x4], [0x80000000, 0x0, 0x101, 0x0, 0x40, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb71, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x5, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x5, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x400, 0x101, 0x7, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0xa, 0x2}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x19, &(0x7f00000000c0)="18ed1ae390e1656a12b82ee034e1b8961b482f2cada0792bf1", 0xfe, 0x0, &(0x7f0000000200)="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"}) ioctl$UI_DEV_CREATE(r0, 0x5501) 8.293703032s ago: executing program 4 (id=2941): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xfffffffffffffffe, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x4, 0x8000, r7, r8, 0x6000, '\x00', 0x1, 0x4, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6}, {0x100000000, 0xa}, {0x2, 0xa00}, 0x8000, 0xb, 0x4, 0x3}}}}) r9 = getgid() syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2001800, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}], [{@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/mISDNtimer\x00'}}, {@dont_appraise}]}}, 0x0, 0x0, &(0x7f0000000200)="c9d5b4c1bfb2945bea8d3d12dee6ad1b8cdcac22f724a65c89884f3682f57fab43396bcaadff6caee92fef90857a5421f834a404d433e3d1f4196173bdf49d063ea4510ae32e2c2d8dcd0da2323866bdae2fcddd36d2feacb453f55a42f60d77bd6d9bf259b77ee6e3afc726fe239ff6d43bb07c7a0788ec0f78bce1efbe9dbc484b8e553c0fda4b6804204a90a9a253d54711a39d88e45e491aa149d86fb80dc5970805") 8.195612827s ago: executing program 2 (id=2942): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 8.102864742s ago: executing program 5 (id=2943): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x600, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4, 0x300000000000000}]) 7.649666881s ago: executing program 2 (id=2944): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="8000e3a52c8df56046d8128009000100626f6e64000000000900000005000550c50002040000000000000000"], 0x44}}, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x0, 0x10000023, 0x96eb, 0x80000001, 0x3, 0x8, 0x7724aa43, 0x4, 0x1}, 0x0) 7.649305779s ago: executing program 5 (id=2945): rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x16]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x5000000, 0x0) 7.649056562s ago: executing program 5 (id=2946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8c2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000002900)=[0x0, 0x0]) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x284, 0x0, 0x0, 0x148, 0xf0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}, @common=@unspec=@limit={{0x3c}, {0x9, 0x0, 0x0, 0x4, 0xe40f, 0x9, 0x5a5}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x1}, 0x0, 0xb8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}, {0x2, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x49, 0x35, 0x8, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e0) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x1, 0x0) 6.822697206s ago: executing program 4 (id=2947): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) readv(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) rename(&(0x7f0000001200)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe2$9p(&(0x7f0000000200), 0x80) socket$nl_generic(0x10, 0x3, 0x10) 6.138058503s ago: executing program 2 (id=2948): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r5, 0x3516, 0x41, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4, 0x300000000000000}]) 6.107044377s ago: executing program 0 (id=2950): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002a00)="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", 0x595}], 0x1}, 0x20000020) 6.057240464s ago: executing program 5 (id=2951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x83c, 0x0, 0x2, 0x29a}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000002d00)=0x8, 0x4) syz_emit_ethernet(0x242, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) rseq(&(0x7f00000002c0), 0x20, 0x2, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f350768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r10 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r11, r11, r10}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 5.75868312s ago: executing program 0 (id=2952): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x1010, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x62402, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x311e41) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.46713006s ago: executing program 4 (id=2953): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f00000000c0)={"774f7a98e76ed21eee4b5cffe0d3b12e", 0x0, 0x0, {0x80, 0x7}, {0xada, 0x7fffffff}, 0x192, [0x800, 0x1ff, 0x6, 0x1, 0x4, 0x1, 0x0, 0x0, 0x8, 0x5, 0xeebd, 0x9, 0x4, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x5]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsopen(&(0x7f0000004240)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000004300)='allow_other', &(0x7f0000000380), 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpgid(0x0) getpid() sched_setattr(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x100203, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) 4.928306917s ago: executing program 2 (id=2954): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004dc0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r4, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x4b0, 0x0, 0x0, 0x10c, 0x3d0, 0x3d0, 0x3d0, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @dev={0xac, 0x14, 0x14, 0xd}, 0x4, 0xffffffff}}}, {{@arp={@remote, @rand_addr=0x64010101, 0x0, 0x975b7c59a753477c, 0x1, 0xc, {@mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x1, 0x1, 0x4b00, 0x1ff, 0x401, 0x0, 'pimreg\x00', 'netdevsim0\x00', {0xff}, {0xff}}, 0xbc, 0xe0}, @unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4fc) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) acct(0x0) socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x118, 0xd4feffff, 0x218, 0x20a, 0x278, 0x218, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'pimreg0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @inet=@rpfilter={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x33c) 4.395169373s ago: executing program 4 (id=2955): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 3.907696591s ago: executing program 4 (id=2956): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYBLOB="d0a1c2baab45c89c704ef8ddbad815622f8bcdf7eeeed112baadfc75d179b84a91ffa78779df5dc59534f6b1a6", @ANYBLOB="100000002500000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8000000a, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000006c0)=0x6460267d9e987d19) r2 = syz_open_dev$media(&(0x7f0000000640), 0x7, 0x14000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xe1ad1eaa3618eb49) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) syz_emit_ethernet(0xaf, &(0x7f0000000700)=ANY=[@ANYRES16=r1], 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x20}, @fd}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) pselect6(0x40, &(0x7f0000000140)={0xf, 0xc, 0x6, 0x1e, 0x40, 0xc, 0x100000001, 0x400}, 0x0, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000000680)) r7 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r7, &(0x7f0000000240)='./file0\x00', 0x8c7) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES16=r8, @ANYBLOB="000828bd7100fddbdf250300000014000100000000000000000000000000000000010800020008000000080002000900000014000100fe8800000000000000000000000000010800030002000000"], 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x20000081) 2.584357304s ago: executing program 2 (id=2957): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001380), 0x5d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$watch_queue(r2, &(0x7f0000000240)=""/232, 0xe8) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x98f907, 0x0, '\x00', @value64=0xc4ab}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r3 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000005000000080000000100000080000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f00000000c0)=""/4096, 0x1000) 2.425201837s ago: executing program 0 (id=2958): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.011354557s ago: executing program 0 (id=2959): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000280)=""/98, &(0x7f00000003c0)=0x62) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f00000001c0)=0x6, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd, 0x40ad}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r8, {0x8, 0xb}, {}, {0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x4, 0x6, @local}, 0x14) 1.761892904s ago: executing program 5 (id=2960): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) socket$inet6(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002"], 0x190) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) (async) socket$inet6(0xa, 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002"], 0x190) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) dup(r4) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 1.147109029s ago: executing program 0 (id=2961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8c2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000002900)=[0x0, 0x0]) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x284, 0x0, 0x0, 0x148, 0xf0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}, @common=@unspec=@limit={{0x3c}, {0x9, 0x0, 0x0, 0x4, 0xe40f, 0x9, 0x5a5}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x1}, 0x0, 0xb8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}, {0x2, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x49, 0x35, 0x8, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e0) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x1, 0x0) 367.802496ms ago: executing program 4 (id=2962): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) readv(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) rename(&(0x7f0000001200)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe2$9p(&(0x7f0000000200), 0x80) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=2963): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/resume_offset', 0x20000, 0x96) openat$nullb(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000003c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={0x0, 0xff83, r5, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_pidfd_open(r7, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r8, 0x0, 0x0, r9], [0x2b8]}) r10 = syz_io_uring_setup(0xcbd, &(0x7f0000000140)={0x0, 0xdc75, 0x0, 0x0, 0x40000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x78}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_io_uring_submit(r11, r12, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0x3516, 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 8] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 781.217578][ T5895] m920x_read = error: -19 [ 781.221974][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 781.230145][ T5833] m920x_read = error: -19 [ 781.234519][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 781.297570][ T5894] usb usb5-port1: unable to enumerate USB device [ 781.332164][T15286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2776'. [ 781.341506][T15286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2776'. [ 781.357059][T15286] tipc: MTU too low for tipc bearer [ 781.408936][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.420099][ T5894] m920x_read = error: -19 [ 781.424739][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 781.434247][ T5833] m920x_read = error: -19 [ 781.442073][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 781.452235][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.465419][ T5898] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 781.488979][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.500699][ T5898] usb 6-1: config 0 descriptor?? [ 781.616817][ T5833] m920x_read = error: -19 [ 781.631491][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 781.639461][ T5894] m920x_read = error: -19 [ 781.654643][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 781.826830][ T5894] m920x_read = error: -19 [ 781.835425][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 781.844214][ T5833] m920x_read = error: -19 [ 781.875691][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 782.107127][T11563] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 782.116782][ T5833] m920x_read = error: -19 [ 782.142430][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 782.158503][ T5894] m920x_read = error: -19 [ 782.187638][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 782.274133][T15300] FAULT_INJECTION: forcing a failure. [ 782.274133][T15300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.291114][T15300] CPU: 1 UID: 0 PID: 15300 Comm: syz.4.2781 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 782.291146][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 782.291160][T15300] Call Trace: [ 782.291170][T15300] [ 782.291179][T15300] dump_stack_lvl+0x241/0x360 [ 782.291215][T15300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.291244][T15300] ? __pfx__printk+0x10/0x10 [ 782.291292][T15300] should_fail_ex+0x424/0x570 [ 782.291330][T15300] _copy_to_user+0x31/0xb0 [ 782.291360][T15300] simple_read_from_buffer+0xc4/0x170 [ 782.291393][T15300] proc_fail_nth_read+0x1ef/0x260 [ 782.291416][T15300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.291440][T15300] ? rw_verify_area+0x246/0x630 [ 782.291467][T15300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.291490][T15300] vfs_read+0x21f/0xb90 [ 782.291521][T15300] ? __pfx___mutex_lock+0x10/0x10 [ 782.291544][T15300] ? __pfx_vfs_read+0x10/0x10 [ 782.291575][T15300] ? __fget_files+0x2a/0x420 [ 782.291596][T15300] ? __fget_files+0x39d/0x420 [ 782.291613][T15300] ? __fget_files+0x2a/0x420 [ 782.291642][T15300] ksys_read+0x19d/0x2d0 [ 782.291671][T15300] ? __pfx_ksys_read+0x10/0x10 [ 782.291701][T15300] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 782.291722][T15300] ? lockdep_hardirqs_on+0x9d/0x150 [ 782.291745][T15300] __do_fast_syscall_32+0xb4/0x110 [ 782.291767][T15300] ? exc_page_fault+0x5f8/0x920 [ 782.291792][T15300] do_fast_syscall_32+0x34/0x80 [ 782.291815][T15300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 782.291839][T15300] RIP: 0023:0xf7f35539 [ 782.291857][T15300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 782.291880][T15300] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 782.291903][T15300] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5056620 [ 782.291917][T15300] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 782.291929][T15300] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 782.291942][T15300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 782.291954][T15300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 782.291981][T15300] [ 782.526805][ T5894] m920x_read = error: -19 [ 782.531250][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 782.541656][ T5894] m920x_read = error: -19 [ 782.546064][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 782.701466][ T5833] m920x_read = error: -19 [ 782.715943][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 782.723983][ T5894] m920x_read = error: -19 [ 782.728496][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 782.919500][ T5833] m920x_read = error: -19 [ 782.949089][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 782.990394][ T5894] m920x_read = error: -19 [ 783.019941][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.185900][T15310] FAULT_INJECTION: forcing a failure. [ 783.185900][T15310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.247109][ T5894] m920x_read = error: -19 [ 783.266779][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.296170][T15310] CPU: 0 UID: 0 PID: 15310 Comm: syz.4.2785 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 783.296204][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 783.296234][T15310] Call Trace: [ 783.296243][T15310] [ 783.296252][T15310] dump_stack_lvl+0x241/0x360 [ 783.296289][T15310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.296317][T15310] ? __pfx__printk+0x10/0x10 [ 783.296354][T15310] should_fail_ex+0x424/0x570 [ 783.296388][T15310] _copy_to_user+0x31/0xb0 [ 783.296429][T15310] simple_read_from_buffer+0xc4/0x170 [ 783.296469][T15310] proc_fail_nth_read+0x1ef/0x260 [ 783.296491][T15310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.296513][T15310] ? rw_verify_area+0x246/0x630 [ 783.296537][T15310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.296558][T15310] vfs_read+0x21f/0xb90 [ 783.296587][T15310] ? __pfx___mutex_lock+0x10/0x10 [ 783.296609][T15310] ? __pfx_vfs_read+0x10/0x10 [ 783.296657][T15310] ? __fget_files+0x2a/0x420 [ 783.296678][T15310] ? __fget_files+0x39d/0x420 [ 783.296696][T15310] ? __fget_files+0x2a/0x420 [ 783.296727][T15310] ksys_read+0x19d/0x2d0 [ 783.296758][T15310] ? __pfx_ksys_read+0x10/0x10 [ 783.296789][T15310] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 783.296811][T15310] ? lockdep_hardirqs_on+0x9d/0x150 [ 783.296835][T15310] __do_fast_syscall_32+0xb4/0x110 [ 783.296857][T15310] ? exc_page_fault+0x5f8/0x920 [ 783.296883][T15310] do_fast_syscall_32+0x34/0x80 [ 783.296906][T15310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 783.296931][T15310] RIP: 0023:0xf7f35539 [ 783.296949][T15310] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 783.296968][T15310] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 783.296990][T15310] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5056620 [ 783.297005][T15310] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 783.297018][T15310] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 783.297031][T15310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 783.297044][T15310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 783.297073][T15310] [ 783.524295][ T5894] m920x_read = error: -19 [ 783.528734][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.536768][ T5894] m920x_read = error: -19 [ 783.541132][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.569893][ T5898] usbhid 6-1:0.0: can't add hid device: -71 [ 783.576047][ T5898] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 783.596053][ T5898] usb 6-1: USB disconnect, device number 62 [ 783.656980][T13756] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 783.688060][ T5894] m920x_read = error: -19 [ 783.693678][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.713024][ T5894] m920x_read = error: -19 [ 783.717526][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.862537][ T5894] m920x_read = error: -19 [ 783.876666][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 783.905345][ T5894] m920x_read = error: -19 [ 783.921835][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 784.057772][ T5894] m920x_read = error: -19 [ 784.078917][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 784.116988][ T5894] m920x_read = error: -19 [ 784.124229][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 784.145245][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 784.266767][ T5898] m920x_read = error: -19 [ 784.271178][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 784.336951][ T5833] m920x_read = error: -19 [ 784.412152][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 784.426691][ T5894] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 784.577303][ T5833] m920x_read = error: -19 [ 784.585160][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 784.597219][ T5898] m920x_read = error: -19 [ 784.601591][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 784.616693][ T881] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 784.619712][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.651902][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 784.681648][ T5894] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 784.706665][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.721104][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'. [ 784.725518][ T5894] usb 5-1: Product: syz [ 784.756525][ T5894] usb 5-1: Manufacturer: syz [ 784.761406][ T5894] usb 5-1: SerialNumber: syz [ 784.771331][ T5894] usb 5-1: config 0 descriptor?? [ 784.789322][ T5894] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 784.798074][ T5898] m920x_read = error: -19 [ 784.802451][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 784.810486][ T5833] m920x_read = error: -19 [ 784.814885][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 784.832486][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 784.838440][ T881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 784.843535][ T5894] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 784.864580][ T881] usb 4-1: config 3 has an invalid interface number: 19 but max is 0 [ 784.885260][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 784.893604][ T5897] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 784.904808][ T881] usb 4-1: config 3 has an invalid interface number: 4 but max is 0 [ 784.920120][ T881] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 784.939127][ T881] usb 4-1: config 3 has no interface number 0 [ 784.951965][ T881] usb 4-1: config 3 has no interface number 1 [ 784.961795][ T5894] usb 5-1: media controller created [ 784.986788][ T5833] m920x_read = error: -19 [ 784.991305][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 785.006865][ T5898] m920x_read = error: -19 [ 785.011247][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 785.036001][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.070384][ T881] usb 4-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 785.091853][ T881] usb 4-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 785.143048][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 785.158725][ T881] usb 4-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 785.170956][ T5894] DVB: Unable to find symbol tda10046_attach() [ 785.171970][ T881] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 785.186687][ T5894] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 785.188291][ T5897] usb 6-1: config 2 interface 0 has no altsetting 0 [ 785.202563][ T5833] m920x_read = error: -19 [ 785.219350][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 785.224643][ T881] usb 4-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 785.229572][ T5898] m920x_read = error: -19 [ 785.242883][ T5894] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 785.255117][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 785.266941][ T5897] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 785.276228][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.306700][ T5897] usb 6-1: Product: syz [ 785.310926][ T5897] usb 6-1: Manufacturer: syz [ 785.315552][ T5897] usb 6-1: SerialNumber: syz [ 785.320409][ T881] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 785.330659][ T881] usb 4-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 785.346256][ T881] usb 4-1: config 3 interface 19 has no altsetting 0 [ 785.359611][ T881] usb 4-1: config 3 interface 4 has no altsetting 0 [ 785.373651][T15371] FAULT_INJECTION: forcing a failure. [ 785.373651][T15371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.387924][ T881] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 785.397234][ T881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.405318][ T881] usb 4-1: Product: syz [ 785.414472][ T5898] m920x_read = error: -19 [ 785.419404][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 785.428130][ T5833] m920x_read = error: -19 [ 785.436209][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 785.606971][ T5898] m920x_read = error: -19 [ 785.611462][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 785.619461][T15371] CPU: 0 UID: 0 PID: 15371 Comm: syz.0.2807 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 785.619488][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 785.619500][T15371] Call Trace: [ 785.619509][T15371] [ 785.619517][T15371] dump_stack_lvl+0x241/0x360 [ 785.619553][T15371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.619582][T15371] ? __pfx__printk+0x10/0x10 [ 785.619621][T15371] should_fail_ex+0x424/0x570 [ 785.619667][T15371] _copy_from_user+0x2d/0xb0 [ 785.619693][T15371] __sys_bpf+0x1c5/0x8b0 [ 785.619719][T15371] ? __pfx___sys_bpf+0x10/0x10 [ 785.619754][T15371] ? ksys_write+0x275/0x2d0 [ 785.619789][T15371] __ia32_sys_bpf+0x7c/0x90 [ 785.619811][T15371] __do_fast_syscall_32+0xb4/0x110 [ 785.619832][T15371] ? exc_page_fault+0x5f8/0x920 [ 785.619854][T15371] do_fast_syscall_32+0x34/0x80 [ 785.619874][T15371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.619895][T15371] RIP: 0023:0xf707d539 [ 785.619911][T15371] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 785.619927][T15371] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 785.619947][T15371] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000080 [ 785.619960][T15371] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 785.619970][T15371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 785.619981][T15371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 785.619993][T15371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.620016][T15371] [ 785.799245][ T881] usb 4-1: Manufacturer: syz [ 785.804006][ T881] usb 4-1: SerialNumber: syz [ 786.038240][ T5897] usb 6-1: USB disconnect, device number 63 [ 786.157420][ T5833] m920x_read = error: -19 [ 786.162074][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 786.176764][ T5898] m920x_read = error: -19 [ 786.231273][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 786.244776][ T5894] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 786.286795][ T5894] usb 5-1: USB disconnect, device number 41 [ 786.304233][T15333] fuse: Bad value for 'fd' [ 786.339025][T11563] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 786.385062][ T881] pl2303 4-1:3.19: required endpoints missing [ 786.403147][ T881] pl2303 4-1:3.4: required interrupt-in endpoint missing [ 786.436873][ T5898] m920x_read = error: -19 [ 786.441281][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 786.447213][ T881] usb 4-1: USB disconnect, device number 21 [ 786.456844][ T5833] m920x_read = error: -19 [ 786.465558][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 786.636744][ T5894] m920x_read = error: -19 [ 786.641325][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 786.649708][ T5833] m920x_read = error: -19 [ 786.684696][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 786.817683][ T5833] m920x_read = error: -19 [ 786.827286][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 786.866514][ T5833] m920x_read = error: -19 [ 786.881783][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 786.936765][T13924] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 787.007156][ T5833] m920x_read = error: -19 [ 787.011526][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.066740][ T5833] m920x_read = error: -19 [ 787.071155][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.166415][T13924] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 787.186715][T13924] usb 3-1: config 0 has no interface number 0 [ 787.192871][T13924] usb 3-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30 [ 787.206831][ T5833] m920x_read = error: -19 [ 787.253808][T13924] usb 3-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 787.278347][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.286263][ T5833] m920x_read = error: -19 [ 787.311177][T13924] usb 3-1: config 0 interface 142 has no altsetting 0 [ 787.330490][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.367051][T13924] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 787.436136][T13924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.442384][ T5833] m920x_read = error: -19 [ 787.458963][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.497765][T13924] usb 3-1: config 0 descriptor?? [ 787.532757][T13924] ums-realtek 3-1:0.142: USB Mass Storage device detected [ 787.537549][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 787.556804][ T5833] m920x_read = error: -19 [ 787.569248][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.686785][ T5833] m920x_read = error: -19 [ 787.702233][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.768659][ T5833] m920x_read = error: -19 [ 787.783690][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.816493][ T5894] usb 3-1: USB disconnect, device number 23 [ 787.916070][T15392] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=936 (3744 ns) > initial count (2000 ns). Using initial count to start timer. [ 787.933372][ T5833] m920x_read = error: -19 [ 787.939711][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.957532][ T5833] m920x_read = error: -19 [ 787.962278][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 787.970209][T15389] xt_CT: No such helper "snmp" [ 788.106780][ T5894] m920x_read = error: -19 [ 788.111318][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 788.127146][ T5833] m920x_read = error: -19 [ 788.136705][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 788.204924][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 788.306720][ T5833] m920x_read = error: -19 [ 788.317532][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 788.386303][ T5833] m920x_read = error: -19 [ 788.603282][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 788.618762][ T5894] m920x_read = error: -19 [ 788.643096][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 788.916841][ T5894] m920x_read = error: -19 [ 788.921424][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 788.997189][ T5833] m920x_read = error: -19 [ 789.011968][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 789.045115][T13756] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 789.216869][ T5833] m920x_read = error: -19 [ 789.231497][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 789.239708][ T5894] m920x_read = error: -19 [ 789.244082][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 789.436880][ T5894] m920x_read = error: -19 [ 789.441291][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 789.462488][ T5833] m920x_read = error: -19 [ 789.470608][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 789.655671][ T5833] m920x_read = error: -19 [ 789.664142][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 789.672397][ T5894] m920x_read = error: -19 [ 789.683521][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 789.846877][ T5833] m920x_read = error: -19 [ 789.851327][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 789.867101][ T5894] m920x_read = error: -19 [ 789.871484][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 790.037302][ T5833] m920x_read = error: -19 [ 790.041749][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 790.057307][ T5898] m920x_read = error: -19 [ 790.061693][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 790.187615][T13924] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 790.216971][ T5894] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 790.236843][ T5898] m920x_read = error: -19 [ 790.241247][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 790.249400][ T5833] m920x_read = error: -19 [ 790.249811][ T1112] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 790.253747][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 790.288639][T15439] FAULT_INJECTION: forcing a failure. [ 790.288639][T15439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.317320][T15439] CPU: 0 UID: 0 PID: 15439 Comm: syz.2.2831 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 790.317351][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.317364][T15439] Call Trace: [ 790.317372][T15439] [ 790.317380][T15439] dump_stack_lvl+0x241/0x360 [ 790.317417][T15439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.317445][T15439] ? __pfx__printk+0x10/0x10 [ 790.317501][T15439] should_fail_ex+0x424/0x570 [ 790.317538][T15439] prepare_alloc_pages+0x220/0x610 [ 790.317575][T15439] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 790.317609][T15439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.317636][T15439] ? __lock_acquire+0xad5/0xd80 [ 790.317678][T15439] ? __lock_acquire+0xad5/0xd80 [ 790.317709][T15439] alloc_pages_mpol+0x339/0x690 [ 790.317738][T15439] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 790.317763][T15439] ? page_table_check_set+0x164/0x700 [ 790.317787][T15439] alloc_pages_noprof+0x121/0x190 [ 790.317817][T15439] pte_alloc_one+0x1e/0x160 [ 790.317843][T15439] __pte_alloc+0x7b/0x240 [ 790.317874][T15439] ? __pfx___pte_alloc+0x10/0x10 [ 790.317905][T15439] ? handle_pte_fault+0x3b91/0x61c0 [ 790.317937][T15439] handle_pte_fault+0x4ede/0x61c0 [ 790.317979][T15439] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 790.318015][T15439] ? __pfx_handle_pte_fault+0x10/0x10 [ 790.318054][T15439] ? rcu_is_watching+0x15/0xb0 [ 790.318078][T15439] ? __lock_acquire+0xad5/0xd80 [ 790.318121][T15439] ? __lock_acquire+0xad5/0xd80 [ 790.318154][T15439] ? do_raw_spin_lock+0x151/0x370 [ 790.318189][T15439] handle_mm_fault+0x1129/0x1bf0 [ 790.318242][T15439] ? __pfx_handle_mm_fault+0x10/0x10 [ 790.318282][T15439] ? __pfx_find_vma+0x10/0x10 [ 790.318305][T15439] ? vma_is_secretmem+0xd/0x50 [ 790.318323][T15439] ? check_vma_flags+0x4ea/0x590 [ 790.318352][T15439] __get_user_pages+0x1adc/0x4180 [ 790.318415][T15439] ? __pfx___get_user_pages+0x10/0x10 [ 790.318437][T15439] ? __gup_longterm_locked+0xd86/0x1850 [ 790.318463][T15439] ? __pfx_down_read_killable+0x10/0x10 [ 790.318489][T15439] ? __up_read+0x2c4/0x6b0 [ 790.318513][T15439] ? __pfx___up_read+0x10/0x10 [ 790.318538][T15439] ? __lock_acquire+0xad5/0xd80 [ 790.318570][T15439] __gup_longterm_locked+0xec1/0x1850 [ 790.318612][T15439] ? rcu_is_watching+0x15/0xb0 [ 790.318633][T15439] ? ___pte_offset_map+0x29a/0x350 [ 790.318655][T15439] ? __pfx___gup_longterm_locked+0x10/0x10 [ 790.318681][T15439] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 790.318708][T15439] ? gup_fast_fallback+0x203f/0x2980 [ 790.318734][T15439] gup_fast_fallback+0x2227/0x2980 [ 790.318791][T15439] ? __pfx_gup_fast_fallback+0x10/0x10 [ 790.318826][T15439] ? __page_table_check_zero+0xb8/0x510 [ 790.318860][T15439] ? __page_table_check_zero+0xb8/0x510 [ 790.318903][T15439] ? __page_table_check_zero+0xb8/0x510 [ 790.318955][T15439] ? preempt_schedule_common+0x84/0xd0 [ 790.318975][T15439] ? preempt_schedule+0xe4/0xf0 [ 790.319005][T15439] ? __pfx_preempt_schedule+0x10/0x10 [ 790.319043][T15439] ? is_valid_gup_args+0x124/0x200 [ 790.319069][T15439] pin_user_pages_fast+0xd2/0x160 [ 790.319090][T15439] ? __local_bh_enable_ip+0x168/0x200 [ 790.319120][T15439] ? lockdep_hardirqs_on+0x9d/0x150 [ 790.319142][T15439] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 790.319163][T15439] ? __local_bh_enable_ip+0x168/0x200 [ 790.319205][T15439] ? __pfx_nh_sse2+0x10/0x10 [ 790.319230][T15439] ? kernel_fpu_end+0xf9/0x150 [ 790.319256][T15439] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 790.319290][T15439] iov_iter_extract_pages+0x3bd/0x5c0 [ 790.319325][T15439] extract_iter_to_sg+0xebc/0x2680 [ 790.319350][T15439] ? crypto_hash_walk_done+0x3e4/0x5a0 [ 790.319386][T15439] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 790.319408][T15439] ? unpin_user_page+0xe5/0x1e0 [ 790.319426][T15439] ? __pfx_unpin_user_page+0x10/0x10 [ 790.319447][T15439] ? hash_sendmsg+0xac/0x11c0 [ 790.319475][T15439] ? __asan_memset+0x23/0x50 [ 790.319502][T15439] hash_sendmsg+0x522/0x11c0 [ 790.319546][T15439] ? __pfx_hash_sendmsg+0x10/0x10 [ 790.319565][T15439] __sock_sendmsg+0x221/0x270 [ 790.319593][T15439] ____sys_sendmsg+0x523/0x860 [ 790.319631][T15439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.319677][T15439] __sys_sendmmsg+0x4a3/0x7b0 [ 790.319708][T15439] ? __pfx___sys_sendmmsg+0x10/0x10 [ 790.319732][T15439] ? __lock_acquire+0xad5/0xd80 [ 790.319805][T15439] ? vfs_write+0xb29/0xd10 [ 790.319857][T15439] ? __mutex_unlock_slowpath+0x229/0x800 [ 790.319888][T15439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 790.319907][T15439] ? __fget_files+0x2a/0x420 [ 790.319938][T15439] ? fput+0x9b/0xd0 [ 790.319958][T15439] ? ksys_write+0x275/0x2d0 [ 790.320021][T15439] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 790.320066][T15439] __do_fast_syscall_32+0xb4/0x110 [ 790.320087][T15439] ? exc_page_fault+0x5f8/0x920 [ 790.320110][T15439] do_fast_syscall_32+0x34/0x80 [ 790.320131][T15439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.320155][T15439] RIP: 0023:0xf707d539 [ 790.320171][T15439] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 790.320188][T15439] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 790.320209][T15439] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004140 [ 790.320223][T15439] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.320234][T15439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.320245][T15439] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.320257][T15439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.320285][T15439] [ 790.361443][T13924] usb 6-1: Using ep0 maxpacket: 16 [ 790.417166][ T5898] m920x_read = error: -19 [ 790.449751][T13924] usb 6-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 790.472678][ T5833] m920x_read = error: -19 [ 790.484588][T13924] usb 6-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 790.498326][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.498361][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.498397][ T5894] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 790.498421][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.522867][T13924] usb 6-1: config 252 has no interface number 0 [ 790.530271][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 790.546785][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 790.609925][T13924] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 790.837357][ T5833] m920x_read = error: -19 [ 790.969678][T13924] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 790.981325][ T5894] usb 4-1: config 0 descriptor?? [ 790.981885][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 790.995263][T13924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.034141][T13924] usb 6-1: Product: syz [ 791.040299][T13924] usb 6-1: Manufacturer: syz [ 791.045047][T13924] usb 6-1: SerialNumber: syz [ 791.073862][T13924] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 791.136949][ T5833] m920x_read = error: -19 [ 791.141526][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 791.166904][ T5898] m920x_read = error: -19 [ 791.171301][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 791.336917][ T5898] m920x_read = error: -19 [ 791.341414][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 791.350104][ T5833] m920x_read = error: -19 [ 791.362096][T13763] usb 6-1: Failed to submit usb control message: -71 [ 791.373651][T13763] usb 6-1: unable to send the bmi data to the device: -71 [ 791.381798][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 791.390372][ T9] usb 6-1: USB disconnect, device number 64 [ 791.390399][T13763] usb 6-1: unable to get target info from device [ 791.416743][T13763] usb 6-1: could not get target info (-71) [ 791.422624][T13763] usb 6-1: could not probe fw (-71) [ 791.567204][ T5833] m920x_read = error: -19 [ 791.571631][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 791.580580][ T5898] m920x_read = error: -19 [ 791.594153][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 791.627602][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 791.786953][ T5898] m920x_read = error: -19 [ 791.807834][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 791.855758][ T5898] m920x_read = error: -19 [ 791.891009][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 792.010029][ T5898] m920x_read = error: -19 [ 792.083578][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 792.148219][ T5898] m920x_read = error: -19 [ 792.193958][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 792.237928][T15452] fuse: Unknown parameter 'group_id00000000000000000000' [ 792.286884][ T5898] m920x_read = error: -19 [ 792.299166][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 792.426747][ T5898] m920x_read = error: -19 [ 792.441251][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 792.503564][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 792.509784][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 792.517714][ T9] m920x_read = error: -19 [ 792.526684][ T9] dvb-usb: error -19 while querying for an remote control event. [ 792.597809][ T5894] usb 4-1: USB disconnect, device number 22 [ 792.694019][ T881] IPVS: starting estimator thread 0... [ 792.726882][ T9] m920x_read = error: -19 [ 792.731284][ T9] dvb-usb: error -19 while querying for an remote control event. [ 792.747783][ T5898] m920x_read = error: -19 [ 792.753100][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 792.767652][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 792.816721][T15459] IPVS: using max 26 ests per chain, 62400 per kthread [ 792.824688][T13756] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 792.916842][ T5894] m920x_read = error: -19 [ 792.921221][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 792.936774][ T5898] m920x_read = error: -19 [ 792.941225][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 793.103638][T15466] fuse: Bad value for 'fd' [ 793.108405][ T5894] m920x_read = error: -19 [ 793.186747][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 793.236361][ T5894] m920x_read = error: -19 [ 793.252004][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 793.386841][ T5894] m920x_read = error: -19 [ 793.398120][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 793.476475][ T5894] m920x_read = error: -19 [ 793.513915][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 793.636994][ T5894] m920x_read = error: -19 [ 793.672340][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 793.767190][ T5894] m920x_read = error: -19 [ 793.791735][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 793.804981][T15481] FAULT_INJECTION: forcing a failure. [ 793.804981][T15481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.824393][T15481] CPU: 0 UID: 0 PID: 15481 Comm: syz.3.2844 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 793.824443][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 793.824466][T15481] Call Trace: [ 793.824489][T15481] [ 793.824498][T15481] dump_stack_lvl+0x241/0x360 [ 793.824548][T15481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.824590][T15481] ? __pfx__printk+0x10/0x10 [ 793.824629][T15481] should_fail_ex+0x424/0x570 [ 793.824662][T15481] prepare_alloc_pages+0x220/0x610 [ 793.824695][T15481] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 793.824724][T15481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 793.824762][T15481] ? folio_mapped+0xe2/0x210 [ 793.824787][T15481] alloc_pages_mpol+0x339/0x690 [ 793.824811][T15481] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 793.824838][T15481] alloc_migration_target_by_mpol+0x33e/0x5e0 [ 793.824870][T15481] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 793.824898][T15481] ? folio_mapped+0xe2/0x210 [ 793.824920][T15481] migrate_pages_batch+0x8e8/0x30b0 [ 793.824954][T15481] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 793.824988][T15481] ? __pfx_migrate_pages_batch+0x10/0x10 [ 793.825017][T15481] ? walk_pgd_range+0x1704/0x17e0 [ 793.825037][T15481] ? mt_find+0x699/0x8f0 [ 793.825062][T15481] migrate_pages+0x2028/0x36c0 [ 793.825103][T15481] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 793.825131][T15481] ? __pfx_migrate_pages+0x10/0x10 [ 793.825164][T15481] ? __se_sys_mbind+0x1434/0x1950 [ 793.825204][T15481] ? __pfx_up_write+0x10/0x10 [ 793.825237][T15481] __se_sys_mbind+0x148d/0x1950 [ 793.825282][T15481] ? __pfx___se_sys_mbind+0x10/0x10 [ 793.825314][T15481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 793.825333][T15481] ? __fget_files+0x2a/0x420 [ 793.825375][T15481] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 793.825395][T15481] ? __ia32_sys_mbind+0x21/0xf0 [ 793.825424][T15481] __do_fast_syscall_32+0xb4/0x110 [ 793.825443][T15481] ? exc_page_fault+0x5f8/0x920 [ 793.825465][T15481] do_fast_syscall_32+0x34/0x80 [ 793.825485][T15481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.825508][T15481] RIP: 0023:0xf707d539 [ 793.825523][T15481] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 793.825539][T15481] RSP: 002b:00000000f504c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 793.825559][T15481] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000800000 [ 793.825572][T15481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.825583][T15481] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 793.825593][T15481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 793.825603][T15481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.825636][T15481] [ 794.106167][ T5894] m920x_read = error: -19 [ 794.110640][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 794.120481][ T5894] m920x_read = error: -19 [ 794.124947][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 794.406814][ T5898] m920x_read = error: -19 [ 794.411215][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 794.419117][ T5894] m920x_read = error: -19 [ 794.423481][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 794.430245][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 794.586720][ T5894] m920x_read = error: -19 [ 794.591120][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 794.620998][ T9] m920x_read = error: -19 [ 794.625396][ T9] dvb-usb: error -19 while querying for an remote control event. [ 794.677581][T15490] fuse: Bad value for 'user_id' [ 794.682497][T15490] fuse: Bad value for 'user_id' [ 794.779460][T15493] FAULT_INJECTION: forcing a failure. [ 794.779460][T15493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.797749][ T9] m920x_read = error: -19 [ 794.802146][ T9] dvb-usb: error -19 while querying for an remote control event. [ 794.802843][T15494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2849'. [ 794.826727][ T9] m920x_read = error: -19 [ 794.836621][ T9] dvb-usb: error -19 while querying for an remote control event. [ 794.844541][T15493] CPU: 0 UID: 0 PID: 15493 Comm: syz.2.2846 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 794.844581][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 794.844593][T15493] Call Trace: [ 794.844601][T15493] [ 794.844610][T15493] dump_stack_lvl+0x241/0x360 [ 794.844644][T15493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.844670][T15493] ? __pfx__printk+0x10/0x10 [ 794.844707][T15493] should_fail_ex+0x424/0x570 [ 794.844742][T15493] _copy_from_iter+0x211/0x1c70 [ 794.844765][T15493] ? skb_set_owner_w+0x246/0x380 [ 794.844788][T15493] ? sock_alloc_send_pskb+0x944/0xa70 [ 794.844811][T15493] ? __pfx__copy_from_iter+0x10/0x10 [ 794.844844][T15493] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 794.844867][T15493] skb_copy_datagram_from_iter+0xec/0x6c0 [ 794.844892][T15493] ? skb_put+0x114/0x1f0 [ 794.844924][T15493] tun_get_user+0x17f3/0x47c0 [ 794.844967][T15493] ? aa_file_perm+0x139/0xf60 [ 794.844993][T15493] ? aa_file_perm+0x139/0xf60 [ 794.845018][T15493] ? aa_file_perm+0x3f1/0xf60 [ 794.845041][T15493] ? __pfx_tun_get_user+0x10/0x10 [ 794.845072][T15493] ? __lock_acquire+0xad5/0xd80 [ 794.845102][T15493] ? ref_tracker_alloc+0x316/0x4c0 [ 794.845122][T15493] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 794.845156][T15493] ? tun_get+0x1e/0x2f0 [ 794.845181][T15493] ? tun_get+0x1e/0x2f0 [ 794.845205][T15493] ? tun_get+0x27d/0x2f0 [ 794.845231][T15493] tun_chr_write_iter+0x10d/0x1f0 [ 794.845260][T15493] vfs_write+0x70f/0xd10 [ 794.845293][T15493] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 794.845320][T15493] ? __pfx_vfs_write+0x10/0x10 [ 794.845348][T15493] ? __fget_files+0x2a/0x420 [ 794.845368][T15493] ? __fget_files+0x2a/0x420 [ 794.845401][T15493] ksys_write+0x19d/0x2d0 [ 794.845429][T15493] ? __pfx_ksys_write+0x10/0x10 [ 794.845456][T15493] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 794.845476][T15493] ? lockdep_hardirqs_on+0x9d/0x150 [ 794.845497][T15493] __do_fast_syscall_32+0xb4/0x110 [ 794.845516][T15493] ? exc_page_fault+0x5f8/0x920 [ 794.845538][T15493] do_fast_syscall_32+0x34/0x80 [ 794.845562][T15493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.845585][T15493] RIP: 0023:0xf707d539 [ 794.845601][T15493] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 794.845617][T15493] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 794.845636][T15493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 794.845649][T15493] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 794.845660][T15493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 794.845671][T15493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 794.845683][T15493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.845710][T15493] [ 795.128140][ T9] m920x_read = error: -19 [ 795.132534][ T9] dvb-usb: error -19 while querying for an remote control event. [ 795.170440][T15488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 795.286780][ T5894] m920x_read = error: -19 [ 795.291195][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 795.299178][ T5894] m920x_read = error: -19 [ 795.303542][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 795.467369][ T5894] m920x_read = error: -19 [ 795.471866][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 795.480038][ T9] m920x_read = error: -19 [ 795.484416][ T9] dvb-usb: error -19 while querying for an remote control event. [ 795.627419][ T5897] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 795.656717][ T5894] m920x_read = error: -19 [ 795.661113][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 795.669286][ T9] m920x_read = error: -19 [ 795.673666][ T9] dvb-usb: error -19 while querying for an remote control event. [ 795.796736][ T881] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 795.832340][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2855'. [ 795.904537][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 795.922761][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.934390][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 795.954106][ T5897] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.981719][ T5897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.996936][ T5894] m920x_read = error: -19 [ 795.998123][ T881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.001484][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 796.046649][ T9] m920x_read = error: -19 [ 796.056636][ T881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.056935][ T9] dvb-usb: error -19 while querying for an remote control event. [ 796.076744][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.236866][ T881] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 796.246045][ T5897] usb 6-1: Product: syz [ 796.270619][ T5897] usb 6-1: Manufacturer: syz [ 796.275270][ T5897] usb 6-1: SerialNumber: syz [ 796.308880][ T9] m920x_read = error: -19 [ 796.314286][ T881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.316157][ T9] dvb-usb: error -19 while querying for an remote control event. [ 796.365729][ T5897] cdc_ncm 6-1:1.0: skipping garbage [ 796.405681][ T881] usb 4-1: config 0 descriptor?? [ 796.411450][ T5897] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 796.424510][ T9] m920x_read = error: -19 [ 796.428689][ T5897] cdc_ncm 6-1:1.0: bind() failure [ 796.467257][ T9] dvb-usb: error -19 while querying for an remote control event. [ 796.510134][ T9] m920x_read = error: -19 [ 796.518718][ T9] dvb-usb: error -19 while querying for an remote control event. [ 796.554969][ T9] usb 6-1: USB disconnect, device number 65 [ 796.667564][ T5894] m920x_read = error: -19 [ 796.683949][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 796.692027][ T5898] m920x_read = error: -19 [ 796.696403][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 796.856800][ T9] m920x_read = error: -19 [ 796.861354][ T9] dvb-usb: error -19 while querying for an remote control event. [ 796.869445][ T5894] m920x_read = error: -19 [ 796.874350][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 797.036840][ T5894] m920x_read = error: -19 [ 797.041423][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 797.049750][ T9] m920x_read = error: -19 [ 797.054403][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.097858][ T1112] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 797.187497][T15522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.257663][ T9] m920x_read = error: -19 [ 797.265711][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.287185][ T5894] m920x_read = error: -19 [ 797.297208][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 797.310082][T10872] Bluetooth: hci3: command 0x0c1a tx timeout [ 797.351554][T15522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.408265][ T5897] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 797.458810][ T5894] m920x_read = error: -19 [ 797.485119][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 797.494609][ T9] m920x_read = error: -19 [ 797.513361][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.547131][ T5897] usb 3-1: device descriptor read/64, error -71 [ 797.796751][ T9] m920x_read = error: -19 [ 797.797084][ T5897] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 797.801125][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.801210][ T9] m920x_read = error: -19 [ 797.821312][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.956884][ T9] m920x_read = error: -19 [ 797.961282][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.986685][ T9] m920x_read = error: -19 [ 797.996776][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.036818][ T5897] usb 3-1: device descriptor read/64, error -71 [ 798.126822][ T9] m920x_read = error: -19 [ 798.162249][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.172805][ T5894] m920x_read = error: -19 [ 798.187192][ T5897] usb usb3-port1: attempt power cycle [ 798.196028][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 798.254708][ T881] usbhid 4-1:0.0: can't add hid device: -71 [ 798.261260][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 798.261269][ T881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 798.272315][ T881] usb 4-1: USB disconnect, device number 23 [ 798.297538][T15528] fuse: Bad value for 'user_id' [ 798.316656][T15528] fuse: Bad value for 'user_id' [ 798.376779][ T9] m920x_read = error: -19 [ 798.385253][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.398142][ T5894] m920x_read = error: -19 [ 798.410710][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 798.417138][T15530] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2862'. [ 798.566733][ T5897] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 798.587376][ T9] m920x_read = error: -19 [ 798.587636][ T5897] usb 3-1: device descriptor read/8, error -71 [ 798.591750][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.609469][ T5894] m920x_read = error: -19 [ 798.613904][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 798.687011][ T5896] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 798.796724][ T9] m920x_read = error: -19 [ 798.801125][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.813147][ T5894] m920x_read = error: -19 [ 798.822114][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 798.837025][ T5896] usb 6-1: device descriptor read/64, error -71 [ 798.857537][ T5897] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 798.888189][ T5897] usb 3-1: device descriptor read/8, error -71 [ 798.953692][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2863'. [ 798.964316][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2863'. [ 798.984605][T15533] ip6gretap0: entered promiscuous mode [ 799.000485][ T5894] m920x_read = error: -19 [ 799.007231][ T5897] usb usb3-port1: unable to enumerate USB device [ 799.013734][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 799.022235][ T9] m920x_read = error: -19 [ 799.028662][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.031070][T15533] ip6gretap0: left promiscuous mode [ 799.086718][ T5896] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 799.197798][ T9] m920x_read = error: -19 [ 799.202319][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.210742][ T5894] m920x_read = error: -19 [ 799.215122][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 799.256745][ T5896] usb 6-1: device descriptor read/64, error -71 [ 799.336090][T15537] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.377188][ T5896] usb usb6-port1: attempt power cycle [ 799.383942][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 799.396976][ T5894] m920x_read = error: -19 [ 799.401434][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 799.409737][ T9] m920x_read = error: -19 [ 799.419704][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.438068][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 799.597084][ T9] m920x_read = error: -19 [ 799.609078][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.619262][ T5894] m920x_read = error: -19 [ 799.623669][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 799.684195][T15542] FAULT_INJECTION: forcing a failure. [ 799.684195][T15542] name failslab, interval 1, probability 0, space 0, times 0 [ 799.698965][T15542] CPU: 0 UID: 0 PID: 15542 Comm: syz.3.2867 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 799.698994][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 799.699007][T15542] Call Trace: [ 799.699015][T15542] [ 799.699024][T15542] dump_stack_lvl+0x241/0x360 [ 799.699060][T15542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.699088][T15542] ? __pfx__printk+0x10/0x10 [ 799.699118][T15542] ? __pfx___might_resched+0x10/0x10 [ 799.699144][T15542] should_fail_ex+0x424/0x570 [ 799.699178][T15542] should_failslab+0xac/0x100 [ 799.699200][T15542] __kmalloc_cache_noprof+0x73/0x370 [ 799.699219][T15542] ? snd_pcm_oss_change_params_locked+0x176/0x4150 [ 799.699270][T15542] snd_pcm_oss_change_params_locked+0x176/0x4150 [ 799.699305][T15542] ? mas_wr_store_type+0xc24/0x16c0 [ 799.699360][T15542] ? __lock_acquire+0xad5/0xd80 [ 799.699387][T15542] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 799.699416][T15542] ? __mutex_trylock_common+0x184/0x2e0 [ 799.699462][T15542] snd_pcm_oss_mmap+0x30f/0x570 [ 799.699491][T15542] mmap_region+0x241d/0x2ea0 [ 799.699557][T15542] ? __pfx_mmap_region+0x10/0x10 [ 799.699643][T15542] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 799.699680][T15542] ? cap_mmap_addr+0xaa/0xf0 [ 799.699706][T15542] ? bpf_lsm_mmap_addr+0x9/0x10 [ 799.699730][T15542] ? security_mmap_addr+0x6f/0x250 [ 799.699753][T15542] ? shmem_mapping+0xd/0x50 [ 799.699775][T15542] do_mmap+0xd42/0x1420 [ 799.699808][T15542] ? __pfx_do_mmap+0x10/0x10 [ 799.699826][T15542] ? down_write_killable+0x1a0/0x260 [ 799.699849][T15542] ? vm_mmap_pgoff+0x214/0x530 [ 799.699868][T15542] ? __pfx_down_write_killable+0x10/0x10 [ 799.699889][T15542] ? common_file_perm+0x1a6/0x210 [ 799.699927][T15542] vm_mmap_pgoff+0x2a2/0x530 [ 799.699957][T15542] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 799.699977][T15542] ? __fget_files+0x2a/0x420 [ 799.699995][T15542] ? __fget_files+0x2a/0x420 [ 799.700015][T15542] ? __fget_files+0x39d/0x420 [ 799.700032][T15542] ? __fget_files+0x2a/0x420 [ 799.700055][T15542] ksys_mmap_pgoff+0x4ee/0x720 [ 799.700076][T15542] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 799.700102][T15542] __do_fast_syscall_32+0xb4/0x110 [ 799.700122][T15542] ? exc_page_fault+0x5f8/0x920 [ 799.700146][T15542] do_fast_syscall_32+0x34/0x80 [ 799.700167][T15542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 799.700190][T15542] RIP: 0023:0xf707d539 [ 799.700207][T15542] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 799.700223][T15542] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 799.700244][T15542] RAX: ffffffffffffffda RBX: 0000000080ffa000 RCX: 0000000000003000 [ 799.700258][T15542] RDX: 000000000280000b RSI: 0000000000000011 RDI: 0000000000000003 [ 799.700270][T15542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 799.700281][T15542] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 799.700293][T15542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 799.700321][T15542] [ 799.721927][ T5896] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 799.814449][ T5894] m920x_read = error: -19 [ 799.867464][ T5896] usb 6-1: device descriptor read/8, error -71 [ 799.876708][ T9] m920x_read = error: -19 [ 799.876736][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.995432][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 800.052176][ T9] m920x_read = error: -19 [ 800.063967][ T9] dvb-usb: error -19 while querying for an remote control event. [ 800.092627][T15546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2869'. [ 800.102291][T15546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2869'. [ 800.111658][T15546] tipc: MTU too low for tipc bearer [ 800.237532][ T5894] m920x_read = error: -19 [ 800.242198][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 800.279285][ T5894] m920x_read = error: -19 [ 800.283697][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 800.348849][T15552] fuse: Bad value for 'user_id' [ 800.353840][T15552] fuse: Bad value for 'user_id' [ 800.427261][ T5898] m920x_read = error: -19 [ 800.431677][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 800.457116][ T5898] m920x_read = error: -19 [ 800.464620][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 800.487083][ T5896] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 800.510900][ T5896] usb 6-1: device descriptor read/8, error -71 [ 800.556762][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 800.596730][ T5898] m920x_read = error: -19 [ 800.601138][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 800.617596][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 800.626730][ T5898] m920x_read = error: -19 [ 800.631639][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 800.635525][ T5896] usb usb6-port1: unable to enumerate USB device [ 800.639525][ T5894] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 800.720433][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 800.730438][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 800.742715][ T9] usb 3-1: Product: syz [ 800.747449][ T9] usb 3-1: SerialNumber: syz [ 800.754193][ T9] usb 3-1: config 0 descriptor?? [ 800.776808][ T5833] m920x_read = error: -19 [ 800.781284][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 800.807823][ T5833] m920x_read = error: -19 [ 800.812471][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 800.821366][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.832598][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.842648][ T5894] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 800.851840][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.863275][ T5894] usb 4-1: config 0 descriptor?? [ 800.947095][ T5833] m920x_read = error: -19 [ 800.951518][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 800.972535][ T9] hso 3-1:0.0: Failed to find BULK IN ep [ 800.978646][ T5833] m920x_read = error: -19 [ 800.984177][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 801.116846][ T5833] m920x_read = error: -19 [ 801.121335][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 801.146734][ T5833] m920x_read = error: -19 [ 801.151166][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 801.175065][ T5833] usb 3-1: USB disconnect, device number 28 [ 801.287023][ T9] m920x_read = error: -19 [ 801.294044][ T9] dvb-usb: error -19 while querying for an remote control event. [ 801.324363][ T9] m920x_read = error: -19 [ 801.334926][ T9] dvb-usb: error -19 while querying for an remote control event. [ 801.456836][ T9] m920x_read = error: -19 [ 801.465778][ T9] dvb-usb: error -19 while querying for an remote control event. [ 801.516911][ T5833] m920x_read = error: -19 [ 801.554300][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 801.667381][ T9] m920x_read = error: -19 [ 801.675553][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 801.675568][ T30] audit: type=1326 audit(1745117696.425:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 801.730100][ T9] dvb-usb: error -19 while querying for an remote control event. [ 801.743506][T15565] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 801.759397][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 801.768091][ T5833] m920x_read = error: -19 [ 801.786955][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 801.862442][ T30] audit: type=1326 audit(1745117696.475:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 801.912472][T15570] FAULT_INJECTION: forcing a failure. [ 801.912472][T15570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.934542][ T30] audit: type=1326 audit(1745117696.475:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 801.958906][ T9] m920x_read = error: -19 [ 801.963288][ T9] dvb-usb: error -19 while querying for an remote control event. [ 801.976030][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.2.2878 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 801.976062][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.976076][T15570] Call Trace: [ 801.976084][T15570] [ 801.976093][T15570] dump_stack_lvl+0x241/0x360 [ 801.976130][T15570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.976159][T15570] ? __pfx__printk+0x10/0x10 [ 801.976199][T15570] should_fail_ex+0x424/0x570 [ 801.976234][T15570] _copy_from_user+0x2d/0xb0 [ 801.976262][T15570] video_usercopy+0x33d/0x1070 [ 801.976302][T15570] ? __pfx___video_do_ioctl+0x10/0x10 [ 801.976331][T15570] ? __pfx_video_usercopy+0x10/0x10 [ 801.976376][T15570] ? __fget_files+0x2a/0x420 [ 801.976400][T15570] v4l2_ioctl+0x189/0x1e0 [ 801.976444][T15570] v4l2_compat_ioctl32+0x1d7/0x260 [ 801.976472][T15570] __ia32_compat_sys_ioctl+0x561/0xc90 [ 801.976500][T15570] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 801.976525][T15570] ? __fget_files+0x2a/0x420 [ 801.976548][T15570] ? fput+0x9b/0xd0 [ 801.976567][T15570] ? ksys_write+0x275/0x2d0 [ 801.976598][T15570] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 801.976617][T15570] ? lockdep_hardirqs_on+0x9d/0x150 [ 801.976637][T15570] __do_fast_syscall_32+0xb4/0x110 [ 801.976655][T15570] ? exc_page_fault+0x5f8/0x920 [ 801.976677][T15570] do_fast_syscall_32+0x34/0x80 [ 801.976696][T15570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.976717][T15570] RIP: 0023:0xf707d539 [ 801.976732][T15570] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 801.976750][T15570] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 801.976766][T15570] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 801.976777][T15570] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.976786][T15570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 801.976795][T15570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 801.976804][T15570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.976824][T15570] [ 802.195016][ T5833] m920x_read = error: -19 [ 802.199503][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 802.207507][ T30] audit: type=1326 audit(1745117696.485:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.229743][ T30] audit: type=1326 audit(1745117696.505:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.252048][ T30] audit: type=1326 audit(1745117696.505:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.256948][ T5896] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 802.274325][ T30] audit: type=1326 audit(1745117696.505:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.304104][ T30] audit: type=1326 audit(1745117696.505:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.326548][ T30] audit: type=1326 audit(1745117696.505:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.348923][ T30] audit: type=1326 audit(1745117696.505:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 802.371785][ T9] m920x_read = error: -19 [ 802.376172][ T9] dvb-usb: error -19 while querying for an remote control event. [ 802.384091][ T9] m920x_read = error: -19 [ 802.388631][ T9] dvb-usb: error -19 while querying for an remote control event. [ 802.536730][ T9] m920x_read = error: -19 [ 802.541143][ T9] dvb-usb: error -19 while querying for an remote control event. [ 802.549167][ T5833] m920x_read = error: -19 [ 802.553553][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 802.566844][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 802.587173][ T5896] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 802.597746][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.652929][ T5896] usb 5-1: config 0 has no interface number 0 [ 802.727369][ T5896] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 802.736749][ T9] m920x_read = error: -19 [ 802.750068][ T9] dvb-usb: error -19 while querying for an remote control event. [ 802.768035][ T9] m920x_read = error: -19 [ 802.772469][ T9] dvb-usb: error -19 while querying for an remote control event. [ 802.776743][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.845720][ T5896] usb 5-1: Product: syz [ 802.908255][ T5896] usb 5-1: Manufacturer: syz [ 802.916982][ T9] m920x_read = error: -19 [ 802.921568][ T9] dvb-usb: error -19 while querying for an remote control event. [ 802.972950][ T5896] usb 5-1: SerialNumber: syz [ 802.986860][ T9] m920x_read = error: -19 [ 802.991327][ T9] dvb-usb: error -19 while querying for an remote control event. [ 803.096730][ T9] m920x_read = error: -19 [ 803.101520][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 803.107542][ T9] dvb-usb: error -19 while querying for an remote control event. [ 803.120774][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 803.137902][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 803.141797][ T5896] usb 5-1: config 0 descriptor?? [ 803.171959][ T9] m920x_read = error: -19 [ 803.176348][ T9] dvb-usb: error -19 while querying for an remote control event. [ 803.191178][ T5894] usb 4-1: USB disconnect, device number 24 [ 803.307585][ T9] m920x_read = error: -19 [ 803.393481][ T9] dvb-usb: error -19 while querying for an remote control event. [ 803.403750][ T5895] m920x_read = error: -19 [ 803.411875][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 803.468686][T15565] loop6: detected capacity change from 0 to 524287999 [ 803.793912][T15582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.817857][T15582] bridge0: port 1(bond3) entered blocking state [ 803.824419][T15582] bridge0: port 1(bond3) entered disabled state [ 803.831660][ T9] m920x_read = error: -19 [ 803.836139][ T9] dvb-usb: error -19 while querying for an remote control event. [ 803.884869][ T5894] m920x_read = error: -19 [ 803.894692][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 803.933699][T15582] bond3: entered allmulticast mode [ 803.939407][ T5833] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 803.967459][T15582] bond3: entered promiscuous mode [ 803.978310][T15582] bridge0: port 1(bond3) entered blocking state [ 803.984719][T15582] bridge0: port 1(bond3) entered forwarding state [ 804.055793][ T1112] bridge0: port 1(bond3) entered disabled state [ 804.118609][ T5833] usb 6-1: config 0 has no interfaces? [ 804.147424][ T5894] m920x_read = error: -19 [ 804.151940][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 804.160121][ T9] m920x_read = error: -19 [ 804.164540][ T9] dvb-usb: error -19 while querying for an remote control event. [ 804.277648][ T5833] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 804.306231][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.441763][ T5833] usb 6-1: Product: syz [ 804.446003][ T5833] usb 6-1: Manufacturer: syz [ 804.459116][ T5896] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 804.465593][ T9] m920x_read = error: -19 [ 804.465593][ T5896] usb 5-1: No valid video chain found. [ 804.479934][ T5896] usb 5-1: USB disconnect, device number 42 [ 804.518259][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 804.530682][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 804.550604][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 804.560360][T15591] fuse: Bad value for 'fd' [ 804.566846][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 804.597865][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 804.606261][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 804.754392][ T5833] usb 6-1: SerialNumber: syz [ 804.759203][ T9] dvb-usb: error -19 while querying for an remote control event. [ 804.767588][ T5894] m920x_read = error: -19 [ 804.780145][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 804.810399][ T5833] usb 6-1: config 0 descriptor?? [ 804.967075][ T5894] m920x_read = error: -19 [ 804.981719][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 804.990078][ T9] m920x_read = error: -19 [ 805.022314][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.210443][ T5894] m920x_read = error: -19 [ 805.216187][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 805.224350][ T9] m920x_read = error: -19 [ 805.234287][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.380331][T15592] chnl_net:caif_netlink_parms(): no params data found [ 805.416718][ T9] m920x_read = error: -19 [ 805.427299][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.448039][ T9] m920x_read = error: -19 [ 805.457992][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.500113][T15603] fuse: blksize only supported for fuseblk [ 805.607078][ T9] m920x_read = error: -19 [ 805.615142][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.638357][ T5894] m920x_read = error: -19 [ 805.664326][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 805.707747][T13756] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 805.776724][ T5897] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 805.826836][ T9] m920x_read = error: -19 [ 805.882904][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.952616][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.986879][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.003890][ T5897] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.013496][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.095194][ T9] m920x_read = error: -19 [ 806.105216][ T5897] usb 5-1: SerialNumber: syz [ 806.118440][ T9] dvb-usb: error -19 while querying for an remote control event. [ 806.149169][ T9] m920x_read = error: -19 [ 806.161861][ T9] dvb-usb: error -19 while querying for an remote control event. [ 806.206087][T15592] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.233609][T15592] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.245345][T15592] bridge_slave_0: entered allmulticast mode [ 806.256122][T15592] bridge_slave_0: entered promiscuous mode [ 806.291524][T15592] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.306983][ T9] m920x_read = error: -19 [ 806.310295][T15592] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.331205][ T9] dvb-usb: error -19 while querying for an remote control event. [ 806.339385][ T5894] m920x_read = error: -19 [ 806.344568][T15592] bridge_slave_1: entered allmulticast mode [ 806.362217][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.371252][T15592] bridge_slave_1: entered promiscuous mode [ 806.431251][ T5897] usb 5-1: 0:2 : does not exist [ 806.487397][ T5897] usb 5-1: USB disconnect, device number 43 [ 806.557349][ T5894] m920x_read = error: -19 [ 806.565573][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.587627][ T9] m920x_read = error: -19 [ 806.603796][ T9] dvb-usb: error -19 while querying for an remote control event. [ 806.633916][T15592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.657101][ T5152] Bluetooth: hci5: command tx timeout [ 806.701650][T15592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.718134][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 806.776704][ T9] m920x_read = error: -19 [ 806.781190][ T9] dvb-usb: error -19 while querying for an remote control event. [ 806.797593][ T5894] m920x_read = error: -19 [ 806.804732][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 806.841308][T15592] team0: Port device team_slave_0 added [ 806.850111][T15592] team0: Port device team_slave_1 added [ 806.924165][T15592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.932833][T15592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.964820][T15592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.977100][ T5894] m920x_read = error: -19 [ 806.987518][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 807.001302][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 807.001923][T15592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.016923][T15592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.026897][ T9] m920x_read = error: -19 [ 807.064240][ T9] dvb-usb: error -19 while querying for an remote control event. [ 807.064318][T15592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.168330][T15592] hsr_slave_0: entered promiscuous mode [ 807.178436][T15592] hsr_slave_1: entered promiscuous mode [ 807.190577][T15592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.191131][ T5897] usb 6-1: USB disconnect, device number 70 [ 807.198197][T15592] Cannot create hsr debugfs directory [ 807.217402][ T9] m920x_read = error: -19 [ 807.225912][ T9] dvb-usb: error -19 while querying for an remote control event. [ 807.236922][ T5894] m920x_read = error: -19 [ 807.241370][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 807.262018][T15620] netlink: 'syz.5.2891': attribute type 5 has an invalid length. [ 807.430342][ T5894] hid-generic 0000:0003:0000.0049: unknown main item tag 0x0 [ 807.437969][ T5833] m920x_read = error: -19 [ 807.442336][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 807.450229][ T5895] m920x_read = error: -19 [ 807.454609][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 807.472878][ T5894] hid-generic 0000:0003:0000.0049: unknown main item tag 0x0 [ 807.482621][ T5894] hid-generic 0000:0003:0000.0049: hidraw0: HID v0.00 Device [syz0] on syz1 [ 807.597191][ T5897] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 807.634413][T15592] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.645346][ T5894] m920x_read = error: -19 [ 807.649903][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 807.657938][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 807.665587][T15592] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 807.676854][ T5895] m920x_read = error: -19 [ 807.681273][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 807.779689][T15592] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.786835][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 807.803174][T15592] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 807.857090][ T5895] m920x_read = error: -19 [ 807.861510][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 807.861732][ T5897] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 807.876859][ T5894] m920x_read = error: -19 [ 807.884103][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 807.895050][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.898918][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.908537][ T5897] usb 6-1: Product: syz [ 807.925004][ T5897] usb 6-1: Manufacturer: syz [ 807.930868][ T5897] usb 6-1: SerialNumber: syz [ 807.952871][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.963344][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 807.974451][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.975525][ T5897] usb 6-1: config 0 descriptor?? [ 808.046408][ T9] usb 5-1: config 0 descriptor?? [ 808.051819][ T5894] m920x_read = error: -19 [ 808.055906][ T5897] gspca_main: sq905-2.14.0 probing 2770:9120 [ 808.056355][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.070463][ T5895] m920x_read = error: -19 [ 808.074898][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 808.095488][T15592] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.115788][T15592] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 808.140234][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 808.313231][ T5895] m920x_read = error: -19 [ 808.317831][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 808.368380][ T5895] m920x_read = error: -19 [ 808.372830][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 808.477301][ T5895] m920x_read = error: -19 [ 808.482613][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 808.510252][T15592] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.519937][T15592] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 808.524410][ T5897] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 808.657104][ T5895] m920x_read = error: -19 [ 808.719744][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 808.729212][ T5894] m920x_read = error: -19 [ 808.733581][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.742773][ T5897] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 808.743068][ T5152] Bluetooth: hci5: command tx timeout [ 808.774402][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.801255][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.926901][ T5894] m920x_read = error: -19 [ 808.931332][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 808.939391][ T5895] m920x_read = error: -19 [ 808.943790][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 809.007184][ T5897] usb 6-1: USB disconnect, device number 71 [ 809.137634][ T5895] m920x_read = error: -19 [ 809.154091][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 809.164961][ T5894] m920x_read = error: -19 [ 809.201059][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.335244][T15632] fuse: Bad value for 'fd' [ 809.377261][ T5833] m920x_read = error: -19 [ 809.392446][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 809.408476][ T5894] m920x_read = error: -19 [ 809.466722][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.497111][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 809.590417][T15592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 809.627094][ T5894] m920x_read = error: -19 [ 809.631557][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.639498][ T5833] m920x_read = error: -19 [ 809.643887][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 809.711975][T15592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 809.816768][ T5833] m920x_read = error: -19 [ 809.821196][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 809.829104][ T5894] m920x_read = error: -19 [ 809.834075][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 809.868205][T15592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 809.915234][T15592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 810.071099][ T5894] m920x_read = error: -19 [ 810.075542][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.085209][ T5833] m920x_read = error: -19 [ 810.103040][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 810.267084][ T5833] m920x_read = error: -19 [ 810.277317][T15592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.294108][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 810.309563][ T5894] m920x_read = error: -19 [ 810.330785][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 810.339704][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.357288][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 810.377260][ T9] usb 5-1: USB disconnect, device number 44 [ 810.427619][T15592] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.458277][T13762] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.458410][T13762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.491556][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.491652][T13756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.530740][ T5894] m920x_read = error: -19 [ 810.530773][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.530846][ T5894] m920x_read = error: -19 [ 810.530868][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.570572][ T5896] hid-generic 0000:0003:0000.004A: unknown main item tag 0x0 [ 810.570606][ T5896] hid-generic 0000:0003:0000.004A: unknown main item tag 0x0 [ 810.572199][ T5896] hid-generic 0000:0003:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 810.688540][ T5894] m920x_read = error: -19 [ 810.688574][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.688649][ T5894] m920x_read = error: -19 [ 810.688671][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.691034][ T1112] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 810.692510][T15592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.804475][T15592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.832060][ T5152] Bluetooth: hci5: command tx timeout [ 810.856798][ T5894] m920x_read = error: -19 [ 810.861188][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 810.873184][ T9] m920x_read = error: -19 [ 810.886719][ T9] dvb-usb: error -19 while querying for an remote control event. [ 811.004863][T15592] veth0_vlan: entered promiscuous mode [ 811.047131][ T9] m920x_read = error: -19 [ 811.051560][ T9] dvb-usb: error -19 while querying for an remote control event. [ 811.061487][T15592] veth1_vlan: entered promiscuous mode [ 811.078867][ T5894] m920x_read = error: -19 [ 811.093561][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.172024][T15592] veth0_macvtap: entered promiscuous mode [ 811.272359][T15663] xt_TCPMSS: Only works on TCP SYN packets [ 811.281407][ T5894] m920x_read = error: -19 [ 811.286972][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.298317][ T5894] m920x_read = error: -19 [ 811.329545][T15592] veth1_macvtap: entered promiscuous mode [ 811.335719][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 811.496289][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.513932][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.550162][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.550480][ T5833] m920x_read = error: -19 [ 811.791069][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.810615][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.038739][ T9] m920x_read = error: -19 [ 812.137092][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.146957][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 812.154792][ T9] dvb-usb: error -19 while querying for an remote control event. [ 812.316965][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.326901][ T5894] m920x_read = error: -19 [ 812.326928][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.446782][ T5894] m920x_read = error: -19 [ 812.451181][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.486643][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.488331][ T5894] m920x_read = error: -19 [ 812.518423][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.567257][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.616706][ T5894] m920x_read = error: -19 [ 812.631658][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.636655][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.696676][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.717319][ T9] m920x_read = error: -19 [ 812.724328][ T9] dvb-usb: error -19 while querying for an remote control event. [ 812.798548][T15592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.886825][ T9] m920x_read = error: -19 [ 812.894730][ T9] dvb-usb: error -19 while querying for an remote control event. [ 812.906696][ T5152] Bluetooth: hci5: command tx timeout [ 812.935431][ T5894] m920x_read = error: -19 [ 812.950999][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 812.966819][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.026863][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.086726][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.106997][ T5894] m920x_read = error: -19 [ 813.111425][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 813.126661][ T9] m920x_read = error: -19 [ 813.129046][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.131021][ T9] dvb-usb: error -19 while querying for an remote control event. [ 813.216861][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.249459][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.261519][T15670] fuse: Bad value for 'fd' [ 813.271390][T15592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.283408][T15592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.316716][ T9] m920x_read = error: -19 [ 813.324113][ T9] dvb-usb: error -19 while querying for an remote control event. [ 813.330964][T15592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.363767][ T5894] m920x_read = error: -19 [ 813.368383][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 813.393641][ T1112] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 813.490347][T15592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.534683][T15592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.547181][ T5833] m920x_read = error: -19 [ 813.551570][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 813.559479][ T5895] m920x_read = error: -19 [ 813.564155][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 813.602188][T15592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.615485][T15592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.622947][T15678] FAULT_INJECTION: forcing a failure. [ 813.622947][T15678] name failslab, interval 1, probability 0, space 0, times 0 [ 813.668082][T15678] CPU: 1 UID: 0 PID: 15678 Comm: syz.0.2910 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 813.668112][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 813.668126][T15678] Call Trace: [ 813.668135][T15678] [ 813.668144][T15678] dump_stack_lvl+0x241/0x360 [ 813.668182][T15678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.668214][T15678] ? __pfx__printk+0x10/0x10 [ 813.668249][T15678] ? __pfx___might_resched+0x10/0x10 [ 813.668275][T15678] should_fail_ex+0x424/0x570 [ 813.668312][T15678] should_failslab+0xac/0x100 [ 813.668337][T15678] kmem_cache_alloc_noprof+0x78/0x390 [ 813.668360][T15678] ? skb_clone+0x20c/0x390 [ 813.668387][T15678] skb_clone+0x20c/0x390 [ 813.668412][T15678] nfnetlink_rcv+0x52b/0x28f0 [ 813.668450][T15678] ? __dev_queue_xmit+0x2f9/0x3f60 [ 813.668479][T15678] ? __dev_queue_xmit+0x2f9/0x3f60 [ 813.668501][T15678] ? __dev_queue_xmit+0x2f9/0x3f60 [ 813.668526][T15678] ? __dev_queue_xmit+0x1780/0x3f60 [ 813.668545][T15678] ? kasan_save_track+0x3f/0x80 [ 813.668573][T15678] ? __kasan_slab_alloc+0x66/0x80 [ 813.668610][T15678] ? __do_fast_syscall_32+0xb4/0x110 [ 813.668638][T15678] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 813.668707][T15678] ? ref_tracker_free+0x63e/0x7e0 [ 813.668730][T15678] ? __asan_memcpy+0x40/0x70 [ 813.668755][T15678] ? __pfx_ref_tracker_free+0x10/0x10 [ 813.668792][T15678] ? skb_clone+0x240/0x390 [ 813.668824][T15678] ? netlink_deliver_tap+0x2e/0x1b0 [ 813.668854][T15678] ? netlink_deliver_tap+0x2e/0x1b0 [ 813.668882][T15678] netlink_unicast+0x7f8/0x9a0 [ 813.668915][T15678] ? __pfx_netlink_unicast+0x10/0x10 [ 813.668941][T15678] ? skb_put+0x114/0x1f0 [ 813.668976][T15678] netlink_sendmsg+0x8c3/0xcd0 [ 813.669016][T15678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.669048][T15678] ? aa_sock_msg_perm+0x91/0x160 [ 813.669081][T15678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.669106][T15678] __sock_sendmsg+0x221/0x270 [ 813.669135][T15678] ____sys_sendmsg+0x523/0x860 [ 813.669175][T15678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.669225][T15678] __sys_sendmsg+0x271/0x360 [ 813.669264][T15678] ? __pfx___sys_sendmsg+0x10/0x10 [ 813.669349][T15678] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 813.669372][T15678] ? lockdep_hardirqs_on+0x9d/0x150 [ 813.669397][T15678] __do_fast_syscall_32+0xb4/0x110 [ 813.669420][T15678] ? exc_page_fault+0x5f8/0x920 [ 813.669446][T15678] do_fast_syscall_32+0x34/0x80 [ 813.669470][T15678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.669496][T15678] RIP: 0023:0xf707d539 [ 813.669515][T15678] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 813.669534][T15678] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 813.669557][T15678] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100 [ 813.669572][T15678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 813.669585][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.669597][T15678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 813.669610][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.669641][T15678] [ 813.989899][ T5898] m920x_read = error: -19 [ 813.994278][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 814.003520][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 814.011875][ T5898] m920x_read = error: -19 [ 814.016258][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 814.136112][ T5895] hid-generic 0000:0003:0000.004B: unknown main item tag 0x0 [ 814.144433][T15684] dccp_invalid_packet: P.Data Offset(4) too small [ 814.180192][ T5898] m920x_read = error: -19 [ 814.184610][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 814.196776][ T5833] m920x_read = error: -19 [ 814.201167][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 814.225312][ T5895] hid-generic 0000:0003:0000.004B: unknown main item tag 0x0 [ 814.237031][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 814.250856][ T9] usb 5-1: config 2 interface 0 has no altsetting 0 [ 814.291240][ T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 814.308398][ T5895] hid-generic 0000:0003:0000.004B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 814.328064][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.336179][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.357478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.367659][ T9] usb 5-1: Product: syz [ 814.371962][ T9] usb 5-1: Manufacturer: syz [ 814.377295][ T9] usb 5-1: SerialNumber: syz [ 814.392196][ T5895] m920x_read = error: -19 [ 814.400491][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 814.466684][ T5833] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 814.506491][ T5895] m920x_read = error: -19 [ 814.518837][T11563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.527125][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 814.539297][T11563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.567195][T13924] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 814.578367][ T5895] m920x_read = error: -19 [ 814.582792][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 814.675253][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.690946][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.701322][ T5895] m920x_read = error: -19 [ 814.705837][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 814.725688][ T9] usb 5-1: USB disconnect, device number 45 [ 814.739362][T13924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.750715][ T5833] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 814.750747][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.764173][ T5833] usb 6-1: config 0 descriptor?? [ 814.775581][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 814.777034][ T5895] m920x_read = error: -19 [ 814.805516][T13924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.809977][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 814.822897][T13924] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 814.833826][T13924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.874887][T13924] usb 4-1: config 0 descriptor?? [ 814.907432][ T5895] m920x_read = error: -19 [ 814.917211][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 814.987524][ T9] m920x_read = error: -19 [ 814.992043][ T9] dvb-usb: error -19 while querying for an remote control event. [ 815.124109][ T9] m920x_read = error: -19 [ 815.136787][ T9] dvb-usb: error -19 while querying for an remote control event. [ 815.220981][ T9] m920x_read = error: -19 [ 815.233161][ T5833] cm6533_jd 0003:0D8C:0022.004C: unknown main item tag 0x0 [ 815.261451][ T9] dvb-usb: error -19 while querying for an remote control event. [ 815.279508][ T5833] cm6533_jd 0003:0D8C:0022.004C: unknown main item tag 0x0 [ 815.300888][ T5833] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.004C/input/input49 [ 815.332543][ T5833] cm6533_jd 0003:0D8C:0022.004C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 815.381723][ T5895] m920x_read = error: -19 [ 815.391336][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 815.456844][ T5895] m920x_read = error: -19 [ 815.461250][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 815.471396][ T5833] usb 6-1: USB disconnect, device number 72 [ 815.594801][T15705] fuse: Bad value for 'fd' [ 815.607775][ T5894] m920x_read = error: -19 [ 815.623784][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 815.667022][ T5894] m920x_read = error: -19 [ 815.679159][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 815.806801][ T5894] m920x_read = error: -19 [ 815.811370][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 816.004215][ T5895] m920x_read = error: -19 [ 816.017113][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 816.114728][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 816.177114][ T5894] m920x_read = error: -19 [ 816.206678][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 816.311710][ T5894] m920x_read = error: -19 [ 816.371064][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 816.475181][ T5895] m920x_read = error: -19 [ 816.501063][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 816.676844][ T5895] m920x_read = error: -19 [ 816.707472][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 816.729597][ T5895] m920x_read = error: -19 [ 816.735743][T15713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 816.741859][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 816.800789][T15715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2922'. [ 816.825267][T15713] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 816.854246][T15718] syz.5.2923 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 816.880976][T15713] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 816.886820][ T5895] m920x_read = error: -19 [ 816.891306][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 816.906720][ T5833] m920x_read = error: -19 [ 816.911674][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 816.935931][T15713] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 816.981050][T13924] usbhid 4-1:0.0: can't add hid device: -71 [ 816.992122][T13924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 817.036311][T13924] usb 4-1: USB disconnect, device number 25 [ 817.076977][ T5833] m920x_read = error: -19 [ 817.081442][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 817.089715][ T5895] m920x_read = error: -19 [ 817.094057][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 817.197929][ T5895] hid-generic 0000:0003:0000.004D: unknown main item tag 0x0 [ 817.217255][ T5895] hid-generic 0000:0003:0000.004D: unknown main item tag 0x0 [ 817.240415][ T5895] hid-generic 0000:0003:0000.004D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 817.266843][ T5895] m920x_read = error: -19 [ 817.289446][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 817.298259][ T5833] m920x_read = error: -19 [ 817.308000][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 817.319563][T15725] netlink: 'syz.2.2926': attribute type 4 has an invalid length. [ 817.330443][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 817.354438][T15725] netlink: 'syz.2.2926': attribute type 4 has an invalid length. [ 817.486969][ T5833] m920x_read = error: -19 [ 817.720170][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2916'. [ 817.729313][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 817.739514][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2916'. [ 817.748642][ T5895] m920x_read = error: -19 [ 817.748668][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 817.908254][ T5833] m920x_read = error: -19 [ 817.953605][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 817.961808][ T5895] m920x_read = error: -19 [ 817.969526][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 818.185595][ T5895] m920x_read = error: -19 [ 818.191733][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 818.199921][ T5894] m920x_read = error: -19 [ 818.212748][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 818.232518][T15736] fuse: Bad value for 'fd' [ 818.395699][ T5894] m920x_read = error: -19 [ 818.419403][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 818.428351][ T5895] m920x_read = error: -19 [ 818.449129][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 818.533865][T15739] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 818.597949][T15741] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 818.604624][T15741] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 818.655861][T15741] vhci_hcd vhci_hcd.0: Device attached [ 818.668933][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 818.688950][ T9] m920x_read = error: -19 [ 818.702099][ T9] dvb-usb: error -19 while querying for an remote control event. [ 818.710213][ T5895] m920x_read = error: -19 [ 818.731347][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 818.739246][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 818.766032][T15743] vhci_hcd: connection closed [ 818.766410][T13756] vhci_hcd: stop threads [ 818.784596][T13756] vhci_hcd: release socket [ 818.815464][T13756] vhci_hcd: disconnect device [ 818.906292][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout [ 818.916726][ T5895] m920x_read = error: -19 [ 818.921203][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 818.946708][ T5895] m920x_read = error: -19 [ 818.951468][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 819.089046][ T5894] m920x_read = error: -19 [ 819.093714][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 819.127018][ T5895] m920x_read = error: -19 [ 819.132287][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 819.177231][T10872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 819.192347][T10872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 819.204902][T10872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 819.215713][T10872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 819.226489][T10872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 819.307375][ T5895] m920x_read = error: -19 [ 819.311775][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 819.336896][ T5894] m920x_read = error: -19 [ 819.341265][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 819.527416][ T5894] m920x_read = error: -19 [ 819.546370][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 819.560680][ T5895] m920x_read = error: -19 [ 819.567059][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 819.694056][T11563] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 819.726882][ T5894] m920x_read = error: -19 [ 819.751791][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 819.772101][ T5895] m920x_read = error: -19 [ 819.776815][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 819.920592][T13762] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 819.928900][ T5894] m920x_read = error: -19 [ 819.933491][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 819.956823][ T5896] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 819.956839][ T5895] m920x_read = error: -19 [ 819.956863][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.127709][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 820.136970][ T5895] m920x_read = error: -19 [ 820.141546][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.154373][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.181950][T11563] bridge_slave_1: left allmulticast mode [ 820.187168][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.189114][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.222470][T11563] bridge_slave_1: left promiscuous mode [ 820.229544][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.239087][ T5895] m920x_read = error: -19 [ 820.239305][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 820.289735][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.300321][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.309950][T11563] bridge_slave_0: left allmulticast mode [ 820.466922][ T5895] m920x_read = error: -19 [ 820.471573][T11563] bridge_slave_0: left promiscuous mode [ 820.477322][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.478316][ T5896] usb 3-1: config 0 descriptor?? [ 820.495620][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.503058][ T5895] m920x_read = error: -19 [ 820.536618][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.658575][ T5895] m920x_read = error: -19 [ 820.663007][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.720743][ T5895] m920x_read = error: -19 [ 820.725146][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.728837][ T52] hid-generic 0000:0003:0000.004E: unknown main item tag 0x0 [ 820.794287][ T52] hid-generic 0000:0003:0000.004E: unknown main item tag 0x0 [ 820.817984][ T52] hid-generic 0000:0003:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 820.853335][ T5895] m920x_read = error: -19 [ 820.866332][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 820.878903][T11563] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 820.894625][T11563] ip6gretap1 (unregistering): left promiscuous mode [ 820.909054][ T9] m920x_read = error: -19 [ 820.913463][ T9] dvb-usb: error -19 while querying for an remote control event. [ 820.918986][ T5896] microsoft 0003:045E:07DA.004F: ignoring exceeding usage max [ 820.977056][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout [ 820.981077][ T5896] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.004F/input/input50 [ 821.004051][T11563] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 821.087142][ T5895] m920x_read = error: -19 [ 821.091647][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 821.099784][ T9] m920x_read = error: -19 [ 821.108060][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.162874][T15779] fuse: Bad value for 'fd' [ 821.249371][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 821.276719][ T9] m920x_read = error: -19 [ 821.296521][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.304675][ T5152] Bluetooth: hci1: command tx timeout [ 821.323598][ T5896] microsoft 0003:045E:07DA.004F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 821.324113][ T9] m920x_read = error: -19 [ 821.340301][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.478376][ T9] m920x_read = error: -19 [ 821.506784][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.514781][ T9] m920x_read = error: -19 [ 821.552319][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.595115][T11563] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 821.646053][T11563] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 821.677258][ T9] m920x_read = error: -19 [ 821.681711][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.737969][ T9] m920x_read = error: -19 [ 821.747728][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.866692][ T9] m920x_read = error: -19 [ 821.871275][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.907615][ T9] m920x_read = error: -19 [ 821.911999][ T9] dvb-usb: error -19 while querying for an remote control event. [ 822.043989][ T5895] m920x_read = error: -19 [ 822.051110][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.076851][ T5895] m920x_read = error: -19 [ 822.088459][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.126774][ T5896] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 822.224934][ T5895] m920x_read = error: -19 [ 822.229752][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.264081][ T5895] m920x_read = error: -19 [ 822.271186][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.342794][T11563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.360221][T11563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.382058][T11563] bond0 (unregistering): (slave team0): Releasing backup interface [ 822.394532][T11563] bond0 (unregistering): Released all slaves [ 822.406927][ T5895] m920x_read = error: -19 [ 822.411619][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.426859][T13763] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 822.435497][T11563] bond1 (unregistering): Released all slaves [ 822.443437][ T5895] m920x_read = error: -19 [ 822.449036][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.578923][ T5895] m920x_read = error: -19 [ 822.583435][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.630196][ T5895] m920x_read = error: -19 [ 822.634685][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 822.723449][T11563] bond2 (unregistering): Released all slaves [ 822.757466][ T9] m920x_read = error: -19 [ 822.776678][ T9] dvb-usb: error -19 while querying for an remote control event. [ 822.880317][T15787] input: syz0 as /devices/virtual/input/input51 [ 822.884392][ T9] m920x_read = error: -19 [ 822.891036][ T9] dvb-usb: error -19 while querying for an remote control event. [ 823.036933][ T9] m920x_read = error: -19 [ 823.041425][ T9] dvb-usb: error -19 while querying for an remote control event. [ 823.057113][ T5152] Bluetooth: hci5: command 0x0c1a tx timeout [ 823.067306][ T5895] m920x_read = error: -19 [ 823.071707][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.209712][T15796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2944'. [ 823.247676][ T5895] m920x_read = error: -19 [ 823.257017][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.266317][ T5895] m920x_read = error: -19 [ 823.296970][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.380285][T11563] bond3 (unregistering): Released all slaves [ 823.386635][ T5152] Bluetooth: hci1: command tx timeout [ 823.428073][ T5895] m920x_read = error: -19 [ 823.434187][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.468311][T13924] usb 3-1: USB disconnect, device number 29 [ 823.478941][ T5895] m920x_read = error: -19 [ 823.532743][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.642776][ T5895] m920x_read = error: -19 [ 823.655997][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 823.670660][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.707345][ T5895] m920x_read = error: -19 [ 823.722116][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.812358][T15808] xt_limit: Overflow, try lower: 9/0 [ 823.843500][ T5895] m920x_read = error: -19 [ 823.851116][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 823.906672][ T5895] m920x_read = error: -19 [ 823.915442][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 824.006993][ T5895] m920x_read = error: -19 [ 824.011594][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 824.127356][T11563] bond4 (unregistering): Released all slaves [ 824.153077][ T5894] m920x_read = error: -19 [ 824.157565][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 824.291690][T11563] bond5 (unregistering): Released all slaves [ 824.316723][ T5895] m920x_read = error: -19 [ 824.321234][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 824.330020][ T9] m920x_read = error: -19 [ 824.334411][ T9] dvb-usb: error -19 while querying for an remote control event. [ 824.375649][T11563] bond6 (unregistering): Released all slaves [ 824.634624][ T5894] m920x_read = error: -19 [ 824.666662][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 824.687989][ T5894] m920x_read = error: -19 [ 824.697042][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 824.866824][ T5894] m920x_read = error: -19 [ 824.871433][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 824.914269][T11563] bond7 (unregistering): Released all slaves [ 824.916704][ T5894] m920x_read = error: -19 [ 824.924822][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 825.008041][T15758] chnl_net:caif_netlink_parms(): no params data found [ 825.046801][T13756] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 825.060151][ T9] m920x_read = error: -19 [ 825.064546][ T9] dvb-usb: error -19 while querying for an remote control event. [ 825.117528][ T5894] m920x_read = error: -19 [ 825.121940][ T5894] dvb-usb: error -19 while querying for an remote control event. [ 825.123126][T11563] lave_0: left promiscuous mode [ 825.330079][ T5895] m920x_read = error: -19 [ 825.342363][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 825.379932][ T5898] m920x_read = error: -19 [ 825.400067][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 825.459088][ T5152] Bluetooth: hci1: command tx timeout [ 825.671934][T11563] tipc: Left network mode [ 825.678568][ T5833] m920x_read = error: -19 [ 825.682971][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 826.076807][ T9] m920x_read = error: -19 [ 826.095985][ T9] dvb-usb: error -19 while querying for an remote control event. [ 826.115319][ T5833] m920x_read = error: -19 [ 826.135072][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 826.318585][ T5833] m920x_read = error: -19 [ 826.323115][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 826.333667][T15758] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.365501][ T9] m920x_read = error: -19 [ 826.413247][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.416926][ T9] dvb-usb: error -19 while querying for an remote control event. [ 826.448434][T15758] bridge_slave_0: entered allmulticast mode [ 826.454158][ T1165] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 826.494231][T15758] bridge_slave_0: entered promiscuous mode [ 826.586936][ T9] m920x_read = error: -19 [ 826.593710][ T9] dvb-usb: error -19 while querying for an remote control event. [ 826.650696][ T5895] m920x_read = error: -19 [ 826.664077][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 826.729412][T15758] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.856741][ T5898] m920x_read = error: -19 [ 826.861148][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 826.869354][ T9] m920x_read = error: -19 [ 826.873692][ T9] dvb-usb: error -19 while querying for an remote control event. [ 826.902105][T15848] xt_TCPMSS: Only works on TCP SYN packets [ 826.956906][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.966233][T15758] bridge_slave_1: entered allmulticast mode [ 826.979097][T15758] bridge_slave_1: entered promiscuous mode [ 827.077231][ T9] m920x_read = error: -19 [ 827.081720][ T9] dvb-usb: error -19 while querying for an remote control event. [ 827.089838][ T5895] m920x_read = error: -19 [ 827.094250][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 827.268701][ T5895] m920x_read = error: -19 [ 827.273237][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 827.283459][ T9] m920x_read = error: -19 [ 827.309450][ T9] dvb-usb: error -19 while querying for an remote control event. [ 827.366753][T15758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.495835][ T9] m920x_read = error: -19 [ 827.501490][ T9] dvb-usb: error -19 while querying for an remote control event. [ 827.511713][ T5895] m920x_read = error: -19 [ 827.516061][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 827.545645][T15758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.556808][ T5152] Bluetooth: hci1: command tx timeout [ 827.707490][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 827.736778][ T5895] m920x_read = error: -19 [ 827.741177][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 827.749195][ T9] m920x_read = error: -19 [ 827.753681][ T9] dvb-usb: error -19 while querying for an remote control event. [ 827.924059][T15758] team0: Port device team_slave_0 added [ 827.937453][ T5895] m920x_read = error: -19 [ 827.941856][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 827.973979][ T9] m920x_read = error: -19 [ 827.999033][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.017822][T15758] team0: Port device team_slave_1 added [ 828.177533][ T9] m920x_read = error: -19 [ 828.181925][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.197197][ T5895] m920x_read = error: -19 [ 828.206664][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 828.416867][ T9] m920x_read = error: -19 [ 828.447382][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.485447][T15758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.494182][ T9] m920x_read = error: -19 [ 828.514394][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.536060][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.647612][ T9] m920x_read = error: -19 [ 828.656891][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.696792][ T9] m920x_read = error: -19 [ 828.696880][T15758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.705398][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.768706][T15758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.775688][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.882817][ T9] m920x_read = error: -19 [ 828.890158][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.909500][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 828.986787][ T5895] m920x_read = error: -19 [ 828.991199][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 828.994366][T15758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.056899][ T5895] m920x_read = error: -19 [ 829.073104][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 829.206707][ T9] m920x_read = error: -19 [ 829.265826][ T9] dvb-usb: error -19 while querying for an remote control event. [ 829.436712][ T9] m920x_read = error: -19 [ 829.441172][ T9] dvb-usb: error -19 while querying for an remote control event. [ 829.516950][ T5895] m920x_read = error: -19 [ 829.521476][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 829.551122][T15758] hsr_slave_0: entered promiscuous mode [ 829.601027][T15758] hsr_slave_1: entered promiscuous mode [ 829.839421][ T5895] m920x_read = error: -19 [ 829.847757][T15758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.854340][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 829.855343][T15758] Cannot create hsr debugfs directory [ 829.877046][ T9] m920x_read = error: -19 [ 829.881438][ T9] dvb-usb: error -19 while querying for an remote control event. [ 830.076923][ T9] m920x_read = error: -19 [ 830.081287][ T9] dvb-usb: error -19 while querying for an remote control event. [ 830.107078][ T5833] m920x_read = error: -19 [ 830.116040][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 830.199874][ T5897] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 830.288378][ T1096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 830.331014][ T5833] m920x_read = error: -19 [ 830.338363][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 830.367488][T15880] xt_limit: Overflow, try lower: 9/0 [ 830.387273][ T5833] m920x_read = error: -19 [ 830.401311][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 830.546914][ T5833] m920x_read = error: -19 [ 830.551288][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 830.576873][ T5895] m920x_read = error: -19 [ 830.582513][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 830.646792][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 830.678370][ T5897] usb 6-1: config 0 has no interfaces? [ 830.732116][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 830.776774][ T5895] m920x_read = error: -19 [ 830.782168][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.807622][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 830.845979][ T5895] m920x_read = error: -19 [ 831.049027][ T5897] usb 6-1: Product: syz [ 831.051720][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 831.055155][ T5897] usb 6-1: Manufacturer: syz [ 831.072797][ T5897] usb 6-1: SerialNumber: syz [ 831.083009][ T5833] m920x_read = error: -19 [ 831.093200][ T5897] usb 6-1: config 0 descriptor?? [ 831.145519][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 831.242206][T11563] ------------[ cut here ]------------ [ 831.248126][T11563] Have pending ack frames! [ 831.296878][ T5833] m920x_read = error: -19 [ 831.299939][T11563] WARNING: CPU: 1 PID: 11563 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x4c/0x60 [ 831.301259][ T5833] dvb-usb: error -19 while querying for an remote control event. [ 831.311413][T11563] Modules linked in: [ 831.324090][T11563] CPU: 1 UID: 0 PID: 11563 Comm: kworker/u8:7 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 831.336452][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 831.346634][T11563] Workqueue: netns cleanup_net [ 831.351576][T11563] RIP: 0010:ieee80211_free_ack_frame+0x4c/0x60 [ 831.356814][ T5895] m920x_read = error: -19 [ 831.357891][T11563] Code: 00 00 00 e8 46 d0 4f fe 31 c0 5b c3 cc cc cc cc e8 19 ba 2f f6 c6 05 2d e1 b6 04 01 90 48 c7 c7 60 63 6c 8d e8 35 14 ef f5 90 <0f> 0b 90 90 eb c9 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 [ 831.362181][ T5895] dvb-usb: error -19 while querying for an remote control event. [ 831.381738][T11563] RSP: 0018:ffffc9000b6ff730 EFLAGS: 00010246 [ 831.381765][T11563] RAX: 0725e7c6ca4fc300 RBX: ffff88802837f500 RCX: ffff88802fd35a00 [ 831.381783][T11563] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 831.381797][T11563] RBP: ffffc9000b6ff838 R08: ffffffff818218d2 R09: 1ffff110170e47d2 [ 831.381815][T11563] R10: dffffc0000000000 R11: ffffed10170e47d3 R12: ffffc9000b6ff7a0 [ 831.381832][T11563] R13: dffffc0000000000 R14: ffff888011c49530 R15: ffff888025e4ac30 [ 831.381849][T11563] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 831.381867][T11563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.381884][T11563] CR2: 00000000f73d7b34 CR3: 0000000046c9c000 CR4: 00000000003526f0 [ 831.381903][T11563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.381918][T11563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.381932][T11563] Call Trace: [ 831.381941][T11563] [ 831.381952][T11563] idr_for_each+0x1e4/0x2d0 [ 831.381979][T11563] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 831.382015][T11563] ? __pfx_idr_for_each+0x10/0x10 [ 831.382046][T11563] ? kfree+0x198/0x430 [ 831.503070][T11563] ? kobject_put+0x272/0x480 [ 831.507871][T11563] ieee80211_free_hw+0xd0/0x480 [ 831.513397][T11563] mac80211_hwsim_del_radio+0x32d/0x4c0 [ 831.519084][T11563] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 831.526013][T11563] hwsim_exit_net+0x5c3/0x670 [ 831.530838][T11563] ? __pfx_hwsim_exit_net+0x10/0x10 [ 831.536081][T11563] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 831.542142][T11563] cleanup_net+0x814/0xd60 [ 831.546645][T11563] ? __pfx_cleanup_net+0x10/0x10 [ 831.551642][T11563] ? process_scheduled_works+0x9cb/0x18e0 [ 831.557451][T11563] process_scheduled_works+0xac3/0x18e0 [ 831.563070][T11563] ? __pfx_process_scheduled_works+0x10/0x10 [ 831.569445][T11563] ? assign_work+0x367/0x3d0 [ 831.574089][T11563] worker_thread+0x870/0xd50 [ 831.578814][T11563] ? __kthread_parkme+0x1a8/0x200 [ 831.583888][T11563] ? __pfx_worker_thread+0x10/0x10 [ 831.589106][T11563] kthread+0x7b7/0x940 [ 831.593225][T11563] ? __pfx_worker_thread+0x10/0x10 [ 831.598537][T11563] ? __pfx_kthread+0x10/0x10 [ 831.603163][T11563] ? __pfx_kthread+0x10/0x10 [ 831.607865][T11563] ? __pfx_kthread+0x10/0x10 [ 831.612497][T11563] ? __pfx_kthread+0x10/0x10 [ 831.617179][T11563] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.622590][T11563] ? lockdep_hardirqs_on+0x9d/0x150 [ 831.627896][T11563] ? __pfx_kthread+0x10/0x10 [ 831.632535][T11563] ret_from_fork+0x4b/0x80 [ 831.637045][T11563] ? __pfx_kthread+0x10/0x10 [ 831.641659][T11563] ret_from_fork_asm+0x1a/0x30 [ 831.646452][T11563] [ 831.649641][T11563] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 831.656950][T11563] CPU: 1 UID: 0 PID: 11563 Comm: kworker/u8:7 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 831.669223][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 831.679316][T11563] Workqueue: netns cleanup_net [ 831.684132][T11563] Call Trace: [ 831.687433][T11563] [ 831.690372][T11563] dump_stack_lvl+0x241/0x360 [ 831.695062][T11563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.700271][T11563] ? __pfx__printk+0x10/0x10 [ 831.704879][T11563] ? vscnprintf+0x5d/0x90 [ 831.709225][T11563] panic+0x349/0x880 [ 831.713136][T11563] ? __warn+0x174/0x4d0 [ 831.717304][T11563] ? __pfx_panic+0x10/0x10 [ 831.721734][T11563] ? ret_from_fork_asm+0x1a/0x30 [ 831.726678][T11563] __warn+0x344/0x4d0 [ 831.730694][T11563] ? ieee80211_free_ack_frame+0x4c/0x60 [ 831.736362][T11563] report_bug+0x2b3/0x500 [ 831.740693][T11563] ? ieee80211_free_ack_frame+0x4c/0x60 [ 831.746279][T11563] ? ieee80211_free_ack_frame+0x4c/0x60 [ 831.751832][T11563] ? ieee80211_free_ack_frame+0x4e/0x60 [ 831.757386][T11563] handle_bug+0x89/0x170 [ 831.761635][T11563] exc_invalid_op+0x1a/0x50 [ 831.766142][T11563] asm_exc_invalid_op+0x1a/0x20 [ 831.770989][T11563] RIP: 0010:ieee80211_free_ack_frame+0x4c/0x60 [ 831.777166][T11563] Code: 00 00 00 e8 46 d0 4f fe 31 c0 5b c3 cc cc cc cc e8 19 ba 2f f6 c6 05 2d e1 b6 04 01 90 48 c7 c7 60 63 6c 8d e8 35 14 ef f5 90 <0f> 0b 90 90 eb c9 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 [ 831.796771][T11563] RSP: 0018:ffffc9000b6ff730 EFLAGS: 00010246 [ 831.802847][T11563] RAX: 0725e7c6ca4fc300 RBX: ffff88802837f500 RCX: ffff88802fd35a00 [ 831.810835][T11563] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 831.818806][T11563] RBP: ffffc9000b6ff838 R08: ffffffff818218d2 R09: 1ffff110170e47d2 [ 831.826782][T11563] R10: dffffc0000000000 R11: ffffed10170e47d3 R12: ffffc9000b6ff7a0 [ 831.834759][T11563] R13: dffffc0000000000 R14: ffff888011c49530 R15: ffff888025e4ac30 [ 831.842826][T11563] ? __warn_printk+0x2a2/0x360 [ 831.847610][T11563] idr_for_each+0x1e4/0x2d0 [ 831.852131][T11563] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 831.858227][T11563] ? __pfx_idr_for_each+0x10/0x10 [ 831.863256][T11563] ? kfree+0x198/0x430 [ 831.867331][T11563] ? kobject_put+0x272/0x480 [ 831.871946][T11563] ieee80211_free_hw+0xd0/0x480 [ 831.876828][T11563] mac80211_hwsim_del_radio+0x32d/0x4c0 [ 831.882408][T11563] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 831.889285][T11563] hwsim_exit_net+0x5c3/0x670 [ 831.893987][T11563] ? __pfx_hwsim_exit_net+0x10/0x10 [ 831.899208][T11563] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 831.905035][T11563] cleanup_net+0x814/0xd60 [ 831.909491][T11563] ? __pfx_cleanup_net+0x10/0x10 [ 831.914462][T11563] ? process_scheduled_works+0x9cb/0x18e0 [ 831.920304][T11563] process_scheduled_works+0xac3/0x18e0 [ 831.925887][T11563] ? __pfx_process_scheduled_works+0x10/0x10 [ 831.931885][T11563] ? assign_work+0x367/0x3d0 [ 831.936494][T11563] worker_thread+0x870/0xd50 [ 831.941125][T11563] ? __kthread_parkme+0x1a8/0x200 [ 831.946153][T11563] ? __pfx_worker_thread+0x10/0x10 [ 831.951267][T11563] kthread+0x7b7/0x940 [ 831.955350][T11563] ? __pfx_worker_thread+0x10/0x10 [ 831.960463][T11563] ? __pfx_kthread+0x10/0x10 [ 831.965057][T11563] ? __pfx_kthread+0x10/0x10 [ 831.969654][T11563] ? __pfx_kthread+0x10/0x10 [ 831.974251][T11563] ? __pfx_kthread+0x10/0x10 [ 831.978849][T11563] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.984059][T11563] ? lockdep_hardirqs_on+0x9d/0x150 [ 831.989260][T11563] ? __pfx_kthread+0x10/0x10 [ 831.993853][T11563] ret_from_fork+0x4b/0x80 [ 831.998272][T11563] ? __pfx_kthread+0x10/0x10 [ 832.002861][T11563] ret_from_fork_asm+0x1a/0x30 [ 832.007639][T11563] [ 832.011006][T11563] Kernel Offset: disabled [ 832.015336][T11563] Rebooting in 86400 seconds..