last executing test programs: 28m52.327683831s ago: executing program 1 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x1ff}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001540)=""/158, 0x9e}, {&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/122, 0x7a}, {&(0x7f0000002940)=""/131, 0x83}, {&(0x7f0000002a00)=""/31, 0x1f}, {&(0x7f0000002a40)=""/31, 0x1f}, {&(0x7f0000002a80)=""/41, 0x29}], 0x8, 0x0, 0x0, 0x700}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x400}], 0x4, 0x20, 0x0) 28m52.20903483s ago: executing program 1 (id=79): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d090000000000000000070ffe00", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28m52.130884871s ago: executing program 1 (id=80): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 28m51.946714596s ago: executing program 1 (id=82): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0xf7, @mcast2, 0x3}]}, &(0x7f0000000180)=0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 28m51.095113985s ago: executing program 1 (id=84): r0 = socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) 28m50.825934786s ago: executing program 1 (id=88): clock_adjtime(0x17, &(0x7f0000000000)={0x80ea34, 0x5, 0x379ee6, 0x10000, 0x9, 0x9, 0x2, 0x3, 0x8, 0x5, 0xc, 0x8, 0xb, 0x7ffffffffffffe, 0xfff, 0x3, 0x80, 0x2, 0x19, 0x2000005, 0x200, 0x3, 0x11cb, 0x101, 0x8, 0x3ffe}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)='\'0', 0x2}], 0x1) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000500)=[{r2, 0x2404}, {r3, 0x300}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r5, &(0x7f00000024c0)=[{{&(0x7f0000000280)=@pppol2tp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000540)=""/70, 0x46}], 0x4, &(0x7f00000014c0)=""/4096, 0x1000}, 0x65}], 0x1, 0x40000140, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) tgkill(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000fe000000400000de15beae89a6b551ff8356853b96d09f6c4638bcb59527217ca8c17899471957694d84b0c27610fc021acdd11aa73c742d5a1f8b"], 0x755c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 28m50.162830038s ago: executing program 32 (id=88): clock_adjtime(0x17, &(0x7f0000000000)={0x80ea34, 0x5, 0x379ee6, 0x10000, 0x9, 0x9, 0x2, 0x3, 0x8, 0x5, 0xc, 0x8, 0xb, 0x7ffffffffffffe, 0xfff, 0x3, 0x80, 0x2, 0x19, 0x2000005, 0x200, 0x3, 0x11cb, 0x101, 0x8, 0x3ffe}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)='\'0', 0x2}], 0x1) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000500)=[{r2, 0x2404}, {r3, 0x300}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r5, &(0x7f00000024c0)=[{{&(0x7f0000000280)=@pppol2tp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000540)=""/70, 0x46}], 0x4, &(0x7f00000014c0)=""/4096, 0x1000}, 0x65}], 0x1, 0x40000140, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) tgkill(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000fe000000400000de15beae89a6b551ff8356853b96d09f6c4638bcb59527217ca8c17899471957694d84b0c27610fc021acdd11aa73c742d5a1f8b"], 0x755c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 9m17.833969722s ago: executing program 2 (id=6565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="900000000102010400000000000000000a000007040001803c0003800c00188005000100110000002c00018014000300fe800000000000000000000000000029140004000000000000040000000000000000fa003c0002802c00018014000300fe80000000000000000000000000003b1400040000000000000000000000ffffe00000020c0002"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 9m17.743113989s ago: executing program 2 (id=6566): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000d80)) eventfd2(0x83, 0x80001) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) 9m16.751186343s ago: executing program 2 (id=6572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020948020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060920020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m16.551452384s ago: executing program 2 (id=6575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x64}}, 0x10000) r1 = socket$inet6(0xa, 0x800, 0x7) r2 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000021c0)='./file0\x00', 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r7, 0x0, 0xa, 0x0) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)) 9m16.222775139s ago: executing program 2 (id=6578): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x8}, 0x8) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c01000013000100"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) 9m15.943030202s ago: executing program 2 (id=6580): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m15.538432494s ago: executing program 33 (id=6580): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m26.987619338s ago: executing program 6 (id=8641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe8000000000000000000001a800001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m26.897834408s ago: executing program 6 (id=8642): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x97}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000000400000002000000000000001800000000000000290000003700000064000000000000005000000000000000290000000500000000020201"], 0x80}, 0x0) 3m26.734689454s ago: executing program 6 (id=8644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x1, 0x7, 0x7, 0x98, 0xf8, 0x4, 0xff, 0x9, 0x4, 0x4, 0x5, 0x9}, {0x10, 0xc, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x2664}, {0x80, 0x4c3e, 0x5, 0xc, 0x4, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000480)={0x6, 0x0, [{0x1, 0x5, 0x0, 0x0, @adapter={0xf, 0x6, 0x8000, 0x8, 0x351}}, {0x6, 0x5, 0x0, 0x0, @adapter={0x4, 0xf00, 0x6, 0x1, 0x2}}, {0x200, 0x3, 0x0, 0x0, @adapter={0x5, 0x8001, 0x0, 0x0, 0x8}}, {0xffff8001, 0x1, 0x1, 0x0, @irqchip={0x81, 0x7}}, {0x60000, 0x3, 0x0, 0x0, @sint={0x5, 0x7}}, {0x3, 0x2, 0x1, 0x0, @adapter={0x3, 0x1, 0xb, 0x1000, 0x6}}]}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0x81, @vifc_lcl_addr=@local, @multicast2}, 0x10) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r4, &(0x7f0000002f40)=""/4097, 0x1001) (async, rerun: 64) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x9, 0x0, r0}) (rerun: 64) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x2, 0x2, r5}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 3m26.235242713s ago: executing program 6 (id=8647): r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1e00}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x183a0000}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8880) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x190, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5f66}, {0x6, 0x11, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xe12d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0xb64}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x95}, {0x6, 0x11, 0x9}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000005}, 0x24048841) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xa}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x24008814) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000006c0)={0x0, @hci={0x1f, 0x2, 0x4}, @hci={0x1f, 0x4, 0x1}, @can, 0x6, 0x0, 0x0, 0x0, 0x1b2e, 0x0, 0xfe78, 0x8, 0x8}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000740)={0x0, 0x5}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0xd3d, 0x3, 0x1, 0x1b1}]}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa0, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe5}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x19}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_COMMENT={0xd, 0x1a, 'netdevsim'}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg0\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x4811) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r4, 0x61a29000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000a40)=0x0) sendmsg$AUDIT_SET(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x3e9, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1, 0x2, r6, 0xfffffbf1, 0x72d3, 0x7, 0x9, 0x0, 0xdb, 0x8}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) write$P9_RREAD(r5, &(0x7f0000000b40)={0x91, 0x75, 0x1, {0x86, "f2c469aab77bca6767295994850f550d623d82d025c68e764e754dea74c24c2d97a56b375d244076fad1daa4ce52b4eb5c3bd2f3a834cbc4b4979dc1055b1e55ebdddfa5cf684406fe29cddfd87eb5eef44603611a9104577a4b400d64a6a4a550ffaf0f5edef5c1209fca53d01d49c150a649a8ed6f263b53a4f7912dfe147581f655a4ec83"}}, 0x91) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x3) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000c00)=0x76a, 0x4) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000c40)={0x6b, [0x3, 0x7, 0x40, 0x2, 0x7, 0x9, 0x200, 0x38, 0x7e1, 0x8, 0x0, 0x4, 0x200, 0x101, 0x8, 0x871, 0x2, 0x1, 0xe, 0x1, 0x2, 0x8, 0x7, 0x1, 0x100, 0x5, 0x200, 0x6, 0x5, 0xfe01, 0xe, 0x7, 0x5, 0x9, 0x10, 0x1ff, 0x4, 0x1000, 0x6, 0xf, 0x81, 0x0, 0x9, 0x0, 0xc, 0x8001, 0x6, 0x101], 0xb}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000cc0), 0x440040, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001200)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000dc0)={0x3e0, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_SCAN_SUPP_RATES={0x270, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x46, 0x2, "d7a8c9c865961a5f5eebcd007484ba59176122ed36ee6cbdfbe72e81a0e6f3d76a791878040cda36ad8e5ed4e5ae2cf085455c1ab2b90fbedff7dc926d546540261d"}, @NL80211_BAND_6GHZ={0xb5, 0x3, "0e3dfb95363e56ebbb2668716d518708d7a8738c1134b3a7a642ac1da4981f6ee119f13b727e2a84803611617e44e873a23841c3b7049486f6cf21099e231271c84b41014d7d19a7735968e83a597412d39d79687605b9fcc192b8cfca880357a439e924191724e541997182f5832331135ba06834fdfa83ce024089463828c4f8440489990a814cde5f24257841018748c919a4b0e52b5f09be0c78bdf6f3e7eb6d1578572f7d862b67a0aba86ff58f77"}, @NL80211_BAND_2GHZ={0x73, 0x0, "e60b2d3742b1c870dcfdb21be761af2f32bd57b4bcb9bc5365468ad75337001748b9641cd61b276c245a0e2ccbd50cb82c9f11bf6b1a97dacf58df025fa334701b50004cede6158199de9a050e6084e9ada1fb73f889dbc14ef1cf2a52e154accfdc96c17ad34aa19dfddc7128d527"}, @NL80211_BAND_2GHZ={0xf7, 0x0, "8e308e32014e96770ece7f608b8d868dee6cfd1ac1be5720db0db5ef58cf0db44a18d42b2be787ae7d9469ec5bf96a7d9d4f88e8b99bfa177f5ba6a089894b730f939bb405daad3e81bebfdd41b4236f67080bca6f7f9958bcad8f2201325064eca8a296113771e1d8edaebd6b0549d851e2282fda75ec7a671b79be0463069e2671aea9d4a7c082ed033f4e0bf35453b10804f3a6f651e56e38207d594a8d38b4e2485aa58c45f6fb4280da5ed72746401c673248f4483f506550967cd0b0e3dfeebd5e04a5fa3fff1d1209ecc472cd8ce4acf04e9eea92bf1ae50bf3ba1413125a63193e0be5ab18f9c6c0556bc3d88ea43b"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x130, 0x84, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0d75d6e3ecf6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9b}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xf4bf}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="de627f21173b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="d7d53a174f465f85e368bcee"}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="fb6198f8257bc4595488486ed9d3d6a9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="732304da917a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="db833661cc5a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9feee467294d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f0da38bf1cc3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4}}]}, 0x3e0}}, 0x805) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb0, 0x35}}}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xdc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x41) 3m26.151821747s ago: executing program 6 (id=8648): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x75100f4f, 0xd, 0xe000, 0x10, 0x5, 0x0, 0x0, 0x80, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x75}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000001840)=""/4120, 0x1018}, {&(0x7f0000000240)=""/62, 0x3e}], 0x4}, 0x70001}], 0x4, 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)="11", 0x1}], 0x1, 0x4, 0x1000a) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80) write$binfmt_format(r6, &(0x7f00000079c0)='-1\x00', 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000001}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m24.911605166s ago: executing program 6 (id=8653): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990041000000600000000800a0d012d3f200080026009a03000008009f000a"], 0x40}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x5) landlock_restrict_self(r4, 0x7) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f0000000000)={0x81, 0x6}) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000000240)=ANY=[@ANYBLOB="63990003000000203512108240000102030109027900030104007f080b0101010a20020904000000010120000924010700060900b20921010000010220000904010101010220001024010505000400000005050000e60fddfd7db017bd9ee256004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e0452082501ffff20ce03"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 3m9.737115706s ago: executing program 34 (id=8653): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990041000000600000000800a0d012d3f200080026009a03000008009f000a"], 0x40}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x5) landlock_restrict_self(r4, 0x7) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f0000000000)={0x81, 0x6}) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000000240)=ANY=[@ANYBLOB="63990003000000203512108240000102030109027900030104007f080b0101010a20020904000000010120000924010700060900b20921010000010220000904010101010220001024010505000400000005050000e60fddfd7db017bd9ee256004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e0452082501ffff20ce03"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 9.029835222s ago: executing program 4 (id=9639): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x100000000000, 0x2004d808}, 0x0) 8.910372187s ago: executing program 4 (id=9641): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) unshare(0x6e000000) r0 = socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) inotify_init1(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000000014000000000000", @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 8.374545652s ago: executing program 7 (id=9642): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x8) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffe, 0x8800) r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb}, [{0x2, 0x8, 0x101, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x101, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0xff, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x6, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x7, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x103, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0x1}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0x9, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0xa, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x2, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 5.816271335s ago: executing program 4 (id=9659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x100}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x1800, 0x0, 0x4000}, 0x4) 5.631065353s ago: executing program 4 (id=9660): setitimer(0x1, &(0x7f0000000140)={{}, {0x0, 0xea60}}, &(0x7f00000001c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.630467776s ago: executing program 7 (id=9661): socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4c803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000ffff0000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 5.584079003s ago: executing program 4 (id=9662): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) time(&(0x7f0000000040)) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206014b9800000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r6, 0x4d) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x80004}, 0x1c) listen(r7, 0x4c) socket$kcm(0x29, 0x5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000280), 0x8) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000019140)=ANY=[@ANYRES32=r9], 0x0) 5.242947727s ago: executing program 7 (id=9666): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x81, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0xee, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "592cff22b2"}, {0x5, 0x24, 0x0, 0xee}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x7, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x10}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x29}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x7, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4f, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x2, 0x7f}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x3, 0xf7, 0x10, 0x40, 0x9}, 0x52, &(0x7f0000000240)={0x5, 0xf, 0x52, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x200, 0xf0f, 0x83f, [0xff00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x79, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "51c4424342025629563c3f5f49f8b065"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x6, 0xf000, 0x7ff, [0xff30, 0xff30, 0xc0, 0x3fcf]}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}, {0xb2, &(0x7f0000000300)=@string={0xb2, 0x3, "4dc1484235fad92278472edf512dc42f49d0302e7b48430f5880ac11bfbc7e6d7dc3c78407d438595e0bb96b4c8276d11a0275efc4d04bda883fd365e80f3dad644a7247d665221e0eefe8e194206b2ea1ba6eb44f42f32df5f970707ed4b0ed12fd0c511401f2d53a35e01527ca40fb8f8135005e5461eadd1f90bf01b9bef9ebc9e02f531fe0a89c92eea3fbfc8a6e43f6c690da4f79f738d16a913695df3b97703b2e18fd5e8b01911685e3c625a9"}}]}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, 0x0) 3.60263921s ago: executing program 0 (id=9673): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x11000000) 3.43510694s ago: executing program 0 (id=9674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000c000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000deffffb60200001400000052d87edcd2c8e450cff020b1b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001"], 0x0, 0x8, 0x1005, &(0x7f0000002840)=""/4101, 0x40f00}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f00000002c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0xd8, 0xfff4}, @generic={0x6c, 0x10, 0x3, "288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001200050000000000fedbdf250700000a08e8"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r5, 0x7fff, 0x5, 0xf) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f0000000440)="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", 0xfc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) 3.15291293s ago: executing program 5 (id=9675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf25000000ff", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.129869464s ago: executing program 5 (id=9676): r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7ffffffe, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r1], 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800001e, r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) 2.336039622s ago: executing program 4 (id=9677): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) unshare(0x6e000000) r0 = socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) inotify_init1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000007fffffff00000000", @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 2.050888912s ago: executing program 7 (id=9678): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000680)=""/15, 0x45}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.675120499s ago: executing program 3 (id=9679): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000f500000000290000000400000002000000000000001800000000000000290000003700000064000000000000005000000000000000290000000500000000020201"], 0x80}, 0x0) 1.664292674s ago: executing program 3 (id=9680): r0 = socket(0x2b, 0x6, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r2, 0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 1.60856126s ago: executing program 3 (id=9681): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0xb6f1, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x5, 0x85, 0x2}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0x9a0000, 0x0, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x9a091e, 0x4e, '\x00', @value=0x4}}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000240)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000200)=0x80}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.400029783s ago: executing program 3 (id=9682): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040048}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x2, 0x2, 0x8, @mcast1, @empty, 0x700, 0x7808, 0xfffffffe, 0xfffffffe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1.179383597s ago: executing program 3 (id=9683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000180000000000000229000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb24"], 0x80}, 0x0) 1.174807811s ago: executing program 3 (id=9684): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e23, 0x0, @empty}, 0x6) syz_emit_ethernet(0x47, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x11, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "0000980018"}}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x160, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf7, 0x6, "e9df722e7f310cff640377730a3ff41d4a148988e66957d346ea31f37cb7923a9d028b618b73b1f8cfc2c13cba4001b7b7ae298a281fc8625ec3234d0b972f582910e02f871bc6d23cb71b570c57223132a713ce743707fc018257a720de3d513179d0f5c19848156bbd3ad00e822e56526fadc32dda0f842c7c5d1966af1d378aa4f86a821feaf928571b00df83028eab89d09b191e38f589d62a614ae9ea248f852acfa805824ad7be10f11dc397bff5a339ac0e337d50fae8fd2da45abf4466c0ee463751cbe434807a8d8961cd6a44ac6777e3c5297814e9e0da0efdbe883d6434d6b940c39e4decb14bb9f6a2f5a838cc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x7, 0x6, "90bb64"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x200080a4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r6, 0x8001}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x8) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x18001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x112000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000800)) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x80, {0xc, 0x2003, 0x0, {0xfffffffffffffffd, 0xfffffffffffffffd, 0x10000080000001, 0x4, 0x5, 0xffffffff, 0x1, 0x0, 0x80000, 0x9000, 0xb, 0x0, r8, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x21501, 0x0) writev(r10, &(0x7f0000000340)=[{&(0x7f00000003c0)='n', 0x1}, {&(0x7f00000002c0)="00e920dd105770d5c048a3c7630b9614441316f476daf00d4ffac38cf39f96eb7d1a640f68f34a55751870f98c15fae234f361101289471659f77d0edbe8a9283be8b87c08a068f04632b51162f2c4da696d51776473be6262", 0x59}], 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200f0c000000bbe345ff3b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 994.842238ms ago: executing program 5 (id=9685): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000011240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380"], 0x1f0}}, 0x0) 858.670626ms ago: executing program 5 (id=9686): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000030000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 815.650146ms ago: executing program 5 (id=9687): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2841c1, 0x101) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = creat(&(0x7f0000000540)='./file0\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000500)={0x28, 0x4, 0x0, r8, 0x2, 0x1, 0x8}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r7, 0x6dd}}, 0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) flock(r2, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000402400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES8=r9], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) dup2(r2, r0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0004}]}) close_range(r10, 0xffffffffffffffff, 0x0) 362.829197ms ago: executing program 0 (id=9688): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x200, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200060008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 231.374038ms ago: executing program 5 (id=9689): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) unshare(0x6e000000) r0 = socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) inotify_init1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000000014000000000000", @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 231.192181ms ago: executing program 0 (id=9690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) r1 = accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x101}}}}}}, 0x0) 185.734055ms ago: executing program 0 (id=9691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000008400000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) 0s ago: executing program 0 (id=9692): socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x2, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000fff500000700000008000a40000000"], 0xf4}}, 0x0) kernel console output (not intermixed with test programs): or while querying for an remote control event. [ 1786.720644][ T5747] m920x_read = error: -19 [ 1786.727093][ T5747] dvb-usb: error while querying for an remote control event. [ 1786.749138][T16720] usb 1-1: device descriptor read/64, error -71 [ 1786.871258][T16720] usb usb1-port1: attempt power cycle [ 1786.871330][ T5747] m920x_read = error: -19 [ 1786.905762][ T5747] dvb-usb: error while querying for an remote control event. [ 1786.977585][ T5747] usb 4-1: USB disconnect, device number 55 [ 1787.051399][ T46] m920x_read = error: -19 [ 1787.062502][ T46] dvb-usb: error while querying for an remote control event. [ 1787.138351][T30668] netlink: 5908 bytes leftover after parsing attributes in process `syz.7.9374'. [ 1787.167668][T30668] openvswitch: netlink: Flow key attr not present in new flow. [ 1787.209295][ T46] m920x_read = error: -19 [ 1787.224774][ T46] dvb-usb: error while querying for an remote control event. [ 1787.241165][T16720] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1787.274669][T16720] usb 1-1: device descriptor read/8, error -71 [ 1787.380600][ T46] m920x_read = error: -19 [ 1787.398829][ T46] dvb-usb: error while querying for an remote control event. [ 1787.414388][T30676] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9375'. [ 1787.531263][ T46] m920x_read = error: -19 [ 1787.541980][T16720] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1787.549156][ T46] dvb-usb: error while querying for an remote control event. [ 1787.572984][T16720] usb 1-1: device descriptor read/8, error -71 [ 1787.660557][ T9216] m920x_read = error: -19 [ 1787.675992][ T9216] dvb-usb: error while querying for an remote control event. [ 1787.691500][T16720] usb usb1-port1: unable to enumerate USB device [ 1787.851210][ T9216] m920x_read = error: -19 [ 1787.855656][ T9216] dvb-usb: error while querying for an remote control event. [ 1787.970613][ T9216] m920x_read = error: -19 [ 1787.978448][ T9216] dvb-usb: error while querying for an remote control event. [ 1788.030523][T30708] GUP no longer grows the stack in syz.4.9385 (30708): 200000004000-200000005000 (200000001000) [ 1788.046814][T30708] CPU: 0 UID: 0 PID: 30708 Comm: syz.4.9385 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.046848][T30708] Tainted: [L]=SOFTLOCKUP [ 1788.046856][T30708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1788.046869][T30708] Call Trace: [ 1788.046878][T30708] [ 1788.046888][T30708] dump_stack_lvl+0xe8/0x150 [ 1788.046920][T30708] __get_user_pages+0x2378/0x2720 [ 1788.046951][T30708] ? __gup_longterm_locked+0xc4e/0x1630 [ 1788.046995][T30708] ? __gup_longterm_locked+0xc4e/0x1630 [ 1788.047020][T30708] ? down_read_killable+0x1bb/0x340 [ 1788.047051][T30708] __gup_longterm_locked+0xdcf/0x1630 [ 1788.047083][T30708] ? lock_acquire+0x106/0x350 [ 1788.047127][T30708] gup_fast_fallback+0x1d84/0x20d0 [ 1788.047188][T30708] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1788.047216][T30708] ? is_valid_gup_args+0x11f/0x200 [ 1788.047245][T30708] ? get_user_pages_fast+0x4d/0xb0 [ 1788.047283][T30708] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1788.047325][T30708] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1788.047350][T30708] iov_iter_get_pages2+0x5e/0xa0 [ 1788.047371][T30708] __se_sys_vmsplice+0x7c7/0x1620 [ 1788.047400][T30708] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1788.047418][T30708] ? __pfx_futex_wake+0x10/0x10 [ 1788.047474][T30708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.047488][T30708] do_syscall_64+0x15f/0x560 [ 1788.047500][T30708] ? trace_irq_disable+0x3b/0x140 [ 1788.047519][T30708] ? clear_bhb_loop+0x40/0x90 [ 1788.047538][T30708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.047550][T30708] RIP: 0033:0x7fbfed99ce59 [ 1788.047564][T30708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.047575][T30708] RSP: 002b:00007fbfee7fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1788.047590][T30708] RAX: ffffffffffffffda RBX: 00007fbfedc15fa0 RCX: 00007fbfed99ce59 [ 1788.047600][T30708] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 1788.047608][T30708] RBP: 00007fbfeda32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1788.047616][T30708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1788.047624][T30708] R13: 00007fbfedc16038 R14: 00007fbfedc15fa0 R15: 00007fbfedd3fa48 [ 1788.047647][T30708] [ 1788.279865][ T9216] m920x_read = error: -19 [ 1788.284823][ T9216] dvb-usb: error while querying for an remote control event. [ 1788.400628][ T46] m920x_read = error: -19 [ 1788.405066][ T46] dvb-usb: error while querying for an remote control event. [ 1788.531513][ T46] m920x_read = error: -19 [ 1788.545622][ T46] dvb-usb: error while querying for an remote control event. [ 1788.580508][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1788.658093][T30727] tipc: Started in network mode [ 1788.665541][T30727] tipc: Node identity @, cluster identity 4711 [ 1788.673257][T30727] tipc: Enabling of bearer rejected, failed to enable media [ 1788.682545][ T46] m920x_read = error: -19 [ 1788.688211][ T46] dvb-usb: error while querying for an remote control event. [ 1788.709547][T30726] geneve3: entered promiscuous mode [ 1788.715411][T30726] geneve3: entered allmulticast mode [ 1788.741696][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1788.754776][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.779161][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1788.792588][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1788.802729][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1788.814803][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1788.820773][ T9216] m920x_read = error: -19 [ 1788.833426][ T9216] dvb-usb: error while querying for an remote control event. [ 1788.834595][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1788.866947][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1788.875492][ T9] usb 4-1: Manufacturer: syz [ 1788.890154][ T9] usb 4-1: config 0 descriptor?? [ 1788.960671][ T5747] m920x_read = error: -19 [ 1788.965339][ T5747] dvb-usb: error while querying for an remote control event. [ 1789.036571][T30742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.067602][T30742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.082238][ T5747] m920x_read = error: -19 [ 1789.086897][ T5747] dvb-usb: error while querying for an remote control event. [ 1789.222081][ T9] rc_core: IR keymap rc-hauppauge not found [ 1789.233409][ T808] m920x_read = error: -19 [ 1789.245390][ T9] Registered IR keymap rc-empty [ 1789.257902][ T808] dvb-usb: error while querying for an remote control event. [ 1789.279606][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.323576][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.350638][ T9216] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1789.368664][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1789.411882][ T808] m920x_read = error: -19 [ 1789.427482][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input194 [ 1789.429672][ T808] dvb-usb: error while querying for an remote control event. [ 1789.517184][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.536621][ T9216] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1789.541022][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.571970][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.578769][ T9216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.587777][ T808] m920x_read = error: -19 [ 1789.601218][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.602629][ T808] dvb-usb: error while querying for an remote control event. [ 1789.622082][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.635140][ T9216] usb 1-1: Product: syz [ 1789.653001][ T9216] usb 1-1: Manufacturer: syz [ 1789.667433][ T9216] usb 1-1: SerialNumber: syz [ 1789.684736][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.723609][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.746097][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9384'. [ 1789.780777][ T808] m920x_read = error: -19 [ 1789.782514][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.809164][ T808] dvb-usb: error while querying for an remote control event. [ 1789.833956][T30713] netlink: 'syz.3.9384': attribute type 12 has an invalid length. [ 1789.849939][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1789.901216][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1790.000699][ T808] m920x_read = error: -19 [ 1790.005325][ T808] dvb-usb: error while querying for an remote control event. [ 1790.033810][ T9] mceusb 4-1:0.0: Registered r with mce emulator interface version 1 [ 1790.070521][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1790.134969][ T9216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1790.194101][ T9216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1790.210559][ T808] m920x_read = error: -19 [ 1790.222879][ T808] dvb-usb: error while querying for an remote control event. [ 1790.370973][ T808] m920x_read = error: -19 [ 1790.393495][ T808] dvb-usb: error while querying for an remote control event. [ 1790.472902][ T9216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1790.548292][ T9216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1790.571082][ T5747] m920x_read = error: -19 [ 1790.588105][ T5747] dvb-usb: error while querying for an remote control event. [ 1790.697748][ T9216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1790.743116][ T5747] m920x_read = error: -19 [ 1790.749812][ T5747] dvb-usb: error while querying for an remote control event. [ 1790.782765][ T9216] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1790.901268][ T808] m920x_read = error: -19 [ 1790.921954][ T808] dvb-usb: error while querying for an remote control event. [ 1791.000158][T30790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9397'. [ 1791.070879][ T808] m920x_read = error: -19 [ 1791.086677][ T808] dvb-usb: error while querying for an remote control event. [ 1791.126382][ T808] usb 4-1: USB disconnect, device number 56 [ 1791.230945][ T9216] m920x_read = error: -19 [ 1791.241893][ T9216] dvb-usb: error while querying for an remote control event. [ 1791.303660][T30804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9399'. [ 1791.372127][ T9216] m920x_read = error: -19 [ 1791.385950][ T9216] dvb-usb: error while querying for an remote control event. [ 1791.511776][ T808] m920x_read = error: -19 [ 1791.551209][ T808] dvb-usb: error while querying for an remote control event. [ 1791.667773][ T808] usb 1-1: USB disconnect, device number 103 [ 1791.711071][ T5747] m920x_read = error: -19 [ 1791.723232][ T5747] dvb-usb: error while querying for an remote control event. [ 1791.775815][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.782787][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.860750][ T5747] m920x_read = error: -19 [ 1791.864527][T30866] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1791.871876][ T5747] dvb-usb: error while querying for an remote control event. [ 1791.941009][T16720] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1791.991952][ T5747] m920x_read = error: -19 [ 1791.996519][ T5747] dvb-usb: error while querying for an remote control event. [ 1792.090905][T16720] usb 4-1: device descriptor read/64, error -71 [ 1792.151962][ T5747] m920x_read = error: -19 [ 1792.166970][ T5747] dvb-usb: error while querying for an remote control event. [ 1792.288784][ T5747] m920x_read = error: -19 [ 1792.295573][ T5747] dvb-usb: error while querying for an remote control event. [ 1792.335684][T30898] syzkaller0: entered promiscuous mode [ 1792.341971][T30898] syzkaller0: entered allmulticast mode [ 1792.350563][T16720] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1792.384609][T30903] ERROR: Out of memory at tomoyo_memory_ok. [ 1792.429115][T30906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9415'. [ 1792.440864][ T5747] m920x_read = error: -19 [ 1792.445790][ T5747] dvb-usb: error while querying for an remote control event. [ 1792.500577][T16720] usb 4-1: device descriptor read/64, error -71 [ 1792.563229][T30908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1792.574449][ T5747] m920x_read = error: -19 [ 1792.579546][ T5747] dvb-usb: error while querying for an remote control event. [ 1792.594994][T30908] fuse: Unknown parameter 'fd0x000000000000000a' [ 1792.621003][T16720] usb usb4-port1: attempt power cycle [ 1792.700743][ T808] m920x_read = error: -19 [ 1792.708703][ T808] dvb-usb: error while querying for an remote control event. [ 1792.850713][ T5747] m920x_read = error: -19 [ 1792.855114][ T5747] dvb-usb: error while querying for an remote control event. [ 1792.919822][T30920] bond2: (slave sit0): Device is not bonding slave [ 1792.937727][T30920] bond2: option active_slave: invalid value (sit0) [ 1792.970866][T16720] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1792.982706][ T5747] m920x_read = error: -19 [ 1792.990270][ T5747] dvb-usb: error while querying for an remote control event. [ 1793.003153][T30920] bond2 (unregistering): Released all slaves [ 1793.013231][T16720] usb 4-1: device descriptor read/8, error -71 [ 1793.081875][ T808] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1793.111005][ T9216] m920x_read = error: -19 [ 1793.115726][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.240584][ T9216] m920x_read = error: -19 [ 1793.245075][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.260730][T16720] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1793.280712][ T808] usb 6-1: Using ep0 maxpacket: 32 [ 1793.286717][ T808] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 1793.296645][T16720] usb 4-1: device descriptor read/8, error -71 [ 1793.297751][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.330587][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.351540][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.361763][ T9216] m920x_read = error: -19 [ 1793.366135][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.393521][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.415189][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.432230][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.445813][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.452932][T16720] usb usb4-port1: unable to enumerate USB device [ 1793.462150][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.480535][ T9216] m920x_read = error: -19 [ 1793.487905][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.498755][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.508865][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.516050][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.534651][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.548086][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.558241][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.565900][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.576607][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.587336][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.597546][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.607943][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.623899][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.631388][ T9216] m920x_read = error: -19 [ 1793.636150][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.649793][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.661839][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.669771][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.681332][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.699818][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.709380][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.717031][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.728337][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.741356][ T808] usb 6-1: config 129 has an invalid interface number: 123 but max is 0 [ 1793.750748][ T9216] m920x_read = error: -19 [ 1793.755242][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.764095][ T808] usb 6-1: config 129 has no interface number 0 [ 1793.771421][ T808] usb 6-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 1793.784059][ T808] usb 6-1: config 129 interface 123 has no altsetting 0 [ 1793.795471][ T808] usb 6-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab [ 1793.805341][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.813769][ T808] usb 6-1: Product: syz [ 1793.818175][ T808] usb 6-1: Manufacturer: syz [ 1793.823451][ T808] usb 6-1: SerialNumber: syz [ 1793.839482][T30997] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1793.854677][T30919] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1793.870978][ T9216] m920x_read = error: -19 [ 1793.875673][ T9216] dvb-usb: error while querying for an remote control event. [ 1793.956618][T30998] can: request_module (can-proto-0) failed. [ 1794.000679][ T808] m920x_read = error: -19 [ 1794.005184][ T808] dvb-usb: error while querying for an remote control event. [ 1794.015505][T26086] udevd[26086]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.123/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1794.140612][ T808] m920x_read = error: -19 [ 1794.140647][ T808] dvb-usb: error while querying for an remote control event. [ 1794.254200][ T808] m920x_read = error: -19 [ 1794.265756][ T808] dvb-usb: error while querying for an remote control event. [ 1794.274812][T31014] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1794.400847][ T808] m920x_read = error: -19 [ 1794.413698][ T808] dvb-usb: error while querying for an remote control event. [ 1794.484970][T31019] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1794.513750][ T7615] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.552793][ T7615] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.567391][ T808] m920x_read = error: -19 [ 1794.587270][ T7615] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.602882][ T808] dvb-usb: error while querying for an remote control event. [ 1794.638826][ T7615] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.741072][ T808] m920x_read = error: -19 [ 1794.745630][ T808] dvb-usb: error while querying for an remote control event. [ 1794.786913][T31031] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1794.897754][ T808] m920x_read = error: -19 [ 1794.931726][ T808] dvb-usb: error while querying for an remote control event. [ 1795.005212][T31051] FAULT_INJECTION: forcing a failure. [ 1795.005212][T31051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.039945][T31051] CPU: 1 UID: 0 PID: 31051 Comm: syz.7.9426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1795.039981][T31051] Tainted: [L]=SOFTLOCKUP [ 1795.039991][T31051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1795.040004][T31051] Call Trace: [ 1795.040013][T31051] [ 1795.040022][T31051] dump_stack_lvl+0xe8/0x150 [ 1795.040051][T31051] should_fail_ex+0x412/0x560 [ 1795.040091][T31051] _copy_to_user+0x31/0xb0 [ 1795.040124][T31051] simple_read_from_buffer+0xe1/0x170 [ 1795.040155][T31051] proc_fail_nth_read+0x1bb/0x230 [ 1795.040186][T31051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1795.040217][T31051] ? rw_verify_area+0x2a6/0x4d0 [ 1795.040245][T31051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1795.040274][T31051] vfs_read+0x20c/0xa70 [ 1795.040310][T31051] ? __pfx___mutex_lock+0x10/0x10 [ 1795.040334][T31051] ? __pfx_vfs_read+0x10/0x10 [ 1795.040361][T31051] ? __fget_files+0x2a/0x420 [ 1795.040389][T31051] ? __fget_files+0x3a0/0x420 [ 1795.040412][T31051] ? __fget_files+0x2a/0x420 [ 1795.040444][T31051] ksys_read+0x150/0x270 [ 1795.040483][T31051] ? __pfx_ksys_read+0x10/0x10 [ 1795.040519][T31051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.040542][T31051] do_syscall_64+0x15f/0x560 [ 1795.040561][T31051] ? trace_irq_disable+0x3b/0x140 [ 1795.040591][T31051] ? clear_bhb_loop+0x40/0x90 [ 1795.040616][T31051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.040637][T31051] RIP: 0033:0x7f138115d68e [ 1795.040656][T31051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1795.040673][T31051] RSP: 002b:00007f1382006fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1795.040696][T31051] RAX: ffffffffffffffda RBX: 00007f13820076c0 RCX: 00007f138115d68e [ 1795.040710][T31051] RDX: 000000000000000f RSI: 00007f13820070a0 RDI: 0000000000000003 [ 1795.040721][T31051] RBP: 00007f1382007090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.040733][T31051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1795.040745][T31051] R13: 00007f1381416038 R14: 00007f1381415fa0 R15: 00007f138153fa48 [ 1795.040776][T31051] [ 1795.200895][T12066] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1795.212562][ T808] m920x_read = error: -19 [ 1795.265745][ T808] dvb-usb: error while querying for an remote control event. [ 1795.380585][ T808] m920x_read = error: -19 [ 1795.385007][ T808] dvb-usb: error while querying for an remote control event. [ 1795.445317][T12066] usb 4-1: Using ep0 maxpacket: 32 [ 1795.473219][T12066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.500579][ T808] m920x_read = error: -19 [ 1795.505033][ T808] dvb-usb: error while querying for an remote control event. [ 1795.512356][T12066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.526972][T12066] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1795.543211][T12066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.554023][T31065] syzkaller0: entered promiscuous mode [ 1795.559577][T31065] syzkaller0: entered allmulticast mode [ 1795.583699][T12066] usb 4-1: config 0 descriptor?? [ 1795.603444][T12066] hub 4-1:0.0: USB hub found [ 1795.631073][ T808] m920x_read = error: -19 [ 1795.635568][ T808] dvb-usb: error while querying for an remote control event. [ 1795.641507][T16720] usb 6-1: USB disconnect, device number 98 [ 1795.758249][T31087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9434'. [ 1795.772788][ T808] m920x_read = error: -19 [ 1795.777196][ T808] dvb-usb: error while querying for an remote control event. [ 1795.800643][T12066] hub 4-1:0.0: 1 port detected [ 1795.900616][ T808] m920x_read = error: -19 [ 1795.905069][ T808] dvb-usb: error while querying for an remote control event. [ 1796.020905][ T808] m920x_read = error: -19 [ 1796.025393][ T808] dvb-usb: error while querying for an remote control event. [ 1796.055837][ T29] audit: type=1326 audit(1779775769.732:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.087467][ T29] audit: type=1326 audit(1779775769.732:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.114907][ T29] audit: type=1326 audit(1779775769.732:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.145543][ T808] m920x_read = error: -19 [ 1796.146754][ T29] audit: type=1326 audit(1779775769.732:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.154875][ T808] dvb-usb: error while querying for an remote control event. [ 1796.179522][ T29] audit: type=1326 audit(1779775769.732:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.208050][ T29] audit: type=1326 audit(1779775769.742:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.238298][ T29] audit: type=1326 audit(1779775769.742:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.265996][ T29] audit: type=1326 audit(1779775769.742:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.322176][ T29] audit: type=1326 audit(1779775769.742:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.348139][ T29] audit: type=1326 audit(1779775769.742:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31091 comm="syz.4.9435" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfed99ce59 code=0x7ffc0000 [ 1796.356276][ T46] m920x_read = error: -19 [ 1796.430127][ T46] dvb-usb: error while querying for an remote control event. [ 1796.570990][ T46] m920x_read = error: -19 [ 1796.575430][ T46] dvb-usb: error while querying for an remote control event. [ 1796.616856][T31105] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9438'. [ 1796.681171][T31105] gretap0: entered promiscuous mode [ 1796.714845][ T46] m920x_read = error: -19 [ 1796.719823][ T46] dvb-usb: error while querying for an remote control event. [ 1796.869315][T12066] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1796.880882][ T46] m920x_read = error: -19 [ 1796.893853][ T46] dvb-usb: error while querying for an remote control event. [ 1796.899176][T12066] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1796.966667][T12066] usbhid 4-1:0.0: can't add hid device: -32 [ 1796.976424][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9439'. [ 1796.987775][T12066] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1797.031214][ T46] m920x_read = error: -19 [ 1797.036178][ T46] dvb-usb: error while querying for an remote control event. [ 1797.181480][ T46] m920x_read = error: -19 [ 1797.199966][ T46] dvb-usb: error while querying for an remote control event. [ 1797.298904][T31116] usb usb8: usbfs: process 31116 (syz.5.9437) did not claim interface 0 before use [ 1797.350611][ T46] m920x_read = error: -19 [ 1797.368062][ T46] dvb-usb: error while querying for an remote control event. [ 1797.511459][ T46] m920x_read = error: -19 [ 1797.536389][ T46] dvb-usb: error while querying for an remote control event. [ 1797.670531][ T46] m920x_read = error: -19 [ 1797.679694][ T46] dvb-usb: error while querying for an remote control event. [ 1797.801501][ T46] m920x_read = error: -19 [ 1797.809087][ T46] dvb-usb: error while querying for an remote control event. [ 1797.940537][ T46] m920x_read = error: -19 [ 1797.945405][ T46] dvb-usb: error while querying for an remote control event. [ 1798.063071][ T46] m920x_read = error: -19 [ 1798.090183][ T46] dvb-usb: error while querying for an remote control event. [ 1798.131601][T12066] usb 4-1: USB disconnect, device number 61 [ 1798.230962][ T46] m920x_read = error: -19 [ 1798.236794][ T46] dvb-usb: error while querying for an remote control event. [ 1798.387489][ T46] m920x_read = error: -19 [ 1798.402114][ T46] dvb-usb: error while querying for an remote control event. [ 1798.561166][ T9216] m920x_read = error: -19 [ 1798.567192][ T9216] dvb-usb: error while querying for an remote control event. [ 1798.700531][ T46] m920x_read = error: -19 [ 1798.713738][T31158] vlan3: entered promiscuous mode [ 1798.719069][ T46] dvb-usb: error while querying for an remote control event. [ 1798.850719][ T9216] m920x_read = error: -19 [ 1798.863734][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.010648][ T9216] m920x_read = error: -19 [ 1799.022970][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.150562][ T9216] m920x_read = error: -19 [ 1799.161540][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.290993][ T9216] m920x_read = error: -19 [ 1799.308631][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.414974][T31156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1799.429762][T31156] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1799.437723][ T9216] m920x_read = error: -19 [ 1799.450236][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.459788][T31156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1799.474504][T31156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1799.602633][ T9216] m920x_read = error: -19 [ 1799.624579][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.751911][ T9216] m920x_read = error: -19 [ 1799.758355][ T9216] dvb-usb: error while querying for an remote control event. [ 1799.890974][ T808] m920x_read = error: -19 [ 1799.895888][ T808] dvb-usb: error while querying for an remote control event. [ 1800.021172][ T46] m920x_read = error: -19 [ 1800.038750][ T46] dvb-usb: error while querying for an remote control event. [ 1800.063201][ T9216] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1800.160545][ T46] m920x_read = error: -19 [ 1800.166304][ T46] dvb-usb: error while querying for an remote control event. [ 1800.233121][ T9216] usb 6-1: config 251 has an invalid interface number: 154 but max is 0 [ 1800.255919][ T9216] usb 6-1: config 251 has no interface number 0 [ 1800.269692][ T9216] usb 6-1: config 251 interface 154 has no altsetting 0 [ 1800.287835][ T9216] usb 6-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=6a.3e [ 1800.300969][ T46] m920x_read = error: -19 [ 1800.320684][ T46] dvb-usb: error while querying for an remote control event. [ 1800.342360][ T9216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.370251][ T9216] usb 6-1: Product: syz [ 1800.380525][ T9216] usb 6-1: Manufacturer: syz [ 1800.397931][ T9216] usb 6-1: SerialNumber: syz [ 1800.450683][T31224] bond4: (slave sit0): Device is not bonding slave [ 1800.460531][T31224] bond4: option active_slave: invalid value (sit0) [ 1800.467025][ T808] m920x_read = error: -19 [ 1800.480271][ T808] dvb-usb: error while querying for an remote control event. [ 1800.517813][T31224] bond4 (unregistering): Released all slaves [ 1800.642724][ T808] m920x_read = error: -19 [ 1800.649169][ T808] dvb-usb: error while querying for an remote control event. [ 1800.731082][ T4898] Bluetooth: hci2: command 0x0c1a tx timeout [ 1800.786091][T31296] netlink: 'syz.4.9454': attribute type 3 has an invalid length. [ 1800.800804][ T808] m920x_read = error: -19 [ 1800.805467][ T808] dvb-usb: error while querying for an remote control event. [ 1800.940804][ T46] m920x_read = error: -19 [ 1800.947258][ T46] dvb-usb: error while querying for an remote control event. [ 1801.090767][ T808] m920x_read = error: -19 [ 1801.099290][ T808] dvb-usb: error while querying for an remote control event. [ 1801.211302][ T808] m920x_read = error: -19 [ 1801.226700][ T808] dvb-usb: error while querying for an remote control event. [ 1801.288028][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9455'. [ 1801.362419][ T808] m920x_read = error: -19 [ 1801.375554][ T808] dvb-usb: error while querying for an remote control event. [ 1801.452055][ T4898] Bluetooth: hci0: command 0x0c1a tx timeout [ 1801.458273][ T7730] Bluetooth: hci5: command 0x041b tx timeout [ 1801.498558][T31314] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1801.498558][T31314] The task syz.3.9456 (31314) triggered the difference, watch for misbehavior. [ 1801.519493][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1801.519513][ T29] audit: type=1326 audit(1779775775.202:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31312 comm="syz.3.9456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5de519ce59 code=0x0 [ 1801.520623][ T808] m920x_read = error: -19 [ 1801.554854][ T4898] Bluetooth: hci3: command 0x0c1a tx timeout [ 1801.561409][ T808] dvb-usb: error while querying for an remote control event. [ 1801.670670][ T808] m920x_read = error: -19 [ 1801.676734][ T808] dvb-usb: error while querying for an remote control event. [ 1801.811292][ T808] m920x_read = error: -19 [ 1801.820266][ T808] dvb-usb: error while querying for an remote control event. [ 1801.909173][T31321] syzkaller0: entered promiscuous mode [ 1801.915258][T31321] syzkaller0: entered allmulticast mode [ 1801.951901][ T808] m920x_read = error: -19 [ 1801.956390][ T808] dvb-usb: error while querying for an remote control event. [ 1802.070561][ T808] m920x_read = error: -19 [ 1802.075272][ T808] dvb-usb: error while querying for an remote control event. [ 1802.191887][ T808] m920x_read = error: -19 [ 1802.196405][ T808] dvb-usb: error while querying for an remote control event. [ 1802.326379][ T808] m920x_read = error: -19 [ 1802.338318][ T808] dvb-usb: error while querying for an remote control event. [ 1802.470786][ T46] m920x_read = error: -19 [ 1802.475513][ T46] dvb-usb: error while querying for an remote control event. [ 1802.592482][ T46] m920x_read = error: -19 [ 1802.611152][ T46] dvb-usb: error while querying for an remote control event. [ 1802.687128][T31336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9460'. [ 1802.740745][ T46] m920x_read = error: -19 [ 1802.745656][ T46] dvb-usb: error while querying for an remote control event. [ 1802.808041][T31334] netlink: 9 bytes leftover after parsing attributes in process `syz.7.9459'. [ 1802.870733][ T9216] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 1802.882895][ T46] m920x_read = error: -19 [ 1802.902496][T31334] netlink: 9 bytes leftover after parsing attributes in process `syz.7.9459'. [ 1802.903675][ T46] dvb-usb: error while querying for an remote control event. [ 1802.931608][ T9216] gspca_zc3xx: reg_w_i err -71 [ 1802.951814][ T9216] gspca_zc3xx 6-1:251.154: probe with driver gspca_zc3xx failed with error -71 [ 1802.986941][ T9216] usb 6-1: USB disconnect, device number 99 [ 1803.081365][ T46] m920x_read = error: -19 [ 1803.085824][ T46] dvb-usb: error while querying for an remote control event. [ 1803.200591][ T9216] m920x_read = error: -19 [ 1803.201430][T12066] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1803.210803][ T9216] dvb-usb: error while querying for an remote control event. [ 1803.371586][ T9216] m920x_read = error: -19 [ 1803.393918][ T9216] dvb-usb: error while querying for an remote control event. [ 1803.403816][T12066] usb 1-1: Using ep0 maxpacket: 8 [ 1803.406328][T31374] bond4: (slave sit0): Device is not bonding slave [ 1803.423913][T31374] bond4: option active_slave: invalid value (sit0) [ 1803.423916][T12066] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1803.423944][T12066] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1803.483397][T31374] bond4 (unregistering): Released all slaves [ 1803.496726][T12066] usb 1-1: config 0 has no interface number 0 [ 1803.518811][T12066] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1803.534695][ T9216] m920x_read = error: -19 [ 1803.554680][ T9216] dvb-usb: error while querying for an remote control event. [ 1803.589343][T12066] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1803.639623][T12066] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1803.675343][T12066] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1803.718761][ T9216] m920x_read = error: -19 [ 1803.723333][T12066] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1803.733229][ T9216] dvb-usb: error while querying for an remote control event. [ 1803.755812][T12066] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1803.788049][T12066] usb 1-1: Product: syz [ 1803.804608][T12066] usb 1-1: SerialNumber: syz [ 1803.844905][T12066] usb 1-1: config 0 descriptor?? [ 1803.892652][ T9216] m920x_read = error: -19 [ 1803.913752][ T9216] dvb-usb: error while querying for an remote control event. [ 1804.070684][ T9216] m920x_read = error: -19 [ 1804.087881][ T9216] dvb-usb: error while querying for an remote control event. [ 1804.223178][ T9216] m920x_read = error: -19 [ 1804.278912][ T9216] dvb-usb: error while querying for an remote control event. [ 1804.284104][T12066] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input195 [ 1804.363062][T12066] usb 1-1: USB disconnect, device number 104 [ 1804.369696][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1804.390067][ T29] audit: type=1326 audit(1779775778.062:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1804.421007][ T9216] m920x_read = error: -19 [ 1804.429598][ T9216] dvb-usb: error while querying for an remote control event. [ 1804.453948][T31469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1804.538993][ T29] audit: type=1326 audit(1779775778.062:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1804.581953][ T808] m920x_read = error: -19 [ 1804.589086][ T808] dvb-usb: error while querying for an remote control event. [ 1804.666889][ T29] audit: type=1326 audit(1779775778.062:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1804.710510][ T808] m920x_read = error: -19 [ 1804.718614][ T808] dvb-usb: error while querying for an remote control event. [ 1804.757056][ T29] audit: type=1326 audit(1779775778.062:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1804.790741][ T9216] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1804.843000][ T29] audit: type=1326 audit(1779775778.062:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1804.873938][ T46] m920x_read = error: -19 [ 1804.887916][ T46] dvb-usb: error while querying for an remote control event. [ 1804.932981][ T29] audit: type=1326 audit(1779775778.062:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1805.004102][ T9216] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1805.024611][ T29] audit: type=1326 audit(1779775778.062:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1805.026308][ T46] m920x_read = error: -19 [ 1805.114648][ T46] dvb-usb: error while querying for an remote control event. [ 1805.147621][ T29] audit: type=1326 audit(1779775778.102:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1805.203001][ T29] audit: type=1326 audit(1779775778.102:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1805.239466][ T9216] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1805.251377][ T808] m920x_read = error: -19 [ 1805.263004][ T808] dvb-usb: error while querying for an remote control event. [ 1805.266645][T31502] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9472'. [ 1805.280793][T31502] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9472'. [ 1805.297622][T31502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9472'. [ 1805.322857][ T9216] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1805.337449][T31505] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9473'. [ 1805.354127][ T9216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.371898][ T9216] usb 4-1: Product: syz [ 1805.386552][ T9216] usb 4-1: Manufacturer: syz [ 1805.396696][ T9216] usb 4-1: SerialNumber: syz [ 1805.401645][ T808] m920x_read = error: -19 [ 1805.414382][ T808] dvb-usb: error while querying for an remote control event. [ 1805.560606][ T808] m920x_read = error: -19 [ 1805.567188][ T808] dvb-usb: error while querying for an remote control event. [ 1805.636776][T31519] geneve3: entered promiscuous mode [ 1805.652269][T31519] geneve3: entered allmulticast mode [ 1805.669186][ T9216] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1805.701047][ T808] m920x_read = error: -19 [ 1805.706839][ T808] dvb-usb: error while querying for an remote control event. [ 1805.735479][T31525] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9477'. [ 1805.830637][ T808] m920x_read = error: -19 [ 1805.838942][ T808] dvb-usb: error while querying for an remote control event. [ 1805.858509][ T9216] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1805.880839][ T9216] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1805.982062][ T808] m920x_read = error: -19 [ 1805.990079][ T808] dvb-usb: error while querying for an remote control event. [ 1806.120651][ T808] m920x_read = error: -19 [ 1806.125160][ T808] dvb-usb: error while querying for an remote control event. [ 1806.243133][ T808] m920x_read = error: -19 [ 1806.248742][ T808] dvb-usb: error while querying for an remote control event. [ 1806.274891][ T9216] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1806.284139][ T9216] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1806.303949][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9482'. [ 1806.370571][ T808] m920x_read = error: -19 [ 1806.375163][ T808] dvb-usb: error while querying for an remote control event. [ 1806.502028][ T808] m920x_read = error: -19 [ 1806.519964][ T808] dvb-usb: error while querying for an remote control event. [ 1806.559250][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 1806.559268][ T29] audit: type=1326 audit(1779775780.232:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1806.599504][ T29] audit: type=1326 audit(1779775780.272:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.624711][ T29] audit: type=1326 audit(1779775780.272:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.657972][ T29] audit: type=1326 audit(1779775780.272:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.683441][ T46] m920x_read = error: -19 [ 1806.688055][ T46] dvb-usb: error while querying for an remote control event. [ 1806.696374][ T29] audit: type=1326 audit(1779775780.272:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.769871][ T29] audit: type=1326 audit(1779775780.302:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.800574][ T46] m920x_read = error: -19 [ 1806.806729][ T46] dvb-usb: error while querying for an remote control event. [ 1806.823817][ T29] audit: type=1326 audit(1779775780.322:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.875820][ T29] audit: type=1326 audit(1779775780.332:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.908940][ T29] audit: type=1326 audit(1779775780.332:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1806.933720][ T46] m920x_read = error: -19 [ 1806.938217][ T46] dvb-usb: error while querying for an remote control event. [ 1806.956646][ T29] audit: type=1326 audit(1779775780.332:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31467 comm="syz.3.9469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de515d68e code=0x7ffc0000 [ 1807.001087][T12066] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1807.062208][ T46] m920x_read = error: -19 [ 1807.066774][ T46] dvb-usb: error while querying for an remote control event. [ 1807.163580][T12066] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1807.180694][ T46] m920x_read = error: -19 [ 1807.182240][T12066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.185255][ T46] dvb-usb: error while querying for an remote control event. [ 1807.263159][T12066] usb 6-1: config 0 descriptor?? [ 1807.340562][ T46] m920x_read = error: -19 [ 1807.345232][ T46] dvb-usb: error while querying for an remote control event. [ 1807.470801][ T46] m920x_read = error: -19 [ 1807.475551][ T46] dvb-usb: error while querying for an remote control event. [ 1807.502617][T12066] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1807.600856][ T46] m920x_read = error: -19 [ 1807.605636][ T46] dvb-usb: error while querying for an remote control event. [ 1807.625369][ T9216] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1807.711536][T12066] [drm:udl_init] *ERROR* Selecting channel failed [ 1807.753540][ T46] m920x_read = error: -19 [ 1807.758710][ T46] dvb-usb: error while querying for an remote control event. [ 1807.803481][T12066] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1807.843333][T12066] [drm] Initialized udl on minor 2 [ 1807.878751][T12066] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1807.893458][T31592] FAULT_INJECTION: forcing a failure. [ 1807.893458][T31592] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.919087][T12066] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1807.931021][ T46] m920x_read = error: -19 [ 1807.934499][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1807.944803][ T46] dvb-usb: error while querying for an remote control event. [ 1807.950241][T31592] CPU: 0 UID: 0 PID: 31592 Comm: syz.4.9488 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.950272][T31592] Tainted: [L]=SOFTLOCKUP [ 1807.950280][T31592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1807.950291][T31592] Call Trace: [ 1807.950300][T31592] [ 1807.950308][T31592] dump_stack_lvl+0xe8/0x150 [ 1807.950342][T31592] should_fail_ex+0x412/0x560 [ 1807.950373][T31592] should_failslab+0xa8/0x100 [ 1807.950404][T31592] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1807.950429][T31592] ? __alloc_skb+0x186/0x7d0 [ 1807.950460][T31592] ? __alloc_skb+0x1d0/0x7d0 [ 1807.950482][T31592] ? __local_bh_enable_ip+0xd0/0x130 [ 1807.950506][T31592] __alloc_skb+0x1d0/0x7d0 [ 1807.950537][T31592] netlink_sendmsg+0x5d4/0xb40 [ 1807.950563][T31592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.950594][T31592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1807.950622][T31592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1807.950650][T31592] ____sys_sendmsg+0x972/0x9f0 [ 1807.950668][T31592] ? __might_fault+0xaf/0x130 [ 1807.950697][T31592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1807.950733][T31592] ? import_iovec+0x73/0xa0 [ 1807.950763][T31592] ___sys_sendmsg+0x2a5/0x360 [ 1807.950780][T31592] ? __lock_acquire+0x6b5/0x2cf0 [ 1807.950805][T31592] ? __pfx____sys_sendmsg+0x10/0x10 [ 1807.950828][T31592] ? kstrtouint+0x6e/0xe0 [ 1807.950874][T31592] ? __fget_files+0x2a/0x420 [ 1807.950895][T31592] ? __fget_files+0x3a0/0x420 [ 1807.950926][T31592] __sys_sendmmsg+0x27c/0x4e0 [ 1807.950950][T31592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1807.950966][T31592] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1807.951009][T31592] ? ksys_write+0x242/0x270 [ 1807.951037][T31592] ? __pfx_ksys_write+0x10/0x10 [ 1807.951068][T31592] __x64_sys_sendmmsg+0xa0/0xc0 [ 1807.951086][T31592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.951106][T31592] do_syscall_64+0x15f/0x560 [ 1807.951124][T31592] ? trace_irq_disable+0x3b/0x140 [ 1807.951151][T31592] ? clear_bhb_loop+0x40/0x90 [ 1807.951174][T31592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.951193][T31592] RIP: 0033:0x7fbfed99ce59 [ 1807.951211][T31592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.951227][T31592] RSP: 002b:00007fbfee7fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1807.951247][T31592] RAX: ffffffffffffffda RBX: 00007fbfedc15fa0 RCX: 00007fbfed99ce59 [ 1807.951260][T31592] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1807.951273][T31592] RBP: 00007fbfee7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.951284][T31592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.951294][T31592] R13: 00007fbfedc16038 R14: 00007fbfedc15fa0 R15: 00007fbfedd3fa48 [ 1807.951323][T31592] [ 1808.016784][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1808.191475][ T46] m920x_read = error: -19 [ 1808.352066][ T9216] usb 4-1: USB disconnect, device number 62 [ 1808.378945][T12066] usb 6-1: USB disconnect, device number 100 [ 1808.394011][ T46] dvb-usb: error while querying for an remote control event. [ 1808.469225][T31615] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9489'. [ 1808.520555][ T46] m920x_read = error: -19 [ 1808.543054][ T46] dvb-usb: error while querying for an remote control event. [ 1808.599808][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1808.600619][T26086] udevd[26086]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1808.731923][ T5747] m920x_read = error: -19 [ 1808.736355][ T5747] dvb-usb: error while querying for an remote control event. [ 1808.842022][ T9216] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1808.880915][ T5747] m920x_read = error: -19 [ 1808.885447][ T5747] dvb-usb: error while querying for an remote control event. [ 1808.948759][ T7730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1808.968800][ T7730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1808.983006][ T7730] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1808.994787][ T7730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1809.002857][ T7730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1809.021523][ T5747] m920x_read = error: -19 [ 1809.026265][ T5747] dvb-usb: error while querying for an remote control event. [ 1809.061252][ T9216] usb 4-1: Using ep0 maxpacket: 32 [ 1809.084681][ T9216] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1809.099746][ T9216] usb 4-1: config 0 has no interface number 0 [ 1809.116749][ T9216] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1809.141348][ T5747] m920x_read = error: -19 [ 1809.146269][ T5747] dvb-usb: error while querying for an remote control event. [ 1809.156025][ T9216] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1809.179074][ T9216] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1809.199040][ T9216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.223261][ T9216] usb 4-1: Product: syz [ 1809.223289][ T9216] usb 4-1: Manufacturer: syz [ 1809.223306][ T9216] usb 4-1: SerialNumber: syz [ 1809.236120][ T9216] usb 4-1: config 0 descriptor?? [ 1809.280829][ T46] m920x_read = error: -19 [ 1809.280895][ T46] dvb-usb: error while querying for an remote control event. [ 1809.390712][ T46] m920x_read = error: -19 [ 1809.395319][ T46] dvb-usb: error while querying for an remote control event. [ 1809.446982][T31591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.478552][T31591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.520661][ T5747] m920x_read = error: -19 [ 1809.525950][ T5747] dvb-usb: error while querying for an remote control event. [ 1809.692820][ T5747] m920x_read = error: -19 [ 1809.697795][ T5747] dvb-usb: error while querying for an remote control event. [ 1809.721748][T31687] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9496'. [ 1809.752472][ T46] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1809.841334][ T5747] m920x_read = error: -19 [ 1809.844668][T31708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9497'. [ 1809.845782][ T5747] dvb-usb: error while querying for an remote control event. [ 1809.858120][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9497'. [ 1809.911061][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1809.920654][ T9216] appletouch 4-1:0.85: Geyser mode initialized. [ 1809.931713][ T46] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.949011][ T9216] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input196 [ 1809.974624][ T46] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.986956][ T5747] m920x_read = error: -19 [ 1809.998528][ T5747] dvb-usb: error while querying for an remote control event. [ 1810.014773][ T46] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1810.032961][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1810.039945][ T46] usb 1-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 1810.049146][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.065656][ T46] usb 1-1: config 0 descriptor?? [ 1810.128870][ T9216] usb 4-1: USB disconnect, device number 63 [ 1810.143137][ T5747] m920x_read = error: -19 [ 1810.147849][ T5747] dvb-usb: error while querying for an remote control event. [ 1810.218463][ T9216] appletouch 4-1:0.85: input: appletouch disconnected [ 1810.274677][ T5747] m920x_read = error: -19 [ 1810.284829][ T5747] dvb-usb: error while querying for an remote control event. [ 1810.361755][T31649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.369129][T31649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.376820][T31649] bridge_slave_0: entered allmulticast mode [ 1810.385284][T31649] bridge_slave_0: entered promiscuous mode [ 1810.394768][T31649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.402373][ T808] m920x_read = error: -19 [ 1810.407086][ T808] dvb-usb: error while querying for an remote control event. [ 1810.411182][T31649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.423144][T31649] bridge_slave_1: entered allmulticast mode [ 1810.431694][T31649] bridge_slave_1: entered promiscuous mode [ 1810.486947][T31649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.499026][ T46] hid_parser_main: 28 callbacks suppressed [ 1810.499051][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.517809][T31649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.518316][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.538713][ T5747] m920x_read = error: -19 [ 1810.544515][ T5747] dvb-usb: error while querying for an remote control event. [ 1810.552716][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.559958][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.568856][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.579028][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.589958][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.596960][T31649] team0: Port device team_slave_0 added [ 1810.602521][T31649] team0: Port device team_slave_1 added [ 1810.605057][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.617213][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.627753][ T46] topre 0003:0853:0146.0058: unknown main item tag 0x0 [ 1810.660994][ T5747] m920x_read = error: -19 [ 1810.664618][T31649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.673832][ T5747] dvb-usb: error while querying for an remote control event. [ 1810.675474][T31649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.708638][ T46] topre 0003:0853:0146.0058: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.0-1/input0 [ 1810.741620][ T46] usb 1-1: USB disconnect, device number 105 [ 1810.803205][T31649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.833713][ T5747] m920x_read = error: -19 [ 1810.838737][ T5747] dvb-usb: error while querying for an remote control event. [ 1810.867228][T31858] fido_id[31858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1810.945641][T31649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.954498][T31649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.960644][ T808] m920x_read = error: -19 [ 1810.997712][T31649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.021586][ T808] dvb-usb: error while querying for an remote control event. [ 1811.082898][T31649] hsr_slave_0: entered promiscuous mode [ 1811.093059][T31649] hsr_slave_1: entered promiscuous mode [ 1811.100134][T31649] debugfs: 'hsr0' already exists in 'hsr' [ 1811.106646][T31649] Cannot create hsr debugfs directory [ 1811.130809][ T4898] Bluetooth: hci4: command tx timeout [ 1811.142282][ T5747] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1811.171291][ T46] m920x_read = error: -19 [ 1811.175856][ T46] dvb-usb: error while querying for an remote control event. [ 1811.291430][ T46] m920x_read = error: -19 [ 1811.298765][ T46] dvb-usb: error while querying for an remote control event. [ 1811.310956][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 1811.337497][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.357200][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1811.370293][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1811.388665][ T5747] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1811.409012][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1811.430790][ T46] m920x_read = error: -19 [ 1811.435354][ T46] dvb-usb: error while querying for an remote control event. [ 1811.449117][ T5747] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1811.462261][ T5747] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1811.473336][ T5747] usb 4-1: Manufacturer: syz [ 1811.494170][ T5747] usb 4-1: config 0 descriptor?? [ 1811.550951][ T808] m920x_read = error: -19 [ 1811.555761][ T808] dvb-usb: error while querying for an remote control event. [ 1811.667253][T31649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1811.682011][ T808] m920x_read = error: -19 [ 1811.687067][ T808] dvb-usb: error while querying for an remote control event. [ 1811.812413][ T5747] rc_core: IR keymap rc-hauppauge not found [ 1811.819370][ T808] m920x_read = error: -19 [ 1811.830574][ T808] dvb-usb: error while querying for an remote control event. [ 1811.839553][ T5747] Registered IR keymap rc-empty [ 1811.845809][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1811.870643][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1811.912596][ T5747] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1811.929892][ T5747] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input197 [ 1811.955443][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1811.963303][ T808] m920x_read = error: -19 [ 1811.969105][ T808] dvb-usb: error while querying for an remote control event. [ 1811.991736][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.010905][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.041012][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.070776][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.101600][ T808] m920x_read = error: -19 [ 1812.106410][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.111936][T32001] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9505'. [ 1812.117367][ T808] dvb-usb: error while querying for an remote control event. [ 1812.150638][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.158560][T32001] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9505'. [ 1812.172077][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.188061][T31649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.200536][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.220807][ T5747] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1812.241029][ T46] m920x_read = error: -19 [ 1812.245709][ T46] dvb-usb: error while querying for an remote control event. [ 1812.264475][ T5747] mceusb 4-1:0.0: Registered r with mce emulator interface version 1 [ 1812.275872][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9499'. [ 1812.294365][ T5747] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1812.307515][T31872] netlink: 'syz.3.9499': attribute type 12 has an invalid length. [ 1812.401340][ T5747] m920x_read = error: -19 [ 1812.419094][ T5747] dvb-usb: error while querying for an remote control event. [ 1812.515736][T31649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.560595][ T5747] m920x_read = error: -19 [ 1812.569325][ T5747] dvb-usb: error while querying for an remote control event. [ 1812.721919][ T5747] m920x_read = error: -19 [ 1812.733119][ T5747] dvb-usb: error while querying for an remote control event. [ 1812.881083][ T5747] m920x_read = error: -19 [ 1812.905965][ T5747] dvb-usb: error while querying for an remote control event. [ 1812.958250][T32032] bond2: (slave sit0): Device is not bonding slave [ 1812.966016][T32032] bond2: option active_slave: invalid value (sit0) [ 1813.003547][T32032] bond2 (unregistering): Released all slaves [ 1813.030704][ T5747] m920x_read = error: -19 [ 1813.038698][ T5747] dvb-usb: error while querying for an remote control event. [ 1813.150885][ T5747] m920x_read = error: -19 [ 1813.157300][ T5747] dvb-usb: error while querying for an remote control event. [ 1813.211224][ T4898] Bluetooth: hci4: command tx timeout [ 1813.271092][ T5747] m920x_read = error: -19 [ 1813.275708][ T5747] dvb-usb: error while querying for an remote control event. [ 1813.398076][T31649] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1813.400684][ T5747] m920x_read = error: -19 [ 1813.425299][ T5747] dvb-usb: error while querying for an remote control event. [ 1813.482556][T32110] syzkaller0: entered promiscuous mode [ 1813.493064][T32110] syzkaller0: entered allmulticast mode [ 1813.518325][T32111] vlan3: entered promiscuous mode [ 1813.523724][T32111] bridge0: entered promiscuous mode [ 1813.540974][ T46] m920x_read = error: -19 [ 1813.545675][ T46] dvb-usb: error while querying for an remote control event. [ 1813.670720][ T46] m920x_read = error: -19 [ 1813.675415][ T46] dvb-usb: error while querying for an remote control event. [ 1813.791515][ T46] m920x_read = error: -19 [ 1813.797447][ T46] dvb-usb: error while querying for an remote control event. [ 1813.920893][ T46] m920x_read = error: -19 [ 1813.926912][ T46] dvb-usb: error while querying for an remote control event. [ 1814.025484][ T46] usb 4-1: USB disconnect, device number 64 [ 1814.046264][ T808] m920x_read = error: -19 [ 1814.060669][ T808] dvb-usb: error while querying for an remote control event. [ 1814.191497][ T808] m920x_read = error: -19 [ 1814.210253][ T808] dvb-usb: error while querying for an remote control event. [ 1814.225797][T32109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1814.247181][T32137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1814.250216][T32109] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1814.280309][T32109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1814.301940][T32141] netlink: 'syz.0.9513': attribute type 1 has an invalid length. [ 1814.310838][T32109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1814.328945][T32109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1814.352261][ T808] m920x_read = error: -19 [ 1814.363808][T32109] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1814.377116][ T808] dvb-usb: error while querying for an remote control event. [ 1814.398595][T32141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1814.454935][T32109] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1814.474816][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9515'. [ 1814.491656][ T46] m920x_read = error: -19 [ 1814.499087][ T46] dvb-usb: error while querying for an remote control event. [ 1814.615360][ T808] m920x_read = error: -19 [ 1814.628694][T31649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1814.637409][ T808] dvb-usb: error while querying for an remote control event. [ 1814.690938][T31649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1814.721289][T31649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1814.742623][T32202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1814.776629][T31649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1814.784360][ T5747] m920x_read = error: -19 [ 1814.789092][T31649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1814.796517][ T5747] dvb-usb: error while querying for an remote control event. [ 1814.811289][ T46] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1814.834738][T31649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1814.875731][T31649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1814.910655][ T808] m920x_read = error: -19 [ 1814.916002][ T808] dvb-usb: error while querying for an remote control event. [ 1814.943139][T31649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1814.971704][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 1814.990247][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1815.023884][ T46] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1815.045970][ T5747] m920x_read = error: -19 [ 1815.061561][ T46] usb 1-1: string descriptor 0 read error: -22 [ 1815.068206][ T5747] dvb-usb: error while querying for an remote control event. [ 1815.082399][ T46] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1815.105278][ T46] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1815.166542][ T46] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1815.192263][ T46] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1815.192642][ T46] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1815.192697][ T46] usb 1-1: media controller created [ 1815.213535][ T5747] m920x_read = error: -19 [ 1815.213566][ T5747] dvb-usb: error while querying for an remote control event. [ 1815.241379][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1815.321720][ T9216] m920x_read = error: -19 [ 1815.321783][ T9216] dvb-usb: error while querying for an remote control event. [ 1815.368782][ T46] zl10353_read_register: readreg error (reg=127, ret==0) [ 1815.386947][T32243] geneve2: entered promiscuous mode [ 1815.386975][T32243] geneve2: entered allmulticast mode [ 1815.433449][ T9216] m920x_read = error: -19 [ 1815.440581][ T9216] dvb-usb: error while querying for an remote control event. [ 1815.469869][ T46] usb 1-1: USB disconnect, device number 106 [ 1815.572030][ T9216] m920x_read = error: -19 [ 1815.584028][ T9216] dvb-usb: error while querying for an remote control event. [ 1815.612245][ T4898] Bluetooth: hci2: command 0x0c1a tx timeout [ 1815.641754][T31649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1815.678580][T31649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.696665][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.703826][ T7650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1815.741111][ T9216] m920x_read = error: -19 [ 1815.751689][ T9216] dvb-usb: error while querying for an remote control event. [ 1815.775782][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.783161][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1815.902182][ T46] m920x_read = error: -19 [ 1815.907817][ T46] dvb-usb: error while querying for an remote control event. [ 1815.945139][T32276] FAULT_INJECTION: forcing a failure. [ 1815.945139][T32276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.966110][T32276] CPU: 1 UID: 0 PID: 32276 Comm: syz.4.9532 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.966143][T32276] Tainted: [L]=SOFTLOCKUP [ 1815.966151][T32276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1815.966163][T32276] Call Trace: [ 1815.966171][T32276] [ 1815.966180][T32276] dump_stack_lvl+0xe8/0x150 [ 1815.966212][T32276] should_fail_ex+0x412/0x560 [ 1815.966245][T32276] _copy_from_user+0x2d/0xb0 [ 1815.966278][T32276] ___sys_sendmsg+0x1c6/0x360 [ 1815.966308][T32276] ? __lock_acquire+0x6b5/0x2cf0 [ 1815.966336][T32276] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.966393][T32276] ? __fget_files+0x2a/0x420 [ 1815.966418][T32276] ? __fget_files+0x3a0/0x420 [ 1815.966453][T32276] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1815.966477][T32276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.966508][T32276] ? __pfx_ksys_write+0x10/0x10 [ 1815.966547][T32276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.966570][T32276] do_syscall_64+0x15f/0x560 [ 1815.966591][T32276] ? trace_irq_disable+0x3b/0x140 [ 1815.966621][T32276] ? clear_bhb_loop+0x40/0x90 [ 1815.966646][T32276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.966667][T32276] RIP: 0033:0x7fbfed99ce59 [ 1815.966687][T32276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.966705][T32276] RSP: 002b:00007fbfee7fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.966728][T32276] RAX: ffffffffffffffda RBX: 00007fbfedc15fa0 RCX: 00007fbfed99ce59 [ 1815.966742][T32276] RDX: 0000000000048814 RSI: 0000200000000440 RDI: 0000000000000003 [ 1815.966756][T32276] RBP: 00007fbfee7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.966769][T32276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.966781][T32276] R13: 00007fbfedc16038 R14: 00007fbfedc15fa0 R15: 00007fbfedd3fa48 [ 1815.966813][T32276] [ 1816.005959][T31649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1816.041912][ T46] m920x_read = error: -19 [ 1816.041961][ T46] dvb-usb: error while querying for an remote control event. [ 1816.160637][ T46] m920x_read = error: -19 [ 1816.207841][ T46] dvb-usb: error while querying for an remote control event. [ 1816.251423][ T4898] Bluetooth: hci5: command 0x041b tx timeout [ 1816.263211][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 1816.263232][ T29] audit: type=1326 audit(1779775789.942:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.296151][T31649] veth0_vlan: entered promiscuous mode [ 1816.313939][ T29] audit: type=1326 audit(1779775789.942:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.339381][ T9216] m920x_read = error: -19 [ 1816.345311][ T9216] dvb-usb: error while querying for an remote control event. [ 1816.353129][ T4898] Bluetooth: hci4: command 0x0419 tx timeout [ 1816.354087][ T29] audit: type=1326 audit(1779775789.942:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.359225][ T4898] Bluetooth: hci3: command 0x0c1a tx timeout [ 1816.385330][ T29] audit: type=1326 audit(1779775789.942:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.392344][ T4898] Bluetooth: hci0: command 0x0c1a tx timeout [ 1816.416722][ T29] audit: type=1326 audit(1779775789.982:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.448228][ T29] audit: type=1326 audit(1779775789.992:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.473438][ T5747] m920x_read = error: -19 [ 1816.478126][ T5747] dvb-usb: error while querying for an remote control event. [ 1816.486271][ T29] audit: type=1326 audit(1779775789.992:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.511600][ T29] audit: type=1326 audit(1779775789.992:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.536480][ T29] audit: type=1326 audit(1779775790.072:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.561641][ T29] audit: type=1326 audit(1779775790.072:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32275 comm="syz.3.9531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de519ce59 code=0x7ffc0000 [ 1816.600688][ T5747] m920x_read = error: -19 [ 1816.605162][ T5747] dvb-usb: error while querying for an remote control event. [ 1816.664614][T32278] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1816.695604][T31649] veth1_vlan: entered promiscuous mode [ 1816.720791][ T46] m920x_read = error: -19 [ 1816.725726][ T46] dvb-usb: error while querying for an remote control event. [ 1816.851736][ T46] m920x_read = error: -19 [ 1816.859465][ T46] dvb-usb: error while querying for an remote control event. [ 1816.874556][T31649] veth0_macvtap: entered promiscuous mode [ 1816.889903][T31649] veth1_macvtap: entered promiscuous mode [ 1816.919096][T31649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1816.952188][T31649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.970724][ T46] m920x_read = error: -19 [ 1816.975357][ T46] dvb-usb: error while querying for an remote control event. [ 1816.993235][T18347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.003973][T18347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.017000][T18347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.026810][T18347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.091405][ T46] m920x_read = error: -19 [ 1817.095933][ T46] dvb-usb: error while querying for an remote control event. [ 1817.221926][ T46] m920x_read = error: -19 [ 1817.239842][ T46] dvb-usb: error while querying for an remote control event. [ 1817.366503][T32324] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1817.400871][ T9216] m920x_read = error: -19 [ 1817.417002][ T9216] dvb-usb: error while querying for an remote control event. [ 1817.448720][T32324] gretap0: entered promiscuous mode [ 1817.511112][T27932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.556256][T27932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.572917][ T9216] m920x_read = error: -19 [ 1817.585758][ T9216] dvb-usb: error while querying for an remote control event. [ 1817.668655][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.680071][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.720219][T32336] geneve2: entered promiscuous mode [ 1817.742742][ T9216] m920x_read = error: -19 [ 1817.763927][T32336] geneve2: entered allmulticast mode [ 1817.769347][ T9216] dvb-usb: error while querying for an remote control event. [ 1817.900988][ T9216] m920x_read = error: -19 [ 1817.909510][ T9216] dvb-usb: error while querying for an remote control event. [ 1818.053769][ T808] m920x_read = error: -19 [ 1818.063272][ T808] dvb-usb: error while querying for an remote control event. [ 1818.211691][ T808] m920x_read = error: -19 [ 1818.239736][ T808] dvb-usb: error while querying for an remote control event. [ 1818.279260][T32362] syzkaller0: entered promiscuous mode [ 1818.314783][T32362] syzkaller0: entered allmulticast mode [ 1818.420978][ T46] m920x_read = error: -19 [ 1818.425776][ T46] dvb-usb: error while querying for an remote control event. [ 1818.491179][ T5638] Bluetooth: hci4: command 0x0419 tx timeout [ 1818.540624][ T46] m920x_read = error: -19 [ 1818.545827][ T46] dvb-usb: error while querying for an remote control event. [ 1818.700244][T32381] veth1_to_team: entered promiscuous mode [ 1818.710662][ T46] m920x_read = error: -19 [ 1818.717062][T32381] veth1_to_team: entered allmulticast mode [ 1818.725035][ T46] dvb-usb: error while querying for an remote control event. [ 1818.850611][ T808] m920x_read = error: -19 [ 1818.859353][ T808] dvb-usb: error while querying for an remote control event. [ 1818.971341][ T808] m920x_read = error: -19 [ 1818.979112][ T808] dvb-usb: error while querying for an remote control event. [ 1819.081359][ T46] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1819.101369][ T808] m920x_read = error: -19 [ 1819.108257][ T808] dvb-usb: error while querying for an remote control event. [ 1819.220795][ T9216] m920x_read = error: -19 [ 1819.227462][ T9216] dvb-usb: error while querying for an remote control event. [ 1819.253277][ T46] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1819.282819][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1819.314459][ T46] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1819.340677][ T808] m920x_read = error: -19 [ 1819.340710][ T808] dvb-usb: error while querying for an remote control event. [ 1819.340784][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.340813][ T46] usb 1-1: Product: syz [ 1819.340830][ T46] usb 1-1: Manufacturer: syz [ 1819.340846][ T46] usb 1-1: SerialNumber: syz [ 1819.348033][ T46] usb 1-1: config 0 descriptor?? [ 1819.353514][T32407] netlink: 'syz.7.9553': attribute type 1 has an invalid length. [ 1819.356662][ T46] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1819.409845][T32407] bond3: entered promiscuous mode [ 1819.411062][T32407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1819.458670][ T808] m920x_read = error: -19 [ 1819.458704][ T808] dvb-usb: error while querying for an remote control event. [ 1819.561846][ T9216] m920x_read = error: -19 [ 1819.561879][ T9216] dvb-usb: error while querying for an remote control event. [ 1819.587342][T32438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9552'. [ 1819.670553][ T46] m920x_read = error: -19 [ 1819.676777][ T46] dvb-usb: error while querying for an remote control event. [ 1819.793591][T32462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9557'. [ 1819.810699][ T46] m920x_read = error: -19 [ 1819.820070][ T46] dvb-usb: error while querying for an remote control event. [ 1819.961599][ T46] m920x_read = error: -19 [ 1819.961621][ T46] dvb-usb: error while querying for an remote control event. [ 1820.084832][ T46] m920x_read = error: -19 [ 1820.092003][ T46] dvb-usb: error while querying for an remote control event. [ 1820.210716][ T46] m920x_read = error: -19 [ 1820.215197][ T46] dvb-usb: error while querying for an remote control event. [ 1820.250907][ T5707] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1820.331317][ T808] m920x_read = error: -19 [ 1820.335770][ T808] dvb-usb: error while querying for an remote control event. [ 1820.411134][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 1820.418491][ T5707] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.440806][ T5707] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.461039][ T808] m920x_read = error: -19 [ 1820.461466][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1820.476335][ T808] dvb-usb: error while querying for an remote control event. [ 1820.491077][ T5707] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1820.511750][T12066] usb 1-1: USB disconnect, device number 107 [ 1820.522789][ T5707] usb 4-1: Product: syz [ 1820.535888][ T5707] usb 4-1: Manufacturer: syz [ 1820.571516][ T4898] Bluetooth: hci4: command 0x0419 tx timeout [ 1820.603336][ T5707] hub 4-1:4.0: USB hub found [ 1820.620645][ T808] m920x_read = error: -19 [ 1820.635630][ T808] dvb-usb: error while querying for an remote control event. [ 1820.760627][ T808] m920x_read = error: -19 [ 1820.765306][ T808] dvb-usb: error while querying for an remote control event. [ 1820.779479][ T5707] hub 4-1:4.0: 2 ports detected [ 1820.870604][ T9] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1820.880842][ T808] m920x_read = error: -19 [ 1820.886398][ T808] dvb-usb: error while querying for an remote control event. [ 1821.011274][ T808] m920x_read = error: -19 [ 1821.015724][ T808] dvb-usb: error while querying for an remote control event. [ 1821.023168][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.035182][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1821.045413][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1821.064082][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1821.073655][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.081845][ T9] usb 6-1: Product: syz [ 1821.086298][ T9] usb 6-1: Manufacturer: syz [ 1821.091473][ T9] usb 6-1: SerialNumber: syz [ 1821.111000][ T9] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1821.117902][ T9] cdc_ncm 6-1:1.0: bind() failure [ 1821.140927][ T808] m920x_read = error: -19 [ 1821.146605][ T808] dvb-usb: error while querying for an remote control event. [ 1821.270694][ T808] m920x_read = error: -19 [ 1821.276239][ T808] dvb-usb: error while querying for an remote control event. [ 1821.315517][ T808] usb 6-1: USB disconnect, device number 101 [ 1821.391376][ T9216] m920x_read = error: -19 [ 1821.395944][ T9216] dvb-usb: error while querying for an remote control event. [ 1821.511103][ T808] m920x_read = error: -19 [ 1821.517170][ T808] dvb-usb: error while querying for an remote control event. [ 1821.549558][T32534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9566'. [ 1821.640957][ T808] m920x_read = error: -19 [ 1821.645453][ T808] dvb-usb: error while querying for an remote control event. [ 1821.760956][ T808] m920x_read = error: -19 [ 1821.765502][ T808] dvb-usb: error while querying for an remote control event. [ 1821.882042][ T808] m920x_read = error: -19 [ 1821.887809][ T808] dvb-usb: error while querying for an remote control event. [ 1822.017358][ T808] m920x_read = error: -19 [ 1822.024655][ T808] dvb-usb: error while querying for an remote control event. [ 1822.150939][ T808] m920x_read = error: -19 [ 1822.158728][ T808] dvb-usb: error while querying for an remote control event. [ 1822.270917][ T808] m920x_read = error: -19 [ 1822.280486][ T808] dvb-usb: error while querying for an remote control event. [ 1822.420898][ T808] m920x_read = error: -19 [ 1822.434628][ T808] dvb-usb: error while querying for an remote control event. [ 1822.447188][T32552] netlink: 'syz.5.9570': attribute type 1 has an invalid length. [ 1822.563097][ T808] m920x_read = error: -19 [ 1822.573892][ T808] dvb-usb: error while querying for an remote control event. [ 1822.651213][ T4898] Bluetooth: hci4: command 0x0419 tx timeout [ 1822.700974][ T808] m920x_read = error: -19 [ 1822.718244][ T808] dvb-usb: error while querying for an remote control event. [ 1822.871318][ T808] m920x_read = error: -19 [ 1822.887062][ T808] dvb-usb: error while querying for an remote control event. [ 1823.023414][ T5707] hub 4-1:4.0: set hub depth failed [ 1823.031411][ T808] m920x_read = error: -19 [ 1823.043968][ T808] dvb-usb: error while querying for an remote control event. [ 1823.137309][ T5707] usb 4-1: USB disconnect, device number 65 [ 1823.180902][ T808] m920x_read = error: -19 [ 1823.198930][ T808] dvb-usb: error while querying for an remote control event. [ 1823.370639][ T808] m920x_read = error: -19 [ 1823.389151][ T808] dvb-usb: error while querying for an remote control event. [ 1823.530902][ T46] m920x_read = error: -19 [ 1823.544362][ T46] dvb-usb: error while querying for an remote control event. [ 1823.580787][ T5707] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1823.681008][ T46] m920x_read = error: -19 [ 1823.692951][ T46] dvb-usb: error while querying for an remote control event. [ 1823.744980][ T5707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1823.755675][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1823.788031][ T5707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1823.809887][ T5707] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1823.821729][ T46] m920x_read = error: -19 [ 1823.823435][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.830202][ T46] dvb-usb: error while querying for an remote control event. [ 1823.835215][ T5707] usb 4-1: Product: syz [ 1823.848910][ T5707] usb 4-1: Manufacturer: syz [ 1823.857447][ T5707] usb 4-1: SerialNumber: syz [ 1823.874369][ T5707] usb 4-1: config 0 descriptor?? [ 1823.894490][T32587] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1823.894805][T32609] syzkaller0: entered promiscuous mode [ 1823.907123][T32587] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1823.909662][T32609] syzkaller0: entered allmulticast mode [ 1823.938326][ T5707] usb 4-1: ucan: probing device on interface #0 [ 1823.971149][ T46] m920x_read = error: -19 [ 1823.976713][ T46] dvb-usb: error while querying for an remote control event. [ 1824.103426][ T46] m920x_read = error: -19 [ 1824.110564][ T46] dvb-usb: error while querying for an remote control event. [ 1824.145925][T32587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1824.241368][ T46] m920x_read = error: -19 [ 1824.245933][ T46] dvb-usb: error while querying for an remote control event. [ 1824.279439][ T5707] usb 4-1: ucan: could not read protocol version, ret=-71 [ 1824.305369][ T5707] usb 4-1: ucan: probe failed; try to update the device firmware [ 1824.370551][ T46] m920x_read = error: -19 [ 1824.375057][ T46] dvb-usb: error while querying for an remote control event. [ 1824.406710][ T5707] usb 4-1: USB disconnect, device number 66 [ 1824.446209][T32631] FAULT_INJECTION: forcing a failure. [ 1824.446209][T32631] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.466103][T32631] CPU: 1 UID: 0 PID: 32631 Comm: syz.4.9583 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.466137][T32631] Tainted: [L]=SOFTLOCKUP [ 1824.466145][T32631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1824.466157][T32631] Call Trace: [ 1824.466165][T32631] [ 1824.466174][T32631] dump_stack_lvl+0xe8/0x150 [ 1824.466204][T32631] should_fail_ex+0x412/0x560 [ 1824.466239][T32631] should_failslab+0xa8/0x100 [ 1824.466270][T32631] __kmalloc_noprof+0xe8/0x760 [ 1824.466298][T32631] ? tomoyo_encode+0x28b/0x550 [ 1824.466332][T32631] tomoyo_encode+0x28b/0x550 [ 1824.466364][T32631] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1824.466401][T32631] ? tomoyo_path_number_perm+0x219/0x630 [ 1824.466425][T32631] tomoyo_path_number_perm+0x246/0x630 [ 1824.466451][T32631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1824.466473][T32631] ? __lock_acquire+0x6b5/0x2cf0 [ 1824.466507][T32631] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1824.466549][T32631] ? __fget_files+0x2a/0x420 [ 1824.466575][T32631] ? __fget_files+0x2a/0x420 [ 1824.466596][T32631] ? __fget_files+0x3a0/0x420 [ 1824.466636][T32631] ? __fget_files+0x2a/0x420 [ 1824.466663][T32631] security_file_ioctl+0xc3/0x2a0 [ 1824.466688][T32631] __se_sys_ioctl+0x47/0x170 [ 1824.466716][T32631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.466738][T32631] do_syscall_64+0x15f/0x560 [ 1824.466757][T32631] ? trace_irq_disable+0x3b/0x140 [ 1824.466787][T32631] ? clear_bhb_loop+0x40/0x90 [ 1824.466813][T32631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.466833][T32631] RIP: 0033:0x7fbfed99ce59 [ 1824.466854][T32631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.466870][T32631] RSP: 002b:00007fbfee7fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.466894][T32631] RAX: ffffffffffffffda RBX: 00007fbfedc15fa0 RCX: 00007fbfed99ce59 [ 1824.466909][T32631] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 1824.466922][T32631] RBP: 00007fbfee7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.466935][T32631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.466948][T32631] R13: 00007fbfedc16038 R14: 00007fbfedc15fa0 R15: 00007fbfedd3fa48 [ 1824.466981][T32631] [ 1824.467012][T32631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1824.705213][ T46] m920x_read = error: -19 [ 1824.709657][ T46] dvb-usb: error while querying for an remote control event. [ 1824.820612][ T9216] m920x_read = error: -19 [ 1824.825042][ T9216] dvb-usb: error while querying for an remote control event. [ 1824.838389][T32655] syzkaller0: entered promiscuous mode [ 1824.857980][T32655] syzkaller0: entered allmulticast mode [ 1824.860884][ T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1824.940619][ T9216] m920x_read = error: -19 [ 1824.945195][ T9216] dvb-usb: error while querying for an remote control event. [ 1825.025437][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.025472][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1825.025525][ T9] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1825.025551][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.032493][ T9] usb 1-1: config 0 descriptor?? [ 1825.062072][ T46] m920x_read = error: -19 [ 1825.062106][ T46] dvb-usb: error while querying for an remote control event. [ 1825.111591][T32678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9590'. [ 1825.170630][ T9216] m920x_read = error: -19 [ 1825.176558][ T9216] dvb-usb: error while querying for an remote control event. [ 1825.242760][T32628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.254517][T32628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.265443][ T9] Bluetooth: Can't get state to change to load ram patch err [ 1825.276306][ T9] Bluetooth: Loading patch file failed [ 1825.282402][ T9] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 1825.292580][ T9216] m920x_read = error: -19 [ 1825.293619][ T9] usb 1-1: USB disconnect, device number 108 [ 1825.300471][ T9216] dvb-usb: error while querying for an remote control event. [ 1825.317586][T32683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9591'. [ 1825.351265][T32683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9591'. [ 1825.431949][ T9216] m920x_read = error: -19 [ 1825.438876][ T9216] dvb-usb: error while querying for an remote control event. [ 1825.458860][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9592'. [ 1825.572094][ T9216] m920x_read = error: -19 [ 1825.578013][ T9216] dvb-usb: error while querying for an remote control event. [ 1825.700516][ T808] m920x_read = error: -19 [ 1825.704991][ T808] dvb-usb: error while querying for an remote control event. [ 1825.820568][ T808] m920x_read = error: -19 [ 1825.826775][ T808] dvb-usb: error while querying for an remote control event. [ 1825.951404][ T808] m920x_read = error: -19 [ 1825.958618][ T808] dvb-usb: error while querying for an remote control event. [ 1826.100758][ T808] m920x_read = error: -19 [ 1826.105303][ T808] dvb-usb: error while querying for an remote control event. [ 1826.220808][ T808] m920x_read = error: -19 [ 1826.229429][ T808] dvb-usb: error while querying for an remote control event. [ 1826.351289][ T808] m920x_read = error: -19 [ 1826.360467][ T808] dvb-usb: error while querying for an remote control event. [ 1826.481744][ T808] m920x_read = error: -19 [ 1826.493280][ T808] dvb-usb: error while querying for an remote control event. [ 1826.550143][T32752] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9605'. [ 1826.630537][ T808] m920x_read = error: -19 [ 1826.635088][ T808] dvb-usb: error while querying for an remote control event. [ 1826.699382][T32753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9604'. [ 1826.762002][ T808] m920x_read = error: -19 [ 1826.780006][ T808] dvb-usb: error while querying for an remote control event. [ 1826.884061][T32765] syzkaller0: entered promiscuous mode [ 1826.894362][T32765] syzkaller0: entered allmulticast mode [ 1826.930825][ T46] m920x_read = error: -19 [ 1826.935638][ T46] dvb-usb: error while querying for an remote control event. [ 1827.061869][ T46] m920x_read = error: -19 [ 1827.066323][ T46] dvb-usb: error while querying for an remote control event. [ 1827.120703][ T808] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1827.181101][ T46] m920x_read = error: -19 [ 1827.185685][ T46] dvb-usb: error while querying for an remote control event. [ 1827.283290][ T808] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 1827.292468][ T808] usb 4-1: config 0 has no interface number 0 [ 1827.298654][ T808] usb 4-1: too many endpoints for config 0 interface 74 altsetting 211: 163, using maximum allowed: 30 [ 1827.311174][ T46] m920x_read = error: -19 [ 1827.315880][ T808] usb 4-1: config 0 interface 74 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 1827.329599][ T46] dvb-usb: error while querying for an remote control event. [ 1827.337225][ T808] usb 4-1: config 0 interface 74 has no altsetting 0 [ 1827.345853][ T808] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1827.355643][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.369176][ T808] usb 4-1: config 0 descriptor?? [ 1827.440598][ T9216] m920x_read = error: -19 [ 1827.445111][ T9216] dvb-usb: error while querying for an remote control event. [ 1827.570545][ T46] m920x_read = error: -19 [ 1827.581896][ T46] dvb-usb: error while querying for an remote control event. [ 1827.673903][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 1827.695959][ T2365] pvrusb2: Failure uploading firmware1 [ 1827.709583][ T2365] pvrusb2: Device initialization was not successful. [ 1827.717260][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1827.729441][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1827.730907][ T46] m920x_read = error: -19 [ 1827.741141][ T2365] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1827.747388][T32024] pvrusb2: Device being rendered inoperable [ 1827.763668][ T2365] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1827.775825][ T46] dvb-usb: error while querying for an remote control event. [ 1827.905922][ T341] binder: 340:341 ioctl c0184800 200000000240 returned -22 [ 1827.925076][ T341] binder: 340:341 ioctl c0306201 2000000003c0 returned -22 [ 1827.933133][ T46] m920x_read = error: -19 [ 1827.938575][ T46] dvb-usb: error while querying for an remote control event. [ 1828.062495][ T46] m920x_read = error: -19 [ 1828.074388][ T46] dvb-usb: error while querying for an remote control event. [ 1828.220508][ T1222] m920x_read = error: -19 [ 1828.230543][ T1222] dvb-usb: error while querying for an remote control event. [ 1828.361981][ T46] m920x_read = error: -19 [ 1828.362017][ T46] dvb-usb: error while querying for an remote control event. [ 1828.470906][ T1222] m920x_read = error: -19 [ 1828.486532][ T1222] dvb-usb: error while querying for an remote control event. [ 1828.630615][ T9216] m920x_read = error: -19 [ 1828.641330][ T9216] dvb-usb: error while querying for an remote control event. [ 1828.686678][ T393] program syz.0.9622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1828.780793][ T9216] m920x_read = error: -19 [ 1828.798791][ T9216] dvb-usb: error while querying for an remote control event. [ 1828.921287][ T1222] m920x_read = error: -19 [ 1828.936190][ T1222] dvb-usb: error while querying for an remote control event. [ 1828.943015][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 1828.943034][ T29] audit: type=1326 audit(1779775802.622:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138119ce59 code=0x7ffc0000 [ 1829.012963][ T29] audit: type=1326 audit(1779775802.662:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138119ce59 code=0x7ffc0000 [ 1829.049925][ T29] audit: type=1326 audit(1779775802.662:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f138115d68e code=0x7ffc0000 [ 1829.077068][ T29] audit: type=1326 audit(1779775802.662:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f138119caeb code=0x7ffc0000 [ 1829.081086][ T1222] m920x_read = error: -19 [ 1829.107067][ T29] audit: type=1326 audit(1779775802.662:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f138119caeb code=0x7ffc0000 [ 1829.155316][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.158185][ T29] audit: type=1326 audit(1779775802.672:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f138119caeb code=0x7ffc0000 [ 1829.271395][ T1222] m920x_read = error: -19 [ 1829.276035][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.280776][ T29] audit: type=1326 audit(1779775802.672:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=403 comm="syz.7.9624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f138119caeb code=0x7ffc0000 [ 1829.350704][ T29] audit: type=1326 audit(1779775802.892:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=405 comm="syz.0.9625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698739ce59 code=0x7ffc0000 [ 1829.410540][ T1222] m920x_read = error: -19 [ 1829.415045][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.429485][ T29] audit: type=1326 audit(1779775802.892:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=405 comm="syz.0.9625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698739ce59 code=0x7ffc0000 [ 1829.488949][ T29] audit: type=1326 audit(1779775802.892:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=405 comm="syz.0.9625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698739ce59 code=0x7ffc0000 [ 1829.533021][ T1222] m920x_read = error: -19 [ 1829.537769][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.662496][ T1222] m920x_read = error: -19 [ 1829.668859][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.812902][ T1222] m920x_read = error: -19 [ 1829.836301][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.911411][ T808] usb 4-1: string descriptor 0 read error: -71 [ 1829.955379][ T808] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1829.972988][ T1222] m920x_read = error: -19 [ 1829.986933][ T1222] dvb-usb: error while querying for an remote control event. [ 1829.998058][ T808] gspca_cpia1: usb_control_msg 05, error -71 [ 1830.011745][T28881] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1830.014711][ T808] gspca_cpia1: usb_control_msg 01, error -71 [ 1830.037079][ T808] cpia1 4-1:0.74: only firmware version 1 is supported (got: 0) [ 1830.058151][ T808] usb 4-1: USB disconnect, device number 67 [ 1830.132685][ T1222] m920x_read = error: -19 [ 1830.142742][ T1222] dvb-usb: error while querying for an remote control event. [ 1830.189539][ T448] syzkaller0: entered promiscuous mode [ 1830.195666][ T448] syzkaller0: entered allmulticast mode [ 1830.240663][T28881] usb 1-1: Using ep0 maxpacket: 16 [ 1830.270889][ T9216] m920x_read = error: -19 [ 1830.276330][ T9216] dvb-usb: error while querying for an remote control event. [ 1830.292551][ T448] IPv6: sit1: Disabled Multicast RS [ 1830.296008][T28881] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1830.334821][T28881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.359867][T28881] usb 1-1: Product: syz [ 1830.369238][T28881] usb 1-1: Manufacturer: syz [ 1830.374656][T28881] usb 1-1: SerialNumber: syz [ 1830.394400][T28881] usb 1-1: config 0 descriptor?? [ 1830.413079][ T9216] m920x_read = error: -19 [ 1830.422041][ T9216] dvb-usb: error while querying for an remote control event. [ 1830.436438][T28881] usb 1-1: selecting invalid altsetting 1 [ 1830.458428][T28881] technisat-usb2: could not set alternate setting to 0 [ 1830.540618][ T9216] m920x_read = error: -19 [ 1830.548762][ T9216] dvb-usb: error while querying for an remote control event. [ 1830.634450][T28881] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 1830.662593][T28881] usb 1-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 1830.680564][ T808] m920x_read = error: -19 [ 1830.680625][T28881] usb 1-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 1830.685145][ T808] dvb-usb: error while querying for an remote control event. [ 1830.823664][ T808] m920x_read = error: -19 [ 1830.830211][ T808] dvb-usb: error while querying for an remote control event. [ 1830.950720][ T808] m920x_read = error: -19 [ 1830.958166][ T808] dvb-usb: error while querying for an remote control event. [ 1831.081768][ T808] m920x_read = error: -19 [ 1831.087400][ T808] dvb-usb: error while querying for an remote control event. [ 1831.112932][ T4898] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 1831.168025][ T476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1831.211219][ T808] m920x_read = error: -19 [ 1831.229377][ T808] dvb-usb: error while querying for an remote control event. [ 1831.390956][ T9216] m920x_read = error: -19 [ 1831.396752][ T9216] dvb-usb: error while querying for an remote control event. [ 1831.531793][ T9216] m920x_read = error: -19 [ 1831.542173][ T9216] dvb-usb: error while querying for an remote control event. [ 1831.570555][ T808] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1831.670653][ T9216] m920x_read = error: -19 [ 1831.675223][ T9216] dvb-usb: error while querying for an remote control event. [ 1831.720433][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 1831.727369][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.738006][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1831.749306][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1831.759137][ T808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1831.769329][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1831.785806][ T808] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1831.795157][ T9216] m920x_read = error: -19 [ 1831.799731][ T9216] dvb-usb: error while querying for an remote control event. [ 1831.808204][ T808] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1831.816492][ T808] usb 4-1: Manufacturer: syz [ 1831.824754][ T808] usb 4-1: config 0 descriptor?? [ 1831.920526][ T9216] m920x_read = error: -19 [ 1831.925107][ T9216] dvb-usb: error while querying for an remote control event. [ 1832.040739][ T9216] m920x_read = error: -19 [ 1832.047592][ T9216] dvb-usb: error while querying for an remote control event. [ 1832.100578][ T808] rc_core: IR keymap rc-hauppauge not found [ 1832.106829][ T808] Registered IR keymap rc-empty [ 1832.112375][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.130891][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.152346][ T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1832.165389][ T9216] m920x_read = error: -19 [ 1832.169914][ T9216] dvb-usb: error while querying for an remote control event. [ 1832.183025][ T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input199 [ 1832.202087][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.220637][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.240898][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.260763][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.280667][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.300739][ T9216] m920x_read = error: -19 [ 1832.306768][ T9216] dvb-usb: error while querying for an remote control event. [ 1832.321213][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.340849][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.370824][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.400658][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.421346][ T9216] m920x_read = error: -19 [ 1832.426336][ T9216] dvb-usb: error while querying for an remote control event. [ 1832.435426][ T808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1832.465450][ T808] mceusb 4-1:0.0: Registered r with mce emulator interface version 1 [ 1832.474403][ T808] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1832.562037][ T808] m920x_read = error: -19 [ 1832.581869][ T808] dvb-usb: error while querying for an remote control event. [ 1832.647336][ T484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9637'. [ 1832.665291][ T484] netlink: 'syz.3.9637': attribute type 12 has an invalid length. [ 1832.718490][ T808] m920x_read = error: -19 [ 1832.759463][ T808] dvb-usb: error while querying for an remote control event. [ 1832.900978][ T808] m920x_read = error: -19 [ 1832.925304][ T808] dvb-usb: error while querying for an remote control event. [ 1833.086404][ T808] m920x_read = error: -19 [ 1833.118026][ T808] dvb-usb: error while querying for an remote control event. [ 1833.145429][ T566] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9649'. [ 1833.194799][ T566] gretap0: entered promiscuous mode [ 1833.282423][ T808] m920x_read = error: -19 [ 1833.308227][ T808] dvb-usb: error while querying for an remote control event. [ 1833.462398][ T808] m920x_read = error: -19 [ 1833.475283][ T808] dvb-usb: error while querying for an remote control event. [ 1833.590605][ T808] m920x_read = error: -19 [ 1833.599086][ T808] dvb-usb: error while querying for an remote control event. [ 1833.674128][ T584] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1833.698210][ T584] pim6reg0: linktype set to 805 [ 1833.730553][ T9216] m920x_read = error: -19 [ 1833.735581][ T9216] dvb-usb: error while querying for an remote control event. [ 1833.791628][ T5707] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1833.861182][ T9216] m920x_read = error: -19 [ 1833.871366][ T9216] dvb-usb: error while querying for an remote control event. [ 1833.913414][ T593] geneve2: entered promiscuous mode [ 1833.918704][ T593] geneve2: entered allmulticast mode [ 1833.931870][ T5707] usb 6-1: device descriptor read/64, error -71 [ 1833.990945][ T9216] m920x_read = error: -19 [ 1833.995733][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.120878][ T9216] m920x_read = error: -19 [ 1834.132385][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.170715][ T5707] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1834.261261][ T9216] m920x_read = error: -19 [ 1834.267221][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.279552][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1834.279573][ T29] audit: type=1400 audit(1779775807.952:5158): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=601 comm="syz.0.9655" [ 1834.311090][ T5707] usb 6-1: device descriptor read/64, error -71 [ 1834.381927][ T9216] m920x_read = error: -19 [ 1834.386798][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.420934][ T5707] usb usb6-port1: attempt power cycle [ 1834.501081][ T9216] m920x_read = error: -19 [ 1834.515902][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.637814][ T613] geneve2: entered promiscuous mode [ 1834.643385][ T9216] m920x_read = error: -19 [ 1834.647806][ T613] geneve2: entered allmulticast mode [ 1834.656456][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.770940][ T9216] m920x_read = error: -19 [ 1834.770996][ T5707] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1834.799668][ T9216] dvb-usb: error while querying for an remote control event. [ 1834.834817][ T9] usb 4-1: USB disconnect, device number 68 [ 1834.861162][ T5707] usb 6-1: device descriptor read/8, error -71 [ 1834.931245][ T9216] m920x_read = error: -19 [ 1834.936237][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.060917][ T9216] m920x_read = error: -19 [ 1835.073000][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.121519][ T5707] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1835.183043][ T5707] usb 6-1: device descriptor read/8, error -71 [ 1835.200523][ T9216] m920x_read = error: -19 [ 1835.227693][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.301128][ T5707] usb usb6-port1: unable to enumerate USB device [ 1835.370697][ T9216] m920x_read = error: -19 [ 1835.387174][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.439580][ T668] geneve2: entered promiscuous mode [ 1835.449460][ T668] geneve2: entered allmulticast mode [ 1835.550533][ T9216] m920x_read = error: -19 [ 1835.560029][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.691730][ T9216] m920x_read = error: -19 [ 1835.711114][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.820572][ T808] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1835.840777][ T9216] m920x_read = error: -19 [ 1835.850966][ T9216] dvb-usb: error while querying for an remote control event. [ 1835.960829][ T808] usb 4-1: device descriptor read/64, error -71 [ 1835.974623][ T9216] m920x_read = error: -19 [ 1835.985512][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.110926][ T9216] m920x_read = error: -19 [ 1836.116957][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.210664][ T808] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1836.230538][ T9216] m920x_read = error: -19 [ 1836.236171][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.351324][ T9216] m920x_read = error: -19 [ 1836.355887][ T808] usb 4-1: device descriptor read/64, error -71 [ 1836.364582][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.492280][ T808] usb usb4-port1: attempt power cycle [ 1836.499812][ T9216] m920x_read = error: -19 [ 1836.505008][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.621929][ T9216] m920x_read = error: -19 [ 1836.629312][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.750871][ T1222] m920x_read = error: -19 [ 1836.756049][ T1222] dvb-usb: error while querying for an remote control event. [ 1836.824772][ T723] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9672'. [ 1836.850557][ T808] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1836.858595][ T723] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9672'. [ 1836.870721][ T9216] m920x_read = error: -19 [ 1836.875873][ T9216] dvb-usb: error while querying for an remote control event. [ 1836.885696][ T808] usb 4-1: device descriptor read/8, error -71 [ 1836.990797][ T9216] m920x_read = error: -19 [ 1836.995326][ T9216] dvb-usb: error while querying for an remote control event. [ 1837.110649][ T9216] m920x_read = error: -19 [ 1837.115105][ T9216] dvb-usb: error while querying for an remote control event. [ 1837.141448][ T808] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1837.177567][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9675'. [ 1837.188669][ T808] usb 4-1: device descriptor read/8, error -71 [ 1837.231079][ T1222] m920x_read = error: -19 [ 1837.241674][ T1222] dvb-usb: error while querying for an remote control event. [ 1837.300882][ T808] usb usb4-port1: unable to enumerate USB device [ 1837.371335][ T808] m920x_read = error: -19 [ 1837.376737][ T808] dvb-usb: error while querying for an remote control event. [ 1837.491939][ T808] m920x_read = error: -19 [ 1837.496490][ T808] dvb-usb: error while querying for an remote control event. [ 1837.500460][ T9] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1837.612838][ T808] m920x_read = error: -19 [ 1837.617525][ T808] dvb-usb: error while querying for an remote control event. [ 1837.660582][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1837.668025][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1837.677935][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1837.694275][ T9] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1837.704096][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.712295][ T9] usb 6-1: Product: syz [ 1837.716519][ T9] usb 6-1: Manufacturer: syz [ 1837.721314][ T9] usb 6-1: SerialNumber: syz [ 1837.730987][ T808] m920x_read = error: -19 [ 1837.737622][ T808] dvb-usb: error while querying for an remote control event. [ 1837.852792][ T808] m920x_read = error: -19 [ 1837.861291][ T808] dvb-usb: error while querying for an remote control event. [ 1837.971329][ T808] m920x_read = error: -19 [ 1837.975816][ T808] dvb-usb: error while querying for an remote control event. [ 1838.091544][ T808] m920x_read = error: -19 [ 1838.101414][ T808] dvb-usb: error while querying for an remote control event. [ 1838.220627][ T808] m920x_read = error: -19 [ 1838.225072][ T808] dvb-usb: error while querying for an remote control event. [ 1838.339646][ T9] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1838.352390][ T9216] m920x_read = error: -19 [ 1838.357367][ T9216] dvb-usb: error while querying for an remote control event. [ 1838.388882][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1838.435004][T26086] udevd[26086]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1838.470572][ T9216] m920x_read = error: -19 [ 1838.475079][ T9216] dvb-usb: error while querying for an remote control event. [ 1838.544963][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.554806][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.567438][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.578239][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.590717][ T9216] m920x_read = error: -19 [ 1838.595893][ T9216] dvb-usb: error while querying for an remote control event. [ 1838.711360][ T9216] m920x_read = error: -19 [ 1838.717249][ T9216] dvb-usb: error while querying for an remote control event. [ 1838.774653][ T818] syz_tun: entered promiscuous mode [ 1838.787680][ T818] syz_tun: left promiscuous mode [ 1838.796098][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.806214][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.830665][ T808] m920x_read = error: -19 [ 1838.835192][ T808] dvb-usb: error while querying for an remote control event. [ 1838.950631][ T808] m920x_read = error: -19 [ 1838.955778][ T808] dvb-usb: error while querying for an remote control event. [ 1839.071102][ T808] m920x_read = error: -19 [ 1839.075563][ T808] dvb-usb: error while querying for an remote control event. [ 1839.193702][ T808] m920x_read = error: -19 [ 1839.206377][ T808] dvb-usb: error while querying for an remote control event. [ 1839.320661][ T9216] m920x_read = error: -19 [ 1839.325323][ T9216] dvb-usb: error while querying for an remote control event. [ 1839.339999][ T9] usb 6-1: USB disconnect, device number 106 [ 1839.390124][ T850] netlink: 260 bytes leftover after parsing attributes in process `syz.5.9685'. [ 1839.401318][ T850] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9685'. [ 1839.411112][ T850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9685'. [ 1839.440939][ T9216] m920x_read = error: -19 [ 1839.446823][ T9216] dvb-usb: error while querying for an remote control event. [ 1839.460742][ T808] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1839.592527][ T9216] m920x_read = error: -19 [ 1839.596971][ T9216] dvb-usb: error while querying for an remote control event. [ 1839.620709][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1839.631167][ T808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1839.642290][ T808] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1839.652609][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1839.662322][ T808] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1839.672394][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.682428][ T808] usb 4-1: Product: syz [ 1839.686833][ T808] usb 4-1: Manufacturer: syz [ 1839.692109][ T808] usb 4-1: SerialNumber: syz [ 1839.699076][ T808] usb 4-1: config 0 descriptor?? [ 1839.720714][ T9216] m920x_read = error: -19 [ 1839.725205][ T9216] dvb-usb: error while querying for an remote control event. [ 1839.804936][ T858] bond1: (slave sit0): Device is not bonding slave [ 1839.814027][ T858] bond1: option active_slave: invalid value (sit0) [ 1839.848739][ T858] bond1 (unregistering): Released all slaves [ 1839.851907][ T9216] m920x_read = error: -19 [ 1839.872665][ T9216] dvb-usb: error while querying for an remote control event. [ 1839.990663][ T9216] m920x_read = error: -19 [ 1839.996376][ T9216] dvb-usb: error while querying for an remote control event. [ 1840.049454][ T946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1840.110806][ T9216] m920x_read = error: -19 [ 1840.115544][ T9216] dvb-usb: error while querying for an remote control event. [ 1840.136766][ T836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9684'. [ 1840.218617][ T959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9691'. [ 1840.229454][ T959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9691'. [ 1840.238686][ T9216] m920x_read = error: -19 [ 1840.245077][ T9216] dvb-usb: error while querying for an remote control event. [ 1840.311522][ T808] gs_usb 4-1:0.0: Configuring for 256 interfaces [ 1840.327547][ T808] gs_usb 4-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 1840.359632][ T808] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1840.367988][ T46] m920x_read = error: -19 [ 1840.376786][ T46] dvb-usb: error while querying for an remote control event. [ 1840.411714][ T30] INFO: task kworker/u8:6:18353 blocked for more than 143 seconds. [ 1840.423162][ T30] Tainted: G L syzkaller #0 [ 1840.429706][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1840.438647][ T30] task:kworker/u8:6 state:D stack:22296 pid:18353 tgid:18353 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1840.454490][ T30] Workqueue: netns cleanup_net [ 1840.459342][ T30] Call Trace: [ 1840.462765][ T30] [ 1840.466205][ T30] __schedule+0x1821/0x5740 [ 1840.471213][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1840.476292][ T30] ? __pfx___schedule+0x10/0x10 [ 1840.483157][ T30] ? schedule+0x90/0x360 [ 1840.487570][ T30] schedule+0x164/0x360 [ 1840.492608][ T30] afs_cell_purge+0x40d/0x580 [ 1840.497434][ T30] ? __pfx_afs_cell_purge+0x10/0x10 [ 1840.500773][ T808] m920x_read = error: -19 [ 1840.502783][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 1840.507191][ T808] dvb-usb: error while querying for an remote control event. [ 1840.513072][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1840.513114][ T30] ? __timer_delete_sync+0x4a4/0x520 [ 1840.513146][ T30] afs_net_exit+0x50/0x100 [ 1840.513167][ T30] ops_undo_list+0x49f/0x940 [ 1840.513205][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 1840.513237][ T30] ? idr_destroy+0x218/0x290 [ 1840.543321][ T808] usb 4-1: USB disconnect, device number 73 [ 1840.547420][ T5707] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1840.569677][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1840.577491][ T30] cleanup_net+0x56b/0x800 [ 1840.582298][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1840.587316][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1840.593792][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1840.599999][ T30] process_scheduled_works+0xb5d/0x1860 [ 1840.606172][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1840.612254][ T30] ? assign_work+0x3d5/0x5e0 [ 1840.616859][ T30] worker_thread+0xa53/0xfc0 [ 1840.621688][ T30] kthread+0x389/0x470 [ 1840.625908][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1840.631330][ T30] ? __pfx_kthread+0x10/0x10 [ 1840.635975][ T30] ret_from_fork+0x514/0xb70 [ 1840.641587][ T46] m920x_read = error: -19 [ 1840.641608][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1840.651040][ T46] dvb-usb: error while querying for an remote control event. [ 1840.653292][ T30] ? __switch_to+0xc79/0x1410 [ 1840.665208][ T30] ? __pfx_kthread+0x10/0x10 [ 1840.669983][ T30] ret_from_fork_asm+0x1a/0x30 [ 1840.674883][ T30] [ 1840.678297][ T30] [ 1840.678297][ T30] Showing all locks held in the system: [ 1840.702431][ T5707] usb 6-1: device descriptor read/64, error -71 [ 1840.709284][ T30] 1 lock held by khungtaskd/30: [ 1840.716575][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1840.728394][ T30] 3 locks held by kworker/1:2/808: [ 1840.733923][ T30] #0: ffff88823bf8e140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1840.745469][ T30] #1: ffffc90004b27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1840.757619][ T30] #2: ffff88802b0a71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1840.768749][ T30] 2 locks held by pvrusb2-context/2365: [ 1840.770526][ T46] m920x_read = error: -19 [ 1840.774564][ T30] #0: ffff88802232c180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xe4/0x3c50 [ 1840.779622][ T46] dvb-usb: error while querying for an remote control event. [ 1840.789747][ T30] #1: ffffffff8e7f9a28 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1840.808696][ T30] 1 lock held by klogd/4986: [ 1840.814729][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1840.825931][ T30] 2 locks held by getty/5386: [ 1840.830970][ T30] #0: ffff88803639e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1840.841238][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1840.851834][ T30] 6 locks held by kworker/0:5/5707: [ 1840.857063][ T30] #0: ffff88823bf8e140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1840.873337][ T30] #1: ffffc90005077c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1840.885491][ T30] #2: ffff88802b2061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1840.897613][ T30] #3: ffff88802b213568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1840.908020][ T30] #4: ffff88802ac98060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1840.917950][ T30] #5: ffffffff8f682388 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 1840.920719][ T46] m920x_read = error: -19 [ 1840.928959][ T30] 2 locks held by kworker/u8:47/7643: [ 1840.938874][ T30] #0: ffff88801e314940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1840.950797][ T5707] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1840.958726][ T46] dvb-usb: error while querying for an remote control event. [ 1840.958946][ T30] #1: ffffc9000d25fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1840.983508][ T30] 3 locks held by kworker/u8:6/18353: [ 1840.988977][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1841.000597][ T30] #1: ffffc900058d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1841.011445][ T30] #2: ffffffff8fdc2d68 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1841.021446][ T30] 6 locks held by kworker/1:4/32024: [ 1841.026825][ T30] #0: ffff88823bf8e140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1841.039252][ T30] #1: ffffc900068efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1841.051885][ T30] #2: ffff88802b1461d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1841.061049][ T30] #3: ffff888048aa61d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 1841.070604][ T46] m920x_read = error: -19 [ 1841.070638][ T46] dvb-usb: error while querying for an remote control event. [ 1841.090618][ T5707] usb 6-1: device descriptor read/64, error -71 [ 1841.110830][ T30] #4: ffff8880a4b531a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1841.132456][ T30] #5: ffff88802232c180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 1841.144239][ T30] 4 locks held by udevd/24000: [ 1841.149092][ T30] #0: ffff888032b83638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1841.158115][ T30] #1: ffff8880387d7080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1841.167827][ T30] #2: ffff8880325530f8 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1841.179667][ T30] #3: ffff888048aa61d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1841.189253][ T30] 6 locks held by kworker/0:4/28881: [ 1841.194749][ T30] #0: [ 1841.194760][ T46] m920x_read = error: -19 [ 1841.194765][ T30] ffff88823bf8e140 ((wq_completion)usb_hub_wq [ 1841.202599][ T5707] usb usb6-port1: attempt power cycle [ 1841.202930][ T46] dvb-usb: error while querying for an remote control event. [ 1841.209728][ T30] ){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1841.229359][ T30] #1: ffffc90004c0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1841.241586][ T30] #2: ffff88802ae351d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1841.250909][ T30] #3: ffff88808925a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1841.260307][ T30] #4: ffff88808c6ae1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1841.269670][ T30] #5: ffffffff8e7f9a28 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1841.283752][ T30] 5 locks held by kworker/u8:1/31280: [ 1841.289211][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1841.301997][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1841.311311][ T30] #2: ffff8880a98d0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1841.321722][ T30] #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 1841.331679][ T46] m920x_read = error: -19 [ 1841.343126][ T30] #4: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1841.353084][ T30] 1 lock held by syz.4.9677/751: [ 1841.353549][ T46] dvb-usb: error while querying for an remote control event. [ 1841.358073][ T30] #0: ffffffff8e962eb8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1841.393292][ T30] 1 lock held by syz.0.9692/992: [ 1841.398313][ T30] #0: ffff8880784f2640 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1841.408976][ T30] [ 1841.412728][ T30] ============================================= [ 1841.412728][ T30] [ 1841.421460][ T30] NMI backtrace for cpu 0 [ 1841.421484][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.421511][ T30] Tainted: [L]=SOFTLOCKUP [ 1841.421519][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1841.421530][ T30] Call Trace: [ 1841.421539][ T30] [ 1841.421547][ T30] dump_stack_lvl+0xe8/0x150 [ 1841.421578][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1841.421605][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1841.421630][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1841.421661][ T30] sys_info+0x135/0x170 [ 1841.421683][ T30] watchdog+0xfd3/0x1030 [ 1841.421721][ T30] ? watchdog+0x1c9/0x1030 [ 1841.421755][ T30] kthread+0x389/0x470 [ 1841.421783][ T30] ? __pfx_watchdog+0x10/0x10 [ 1841.421809][ T30] ? __pfx_kthread+0x10/0x10 [ 1841.421837][ T30] ret_from_fork+0x514/0xb70 [ 1841.421863][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1841.421885][ T30] ? __switch_to+0xc79/0x1410 [ 1841.421918][ T30] ? __pfx_kthread+0x10/0x10 [ 1841.421944][ T30] ret_from_fork_asm+0x1a/0x30 [ 1841.421985][ T30] [ 1841.421994][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1841.500792][ T46] m920x_read = error: -19 [ 1841.504245][ C1] NMI backtrace for cpu 1 [ 1841.504266][ C1] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.504291][ C1] Tainted: [L]=SOFTLOCKUP [ 1841.504297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1841.504309][ C1] Workqueue: events legacy_dvb_usb_read_remote_control [ 1841.504338][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1841.504360][ C1] Code: e8 0e a2 80 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af e6 eb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1841.504373][ C1] RSP: 0018:ffffc90000b67410 EFLAGS: 00000002 [ 1841.504387][ C1] RAX: 1ffffffff34f5100 RBX: 00000000000003fd RCX: 0000000000000000 [ 1841.504399][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1841.504409][ C1] RBP: ffffffff9a7a8b10 R08: ffff888140ad0237 R09: 1ffff1102815a046 [ 1841.504421][ C1] R10: dffffc0000000000 R11: ffffffff854513a0 R12: dffffc0000000000 [ 1841.504433][ C1] R13: 0000000000000000 R14: ffffffff9a7a8880 R15: 0000000000000000 [ 1841.504444][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1841.504458][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1841.504476][ C1] CR2: 00007f69875ec4b8 CR3: 0000000031e2e000 CR4: 00000000003526f0 [ 1841.504493][ C1] Call Trace: [ 1841.504500][ C1] [ 1841.504510][ C1] wait_for_lsr+0x1a1/0x2f0 [ 1841.504531][ C1] serial8250_console_write+0x1348/0x1ba0 [ 1841.504556][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1841.504574][ C1] ? console_flush_all+0x123/0xb20 [ 1841.504600][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1841.504622][ C1] ? console_flush_all+0x123/0xb20 [ 1841.504644][ C1] console_flush_all+0x718/0xb20 [ 1841.504666][ C1] ? console_flush_all+0x123/0xb20 [ 1841.504690][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1841.504713][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1841.504730][ C1] console_unlock+0xd1/0x1c0 [ 1841.504750][ C1] ? vprintk_emit+0x2cf/0x560 [ 1841.504769][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1841.504788][ C1] ? vprintk_emit+0x210/0x560 [ 1841.504808][ C1] ? vprintk_emit+0x455/0x560 [ 1841.504827][ C1] ? vprintk_emit+0x2cf/0x560 [ 1841.504845][ C1] ? vprintk_emit+0x2cf/0x560 [ 1841.504865][ C1] vprintk_emit+0x485/0x560 [ 1841.504886][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1841.504910][ C1] _printk+0xdd/0x130 [ 1841.504941][ C1] ? __pfx__printk+0x10/0x10 [ 1841.504962][ C1] ? usb_control_msg+0x2c1/0x3e0 [ 1841.504984][ C1] m920x_rc_query+0x2f6/0x830 [ 1841.505006][ C1] legacy_dvb_usb_read_remote_control+0x107/0x450 [ 1841.505029][ C1] ? __pfx_legacy_dvb_usb_read_remote_control+0x10/0x10 [ 1841.505053][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1841.505070][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1841.505087][ C1] process_scheduled_works+0xb5d/0x1860 [ 1841.505116][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1841.505135][ C1] ? assign_work+0x3d5/0x5e0 [ 1841.505153][ C1] worker_thread+0xa53/0xfc0 [ 1841.505181][ C1] kthread+0x389/0x470 [ 1841.505202][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1841.505217][ C1] ? __pfx_kthread+0x10/0x10 [ 1841.505237][ C1] ret_from_fork+0x514/0xb70 [ 1841.505256][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1841.505272][ C1] ? __switch_to+0xc79/0x1410 [ 1841.505296][ C1] ? __pfx_kthread+0x10/0x10 [ 1841.505316][ C1] ret_from_fork_asm+0x1a/0x30 [ 1841.505342][ C1] [ 1841.510639][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1841.510664][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.510690][ T30] Tainted: [L]=SOFTLOCKUP [ 1841.510698][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1841.510710][ T30] Call Trace: [ 1841.510718][ T30] [ 1841.510728][ T30] vpanic+0x56c/0xa60 [ 1841.510755][ T30] ? __pfx___schedule+0x10/0x10 [ 1841.510784][ T30] ? __pfx_vpanic+0x10/0x10 [ 1841.510814][ T30] panic+0xc5/0xd0 [ 1841.510835][ T30] ? __pfx_panic+0x10/0x10 [ 1841.510857][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1841.510889][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1841.510917][ T30] watchdog+0x102c/0x1030 [ 1841.510951][ T30] ? watchdog+0x1c9/0x1030 [ 1841.510983][ T30] kthread+0x389/0x470 [ 1841.511007][ T30] ? __pfx_watchdog+0x10/0x10 [ 1841.511031][ T30] ? __pfx_kthread+0x10/0x10 [ 1841.511056][ T30] ret_from_fork+0x514/0xb70 [ 1841.511080][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1841.511101][ T30] ? __switch_to+0xc79/0x1410 [ 1841.511130][ T30] ? __pfx_kthread+0x10/0x10 [ 1841.511155][ T30] ret_from_fork_asm+0x1a/0x30 [ 1841.511199][ T30] [ 1841.513461][ T30] Kernel Offset: disabled