last executing test programs: 26m22.883412299s ago: executing program 1 (id=253): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x2a401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b902178f69e7340000009d8e2208d16542f7c9c86927264b977846d6c7e97b26ae98ee246b460387ee7e8ec3291446fa02e39dab53ab4eff45bd9b6010e4005b33952d9cac186f8374a7978921fc25f8e6aa36aecf296a14f663521ad67e57055e347108", @ANYRES16=r5, @ANYBLOB="01070000000000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3], 0x7c}}, 0x4004841) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x6, 0x0, 0x0, 0x7fff}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xa}, {0xb, 0xb}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x1}, {0x8}, {0x8}, {0x8, 0xb, 0x6}]}, 0x4c}}, 0x24040084) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) 26m20.90459827s ago: executing program 1 (id=255): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be90102030109"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) pipe2(&(0x7f00000006c0), 0x4000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000080)={0x9, 0x1, 0x1, 0x5, 0x4}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) unshare(0x20000400) poll(&(0x7f0000000240), 0x0, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_usb_connect$uac3(0x1, 0x12e, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x3, 0x1, 0xff, 0x20, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0xbc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x15, 0x1}, [@multiply_unit={0xb, 0x24, 0xd, 0x3, 0x7, 0x1, 0x7ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0x6, 0xb, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xa, 0x2, "be222d", ':'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x76, 0x3, 0xe3, 0x81, "", "9d78"}, @as_header={0x17, 0x24, 0x1, 0xaf, 0x9, 0x5, 0x0, 0xb6, 0x4, 0x9988, 0xd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xffff, 0x2, 0x8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x0, 0x3, "927225488d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfd, 0x0, 0x8, {0xa, 0x25, 0x25, 0x8, 0xd9, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x8, 0xb, 0x5c}, @as_header={0x17, 0x24, 0x1, 0x7, 0x100, 0x8, 0x3, 0xd, 0x7f, 0x8, 0x8c}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x81, 0x80, "697259db84"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x1, 0x1002, 0x2, 0x5, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xb4}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x9, "111cc0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x8, 0x1, {0xa, 0x25, 0x25, 0xfffff18b, 0x0, 0xfe01}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x6, 0x7, 0x8, 0xff, 0x4}, 0x1b, &(0x7f00000003c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x35, 0x8, 0x7f, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xc, 0x6, 0xd, 0x1}]}, 0x6, [{0xd0, &(0x7f0000000400)=@string={0xd0, 0x3, "b8840dab9ecfe425868647f9050a53147039871757812cf30000323763a6c1806f5769d8a3d5e39c05bf42cc0d02913c377105f0ee02cc3dbf5ac927449a2f8c429b16fba2891e3ab0b5a2db1eb04fc1228896dca003c45e8328d0c531bb638a839a43326a0cf43680694e4385ee687198316ea8f8b9fd3e5d54ed5a3f452382b464d33e390412a1473df62671cff2c023c1c3c6441ad39231c2d6871a40465f154e7a8788a7f727f4770d99c4013b9a6eee5a65d2b5bd292b8cb4efcffbf548a5d3d94886bfae94175fb33f9023"}}, {0x58, &(0x7f0000000500)=@string={0x58, 0x3, "a4ce0a4ce38d664c7d3c9bf76345700da7fd6bfc37efc6711a96c966c22a127bd25ea08249dc4791576bcd3841633c3f5e270d35c0e9db8e335b96cfc48e053b02c18d768e5c5ecdee5213cd1a5a71262ce98ad3d098"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1025}}]}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0xfffffffffffffd5e}, 0x1, 0x0, 0x0, 0x20008000}, 0x5000) 26m17.56362519s ago: executing program 1 (id=267): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x1, 0x2003) syz_usb_connect(0x5, 0x24, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)=ANY=[@ANYBLOB="120110012b10ca0102e4c8cd2e3fe764be03010902120001"], 0x0) io_setup(0x3ff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000006500)={0x0, 0x0, "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", "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"}) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 26m13.938986186s ago: executing program 1 (id=274): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x33a}], 0x1}}], 0x1, 0x20040140) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c0409000000000000000a00"], 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0xd, {0x32, 0xe0000000, 0x4, 0x1, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000017c0)={0xf4, 0x22, 0x100, 0x70bd27, 0x25dfdbfb, {0x19}, [@generic="e8b728117a442e4734e900fc6328fa4a9ce83aaabd112504d90a5550b601f202b2663d2b8869814aa7eba12f4058a03a44d7a2a02c320ba4f416de289f46d6dd4d7b057d9f3ae1caefca4a7d13ff3b96b7ebd6fef1281629e649b388fa96322af06b77b1cfcf11a2b1dfacefc3251cdbf41164283b83dc73c8179c647d4b63a7893c46905e196215076434b62e3370c51afc09f841cf79e268593fe086e257475ec9d4aa03702ec1b1ce2e3686a9e9c630e642eea3084d464939131a14e8e2c606447daa56b9a62938a03af8c8d7360abcdc1c76639853f235c0b783ed8a"]}, 0xf4}, 0x1, 0x0, 0x0, 0x40880}, 0x11) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x7, 0x200000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, &(0x7f0000000300)=0x5, 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000240)=0x8) 26m13.523533902s ago: executing program 1 (id=275): r0 = semget$private(0x0, 0x3, 0x12) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semtimedop(r0, &(0x7f00000005c0)=[{0x4, 0x7c, 0x800}, {0x1, 0x5, 0x800}, {0x2, 0x3, 0x1800}, {0x0, 0x6800, 0x1800}, {0x2, 0xa, 0x1000}], 0x5, &(0x7f0000000600)={0x0, 0x989680}) 26m13.210790824s ago: executing program 1 (id=277): socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {0x0}], 0x2}, 0x3) 26m11.880720649s ago: executing program 32 (id=277): socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {0x0}], 0x2}, 0x3) 12.831089341s ago: executing program 0 (id=5453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r10 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc02864cf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x7, &(0x7f0000000040)=[{0x9, 0x0, 0x5}, {0x8, 0x0, 0xfffffff7}, {0x3, 0x0, 0xfffffffd}, {0x3, 0x0, 0x3}, {0x9, 0x0, 0x5f0}, {0x8, 0x0, 0x81}, {0xb, 0x0, 0xbdb5}]}, 0x81, 0x80, 0x4, 0x0, 0x0, 0x0, 0x91, 0xfffffffffffffffb, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r10, 0xc0086448, &(0x7f0000000140)={r11}) 9.953600448s ago: executing program 4 (id=5462): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xa8) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (fail_nth: 2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) close(0x3) 9.625585156s ago: executing program 0 (id=5464): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x2a00) listxattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x8}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000090, 0x0, 0x2}]}) unshare(0x6a040000) mmap(&(0x7f00000df000/0x4000)=nil, 0x4000, 0x2, 0x8031, r1, 0x384ec000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x181440, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001c40)={'wlan0\x00', &(0x7f0000000180)=@ethtool_stats={0x19}}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0xff, 0xa, 0x7, 0x5, @private0, @mcast1, 0x10, 0x8, 0x1, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', r10, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x29}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r13, @ANYRES32=r13], 0x44}}, 0x2000800) 9.020807007s ago: executing program 2 (id=5467): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[], 0x23c}}, 0x20000091) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc02864cf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x7, &(0x7f0000000040)=[{0x9, 0x0, 0x5}, {0x8, 0x0, 0xfffffff7}, {0x3, 0x0, 0xfffffffd}, {0x3, 0x0, 0x3}, {0x9, 0x0, 0x5f0}, {0x8, 0x0, 0x81}, {0xb, 0x0, 0xbdb5}]}, 0x81, 0x80, 0x4, 0x0, 0x0, 0x0, 0x91, 0xfffffffffffffffb, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r9, 0xc0086448, &(0x7f0000000140)={r10}) 8.272407206s ago: executing program 4 (id=5468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r10 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc02864cf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x7, &(0x7f0000000040)=[{0x9, 0x0, 0x5}, {0x8, 0x0, 0xfffffff7}, {0x3, 0x0, 0xfffffffd}, {0x3, 0x0, 0x3}, {0x9, 0x0, 0x5f0}, {0x8, 0x0, 0x81}, {0xb, 0x0, 0xbdb5}]}, 0x81, 0x80, 0x4, 0x0, 0x0, 0x0, 0x91, 0xfffffffffffffffb, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r10, 0xc0086448, &(0x7f0000000140)={r11}) 8.23394119s ago: executing program 3 (id=5469): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a40)=ANY=[], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0xec578000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) shutdown(r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b23330987f70e06d038e7ff7fc6e5539b0d47078b089b3907346d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c0a258a1b000000004f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4900003a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) renameat2(r2, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x5) r6 = inotify_init() r7 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x3053410, &(0x7f0000000340)=ANY=[@ANYBLOB='fl=', @ANYRESHEX, @ANYRES16=r2, @ANYRESDEC=0xee01, @ANYBLOB=',grou', @ANYRES8=r5, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRES32=r6, @ANYRESHEX=r1], 0x1, 0x0, &(0x7f0000000600)="47cd68065d5a2a1d61a68a75a8cc203e5648b2d65e3d80f83403bb8edc145c398738976ea462e1e3ab7e967612f61d10727e7e58461b18ddbf1dbec49be4167e5d7938559d8b9bf12af335b9839e60407f85ab0907fcb0f9183e3a3ca3631eb8d7aa569ccc1ef90404f38752bec0f7269f8d708d2a06b04e8e6794352733a99f012ea3ba193fdd52df45e694d021082d26f1dbb6ca9c8f94041e153bc3fe933e57326bbaeac07ed22fbc9932655e9906f953a4") r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf={0x26, &(0x7f0000000140)="577a371211bc414ed3881e0d4898f678d1588da4e6ef77e7df53dac12d1912718b2d798411fe"}) inotify_add_watch(r6, &(0x7f0000000180)='./file0\x00', 0x11000e53) r9 = fspick(r7, &(0x7f0000000200)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 7.403033119s ago: executing program 5 (id=5470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x41, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/106, 0x6a, 0xfff, &(0x7f0000000180)={0x77359400}) capset(0x0, &(0x7f0000000040)={0x4a, 0x1ffffe, 0x11, 0xffff, 0x0, 0x6}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000000000a40000000042c000000050a05000000000000000000050000060c00024000000000000000010900010073797a300000000014000000110001"], 0xa8}}, 0x0) 7.169705911s ago: executing program 3 (id=5471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x58, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 7.020377675s ago: executing program 5 (id=5472): unshare(0x20020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4840) unshare(0x8040480) r1 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) openat$nullb(0xffffffffffffff9c, 0x0, 0x162682, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/154, 0x9a, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x19) syz_open_dev$vim2m(0x0, 0x3, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) eventfd2(0xe5c, 0x80000) eventfd2(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0xc000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) 6.854651518s ago: executing program 3 (id=5473): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x200000d4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, 0x0, 0x0, 0x700, 0x0) io_setup(0x1, &(0x7f0000000300)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 6.658900321s ago: executing program 2 (id=5474): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) exit(0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0", 0x59, 0x100000000000000, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x10, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x1, 0x2003) syz_usb_connect(0x5, 0x24, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)=ANY=[@ANYBLOB="120110012b10ca0102e4c8cd2e3fe764be03010902120001"], 0x0) io_setup(0x3ff, 0x0) r7 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000300), &(0x7f0000000140)) r8 = epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0xe000200f}) r9 = socket(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000000)) 6.024332807s ago: executing program 4 (id=5475): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xa8) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) close(0x3) 5.007776046s ago: executing program 0 (id=5476): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x10001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x2, 0x0, 0x9, 0xfa11}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000390440bd7000fbdbdf25000000000baae3145fe64a633b5d079941465b01bfaa554a65d9f5b41d65445c1a414f601489a5bd93ab135bd6c44f9b8cab45a8df05bb92e9bcf75c96a9fcb4ed41e0d996d14c1467be34d6f04a55ce96a95fc89b1b788fc7a55ded02c4bff2e6d293fae067ac2ba6b5ee8d21d6df770e4f80a58c62cb356fabb4aa644abb69eb29786ada944392718d46b46fcc9c7e83ba302f42433500c9e4f9f07f93549363b54e35515d709f2cc6d537b39a7c4c74280d9e3b9fd6cd78d60f1dee16f2add9e0dd435ebe292bc7abb8a98a1d0f6a32ee51032631ba789089", @ANYRES64=r1, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290016150700080028008ee60000"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x20000000002, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a10000000000000bd7bada6cc58f58051e91b58f72017489c36c42c2423bc9b34ebcc89486cbe57854cb8026533", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.688035385s ago: executing program 5 (id=5477): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 4.458081491s ago: executing program 5 (id=5478): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800000000000000"], 0x38}}, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) (fail_nth: 98) 3.58814803s ago: executing program 4 (id=5479): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) r1 = dup(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xfffffffd, 0x9, 0x5baddb65, 0x40022, r1, 0x9d, '\x00', r2, r1, 0x4, 0x3, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080004", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r7, 0x1, 0x100000000, 0x80000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.587282566s ago: executing program 5 (id=5480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_get$pid(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e001b00060000007feef0fc7900000000080000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0300000001000000010000000200"/28], 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f3930100", @ANYRES16=r9, @ANYBLOB="0100feffffff0000010017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419896c0001800d0001007564703a73797a3000000000140002800800030001000100080001000b0000000d00010069623a766c616e310000000008000300090000002c0004001400010002004e21e000000100000000000000001400020002004e22ac"], 0xc0}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000023000000000401000000000000000141000000140017000000000000040169623a7767310000"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x40000c4) 2.701857639s ago: executing program 3 (id=5481): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a40)=ANY=[], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0xec578000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) shutdown(r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) renameat2(r2, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x5) r6 = inotify_init() r7 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x3053410, &(0x7f0000000340)=ANY=[@ANYBLOB='fl=', @ANYRESHEX, @ANYRES16=r2, @ANYRESDEC=0xee01, @ANYBLOB=',grou', @ANYRES8=r5, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRES32=r6, @ANYRESHEX=r1], 0x1, 0x0, &(0x7f0000000600)="47cd68065d5a2a1d61a68a75a8cc203e5648b2d65e3d80f83403bb8edc145c398738976ea462e1e3ab7e967612f61d10727e7e58461b18ddbf1dbec49be4167e5d7938559d8b9bf12af335b9839e60407f85ab0907fcb0f9183e3a3ca3631eb8d7aa569ccc1ef90404f38752bec0f7269f8d708d2a06b04e8e6794352733a99f012ea3ba193fdd52df45e694d021082d26f1dbb6ca9c8f94041e153bc3fe933e57326bbaeac07ed22fbc9932655e9906f953a4") r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf={0x26, &(0x7f0000000140)="577a371211bc414ed3881e0d4898f678d1588da4e6ef77e7df53dac12d1912718b2d798411fe"}) inotify_add_watch(r6, &(0x7f0000000180)='./file0\x00', 0x11000e53) r9 = fspick(r7, &(0x7f0000000200)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 2.032866179s ago: executing program 2 (id=5482): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfffffffffffffe3c}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x500}, 0x0) 2.004837107s ago: executing program 0 (id=5483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {}, [@RTA_TTL_PROPAGATE={0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) fcntl$setlease(r0, 0x400, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@initdev, 0x0}, &(0x7f0000000500)=0x14) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="707f4c134f45e0f2f174ccbd290e0237550057c52ec9f880efacc84896650de03bc2d99bf245be9130e624500dee878bad697a6ee31541bb61a4047b5dd6b0eb9ff8782c9429cd01a7b6f0081bae22ee8656994d8bbc10ff0c30e8f42aec1e977be6c393f8ce16fb77bd60bf2851459a424e40df709ce83b1e7c033f", 0x7c}, {&(0x7f0000000180)="0d0b6497216c56ecf841a729a079172e2c03433257aee23b08028af35cb7608c7555271ba0a174b80e461a81318c0de3b16bfb9ddb24aa2e8461e411df8a48bc3fb771d6c78c5ce8078993b2cf2b1d72a03950d6847cfa1b86a5a856be1a11101ff4afb44fb76b0a", 0x68}, {&(0x7f0000000280)="2df36c0890661bc369b9e52f65ada9cc8973f233800efc7943526c73bcf3bf6ea02a9bcb5eaf3caf571afa40aeaa0efa767313b24ac17889ef93", 0x3a}, {&(0x7f00000002c0)="c4bf7441a782ce9406983c6b469e9ec0de163a9475a8be58c2244e660986cb13100514032b62846f59939730c03ac8aaf78c56f107d6f0d873c0d00b54f8d9adf6f1bf4d44d4a770f53a3cc05598afccbd650fb5d3c6be96605b55fe0317956a9ca5dfde2442eca83c2a71eeaf636e5b964ef1093bf2642b2ab00d3686884e11e2a0f6cfad43bc0f4ce548c9ea0c65ac61a6f74a4cdf2e1f05954015872dea9d", 0xa0}, {&(0x7f0000000380)="fca57245705980bdf7bec28147d74185072d6c", 0x13}, {&(0x7f00000003c0)="dad8238fe0f88640a89f2cc22a3fca97e20a26365657186b6751e9fc7e4c93878a5a45320cb42e84cf137e0870b23220cb22072ad3", 0x35}], 0x6, &(0x7f0000000540)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x53, [@broadcast, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x83, 0xf, "670951c129132b70d05d516fb8"}, @timestamp={0x44, 0x10, 0x3f, 0x0, 0x1, [0x3, 0xa247, 0x2]}, @generic={0x86, 0x7, "5740fda48a"}, @lsrr={0x83, 0x7, 0xe2, [@private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x57, [@multicast2]}, @rr={0x7, 0x7, 0xa6, [@multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0xe0}}], 0x1, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffdbf, 0x0, &(0x7f0000000200)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904fcee14db4241544716b9ea42231ed3373a3e299531fd05dacf5bb80b4b7ee0fae7aea53492b18c3e6c807bc4b5d29a0ed834a6bd8c6", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x87) 1.692009582s ago: executing program 2 (id=5484): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xa, 0x1f, 0x1, 0x4}, 0xca80) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_int(r3, 0x1, 0x2d, 0x0, &(0x7f0000000d40)) write$cgroup_subtree(r2, &(0x7f00000018c0)=ANY=[], 0xfe1b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000001300)=ANY=[], 0xfdef) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xff6e}, 0x0, 0x80}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="d1060000000000040000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 1.68885502s ago: executing program 3 (id=5485): ptrace(0x10, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x0, 0x0, 0x2}, 0x20) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) (async) syz_usb_connect$midi(0x3, 0x3e, &(0x7f0000000440)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xa, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x27, 0x0, 0x8, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x9, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0xa4, 0x0}) 1.639717633s ago: executing program 0 (id=5486): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000df2500000020", @ANYRES32=0x0, @ANYRESOCT=r6], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffffd, 0x1a640) 1.435789484s ago: executing program 4 (id=5487): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.435477107s ago: executing program 2 (id=5488): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.319836394s ago: executing program 2 (id=5489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_get$pid(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e001b00060000007feef0fc7900000000080000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0300000001000000010000000200"/28], 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f3930100", @ANYRES16=r10, @ANYBLOB="0100feffffff0000010017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419896c0001800d0001007564703a73797a3000000000140002800800030001000100080001000b0000000d00010069623a766c616e310000000008000300090000002c0004001400010002004e21e000000100000000000000001400020002004e22ac14142f0000000000000000"], 0xc0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000023000000000401000000000000000141000000140017000000000000040169623a7767310000"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x40000c4) 1.063266013s ago: executing program 4 (id=5490): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0xffffffff}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008200)={0x14, 0x1e, 0x1, 0xfffffffc, 0x10000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=':\x00.:\x00', 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) pwrite64(r1, &(0x7f00000000c0)="2bc8e3", 0x3, 0x4a7e2a9c) 907.146542ms ago: executing program 5 (id=5491): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a000000000000"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x200000d4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, 0x0, 0x0, 0x700, 0x0) io_setup(0x1, &(0x7f0000000300)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 839.771234ms ago: executing program 3 (id=5492): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x10001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x2, 0x0, 0x9, 0xfa11}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000390440bd7000fbdbdf25000000000baae3145fe64a633b5d079941465b01bfaa554a65d9f5b41d65445c1a414f601489a5bd93ab135bd6c44f9b8cab45a8df05bb92e9bcf75c96a9fcb4ed41e0d996d14c1467be34d6f04a55ce96a95fc89b1b788fc7a55ded02c4bff2e6d293fae067ac2ba6b5ee8d21d6df770e4f80a58c62cb356fabb4aa644abb69eb29786ada944392718d46b46fcc9c7e83ba302f42433500c9e4f9f07f93549363b54e35515d709f2cc6d537b39a7c4c74280d9e3b9fd6cd78d60f1dee16f2add9e0dd435ebe292bc7abb8a98a1d0f6a32ee51032631ba789089", @ANYRES64=r1, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290016150700080028008ee60000"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x20000000002, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a10000000000000bd7bada6cc58f58051e91b58f72017489c36c42c2423bc9b34ebcc89486cbe57854cb8026533", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5493): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (fail_nth: 32) kernel console output (not intermixed with test programs): e control event. [ 1658.739392][T25129] m920x_read = error: -19 [ 1658.752918][T25129] dvb-usb: error while querying for an remote control event. [ 1658.878322][T25129] m920x_read = error: -19 [ 1658.883399][T25129] dvb-usb: error while querying for an remote control event. [ 1659.026326][T25129] m920x_read = error: -19 [ 1659.030772][T25129] dvb-usb: error while querying for an remote control event. [ 1659.296417][ T5815] m920x_read = error: -19 [ 1659.300916][ T5815] dvb-usb: error while querying for an remote control event. [ 1659.426165][ T5815] m920x_read = error: -19 [ 1659.432051][ T5815] dvb-usb: error while querying for an remote control event. [ 1659.555837][ T5815] m920x_read = error: -19 [ 1659.560583][ T5815] dvb-usb: error while querying for an remote control event. [ 1659.676380][ T5815] m920x_read = error: -19 [ 1659.685988][ T5815] dvb-usb: error while querying for an remote control event. [ 1659.805854][ T5815] m920x_read = error: -19 [ 1659.841657][ T5815] dvb-usb: error while querying for an remote control event. [ 1659.966090][ T5815] m920x_read = error: -19 [ 1659.970500][ T5815] dvb-usb: error while querying for an remote control event. [ 1660.119511][ T5815] m920x_read = error: -19 [ 1660.134192][ T5815] dvb-usb: error while querying for an remote control event. [ 1660.247512][ T5815] m920x_read = error: -19 [ 1660.251941][ T5815] dvb-usb: error while querying for an remote control event. [ 1660.385913][T25129] m920x_read = error: -19 [ 1660.390508][T25129] dvb-usb: error while querying for an remote control event. [ 1660.516735][ T5815] m920x_read = error: -19 [ 1660.521543][ T5815] dvb-usb: error while querying for an remote control event. [ 1660.537362][T25745] syzkaller0: entered promiscuous mode [ 1660.543187][T25745] syzkaller0: entered allmulticast mode [ 1660.599690][T15201] usb 5-1: USB disconnect, device number 85 [ 1660.635936][ T5815] m920x_read = error: -19 [ 1660.640414][ T5815] dvb-usb: error while querying for an remote control event. [ 1660.786049][ T5815] m920x_read = error: -19 [ 1660.790496][ T5815] dvb-usb: error while querying for an remote control event. [ 1660.915909][ T5815] m920x_read = error: -19 [ 1660.920985][ T5815] dvb-usb: error while querying for an remote control event. [ 1661.046203][T25129] m920x_read = error: -19 [ 1661.053369][T25129] dvb-usb: error while querying for an remote control event. [ 1661.066000][T15201] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1661.116136][ T5815] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1661.196278][T25129] m920x_read = error: -19 [ 1661.204545][T25129] dvb-usb: error while querying for an remote control event. [ 1661.235890][T15201] usb 5-1: Using ep0 maxpacket: 32 [ 1661.252790][T15201] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1661.263470][T15201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.274498][T15201] usb 5-1: Product: syz [ 1661.276032][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 1661.285431][T15201] usb 5-1: Manufacturer: syz [ 1661.299052][T15201] usb 5-1: SerialNumber: syz [ 1661.307022][ T5815] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1661.316731][T15201] usb 5-1: config 0 descriptor?? [ 1661.324197][ T5815] usb 3-1: config 0 has no interface number 0 [ 1661.330681][T25129] m920x_read = error: -19 [ 1661.339397][T25129] dvb-usb: error while querying for an remote control event. [ 1661.340260][T15201] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1661.355963][ T5815] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1661.367146][T15201] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1661.368071][ T5815] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1661.384323][T15201] dvb-usb: bulk message failed: -22 (2/0) [ 1661.400513][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.421954][ T5815] usb 3-1: Product: syz [ 1661.426883][T15201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1661.436297][ T5815] usb 3-1: Manufacturer: syz [ 1661.436322][ T5815] usb 3-1: SerialNumber: syz [ 1661.444170][ T5815] usb 3-1: config 0 descriptor?? [ 1661.453046][T15201] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1661.463029][T15201] usb 5-1: media controller created [ 1661.468405][T25129] m920x_read = error: -19 [ 1661.471241][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1661.472893][T25129] dvb-usb: error while querying for an remote control event. [ 1661.480167][T25793] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1661.495102][T15201] dw2102: i2c transfer failed. [ 1661.500619][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1661.510827][T15201] dw2102: i2c transfer failed. [ 1661.517533][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1661.525293][T15201] dw2102: i2c transfer failed. [ 1661.544184][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1661.551014][T15201] dw2102: i2c transfer failed. [ 1661.571422][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1661.578809][T25129] m920x_read = error: -19 [ 1661.578842][T25129] dvb-usb: error while querying for an remote control event. [ 1661.595598][T15201] dw2102: i2c transfer failed. [ 1661.601009][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1661.625605][T15201] dw2102: i2c transfer failed. [ 1661.638353][T15201] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1661.685901][T25129] m920x_read = error: -19 [ 1661.690398][T25129] dvb-usb: error while querying for an remote control event. [ 1661.704613][T15201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1661.739627][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1661.746086][T25793] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1661.753622][T15201] dw2102: command 0x0e transfer failed. [ 1661.764525][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1661.772288][T15201] dw2102: command 0x0e transfer failed. [ 1661.806205][T25129] m920x_read = error: -19 [ 1661.810712][T25129] dvb-usb: error while querying for an remote control event. [ 1661.934791][T25129] m920x_read = error: -19 [ 1661.946055][T25129] dvb-usb: error while querying for an remote control event. [ 1662.048508][T25803] FAULT_INJECTION: forcing a failure. [ 1662.048508][T25803] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.066226][T25129] m920x_read = error: -19 [ 1662.070941][T25129] dvb-usb: error while querying for an remote control event. [ 1662.086144][T25803] CPU: 1 UID: 0 PID: 25803 Comm: syz.0.5237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1662.086177][T25803] Tainted: [L]=SOFTLOCKUP [ 1662.086185][T25803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1662.086198][T25803] Call Trace: [ 1662.086210][T25803] [ 1662.086219][T25803] dump_stack_lvl+0xe8/0x150 [ 1662.086253][T25803] should_fail_ex+0x412/0x560 [ 1662.086288][T25803] should_failslab+0xa8/0x100 [ 1662.086316][T25803] ? mas_alloc_nodes+0x291/0x350 [ 1662.086337][T25803] kmem_cache_alloc_noprof+0x87/0x650 [ 1662.086368][T25803] mas_alloc_nodes+0x291/0x350 [ 1662.086393][T25803] mas_preallocate+0x2d6/0x640 [ 1662.086417][T25803] ? rcu_is_watching+0x15/0xb0 [ 1662.086447][T25803] ? __pfx_mas_preallocate+0x10/0x10 [ 1662.086481][T25803] ? __mas_set_range+0x12f/0x3c0 [ 1662.086516][T25803] __split_vma+0x318/0xa40 [ 1662.086558][T25803] ? __pfx___split_vma+0x10/0x10 [ 1662.086586][T25803] ? process_measurement+0x7ce/0x1c80 [ 1662.086622][T25803] ? process_measurement+0x195e/0x1c80 [ 1662.086648][T25803] vms_gather_munmap_vmas+0x32d/0x1370 [ 1662.086688][T25803] ? tomoyo_check_open_permission+0x38e/0x470 [ 1662.086726][T25803] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1662.086754][T25803] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1662.086786][T25803] ? __lock_acquire+0x6b5/0x2cf0 [ 1662.086826][T25803] do_vmi_align_munmap+0x2b4/0x4b0 [ 1662.086872][T25803] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1662.086933][T25803] do_vmi_munmap+0x252/0x2d0 [ 1662.086968][T25803] do_munmap+0xf9/0x170 [ 1662.086990][T25803] ? __pfx_do_munmap+0x10/0x10 [ 1662.087032][T25803] mremap_to+0x34d/0x850 [ 1662.087068][T25803] ? __pfx_mremap_to+0x10/0x10 [ 1662.087099][T25803] ? check_prep_vma+0x723/0xb10 [ 1662.087137][T25803] __se_sys_mremap+0xd37/0xfc0 [ 1662.087175][T25803] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1662.087213][T25803] ? __pfx___se_sys_mremap+0x10/0x10 [ 1662.087247][T25803] ? fput+0xa0/0xd0 [ 1662.087277][T25803] ? ksys_write+0x242/0x270 [ 1662.087301][T25803] ? __pfx_ksys_write+0x10/0x10 [ 1662.087331][T25803] ? __x64_sys_mremap+0x20/0xc0 [ 1662.087360][T25803] do_syscall_64+0x14d/0xf80 [ 1662.087383][T25803] ? trace_irq_disable+0x3b/0x150 [ 1662.087413][T25803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.087433][T25803] ? clear_bhb_loop+0x40/0x90 [ 1662.087459][T25803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.087480][T25803] RIP: 0033:0x7f86df39c799 [ 1662.087501][T25803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.087518][T25803] RSP: 002b:00007f86e029b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1662.087540][T25803] RAX: ffffffffffffffda RBX: 00007f86df615fa0 RCX: 00007f86df39c799 [ 1662.087556][T25803] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 1662.087570][T25803] RBP: 00007f86e029b090 R08: 0000200000a00000 R09: 0000000000000000 [ 1662.087584][T25803] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1662.087596][T25803] R13: 00007f86df616038 R14: 00007f86df615fa0 R15: 00007f86df73fa48 [ 1662.087630][T25803] [ 1662.091156][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1662.196370][T25129] m920x_read = error: -19 [ 1662.540006][T25793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5234'. [ 1662.583891][T25793] bridge_slave_1: left allmulticast mode [ 1662.595873][T25793] bridge_slave_1: left promiscuous mode [ 1662.603973][T25793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.608731][ T5815] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1662.651906][ T5815] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1662.734311][T25129] dvb-usb: error while querying for an remote control event. [ 1662.765754][T15201] dw2102: command 0x0e transfer failed. [ 1662.771434][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1662.806620][T25793] bridge_slave_0: left allmulticast mode [ 1662.813147][T25793] bridge_slave_0: left promiscuous mode [ 1662.819579][T25793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.845766][T15201] dw2102: command 0x0e transfer failed. [ 1662.851383][T15201] dvb-usb: bulk message failed: -22 (1/0) [ 1662.870914][T25129] m920x_read = error: -19 [ 1662.875291][T25129] dvb-usb: error while querying for an remote control event. [ 1662.895815][T15201] dw2102: command 0x51 transfer failed. [ 1662.981861][T15201] DVB: Unable to find symbol ds3000_attach() [ 1663.007737][T15201] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1663.026000][T25129] m920x_read = error: -19 [ 1663.030431][T25129] dvb-usb: error while querying for an remote control event. [ 1663.165824][T15201] rc_core: IR keymap rc-su3000 not found [ 1663.175748][T15201] Registered IR keymap rc-empty [ 1663.177127][T25129] m920x_read = error: -19 [ 1663.193202][T15201] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1663.214467][T25129] dvb-usb: error while querying for an remote control event. [ 1663.231142][T15201] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input171 [ 1663.286709][T15201] dvb-usb: schedule remote query interval to 150 msecs. [ 1663.293824][T15201] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1663.313199][T15201] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1663.345950][T25129] m920x_read = error: -19 [ 1663.350390][T25129] dvb-usb: error while querying for an remote control event. [ 1663.366226][T15201] usb 5-1: USB disconnect, device number 86 [ 1663.467121][T25129] m920x_read = error: -19 [ 1663.471648][T25129] dvb-usb: error while querying for an remote control event. [ 1663.537876][T15201] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1663.606021][T25129] m920x_read = error: -19 [ 1663.610445][T25129] dvb-usb: error while querying for an remote control event. [ 1663.640122][T25819] qrtr: Invalid version 0 [ 1663.725964][T25129] m920x_read = error: -19 [ 1663.731199][T25129] dvb-usb: error while querying for an remote control event. [ 1663.804829][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1663.848239][T25129] m920x_read = error: -19 [ 1663.852813][T25129] dvb-usb: error while querying for an remote control event. [ 1663.876738][T15201] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 1663.985911][T25129] m920x_read = error: -19 [ 1663.992230][T25129] dvb-usb: error while querying for an remote control event. [ 1664.040154][T15201] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1664.108035][T25129] m920x_read = error: -19 [ 1664.112460][T25129] dvb-usb: error while querying for an remote control event. [ 1664.122356][T15201] usb 5-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 1664.132179][T15201] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 1664.254373][T15201] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 1664.294911][T15201] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 1664.322883][T15201] usb 5-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1664.348533][T15201] usb 5-1: string descriptor 0 read error: -22 [ 1664.352299][T25129] m920x_read = error: -19 [ 1664.355116][T15201] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1664.359205][T25129] dvb-usb: error while querying for an remote control event. [ 1664.378985][ T5902] usb 3-1: USB disconnect, device number 112 [ 1664.404767][T15201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.466942][T25129] m920x_read = error: -19 [ 1664.471843][T15201] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1664.484814][T25129] dvb-usb: error while querying for an remote control event. [ 1664.498637][T15201] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1664.626148][T25129] m920x_read = error: -19 [ 1664.630947][T25129] dvb-usb: error while querying for an remote control event. [ 1664.758544][T25129] m920x_read = error: -19 [ 1664.790708][T25129] dvb-usb: error while querying for an remote control event. [ 1664.798526][ T5902] usb 5-1: USB disconnect, device number 87 [ 1664.936871][T25129] m920x_read = error: -19 [ 1664.941592][T25129] dvb-usb: error while querying for an remote control event. [ 1665.085941][T25129] m920x_read = error: -19 [ 1665.090386][T25129] dvb-usb: error while querying for an remote control event. [ 1665.208207][T25129] m920x_read = error: -19 [ 1665.212808][T25129] dvb-usb: error while querying for an remote control event. [ 1665.335852][T25129] m920x_read = error: -19 [ 1665.340440][T25129] dvb-usb: error while querying for an remote control event. [ 1665.653966][T25129] m920x_read = error: -19 [ 1665.681854][T25129] dvb-usb: error while querying for an remote control event. [ 1665.800432][T25129] m920x_read = error: -19 [ 1665.804855][T25129] dvb-usb: error while querying for an remote control event. [ 1665.974459][T25129] m920x_read = error: -19 [ 1665.984578][T25129] dvb-usb: error while querying for an remote control event. [ 1666.118376][T25129] m920x_read = error: -19 [ 1666.123062][T25129] dvb-usb: error while querying for an remote control event. [ 1666.265872][T25129] m920x_read = error: -19 [ 1666.275797][T25129] dvb-usb: error while querying for an remote control event. [ 1666.415846][T25129] m920x_read = error: -19 [ 1666.420362][T25129] dvb-usb: error while querying for an remote control event. [ 1666.578755][T25847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5249'. [ 1666.612475][T25129] m920x_read = error: -19 [ 1666.627031][T25129] dvb-usb: error while querying for an remote control event. [ 1666.826004][ T42] m920x_read = error: -19 [ 1666.830679][ T42] dvb-usb: error while querying for an remote control event. [ 1666.954911][ T42] m920x_read = error: -19 [ 1666.966237][ T42] dvb-usb: error while querying for an remote control event. [ 1667.095633][ T42] m920x_read = error: -19 [ 1667.141158][ T42] dvb-usb: error while querying for an remote control event. [ 1667.505294][ T42] m920x_read = error: -19 [ 1667.509983][ T42] dvb-usb: error while querying for an remote control event. [ 1667.520044][T25857] qrtr: Invalid version 0 [ 1667.625961][ T42] m920x_read = error: -19 [ 1667.630639][ T42] dvb-usb: error while querying for an remote control event. [ 1667.746864][ T42] m920x_read = error: -19 [ 1667.751638][ T42] dvb-usb: error while querying for an remote control event. [ 1667.844767][T25861] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1667.879065][ T42] m920x_read = error: -19 [ 1667.883821][ T42] dvb-usb: error while querying for an remote control event. [ 1668.034169][ T42] m920x_read = error: -19 [ 1668.038874][ T42] dvb-usb: error while querying for an remote control event. [ 1668.175238][ T42] m920x_read = error: -19 [ 1668.179765][ T42] dvb-usb: error while querying for an remote control event. [ 1668.306220][ T42] m920x_read = error: -19 [ 1668.310693][ T42] dvb-usb: error while querying for an remote control event. [ 1668.394071][T25865] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5254'. [ 1668.555863][ T42] m920x_read = error: -19 [ 1668.560465][ T42] dvb-usb: error while querying for an remote control event. [ 1668.686645][ T42] m920x_read = error: -19 [ 1668.691068][ T42] dvb-usb: error while querying for an remote control event. [ 1668.773927][T25872] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1668.958031][ T42] m920x_read = error: -19 [ 1668.962610][ T42] dvb-usb: error while querying for an remote control event. [ 1669.002654][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.016626][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.185949][ T42] m920x_read = error: -19 [ 1669.192847][ T42] dvb-usb: error while querying for an remote control event. [ 1669.400831][ T42] m920x_read = error: -19 [ 1669.405240][ T42] dvb-usb: error while querying for an remote control event. [ 1669.483940][T25876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5257'. [ 1669.559398][ T42] m920x_read = error: -19 [ 1669.563786][ T42] dvb-usb: error while querying for an remote control event. [ 1669.697600][ T42] m920x_read = error: -19 [ 1669.702148][ T42] dvb-usb: error while querying for an remote control event. [ 1669.821578][ T42] m920x_read = error: -19 [ 1669.826203][ T42] dvb-usb: error while querying for an remote control event. [ 1669.879036][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5258'. [ 1669.935916][ T5815] m920x_read = error: -19 [ 1669.940440][ T5815] dvb-usb: error while querying for an remote control event. [ 1670.065882][ T5815] m920x_read = error: -19 [ 1670.228809][ T5815] dvb-usb: error while querying for an remote control event. [ 1670.401363][ T5815] m920x_read = error: -19 [ 1670.407163][ T5815] dvb-usb: error while querying for an remote control event. [ 1670.556017][ T5815] m920x_read = error: -19 [ 1670.560624][ T5815] dvb-usb: error while querying for an remote control event. [ 1670.675978][ T42] m920x_read = error: -19 [ 1670.681695][ T42] dvb-usb: error while querying for an remote control event. [ 1670.775789][ T5815] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1670.866069][ T42] m920x_read = error: -19 [ 1670.870463][ T42] dvb-usb: error while querying for an remote control event. [ 1670.965942][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 1670.986180][ T5815] usb 5-1: config 0 has an invalid interface number: 88 but max is 3 [ 1671.042315][ T5815] usb 5-1: config 0 has an invalid interface number: 250 but max is 3 [ 1671.051380][ T42] m920x_read = error: -19 [ 1671.055971][ T42] dvb-usb: error while querying for an remote control event. [ 1671.153296][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.195930][ T42] m920x_read = error: -19 [ 1671.269058][ T42] dvb-usb: error while querying for an remote control event. [ 1671.299891][ T5815] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1671.381923][ T5815] usb 5-1: config 0 has no interface number 0 [ 1671.455839][ T42] m920x_read = error: -19 [ 1671.460273][ T42] dvb-usb: error while querying for an remote control event. [ 1671.472298][ T5815] usb 5-1: config 0 has no interface number 1 [ 1671.510906][ T5815] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1671.553977][ T5815] usb 5-1: config 0 interface 250 has no altsetting 0 [ 1671.564673][ T5815] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1671.587606][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.615850][ T42] m920x_read = error: -19 [ 1671.623517][ T42] dvb-usb: error while querying for an remote control event. [ 1671.636424][ T5815] usb 5-1: config 0 descriptor?? [ 1671.756055][ T42] m920x_read = error: -19 [ 1671.761015][ T42] dvb-usb: error while querying for an remote control event. [ 1671.989664][ T42] m920x_read = error: -19 [ 1672.030429][ T42] dvb-usb: error while querying for an remote control event. [ 1672.185846][ T42] m920x_read = error: -19 [ 1672.190661][ T42] dvb-usb: error while querying for an remote control event. [ 1672.305912][ T42] m920x_read = error: -19 [ 1672.310359][ T42] dvb-usb: error while querying for an remote control event. [ 1672.425906][T25129] m920x_read = error: -19 [ 1672.432543][T25129] dvb-usb: error while querying for an remote control event. [ 1672.454717][T25907] tipc: Enabling of bearer rejected, already enabled [ 1672.565933][T25129] m920x_read = error: -19 [ 1672.571946][T25129] dvb-usb: error while querying for an remote control event. [ 1672.615397][T25911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1672.776669][T25129] m920x_read = error: -19 [ 1672.781149][T25129] dvb-usb: error while querying for an remote control event. [ 1673.136298][T12315] m920x_read = error: -19 [ 1673.141064][T12315] dvb-usb: error while querying for an remote control event. [ 1673.292581][T12315] m920x_read = error: -19 [ 1673.309495][T12315] dvb-usb: error while querying for an remote control event. [ 1673.359764][T25919] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5266'. [ 1673.470868][T12315] m920x_read = error: -19 [ 1673.475350][T12315] dvb-usb: error while querying for an remote control event. [ 1673.591213][T12315] m920x_read = error: -19 [ 1673.602602][T12315] dvb-usb: error while querying for an remote control event. [ 1673.726778][T12315] m920x_read = error: -19 [ 1673.731263][T12315] dvb-usb: error while querying for an remote control event. [ 1673.945919][ T42] m920x_read = error: -19 [ 1673.950415][ T42] dvb-usb: error while querying for an remote control event. [ 1674.126116][ T42] m920x_read = error: -19 [ 1674.130634][ T42] dvb-usb: error while querying for an remote control event. [ 1674.177280][ T5815] usb 5-1: string descriptor 0 read error: -71 [ 1674.225983][ T5815] usb 5-1: USB disconnect, device number 88 [ 1674.287965][T25129] m920x_read = error: -19 [ 1674.292736][T25129] dvb-usb: error while querying for an remote control event. [ 1674.435891][ T5815] m920x_read = error: -19 [ 1674.440386][ T5815] dvb-usb: error while querying for an remote control event. [ 1674.565916][ T5815] m920x_read = error: -19 [ 1674.584156][ T5815] dvb-usb: error while querying for an remote control event. [ 1674.716143][ T5815] m920x_read = error: -19 [ 1674.720959][ T5815] dvb-usb: error while querying for an remote control event. [ 1674.835811][ T5815] m920x_read = error: -19 [ 1674.840265][ T5815] dvb-usb: error while querying for an remote control event. [ 1674.956879][ T5815] m920x_read = error: -19 [ 1674.961453][ T5815] dvb-usb: error while querying for an remote control event. [ 1675.081220][ T5815] m920x_read = error: -19 [ 1675.092089][ T5815] dvb-usb: error while querying for an remote control event. [ 1675.206953][T25129] m920x_read = error: -19 [ 1675.211463][T25129] dvb-usb: error while querying for an remote control event. [ 1675.325882][T25129] m920x_read = error: -19 [ 1675.330521][T25129] dvb-usb: error while querying for an remote control event. [ 1675.397622][T16676] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.448843][T25129] m920x_read = error: -19 [ 1675.453789][T25129] dvb-usb: error while querying for an remote control event. [ 1675.475939][T16676] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.507588][T16676] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.525894][T25939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.543699][T16676] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.554336][T25939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.595888][T25129] m920x_read = error: -19 [ 1675.601239][T25129] dvb-usb: error while querying for an remote control event. [ 1675.927457][T25129] m920x_read = error: -19 [ 1675.931957][T25129] dvb-usb: error while querying for an remote control event. [ 1676.055877][ T5916] m920x_read = error: -19 [ 1676.060376][ T5916] dvb-usb: error while querying for an remote control event. [ 1676.188862][ T5916] m920x_read = error: -19 [ 1676.193271][ T5916] dvb-usb: error while querying for an remote control event. [ 1676.315940][T25129] m920x_read = error: -19 [ 1676.320628][T25129] dvb-usb: error while querying for an remote control event. [ 1676.435908][ T5916] m920x_read = error: -19 [ 1676.440750][ T5916] dvb-usb: error while querying for an remote control event. [ 1676.557788][ T5916] m920x_read = error: -19 [ 1676.562530][ T5916] dvb-usb: error while querying for an remote control event. [ 1676.680135][ T5916] m920x_read = error: -19 [ 1676.688413][ T5916] dvb-usb: error while querying for an remote control event. [ 1676.806069][ T5916] m920x_read = error: -19 [ 1676.814311][ T5916] dvb-usb: error while querying for an remote control event. [ 1676.938250][ T5916] m920x_read = error: -19 [ 1676.953721][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.085819][ T5916] m920x_read = error: -19 [ 1677.095854][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.289073][ T5916] m920x_read = error: -19 [ 1677.293499][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.449322][ T5916] m920x_read = error: -19 [ 1677.464791][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.615920][T25956] tipc: Enabling of bearer rejected, already enabled [ 1677.668519][ T5916] m920x_read = error: -19 [ 1677.672907][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.715820][ T5902] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 1677.805824][ T5916] m920x_read = error: -19 [ 1677.811544][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.890859][ T5902] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1677.931451][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1677.936393][ T5916] m920x_read = error: -19 [ 1677.957415][ T5916] dvb-usb: error while querying for an remote control event. [ 1677.964973][ T5902] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1678.005817][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1678.034889][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1678.063383][ T5902] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1678.066472][ T5916] m920x_read = error: -19 [ 1678.073096][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1678.096437][ T5916] dvb-usb: error while querying for an remote control event. [ 1678.099447][ T5902] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1678.135879][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1678.158763][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1678.205898][ T5916] m920x_read = error: -19 [ 1678.210326][ T5916] dvb-usb: error while querying for an remote control event. [ 1678.212868][ T5902] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1678.240586][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1678.264701][ T5902] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1678.301213][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1678.322896][ T5902] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1678.358269][ T5916] m920x_read = error: -19 [ 1678.362698][ T5916] dvb-usb: error while querying for an remote control event. [ 1678.367266][ T5902] usb 3-1: string descriptor 0 read error: -22 [ 1678.380017][ T5902] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1678.392064][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.469058][ T5902] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1678.515876][ T5916] m920x_read = error: -19 [ 1678.520413][ T5916] dvb-usb: error while querying for an remote control event. [ 1678.594910][T25970] FAULT_INJECTION: forcing a failure. [ 1678.594910][T25970] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.651536][T25970] CPU: 1 UID: 0 PID: 25970 Comm: syz.3.5281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1678.651577][T25970] Tainted: [L]=SOFTLOCKUP [ 1678.651585][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1678.651599][T25970] Call Trace: [ 1678.651608][T25970] [ 1678.651617][T25970] dump_stack_lvl+0xe8/0x150 [ 1678.651652][T25970] should_fail_ex+0x412/0x560 [ 1678.651687][T25970] should_failslab+0xa8/0x100 [ 1678.651717][T25970] __kmalloc_cache_noprof+0x88/0x660 [ 1678.651739][T25970] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1678.651769][T25970] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1678.651799][T25970] ? sctp_add_bind_addr+0x8c/0x370 [ 1678.651835][T25970] sctp_add_bind_addr+0x8c/0x370 [ 1678.651870][T25970] sctp_copy_local_addr_list+0x314/0x4f0 [ 1678.651905][T25970] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1678.651936][T25970] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1678.651969][T25970] ? sctp_v6_is_any+0x64/0x80 [ 1678.652002][T25970] ? sctp_copy_one_addr+0x93/0x360 [ 1678.652034][T25970] sctp_bind_addr_copy+0xb3/0x3c0 [ 1678.652065][T25970] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1678.652097][T25970] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1678.652124][T25970] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1678.652148][T25970] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1678.652173][T25970] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1678.652195][T25970] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1678.652219][T25970] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1678.652246][T25970] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1678.652276][T25970] sctp_sendmsg+0x1528/0x2c10 [ 1678.652315][T25970] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1678.652341][T25970] ? aa_sk_perm+0x6d5/0x900 [ 1678.652379][T25970] ? __pfx_aa_sk_perm+0x10/0x10 [ 1678.652412][T25970] ? sock_rps_record_flow+0x19/0x400 [ 1678.652442][T25970] ? inet_sendmsg+0x2f4/0x370 [ 1678.652465][T25970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1678.652503][T25970] ____sys_sendmsg+0x80a/0x9f0 [ 1678.652539][T25970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1678.652573][T25970] ? import_iovec+0x73/0xa0 [ 1678.652601][T25970] ___sys_sendmsg+0x2a5/0x360 [ 1678.652632][T25970] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.652694][T25970] ? __fget_files+0x2a/0x420 [ 1678.652725][T25970] ? __fget_files+0x3a0/0x420 [ 1678.652768][T25970] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1678.652797][T25970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.652833][T25970] ? __pfx_ksys_write+0x10/0x10 [ 1678.652868][T25970] do_syscall_64+0x14d/0xf80 [ 1678.652892][T25970] ? trace_irq_disable+0x3b/0x150 [ 1678.652922][T25970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.652944][T25970] ? clear_bhb_loop+0x40/0x90 [ 1678.652970][T25970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.652992][T25970] RIP: 0033:0x7fa91cf9c799 [ 1678.653013][T25970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.653031][T25970] RSP: 002b:00007fa91de6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.653055][T25970] RAX: ffffffffffffffda RBX: 00007fa91d215fa0 RCX: 00007fa91cf9c799 [ 1678.653072][T25970] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1678.653086][T25970] RBP: 00007fa91de6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.653100][T25970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1678.653112][T25970] R13: 00007fa91d216038 R14: 00007fa91d215fa0 R15: 00007fa91d33fa48 [ 1678.653146][T25970] [ 1679.245280][ T5916] m920x_read = error: -19 [ 1679.249762][ T5916] dvb-usb: error while querying for an remote control event. [ 1679.445233][ T5916] m920x_read = error: -19 [ 1679.456618][ T5916] dvb-usb: error while querying for an remote control event. [ 1679.585883][ T5916] m920x_read = error: -19 [ 1679.590819][ T5916] dvb-usb: error while querying for an remote control event. [ 1679.709258][T25980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.719378][ T5916] m920x_read = error: -19 [ 1679.723778][ T5916] dvb-usb: error while querying for an remote control event. [ 1679.736394][T25980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.786750][T25980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.808678][T25980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.860892][T25980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.880579][T25980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.887391][ T42] m920x_read = error: -19 [ 1679.892827][ T42] dvb-usb: error while querying for an remote control event. [ 1679.903061][T25980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.922418][T25980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.225914][ T42] m920x_read = error: -19 [ 1680.231525][ T42] dvb-usb: error while querying for an remote control event. [ 1680.345923][ T42] m920x_read = error: -19 [ 1680.350530][ T42] dvb-usb: error while querying for an remote control event. [ 1680.465855][ T42] m920x_read = error: -19 [ 1680.470451][ T42] dvb-usb: error while querying for an remote control event. [ 1680.512652][T25988] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5286'. [ 1680.525978][T15201] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1680.663170][ T5916] m920x_read = error: -19 [ 1680.669189][ T5916] dvb-usb: error while querying for an remote control event. [ 1680.746032][T15201] usb 5-1: Using ep0 maxpacket: 32 [ 1680.759159][T15201] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1680.769935][T15201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.785807][ T5916] m920x_read = error: -19 [ 1680.790220][ T5916] dvb-usb: error while querying for an remote control event. [ 1680.793710][T15201] usb 5-1: Product: syz [ 1680.821492][T15201] usb 5-1: Manufacturer: syz [ 1680.851971][T15201] usb 5-1: SerialNumber: syz [ 1680.890377][T15201] usb 5-1: config 0 descriptor?? [ 1680.905975][ T5916] m920x_read = error: -19 [ 1680.910400][ T5916] dvb-usb: error while querying for an remote control event. [ 1680.917464][T15201] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1680.927498][T15201] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1680.944360][T15201] dvb-usb: bulk message failed: -22 (2/0) [ 1681.001168][T15201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1681.022295][T15201] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1681.046155][ T5916] m920x_read = error: -19 [ 1681.050176][T15201] usb 5-1: media controller created [ 1681.050577][ T5916] dvb-usb: error while querying for an remote control event. [ 1681.073029][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1681.105720][T15201] dw2102: i2c transfer failed. [ 1681.117319][ T5828] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 1681.119072][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1681.141320][T15201] dw2102: i2c transfer failed. [ 1681.158261][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1681.164203][T15201] dw2102: i2c transfer failed. [ 1681.176903][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1681.183023][T15201] dw2102: i2c transfer failed. [ 1681.187036][ T5916] m920x_read = error: -19 [ 1681.190273][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1681.194947][ T5916] dvb-usb: error while querying for an remote control event. [ 1681.210479][T15201] dw2102: i2c transfer failed. [ 1681.217467][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1681.242158][T15201] dw2102: i2c transfer failed. [ 1681.249453][T15201] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1681.268284][T15201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1681.336353][ T5916] m920x_read = error: -19 [ 1681.345775][ T5902] usb 3-1: USB disconnect, device number 113 [ 1681.376560][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1681.382470][T15201] dw2102: command 0x0e transfer failed. [ 1681.388242][ T5916] dvb-usb: error while querying for an remote control event. [ 1681.400354][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1681.406434][T15201] dw2102: command 0x0e transfer failed. [ 1681.645881][ T5916] m920x_read = error: -19 [ 1681.655965][ T5916] dvb-usb: error while querying for an remote control event. [ 1681.718637][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1681.744611][T15201] dw2102: command 0x0e transfer failed. [ 1681.760912][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1681.782253][T15201] dw2102: command 0x0e transfer failed. [ 1681.786675][ T42] m920x_read = error: -19 [ 1681.801862][T15201] dvb-usb: bulk message failed: -22 (1/0) [ 1681.805958][ T42] dvb-usb: error while querying for an remote control event. [ 1681.815795][T15201] dw2102: command 0x51 transfer failed. [ 1681.932736][ T42] m920x_read = error: -19 [ 1681.937737][ T42] dvb-usb: error while querying for an remote control event. [ 1681.955460][T15201] DVB: Unable to find symbol ds3000_attach() [ 1681.987207][T15201] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1682.077784][ T42] m920x_read = error: -19 [ 1682.082262][ T42] dvb-usb: error while querying for an remote control event. [ 1682.165780][T15201] rc_core: IR keymap rc-su3000 not found [ 1682.190632][T15201] Registered IR keymap rc-empty [ 1682.205835][ T42] m920x_read = error: -19 [ 1682.210301][ T42] dvb-usb: error while querying for an remote control event. [ 1682.219087][T15201] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1682.270836][T15201] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input172 [ 1682.325532][T15201] dvb-usb: schedule remote query interval to 150 msecs. [ 1682.350484][T15201] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1682.365829][ T42] m920x_read = error: -19 [ 1682.371764][ T42] dvb-usb: error while querying for an remote control event. [ 1682.371783][T15201] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1682.501953][T15201] usb 5-1: USB disconnect, device number 89 [ 1682.516878][ T42] m920x_read = error: -19 [ 1682.522362][ T42] dvb-usb: error while querying for an remote control event. [ 1682.689732][ T42] m920x_read = error: -19 [ 1682.694716][ T42] dvb-usb: error while querying for an remote control event. [ 1682.767562][T15201] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1682.816371][ T5916] m920x_read = error: -19 [ 1682.821566][ T5916] dvb-usb: error while querying for an remote control event. [ 1682.821564][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5298'. [ 1682.975898][ T5916] m920x_read = error: -19 [ 1682.980445][ T5916] dvb-usb: error while querying for an remote control event. [ 1683.110462][ T5916] m920x_read = error: -19 [ 1683.114916][ T5916] dvb-usb: error while querying for an remote control event. [ 1683.225828][ T5916] m920x_read = error: -19 [ 1683.230354][ T5916] dvb-usb: error while querying for an remote control event. [ 1683.457071][ T5916] m920x_read = error: -19 [ 1683.461867][ T5916] dvb-usb: error while querying for an remote control event. [ 1683.543569][T26031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.554154][T26031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.606566][ T5916] m920x_read = error: -19 [ 1683.611154][ T5916] dvb-usb: error while querying for an remote control event. [ 1683.725824][ T42] m920x_read = error: -19 [ 1683.730405][ T42] dvb-usb: error while querying for an remote control event. [ 1683.795996][ T5916] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1683.855924][T25129] m920x_read = error: -19 [ 1683.860357][T25129] dvb-usb: error while querying for an remote control event. [ 1683.980106][T25129] m920x_read = error: -19 [ 1684.003143][T25129] dvb-usb: error while querying for an remote control event. [ 1684.015899][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 1684.135927][ T5916] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1684.145181][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.185969][ T42] m920x_read = error: -19 [ 1684.190464][ T42] dvb-usb: error while querying for an remote control event. [ 1684.365884][ T5916] usb 5-1: Product: syz [ 1684.375866][ T5916] usb 5-1: Manufacturer: syz [ 1684.385862][ T5916] usb 5-1: SerialNumber: syz [ 1684.475906][ T42] m920x_read = error: -19 [ 1684.480449][ T42] dvb-usb: error while querying for an remote control event. [ 1684.491633][ T5916] usb 5-1: config 0 descriptor?? [ 1684.615444][ T42] m920x_read = error: -19 [ 1684.646194][ T42] dvb-usb: error while querying for an remote control event. [ 1684.768358][T26037] bond5: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 1684.785869][ T42] m920x_read = error: -19 [ 1684.790353][ T42] dvb-usb: error while querying for an remote control event. [ 1684.799790][ T5916] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1684.840683][T26037] bond5: entered promiscuous mode [ 1684.847405][T26037] bond5: entered allmulticast mode [ 1684.935885][ T5815] m920x_read = error: -19 [ 1684.940389][ T5815] dvb-usb: error while querying for an remote control event. [ 1684.976498][T26037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1685.085876][ T5815] m920x_read = error: -19 [ 1685.090413][ T5815] dvb-usb: error while querying for an remote control event. [ 1685.233143][ T5815] m920x_read = error: -19 [ 1685.245795][ T5815] dvb-usb: error while querying for an remote control event. [ 1685.376048][ T5815] m920x_read = error: -19 [ 1685.380778][ T5815] dvb-usb: error while querying for an remote control event. [ 1685.526266][ T5815] m920x_read = error: -19 [ 1685.533657][ T5815] dvb-usb: error while querying for an remote control event. [ 1685.667233][ T5815] m920x_read = error: -19 [ 1685.678274][T26028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1685.687968][ T5815] dvb-usb: error while querying for an remote control event. [ 1685.722727][T26028] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1685.740583][T26028] team_slave_1: Caught tx_queue_len zero misconfig [ 1685.758516][ T5916] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1685.786559][ T5916] usb 5-1: USB disconnect, device number 90 [ 1685.810576][ T5815] m920x_read = error: -19 [ 1685.815107][ T5815] dvb-usb: error while querying for an remote control event. [ 1685.960031][ T5815] m920x_read = error: -19 [ 1685.964836][ T5815] dvb-usb: error while querying for an remote control event. [ 1686.145965][ T5815] m920x_read = error: -19 [ 1686.150744][ T5815] dvb-usb: error while querying for an remote control event. [ 1686.370219][T26057] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5308'. [ 1686.396704][ T5815] m920x_read = error: -19 [ 1686.403157][ T5815] dvb-usb: error while querying for an remote control event. [ 1686.535915][ T5815] m920x_read = error: -19 [ 1686.540584][ T5815] dvb-usb: error while querying for an remote control event. [ 1686.667139][ T5815] m920x_read = error: -19 [ 1686.673284][ T5815] dvb-usb: error while querying for an remote control event. [ 1686.809484][ T5815] m920x_read = error: -19 [ 1686.813881][ T5815] dvb-usb: error while querying for an remote control event. [ 1687.008537][ T5815] m920x_read = error: -19 [ 1687.014045][ T5815] dvb-usb: error while querying for an remote control event. [ 1687.115035][ T5916] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1687.159545][ T5815] m920x_read = error: -19 [ 1687.164060][ T5815] dvb-usb: error while querying for an remote control event. [ 1687.410648][T26065] bond2: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 1687.426817][T26065] bond2: entered promiscuous mode [ 1687.432152][T26065] bond2: entered allmulticast mode [ 1687.437867][T26065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1687.551808][ T5916] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1687.561421][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1687.569942][ T5916] usb 5-1: Product: syz [ 1687.585835][ T5815] m920x_read = error: -19 [ 1687.590349][ T5815] dvb-usb: error while querying for an remote control event. [ 1687.615835][ T5916] usb 5-1: Manufacturer: syz [ 1687.643259][ T5916] usb 5-1: SerialNumber: syz [ 1687.677408][ T5916] usb 5-1: config 0 descriptor?? [ 1687.705938][ T5815] m920x_read = error: -19 [ 1687.710504][ T5815] dvb-usb: error while querying for an remote control event. [ 1687.865981][ T5815] m920x_read = error: -19 [ 1687.870512][ T5815] dvb-usb: error while querying for an remote control event. [ 1687.938392][T26081] netlink: set zone limit has 4 unknown bytes [ 1688.012751][ T5815] m920x_read = error: -19 [ 1688.020642][ T5815] dvb-usb: error while querying for an remote control event. [ 1688.235831][ T5815] m920x_read = error: -19 [ 1688.242758][ T5815] dvb-usb: error while querying for an remote control event. [ 1688.366457][ T5815] m920x_read = error: -19 [ 1688.372785][ T5815] dvb-usb: error while querying for an remote control event. [ 1688.639868][ T5916] m920x_read = error: -19 [ 1688.645912][ T5916] dvb-usb: error while querying for an remote control event. [ 1688.796088][ T5916] m920x_read = error: -19 [ 1688.801791][ T5916] dvb-usb: error while querying for an remote control event. [ 1688.862786][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1688.925812][ T5916] m920x_read = error: -19 [ 1688.930972][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.065883][ T5916] m920x_read = error: -19 [ 1689.076009][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.229957][ T5916] m920x_read = error: -19 [ 1689.235075][T26087] netlink: 'syz.5.5319': attribute type 3 has an invalid length. [ 1689.236356][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.276468][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5319'. [ 1689.385818][ T5916] m920x_read = error: -19 [ 1689.398140][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.543891][T26093] syzkaller0: entered promiscuous mode [ 1689.552118][ T5916] m920x_read = error: -19 [ 1689.557167][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.589687][T26093] syzkaller0: entered allmulticast mode [ 1689.689876][ T5916] m920x_read = error: -19 [ 1689.692523][ T5902] usb 5-1: USB disconnect, device number 91 [ 1689.694288][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.799519][ T5916] m920x_read = error: -19 [ 1689.804304][ T5916] dvb-usb: error while querying for an remote control event. [ 1689.943568][ T5916] m920x_read = error: -19 [ 1689.953908][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.101952][ T5916] m920x_read = error: -19 [ 1690.117767][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.289427][ T5916] m920x_read = error: -19 [ 1690.294334][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.416645][ T5916] m920x_read = error: -19 [ 1690.421038][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.445793][ T5815] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1690.506006][T26115] input: syz1 as /devices/virtual/input/input173 [ 1690.575878][ T5916] m920x_read = error: -19 [ 1690.580264][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.606598][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 1690.614088][ T5815] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1690.622920][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1690.636792][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1690.653497][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 37920, setting to 1024 [ 1690.667401][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1690.687722][ T5815] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1690.705879][ T5916] m920x_read = error: -19 [ 1690.710286][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.727360][ T5815] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1690.737249][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.825980][ T5916] m920x_read = error: -19 [ 1690.830739][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.945936][ T5916] m920x_read = error: -19 [ 1690.950385][ T5916] dvb-usb: error while querying for an remote control event. [ 1690.979940][ T5815] usb 3-1: usb_control_msg returned -71 [ 1690.994499][ T5815] usbtmc 3-1:16.0: can't read capabilities [ 1691.019082][ T5815] usb 3-1: USB disconnect, device number 114 [ 1691.075908][ T5916] m920x_read = error: -19 [ 1691.080581][ T5916] dvb-usb: error while querying for an remote control event. [ 1691.195864][ T42] m920x_read = error: -19 [ 1691.200341][ T42] dvb-usb: error while querying for an remote control event. [ 1691.300430][ T5916] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1691.316100][ T42] m920x_read = error: -19 [ 1691.326674][ T42] dvb-usb: error while querying for an remote control event. [ 1691.382737][T26131] loop2: detected capacity change from 0 to 7 [ 1691.391188][T26131] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1691.397941][T26131] loop2: p1 start 4294770688 is beyond EOD, truncated [ 1691.404950][T26131] loop2: p2 start 17408 is beyond EOD, truncated [ 1691.419747][T26131] loop2: p3 size 1680801792 extends beyond EOD, truncated [ 1691.434117][T26131] loop2: p4 size 536870912 extends beyond EOD, truncated [ 1691.444249][T26131] loop2: p5 size 8650752 extends beyond EOD, truncated [ 1691.456148][T26131] loop2: p6 start 8388608 is beyond EOD, truncated [ 1691.475840][ T42] m920x_read = error: -19 [ 1691.480299][ T42] dvb-usb: error while querying for an remote control event. [ 1691.488163][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 1691.627281][ T5916] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1691.655832][ T5916] usb 6-1: config 1 has no interface number 0 [ 1691.665841][ T5916] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1691.677115][ T42] m920x_read = error: -19 [ 1691.681680][ T42] dvb-usb: error while querying for an remote control event. [ 1691.775931][ T5916] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1691.787732][ T5916] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1691.799150][ T5916] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1691.808838][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1691.817167][ T5916] usb 6-1: Product: syz [ 1691.821464][ T5916] usb 6-1: Manufacturer: syz [ 1691.826295][ T5916] usb 6-1: SerialNumber: syz [ 1691.841112][T26121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1691.858946][T26121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1691.875988][ T42] m920x_read = error: -19 [ 1691.880605][ T42] dvb-usb: error while querying for an remote control event. [ 1692.022169][ T42] m920x_read = error: -19 [ 1692.045795][ T42] dvb-usb: error while querying for an remote control event. [ 1692.058497][T18621] udevd[18621]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1692.064790][T25542] udevd[25542]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 1692.117604][T18881] udevd[18881]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1692.163383][T26143] bond2: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 1692.178220][T26143] bond2: entered promiscuous mode [ 1692.184045][T26143] bond2: entered allmulticast mode [ 1692.189849][T26143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1692.264841][ T42] m920x_read = error: -19 [ 1692.414492][ T42] dvb-usb: error while querying for an remote control event. [ 1692.625877][ T42] m920x_read = error: -19 [ 1692.630456][ T42] dvb-usb: error while querying for an remote control event. [ 1692.662256][T26149] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5336'. [ 1692.716913][T26121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1692.724789][T26121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1692.756644][ T42] m920x_read = error: -19 [ 1692.761280][ T42] dvb-usb: error while querying for an remote control event. [ 1692.875878][ T42] m920x_read = error: -19 [ 1692.880443][ T42] dvb-usb: error while querying for an remote control event. [ 1692.996548][ T42] m920x_read = error: -19 [ 1693.001426][ T42] dvb-usb: error while querying for an remote control event. [ 1693.116104][ T42] m920x_read = error: -19 [ 1693.120765][ T42] dvb-usb: error while querying for an remote control event. [ 1693.139300][ T5916] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1693.335855][ T42] m920x_read = error: -19 [ 1693.340323][ T42] dvb-usb: error while querying for an remote control event. [ 1693.422848][T26150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.432219][T26150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.465831][ T42] m920x_read = error: -19 [ 1693.470585][ T42] dvb-usb: error while querying for an remote control event. [ 1693.586232][ T42] m920x_read = error: -19 [ 1693.590730][ T42] dvb-usb: error while querying for an remote control event. [ 1693.705909][ T42] m920x_read = error: -19 [ 1693.710561][ T42] dvb-usb: error while querying for an remote control event. [ 1693.826952][ T42] m920x_read = error: -19 [ 1693.831655][ T42] dvb-usb: error while querying for an remote control event. [ 1693.956436][ T42] m920x_read = error: -19 [ 1693.961358][ T42] dvb-usb: error while querying for an remote control event. [ 1694.077371][T26152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.106719][ T42] m920x_read = error: -19 [ 1694.112451][ T42] dvb-usb: error while querying for an remote control event. [ 1694.121673][T26152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.226815][ T42] m920x_read = error: -19 [ 1694.238186][ T42] dvb-usb: error while querying for an remote control event. [ 1694.367277][ T42] m920x_read = error: -19 [ 1694.371887][ T42] dvb-usb: error while querying for an remote control event. [ 1694.516022][ T42] m920x_read = error: -19 [ 1694.520485][ T42] dvb-usb: error while querying for an remote control event. [ 1694.638021][ T5916] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1694.649557][ T42] m920x_read = error: -19 [ 1694.654055][ T42] dvb-usb: error while querying for an remote control event. [ 1694.724733][ T5916] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:29:70:c6:36:f5 [ 1694.845361][ T42] m920x_read = error: -19 [ 1694.865814][ T42] dvb-usb: error while querying for an remote control event. [ 1694.921940][ T5916] usb 6-1: USB disconnect, device number 61 [ 1694.961639][ T5916] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1694.986278][ T42] m920x_read = error: -19 [ 1694.990788][ T42] dvb-usb: error while querying for an remote control event. [ 1695.126474][ T5916] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1695.138956][ T5916] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1695.165835][ T42] m920x_read = error: -19 [ 1695.170357][ T42] dvb-usb: error while querying for an remote control event. [ 1695.206420][ T5916] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1695.325891][ T42] m920x_read = error: -19 [ 1695.330409][ T42] dvb-usb: error while querying for an remote control event. [ 1695.452910][ T42] m920x_read = error: -19 [ 1695.457718][ T42] dvb-usb: error while querying for an remote control event. [ 1695.607623][ T5916] m920x_read = error: -19 [ 1695.612106][ T5916] dvb-usb: error while querying for an remote control event. [ 1695.880167][ T5916] m920x_read = error: -19 [ 1695.884582][ T5916] dvb-usb: error while querying for an remote control event. [ 1696.021900][ T5916] m920x_read = error: -19 [ 1696.028378][T26183] openvswitch: netlink: IP tunnel dst address not specified [ 1696.041583][ T5916] dvb-usb: error while querying for an remote control event. [ 1696.060615][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1696.105935][ T42] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1696.185985][ T5815] m920x_read = error: -19 [ 1696.190414][ T5815] dvb-usb: error while querying for an remote control event. [ 1696.256276][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1696.282952][ T42] usb 5-1: config 0 has no interfaces? [ 1696.322685][ T5815] m920x_read = error: -19 [ 1696.327427][ T5815] dvb-usb: error while querying for an remote control event. [ 1696.530406][T26190] tipc: Enabled bearer , priority 10 [ 1696.546082][T26190] tipc: Enabled bearer , priority 0 [ 1696.568271][ T5815] m920x_read = error: -19 [ 1696.574142][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1696.605804][ T5815] dvb-usb: error while querying for an remote control event. [ 1696.650363][ T42] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1696.707468][ T42] usb 5-1: Manufacturer: syz [ 1696.721158][T26191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.731161][T26191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.785560][ T5916] m920x_read = error: -19 [ 1696.851554][ T5916] dvb-usb: error while querying for an remote control event. [ 1696.885028][ T42] usb 5-1: config 0 descriptor?? [ 1697.016428][ T42] m920x_read = error: -19 [ 1697.026500][ T42] dvb-usb: error while querying for an remote control event. [ 1697.145957][ T42] m920x_read = error: -19 [ 1697.180647][ T42] dvb-usb: error while querying for an remote control event. [ 1697.355952][ T42] m920x_read = error: -19 [ 1697.360535][ T42] dvb-usb: error while querying for an remote control event. [ 1697.477269][ T42] m920x_read = error: -19 [ 1697.481791][ T42] dvb-usb: error while querying for an remote control event. [ 1697.608443][ T42] m920x_read = error: -19 [ 1697.661510][ T42] dvb-usb: error while querying for an remote control event. [ 1697.705415][T26209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1697.848164][ T5916] tipc: Node number set to 3891882566 [ 1697.966143][ T5916] m920x_read = error: -19 [ 1697.970643][ T5916] dvb-usb: error while querying for an remote control event. [ 1698.086243][ T5916] m920x_read = error: -19 [ 1698.091057][ T5916] dvb-usb: error while querying for an remote control event. [ 1698.224155][ T5916] m920x_read = error: -19 [ 1698.235587][ T5916] dvb-usb: error while querying for an remote control event. [ 1698.476197][ T5916] m920x_read = error: -19 [ 1698.559368][ T5916] dvb-usb: error while querying for an remote control event. [ 1698.705944][ T5916] m920x_read = error: -19 [ 1698.710401][ T5916] dvb-usb: error while querying for an remote control event. [ 1698.848539][ T5916] m920x_read = error: -19 [ 1698.853526][ T5916] dvb-usb: error while querying for an remote control event. [ 1699.005855][ T5916] m920x_read = error: -19 [ 1699.035794][ T5916] dvb-usb: error while querying for an remote control event. [ 1699.177395][ T5916] m920x_read = error: -19 [ 1699.200373][ T5916] dvb-usb: error while querying for an remote control event. [ 1699.272331][T15201] usb 5-1: USB disconnect, device number 92 [ 1699.345963][ T5916] m920x_read = error: -19 [ 1699.350452][ T5916] dvb-usb: error while querying for an remote control event. [ 1699.494963][ T5916] m920x_read = error: -19 [ 1699.509940][ T5916] dvb-usb: error while querying for an remote control event. [ 1699.665942][ T5815] m920x_read = error: -19 [ 1699.670466][ T5815] dvb-usb: error while querying for an remote control event. [ 1699.777556][ T5916] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1699.796028][ T42] m920x_read = error: -19 [ 1699.800548][ T42] dvb-usb: error while querying for an remote control event. [ 1699.915919][ T42] m920x_read = error: -19 [ 1699.920441][ T42] dvb-usb: error while querying for an remote control event. [ 1699.945766][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 1699.954851][ T5916] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1699.964266][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.973278][ T5916] usb 5-1: Product: syz [ 1699.977965][ T5916] usb 5-1: Manufacturer: syz [ 1699.982714][ T5916] usb 5-1: SerialNumber: syz [ 1699.996496][ T5916] usb 5-1: config 0 descriptor?? [ 1700.006016][T15201] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1700.009836][ T5916] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1700.025027][ T5916] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1700.032169][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1700.039388][ T42] m920x_read = error: -19 [ 1700.054477][ T42] dvb-usb: error while querying for an remote control event. [ 1700.069113][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1700.086667][ T5916] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1700.097122][ T5916] usb 5-1: media controller created [ 1700.102479][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1700.109317][ T5916] dw2102: i2c transfer failed. [ 1700.114210][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1700.123511][ T5916] dw2102: i2c transfer failed. [ 1700.149244][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1700.156563][ T5916] dw2102: i2c transfer failed. [ 1700.162035][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1700.168386][ T42] m920x_read = error: -19 [ 1700.172898][ T42] dvb-usb: error while querying for an remote control event. [ 1700.181238][ T5916] dw2102: i2c transfer failed. [ 1700.184591][T15201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1700.187726][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1700.202784][ T5916] dw2102: i2c transfer failed. [ 1700.216119][T15201] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1700.229550][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1700.236543][ T5916] dw2102: i2c transfer failed. [ 1700.241495][ T5916] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1700.259268][T15201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1700.272092][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1700.285844][ T42] m920x_read = error: -19 [ 1700.290721][ T42] dvb-usb: error while querying for an remote control event. [ 1700.296484][T15201] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1700.317688][T15201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.331225][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1700.333935][T15201] usb 3-1: Product: syz [ 1700.340608][ T5916] dw2102: command 0x0e transfer failed. [ 1700.349791][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1700.355958][T15201] usb 3-1: Manufacturer: syz [ 1700.355980][T15201] usb 3-1: SerialNumber: syz [ 1700.365822][ T5916] dw2102: command 0x0e transfer failed. [ 1700.378479][T15201] usb 3-1: config 0 descriptor?? [ 1700.386697][T26228] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1700.397645][T15201] usb 3-1: ucan: probing device on interface #0 [ 1700.414165][T15201] usb 3-1: ucan: invalid endpoint configuration [ 1700.425839][ T42] m920x_read = error: -19 [ 1700.430563][ T42] dvb-usb: error while querying for an remote control event. [ 1700.432953][T15201] usb 3-1: ucan: probe failed; try to update the device firmware [ 1700.468974][T26242] openvswitch: netlink: IP tunnel dst address not specified [ 1700.486046][T26242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1700.617679][ T42] m920x_read = error: -19 [ 1700.622022][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1700.622080][ T29] audit: type=1326 audit(1773479707.056:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26227 comm="syz.2.5357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcc9d9c799 code=0x0 [ 1700.622132][ T29] audit: type=1326 audit(1773479707.056:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26227 comm="syz.2.5357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcc9d9c799 code=0x0 [ 1700.629112][ T42] dvb-usb: error while querying for an remote control event. [ 1700.709107][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1700.715062][ T5916] dw2102: command 0x0e transfer failed. [ 1700.720792][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1700.728745][ T5916] dw2102: command 0x0e transfer failed. [ 1700.734389][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1700.794561][T15201] usb 3-1: USB disconnect, device number 115 [ 1700.802168][ T5916] dw2102: command 0x51 transfer failed. [ 1700.966602][ T42] m920x_read = error: -19 [ 1700.971029][ T42] dvb-usb: error while querying for an remote control event. [ 1701.016413][T26252] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5363'. [ 1701.039168][ T5916] DVB: Unable to find symbol ds3000_attach() [ 1701.046137][ T5916] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1701.097176][ T42] m920x_read = error: -19 [ 1701.101790][ T42] dvb-usb: error while querying for an remote control event. [ 1701.254523][ T42] m920x_read = error: -19 [ 1701.278036][ T42] dvb-usb: error while querying for an remote control event. [ 1701.322540][T26259] tipc: Enabling of bearer rejected, already enabled [ 1701.331620][T26259] tipc: Enabling of bearer rejected, already enabled [ 1701.429882][ T42] m920x_read = error: -19 [ 1701.437472][ T42] dvb-usb: error while querying for an remote control event. [ 1701.559547][ T42] m920x_read = error: -19 [ 1701.564712][ T42] dvb-usb: error while querying for an remote control event. [ 1701.595834][ T5916] rc_core: IR keymap rc-su3000 not found [ 1701.601838][ T5916] Registered IR keymap rc-empty [ 1701.619613][ T5916] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1701.710639][ T42] m920x_read = error: -19 [ 1701.715374][ T42] dvb-usb: error while querying for an remote control event. [ 1701.819010][T26264] fuse: Unknown parameter 'v' [ 1701.924445][ T42] m920x_read = error: -19 [ 1701.946456][ T42] dvb-usb: error while querying for an remote control event. [ 1702.045979][ T5916] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input174 [ 1702.091167][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 1702.116043][T25129] m920x_read = error: -19 [ 1702.120677][T25129] dvb-usb: error while querying for an remote control event. [ 1702.129324][ T5916] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1702.153713][ T5916] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1702.212902][ T5916] usb 5-1: USB disconnect, device number 93 [ 1702.235824][ T42] m920x_read = error: -19 [ 1702.240574][ T42] dvb-usb: error while querying for an remote control event. [ 1702.348641][ T5916] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1702.375832][ T42] m920x_read = error: -19 [ 1702.385056][ T42] dvb-usb: error while querying for an remote control event. [ 1702.546335][ T42] m920x_read = error: -19 [ 1702.550757][ T42] dvb-usb: error while querying for an remote control event. [ 1702.665871][ T5916] m920x_read = error: -19 [ 1702.670278][ T5916] dvb-usb: error while querying for an remote control event. [ 1702.785907][ T5916] m920x_read = error: -19 [ 1702.790398][ T5916] dvb-usb: error while querying for an remote control event. [ 1702.925810][ T5916] m920x_read = error: -19 [ 1702.930310][ T5916] dvb-usb: error while querying for an remote control event. [ 1703.056417][ T29] audit: type=1326 audit(1773479709.496:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.066745][ T5916] m920x_read = error: -19 [ 1703.100887][ T5916] dvb-usb: error while querying for an remote control event. [ 1703.146496][ T29] audit: type=1326 audit(1773479709.526:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.206343][ T29] audit: type=1326 audit(1773479709.526:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.239453][ T5916] m920x_read = error: -19 [ 1703.243951][ T5916] dvb-usb: error while querying for an remote control event. [ 1703.270453][T26282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1703.317852][ T29] audit: type=1326 audit(1773479709.526:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.416222][ T5916] m920x_read = error: -19 [ 1703.424066][ T5916] dvb-usb: error while querying for an remote control event. [ 1703.432529][ T29] audit: type=1326 audit(1773479709.526:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.487360][ T29] audit: type=1326 audit(1773479709.526:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.549170][ T29] audit: type=1326 audit(1773479709.526:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.556562][ T5916] m920x_read = error: -19 [ 1703.578453][ T5916] dvb-usb: error while querying for an remote control event. [ 1703.715461][ T29] audit: type=1326 audit(1773479709.526:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.0.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86df39c799 code=0x7ffc0000 [ 1703.775881][ T5916] m920x_read = error: -19 [ 1703.780519][ T5916] dvb-usb: error while querying for an remote control event. [ 1703.895808][ T42] m920x_read = error: -19 [ 1703.900467][ T42] dvb-usb: error while querying for an remote control event. [ 1703.926527][ T5916] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1704.015998][T25129] m920x_read = error: -19 [ 1704.023914][T25129] dvb-usb: error while querying for an remote control event. [ 1704.065842][ T42] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1704.088150][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1704.099822][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.120442][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1704.136520][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.147087][T25129] m920x_read = error: -19 [ 1704.153834][T25129] dvb-usb: error while querying for an remote control event. [ 1704.170143][ T5916] usb 5-1: config 0 descriptor?? [ 1704.188150][ T5916] hub 5-1:0.0: USB hub found [ 1704.244980][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 1704.258277][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1704.275015][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.283395][T25129] m920x_read = error: -19 [ 1704.291369][T25129] dvb-usb: error while querying for an remote control event. [ 1704.299352][ T42] usb 6-1: Product: syz [ 1704.303771][ T42] usb 6-1: Manufacturer: syz [ 1704.310867][ T42] usb 6-1: SerialNumber: syz [ 1704.326414][T26297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1704.340951][ T42] usb 6-1: config 0 descriptor?? [ 1704.353283][ T42] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1704.370038][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1704.377775][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 1704.408358][T25129] m920x_read = error: -19 [ 1704.412816][T25129] dvb-usb: error while querying for an remote control event. [ 1704.430060][ T5916] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1704.440814][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1704.462939][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 1704.471871][ T42] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1704.485907][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1704.494159][ T42] usb 6-1: media controller created [ 1704.516218][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1704.535420][ T42] dw2102: i2c transfer failed. [ 1704.542078][ T5916] usb 5-1: USB disconnect, device number 94 [ 1704.551418][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1704.564580][ T42] dw2102: i2c transfer failed. [ 1704.578683][T25129] m920x_read = error: -19 [ 1704.586575][T25129] dvb-usb: error while querying for an remote control event. [ 1704.609893][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1704.619588][ T42] dw2102: i2c transfer failed. [ 1704.624442][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1704.630645][ T42] dw2102: i2c transfer failed. [ 1704.647995][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1704.668432][ T42] dw2102: i2c transfer failed. [ 1704.674192][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1704.681428][ T42] dw2102: i2c transfer failed. [ 1704.686745][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1704.723174][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1704.732193][T25129] m920x_read = error: -19 [ 1704.744137][T25129] dvb-usb: error while querying for an remote control event. [ 1704.790561][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1704.804774][ T42] dw2102: command 0x0e transfer failed. [ 1704.811460][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1704.820025][ T42] dw2102: command 0x0e transfer failed. [ 1704.866730][T25129] m920x_read = error: -19 [ 1704.871149][T25129] dvb-usb: error while querying for an remote control event. [ 1704.928207][T26308] tipc: Resetting bearer [ 1704.937548][T26309] openvswitch: netlink: IP tunnel dst address not specified [ 1704.949810][T26309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5379'. [ 1705.014223][T25129] m920x_read = error: -19 [ 1705.025865][T25129] dvb-usb: error while querying for an remote control event. [ 1705.141522][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1705.151715][ T42] dw2102: command 0x0e transfer failed. [ 1705.157851][ T5916] m920x_read = error: -19 [ 1705.162251][ T5916] dvb-usb: error while querying for an remote control event. [ 1705.173786][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1705.186013][ T42] dw2102: command 0x0e transfer failed. [ 1705.251806][T26314] tipc: Enabling of bearer rejected, already enabled [ 1705.260702][T26314] tipc: Enabling of bearer rejected, already enabled [ 1705.306004][T25129] m920x_read = error: -19 [ 1705.313620][T25129] dvb-usb: error while querying for an remote control event. [ 1705.341969][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 1705.356438][ T42] dw2102: command 0x51 transfer failed. [ 1705.436111][T25129] m920x_read = error: -19 [ 1705.450115][T25129] dvb-usb: error while querying for an remote control event. [ 1705.560290][ T42] DVB: Unable to find symbol ds3000_attach() [ 1705.567130][T25129] m920x_read = error: -19 [ 1705.576443][T25129] dvb-usb: error while querying for an remote control event. [ 1705.584731][ T42] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1705.712441][T25129] m920x_read = error: -19 [ 1705.717026][T25129] dvb-usb: error while querying for an remote control event. [ 1705.855835][T25129] m920x_read = error: -19 [ 1705.860309][T25129] dvb-usb: error while querying for an remote control event. [ 1705.945815][ T42] rc_core: IR keymap rc-su3000 not found [ 1705.964741][ T42] Registered IR keymap rc-empty [ 1705.986585][ T42] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1706.015974][T25129] m920x_read = error: -19 [ 1706.028294][ T42] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input175 [ 1706.047286][T25129] dvb-usb: error while querying for an remote control event. [ 1706.168583][T25129] m920x_read = error: -19 [ 1706.207577][T25129] dvb-usb: error while querying for an remote control event. [ 1706.222215][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 1706.251886][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1706.403428][T25129] m920x_read = error: -19 [ 1706.411375][T25129] dvb-usb: error while querying for an remote control event. [ 1706.419208][T12315] dvb-usb: bulk message failed: -22 (1/0) [ 1706.424944][T12315] dw2102: i2c transfer failed. [ 1706.482799][ T42] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1706.548157][ T42] usb 6-1: USB disconnect, device number 62 [ 1706.652964][T12315] m920x_read = error: -19 [ 1706.757204][T26345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5389'. [ 1706.797577][T12315] dvb-usb: error while querying for an remote control event. [ 1706.833335][ T42] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1706.956523][T12315] m920x_read = error: -19 [ 1706.985919][T12315] dvb-usb: error while querying for an remote control event. [ 1707.146064][T12315] m920x_read = error: -19 [ 1707.242852][T12315] dvb-usb: error while querying for an remote control event. [ 1707.404835][T26354] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5390'. [ 1707.475885][T12315] m920x_read = error: -19 [ 1707.480337][T12315] dvb-usb: error while querying for an remote control event. [ 1707.615925][T12315] m920x_read = error: -19 [ 1707.620590][T12315] dvb-usb: error while querying for an remote control event. [ 1707.777395][T12315] m920x_read = error: -19 [ 1708.040077][T12315] dvb-usb: error while querying for an remote control event. [ 1708.405849][ T5916] m920x_read = error: -19 [ 1708.410325][ T5916] dvb-usb: error while querying for an remote control event. [ 1708.526024][T12315] m920x_read = error: -19 [ 1708.530556][T12315] dvb-usb: error while querying for an remote control event. [ 1708.585782][T15201] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1708.665945][T12315] m920x_read = error: -19 [ 1708.671625][T12315] dvb-usb: error while querying for an remote control event. [ 1708.745858][T15201] usb 5-1: Using ep0 maxpacket: 32 [ 1708.754955][T15201] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1708.764679][T15201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.783297][T15201] usb 5-1: Product: syz [ 1708.786647][ T5916] m920x_read = error: -19 [ 1708.793875][ T5916] dvb-usb: error while querying for an remote control event. [ 1708.820536][T15201] usb 5-1: Manufacturer: syz [ 1708.831137][T15201] usb 5-1: SerialNumber: syz [ 1708.883367][T15201] usb 5-1: config 0 descriptor?? [ 1708.899791][T15201] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1708.914926][T15201] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1708.916482][ T5916] m920x_read = error: -19 [ 1708.925577][ T5916] dvb-usb: error while querying for an remote control event. [ 1708.933465][T15201] dvb-usb: bulk message failed: -22 (2/0) [ 1708.950572][T15201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1708.967817][T15201] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1708.977580][T15201] usb 5-1: media controller created [ 1708.983819][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1708.990834][T15201] dw2102: i2c transfer failed. [ 1708.996030][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1709.002034][T15201] dw2102: i2c transfer failed. [ 1709.007374][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1709.014359][T15201] dw2102: i2c transfer failed. [ 1709.028536][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1709.040059][T15201] dw2102: i2c transfer failed. [ 1709.045861][ T5916] m920x_read = error: -19 [ 1709.050357][ T5916] dvb-usb: error while querying for an remote control event. [ 1709.063706][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1709.225339][T15201] dw2102: i2c transfer failed. [ 1709.249306][T15201] dvb-usb: bulk message failed: -22 (6/0) [ 1709.274566][T15201] dw2102: i2c transfer failed. [ 1709.292322][T15201] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1709.306868][ T5916] m920x_read = error: -19 [ 1709.315595][ T5916] dvb-usb: error while querying for an remote control event. [ 1709.364466][T15201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1709.435897][ T5916] m920x_read = error: -19 [ 1709.440427][ T5916] dvb-usb: error while querying for an remote control event. [ 1709.455115][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1709.470041][T15201] dw2102: command 0x0e transfer failed. [ 1709.485980][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1709.507770][T15201] dw2102: command 0x0e transfer failed. [ 1709.514882][T26382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5396'. [ 1709.566109][ T5916] m920x_read = error: -19 [ 1709.570628][ T5916] dvb-usb: error while querying for an remote control event. [ 1709.695908][ T5916] m920x_read = error: -19 [ 1709.724578][ T5916] dvb-usb: error while querying for an remote control event. [ 1709.881121][ T5916] m920x_read = error: -19 [ 1709.885767][ T5916] dvb-usb: error while querying for an remote control event. [ 1709.896194][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1709.902094][T15201] dw2102: command 0x0e transfer failed. [ 1709.907958][T15201] dvb-usb: bulk message failed: -22 (3/0) [ 1709.913819][T15201] dw2102: command 0x0e transfer failed. [ 1709.919625][T15201] dvb-usb: bulk message failed: -22 (1/0) [ 1709.925478][T15201] dw2102: command 0x51 transfer failed. [ 1709.970067][T26392] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5398'. [ 1710.098873][ T5916] m920x_read = error: -19 [ 1710.103307][ T5916] dvb-usb: error while querying for an remote control event. [ 1710.180289][T26396] openvswitch: netlink: IP tunnel dst address not specified [ 1710.193903][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5400'. [ 1710.243977][ T5916] m920x_read = error: -19 [ 1710.257872][ T5916] dvb-usb: error while querying for an remote control event. [ 1710.392910][ T5916] m920x_read = error: -19 [ 1710.404264][ T5916] dvb-usb: error while querying for an remote control event. [ 1710.471175][T15201] DVB: Unable to find symbol ds3000_attach() [ 1710.483683][T15201] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1710.545858][ T5916] m920x_read = error: -19 [ 1710.587187][ T5916] dvb-usb: error while querying for an remote control event. [ 1710.716082][ T5916] m920x_read = error: -19 [ 1710.720560][ T5916] dvb-usb: error while querying for an remote control event. [ 1710.865904][ T5916] m920x_read = error: -19 [ 1710.870462][ T5916] dvb-usb: error while querying for an remote control event. [ 1710.995848][ T5916] m920x_read = error: -19 [ 1711.000275][ T5916] dvb-usb: error while querying for an remote control event. [ 1711.034843][T26404] tipc: Enabling of bearer rejected, already enabled [ 1711.044400][T26404] tipc: Enabling of bearer rejected, already enabled [ 1711.276832][ T5916] m920x_read = error: -19 [ 1711.281329][ T5916] dvb-usb: error while querying for an remote control event. [ 1711.355902][T15201] rc_core: IR keymap rc-su3000 not found [ 1711.372767][T15201] Registered IR keymap rc-empty [ 1711.395892][ T5916] m920x_read = error: -19 [ 1711.400341][ T5916] dvb-usb: error while querying for an remote control event. [ 1711.425988][T15201] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1711.480987][T15201] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input176 [ 1711.564038][ T5916] m920x_read = error: -19 [ 1711.568627][ T5916] dvb-usb: error while querying for an remote control event. [ 1711.661787][T15201] dvb-usb: schedule remote query interval to 150 msecs. [ 1711.710257][T15201] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1711.727365][T15201] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1711.792533][T15201] usb 5-1: USB disconnect, device number 95 [ 1711.826146][ T5916] m920x_read = error: -19 [ 1711.831805][ T5916] dvb-usb: error while querying for an remote control event. [ 1711.955933][ T5916] m920x_read = error: -19 [ 1711.961670][ T5916] dvb-usb: error while querying for an remote control event. [ 1711.984272][T15201] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1712.075920][ T5916] m920x_read = error: -19 [ 1712.080501][ T5916] dvb-usb: error while querying for an remote control event. [ 1712.195953][ T5916] m920x_read = error: -19 [ 1712.201359][ T5916] dvb-usb: error while querying for an remote control event. [ 1712.424561][ T5916] m920x_read = error: -19 [ 1712.449028][ T5916] dvb-usb: error while querying for an remote control event. [ 1712.587507][ T42] m920x_read = error: -19 [ 1712.592100][ T42] dvb-usb: error while querying for an remote control event. [ 1712.705877][ T42] m920x_read = error: -19 [ 1712.710386][ T42] dvb-usb: error while querying for an remote control event. [ 1712.835919][ T42] m920x_read = error: -19 [ 1712.838809][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1712.838863][ T29] audit: type=1326 audit(1773479719.256:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1712.840776][ T42] dvb-usb: error while querying for an remote control event. [ 1712.883904][ T29] audit: type=1326 audit(1773479719.256:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1712.957042][ T29] audit: type=1326 audit(1773479719.256:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1712.990209][ T29] audit: type=1326 audit(1773479719.266:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.019275][ T29] audit: type=1326 audit(1773479719.266:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.081485][T26423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5407'. [ 1713.147560][ T29] audit: type=1326 audit(1773479719.266:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.242175][ T29] audit: type=1326 audit(1773479719.266:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.278771][ T42] m920x_read = error: -19 [ 1713.289501][ T42] dvb-usb: error while querying for an remote control event. [ 1713.392670][ T29] audit: type=1326 audit(1773479719.266:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.416544][ T42] m920x_read = error: -19 [ 1713.421013][ T42] dvb-usb: error while querying for an remote control event. [ 1713.560269][ T42] m920x_read = error: -19 [ 1713.564843][ T42] dvb-usb: error while querying for an remote control event. [ 1713.645773][ T5916] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1713.662163][ T29] audit: type=1326 audit(1773479719.266:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.708862][ T29] audit: type=1326 audit(1773479719.266:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26416 comm="syz.5.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f888b19c799 code=0x7ffc0000 [ 1713.710485][ T42] m920x_read = error: -19 [ 1713.746580][T26434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.755841][T26434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.784032][T26434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.793489][T26434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.804826][T26434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.826061][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1713.832086][T26434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.907765][ T42] dvb-usb: error while querying for an remote control event. [ 1714.299622][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1714.435827][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.448605][ T5916] usb 3-1: Product: syz [ 1714.455978][ T5916] usb 3-1: Manufacturer: syz [ 1714.475429][ T5916] usb 3-1: SerialNumber: syz [ 1714.481340][ T42] m920x_read = error: -19 [ 1714.486748][ T42] dvb-usb: error while querying for an remote control event. [ 1714.529828][ T5916] usb 3-1: config 0 descriptor?? [ 1714.551162][ T5916] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1714.575986][ T5916] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1714.592026][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1714.598932][ T42] m920x_read = error: -19 [ 1714.603583][ T42] dvb-usb: error while querying for an remote control event. [ 1714.633986][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1714.659970][ T5916] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1714.688047][ T5916] usb 3-1: media controller created [ 1714.719282][ T42] m920x_read = error: -19 [ 1714.725101][ T42] dvb-usb: error while querying for an remote control event. [ 1714.733045][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1714.744233][ T5916] dw2102: i2c transfer failed. [ 1714.839966][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1714.846071][ T42] m920x_read = error: -19 [ 1714.851550][ T42] dvb-usb: error while querying for an remote control event. [ 1714.859084][ T5916] dw2102: i2c transfer failed. [ 1714.868730][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1714.877005][ T5916] dw2102: i2c transfer failed. [ 1714.931085][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1714.943262][ T5916] dw2102: i2c transfer failed. [ 1714.955622][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1714.966976][ T5916] dw2102: i2c transfer failed. [ 1714.975812][ T42] m920x_read = error: -19 [ 1714.980209][ T42] dvb-usb: error while querying for an remote control event. [ 1714.992687][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1715.005000][ T5916] dw2102: i2c transfer failed. [ 1715.015178][ T5916] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1715.068742][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1715.095981][ T42] m920x_read = error: -19 [ 1715.100559][ T42] dvb-usb: error while querying for an remote control event. [ 1715.153906][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1715.173520][ T5916] dw2102: command 0x0e transfer failed. [ 1715.185145][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1715.195784][ T5916] dw2102: command 0x0e transfer failed. [ 1715.235837][ T42] m920x_read = error: -19 [ 1715.240317][ T42] dvb-usb: error while querying for an remote control event. [ 1715.357741][ T42] m920x_read = error: -19 [ 1715.362382][ T42] dvb-usb: error while querying for an remote control event. [ 1715.516702][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1715.534103][ T5916] dw2102: command 0x0e transfer failed. [ 1715.554189][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1715.580768][ T5916] dw2102: command 0x0e transfer failed. [ 1715.603915][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1715.614335][T26440] can: request_module (can-proto-5) failed. [ 1715.634180][ T5916] dw2102: command 0x51 transfer failed. [ 1715.651500][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.659148][ T42] m920x_read = error: -19 [ 1715.670546][ T42] dvb-usb: error while querying for an remote control event. [ 1715.681154][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.714321][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.741813][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.766681][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.785312][ T5916] DVB: Unable to find symbol ds3000_attach() [ 1715.797539][ T5916] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1715.808891][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.823525][ T42] m920x_read = error: -19 [ 1715.832089][ T42] dvb-usb: error while querying for an remote control event. [ 1715.844188][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.871920][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.918593][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.959845][T25129] hid-generic 0103:0004:0000.002D: unknown main item tag 0x0 [ 1715.977288][ T42] m920x_read = error: -19 [ 1715.981949][ T42] dvb-usb: error while querying for an remote control event. [ 1716.015464][T25129] hid-generic 0103:0004:0000.002D: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1716.057566][ T5916] rc_core: IR keymap rc-su3000 not found [ 1716.074401][ T5916] Registered IR keymap rc-empty [ 1716.103516][ T5916] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1716.116133][T25129] m920x_read = error: -19 [ 1716.124153][T25129] dvb-usb: error while querying for an remote control event. [ 1716.161281][ T5916] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input177 [ 1716.228835][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 1716.255786][T25129] m920x_read = error: -19 [ 1716.265117][ T5916] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1716.274854][T25129] dvb-usb: error while querying for an remote control event. [ 1716.301804][ T5916] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1716.326702][T26453] fido_id[26453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1716.919173][T25129] dvb-usb: bulk message failed: -22 (1/0) [ 1716.932042][T25129] dw2102: i2c transfer failed. [ 1716.940738][ T42] m920x_read = error: -19 [ 1716.945153][ T42] dvb-usb: error while querying for an remote control event. [ 1716.964087][ T5916] usb 3-1: USB disconnect, device number 116 [ 1717.013754][T26459] openvswitch: netlink: IP tunnel dst address not specified [ 1717.144763][ T5916] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1717.156470][ T42] m920x_read = error: -19 [ 1717.160881][ T42] dvb-usb: error while querying for an remote control event. [ 1717.177972][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5417'. [ 1717.335812][ T42] m920x_read = error: -19 [ 1717.507243][ T42] dvb-usb: error while querying for an remote control event. [ 1717.537076][T26469] tipc: Enabling of bearer rejected, already enabled [ 1717.545479][T26469] tipc: Enabling of bearer rejected, already enabled [ 1717.666063][T12315] m920x_read = error: -19 [ 1717.740350][T12315] dvb-usb: error while querying for an remote control event. [ 1717.856416][ T5916] m920x_read = error: -19 [ 1717.861159][ T5916] dvb-usb: error while querying for an remote control event. [ 1717.976367][ T5916] m920x_read = error: -19 [ 1717.980842][ T5916] dvb-usb: error while querying for an remote control event. [ 1718.027906][T26478] syzkaller0: entered promiscuous mode [ 1718.034997][T26478] syzkaller0: entered allmulticast mode [ 1718.095942][ T5916] m920x_read = error: -19 [ 1718.101594][ T5916] dvb-usb: error while querying for an remote control event. [ 1718.375970][ T5916] m920x_read = error: -19 [ 1718.398241][ T5916] dvb-usb: error while querying for an remote control event. [ 1718.572701][ T5916] m920x_read = error: -19 [ 1718.577388][ T5916] dvb-usb: error while querying for an remote control event. [ 1718.705495][ T5916] m920x_read = error: -19 [ 1718.723727][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.026197][ T5916] m920x_read = error: -19 [ 1719.030686][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.207701][ T5916] m920x_read = error: -19 [ 1719.212257][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.258676][T26489] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5426'. [ 1719.355955][ T5916] m920x_read = error: -19 [ 1719.360476][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.496399][ T5916] m920x_read = error: -19 [ 1719.500943][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.645863][ T5916] m920x_read = error: -19 [ 1719.650458][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.799501][ T5916] m920x_read = error: -19 [ 1719.803954][ T5916] dvb-usb: error while querying for an remote control event. [ 1719.956625][ T5916] m920x_read = error: -19 [ 1719.961065][ T5916] dvb-usb: error while querying for an remote control event. [ 1720.105831][ T5916] m920x_read = error: -19 [ 1720.110347][ T5916] dvb-usb: error while querying for an remote control event. [ 1720.246707][ T5916] m920x_read = error: -19 [ 1720.251354][ T5916] dvb-usb: error while querying for an remote control event. [ 1720.425871][ T5916] m920x_read = error: -19 [ 1720.430305][ T5916] dvb-usb: error while querying for an remote control event. [ 1720.451010][T26521] openvswitch: netlink: IP tunnel dst address not specified [ 1720.483219][T26521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5434'. [ 1720.586615][ T5916] m920x_read = error: -19 [ 1720.591214][ T5916] dvb-usb: error while querying for an remote control event. [ 1720.657904][T26524] tipc: Enabling of bearer rejected, already enabled [ 1720.756138][ T42] m920x_read = error: -19 [ 1720.765209][ T42] dvb-usb: error while querying for an remote control event. [ 1720.854566][T26524] tipc: Enabling of bearer rejected, already enabled [ 1720.916690][ T42] m920x_read = error: -19 [ 1720.929658][ T42] dvb-usb: error while querying for an remote control event. [ 1721.068613][ T42] m920x_read = error: -19 [ 1721.089630][ T42] dvb-usb: error while querying for an remote control event. [ 1721.206058][ T5916] m920x_read = error: -19 [ 1721.210639][ T5916] dvb-usb: error while querying for an remote control event. [ 1721.344012][ T5916] m920x_read = error: -19 [ 1721.349472][ T5916] dvb-usb: error while querying for an remote control event. [ 1721.394706][T26545] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5441'. [ 1721.466113][ T5916] m920x_read = error: -19 [ 1721.470782][ T5916] dvb-usb: error while querying for an remote control event. [ 1721.596001][ T5916] m920x_read = error: -19 [ 1721.617635][ T5916] dvb-usb: error while querying for an remote control event. [ 1721.756646][ T5916] m920x_read = error: -19 [ 1721.771465][ T5916] dvb-usb: error while querying for an remote control event. [ 1721.875862][ T42] m920x_read = error: -19 [ 1721.875896][ T42] dvb-usb: error while querying for an remote control event. [ 1721.996012][ T5916] m920x_read = error: -19 [ 1722.000524][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.137005][ T5916] m920x_read = error: -19 [ 1722.141564][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.265882][ T5916] m920x_read = error: -19 [ 1722.271391][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.396644][ T5916] m920x_read = error: -19 [ 1722.401114][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.455055][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1722.522045][T26568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5446'. [ 1722.560627][ T5916] m920x_read = error: -19 [ 1722.565095][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.686125][ T5916] m920x_read = error: -19 [ 1722.699337][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.835912][ T5916] m920x_read = error: -19 [ 1722.840429][ T5916] dvb-usb: error while querying for an remote control event. [ 1722.995839][ T5916] m920x_read = error: -19 [ 1723.000481][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.151190][ T5916] m920x_read = error: -19 [ 1723.168149][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.355864][ T5916] m920x_read = error: -19 [ 1723.360518][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.485891][ T5916] m920x_read = error: -19 [ 1723.505878][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.625899][ T5902] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1723.658472][ T5916] m920x_read = error: -19 [ 1723.663158][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.780194][ T5916] m920x_read = error: -19 [ 1723.785763][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1723.785781][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.838775][ T5902] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1723.850211][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.863251][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1723.883715][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1723.895781][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.895997][ T5916] m920x_read = error: -19 [ 1723.914762][ T5902] usb 5-1: Product: syz [ 1723.919080][ T5916] dvb-usb: error while querying for an remote control event. [ 1723.925259][ T5902] usb 5-1: Manufacturer: syz [ 1723.935100][ T5902] usb 5-1: SerialNumber: syz [ 1724.107875][ T5916] m920x_read = error: -19 [ 1724.116581][ T5916] dvb-usb: error while querying for an remote control event. [ 1724.257156][ T5916] m920x_read = error: -19 [ 1724.261586][ T5916] dvb-usb: error while querying for an remote control event. [ 1724.397070][T12315] m920x_read = error: -19 [ 1724.397104][T12315] dvb-usb: error while querying for an remote control event. [ 1724.497655][ T5902] usb 5-1: 0:2 : does not exist [ 1724.512506][T12315] m920x_read = error: -19 [ 1724.512541][T12315] dvb-usb: error while querying for an remote control event. [ 1724.525065][T26606] openvswitch: netlink: IP tunnel dst address not specified [ 1724.561672][T26606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5457'. [ 1724.625916][T12315] m920x_read = error: -19 [ 1724.625949][T12315] dvb-usb: error while querying for an remote control event. [ 1724.772373][T12315] m920x_read = error: -19 [ 1724.772408][T12315] dvb-usb: error while querying for an remote control event. [ 1724.878589][T12315] m920x_read = error: -19 [ 1724.878623][T12315] dvb-usb: error while querying for an remote control event. [ 1724.986706][T12315] m920x_read = error: -19 [ 1724.986738][T12315] dvb-usb: error while querying for an remote control event. [ 1725.096001][T12315] m920x_read = error: -19 [ 1725.096046][T12315] dvb-usb: error while querying for an remote control event. [ 1725.209054][T12315] m920x_read = error: -19 [ 1725.209081][T12315] dvb-usb: error while querying for an remote control event. [ 1725.308712][T26583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.309103][T26583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.319758][ T5916] m920x_read = error: -19 [ 1725.319780][ T5916] dvb-usb: error while querying for an remote control event. [ 1725.422790][ T5902] usb 5-1: USB disconnect, device number 96 [ 1725.436430][T12315] m920x_read = error: -19 [ 1725.504903][T12315] dvb-usb: error while querying for an remote control event. [ 1725.623998][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1725.645806][ T5916] m920x_read = error: -19 [ 1725.650366][ T5916] dvb-usb: error while querying for an remote control event. [ 1725.775858][ T5916] m920x_read = error: -19 [ 1725.780297][ T5916] dvb-usb: error while querying for an remote control event. [ 1725.937807][ T5916] m920x_read = error: -19 [ 1725.942398][ T5916] dvb-usb: error while querying for an remote control event. [ 1726.076427][ T5916] m920x_read = error: -19 [ 1726.081959][ T5916] dvb-usb: error while querying for an remote control event. [ 1726.207682][ T5916] m920x_read = error: -19 [ 1726.212199][ T5916] dvb-usb: error while querying for an remote control event. [ 1726.234786][T26636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.294759][T26636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.358592][T12315] m920x_read = error: -19 [ 1726.372443][T12315] dvb-usb: error while querying for an remote control event. [ 1726.565864][T12315] m920x_read = error: -19 [ 1726.570357][T12315] dvb-usb: error while querying for an remote control event. [ 1726.685904][T12315] m920x_read = error: -19 [ 1726.690324][T12315] dvb-usb: error while querying for an remote control event. [ 1726.735419][T26648] FAULT_INJECTION: forcing a failure. [ 1726.735419][T26648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.749727][T26648] CPU: 1 UID: 0 PID: 26648 Comm: syz.4.5462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.749761][T26648] Tainted: [L]=SOFTLOCKUP [ 1726.749770][T26648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1726.749785][T26648] Call Trace: [ 1726.749794][T26648] [ 1726.749804][T26648] dump_stack_lvl+0xe8/0x150 [ 1726.749839][T26648] should_fail_ex+0x412/0x560 [ 1726.749876][T26648] _copy_to_user+0x31/0xb0 [ 1726.749901][T26648] simple_read_from_buffer+0xe1/0x170 [ 1726.749938][T26648] proc_fail_nth_read+0x1bb/0x230 [ 1726.749972][T26648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1726.750006][T26648] ? rw_verify_area+0x2a6/0x4d0 [ 1726.750029][T26648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1726.750062][T26648] vfs_read+0x20c/0xa70 [ 1726.750090][T26648] ? lockdep_hardirqs_on+0x7a/0x110 [ 1726.750116][T26648] ? __pfx_vfs_read+0x10/0x10 [ 1726.750161][T26648] ksys_read+0x150/0x270 [ 1726.750188][T26648] ? __pfx_ksys_read+0x10/0x10 [ 1726.750223][T26648] do_syscall_64+0x14d/0xf80 [ 1726.750248][T26648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.750270][T26648] ? clear_bhb_loop+0x40/0x90 [ 1726.750297][T26648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.750319][T26648] RIP: 0033:0x7fcbdfd5cfce [ 1726.750339][T26648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1726.750356][T26648] RSP: 002b:00007fcbe0cb7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1726.750380][T26648] RAX: ffffffffffffffda RBX: 00007fcbe0cb86c0 RCX: 00007fcbdfd5cfce [ 1726.750403][T26648] RDX: 000000000000000f RSI: 00007fcbe0cb80a0 RDI: 0000000000000008 [ 1726.750417][T26648] RBP: 00007fcbe0cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.750430][T26648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.750443][T26648] R13: 00007fcbe0016218 R14: 00007fcbe0016180 R15: 00007fcbe013fa48 [ 1726.750477][T26648] [ 1726.949236][T12315] m920x_read = error: -19 [ 1726.953717][T12315] dvb-usb: error while querying for an remote control event. [ 1727.071448][T26653] tipc: Enabling of bearer rejected, already enabled [ 1727.080609][T26653] tipc: Enabling of bearer rejected, already enabled [ 1727.106307][ T5916] m920x_read = error: -19 [ 1727.110863][ T5916] dvb-usb: error while querying for an remote control event. [ 1727.225949][ T5916] m920x_read = error: -19 [ 1727.230375][ T5916] dvb-usb: error while querying for an remote control event. [ 1727.324892][T26655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.344686][T26655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.361389][T26656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.371077][ T5916] m920x_read = error: -19 [ 1727.376186][ T5916] dvb-usb: error while querying for an remote control event. [ 1727.401140][T26656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.496037][T12315] m920x_read = error: -19 [ 1727.500505][T12315] dvb-usb: error while querying for an remote control event. [ 1727.615882][T12315] m920x_read = error: -19 [ 1727.620399][T12315] dvb-usb: error while querying for an remote control event. [ 1727.741382][T12315] m920x_read = error: -19 [ 1727.767681][T12315] dvb-usb: error while querying for an remote control event. [ 1727.916360][T12315] m920x_read = error: -19 [ 1727.920957][T12315] dvb-usb: error while querying for an remote control event. [ 1728.049430][T12315] m920x_read = error: -19 [ 1728.053833][T12315] dvb-usb: error while querying for an remote control event. [ 1728.186963][T12315] m920x_read = error: -19 [ 1728.191630][T12315] dvb-usb: error while querying for an remote control event. [ 1728.427614][T12315] m920x_read = error: -19 [ 1728.427638][T12315] dvb-usb: error while querying for an remote control event. [ 1728.537892][ T5916] m920x_read = error: -19 [ 1728.543226][ T5916] dvb-usb: error while querying for an remote control event. [ 1728.715977][ T5916] m920x_read = error: -19 [ 1728.725107][ T5916] dvb-usb: error while querying for an remote control event. [ 1728.845882][ T5916] m920x_read = error: -19 [ 1728.850542][ T5916] dvb-usb: error while querying for an remote control event. [ 1729.045470][ T5916] m920x_read = error: -19 [ 1729.050647][ T5916] dvb-usb: error while querying for an remote control event. [ 1729.168849][ T5916] m920x_read = error: -19 [ 1729.175958][ T5916] dvb-usb: error while querying for an remote control event. [ 1729.197471][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5470'. [ 1729.296983][ T5916] m920x_read = error: -19 [ 1729.301519][ T5916] dvb-usb: error while querying for an remote control event. [ 1729.415883][ T5916] m920x_read = error: -19 [ 1729.423001][ T5916] dvb-usb: error while querying for an remote control event. [ 1729.545824][ T42] m920x_read = error: -19 [ 1729.550221][ T42] dvb-usb: error while querying for an remote control event. [ 1729.593164][T26684] openvswitch: netlink: IP tunnel dst address not specified [ 1729.605565][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1729.706420][ T42] m920x_read = error: -19 [ 1729.721789][ T42] dvb-usb: error while querying for an remote control event. [ 1729.835787][ T5916] m920x_read = error: -19 [ 1729.840212][ T5916] dvb-usb: error while querying for an remote control event. [ 1729.955800][ T5916] m920x_read = error: -19 [ 1729.960398][ T5916] dvb-usb: error while querying for an remote control event. [ 1730.129480][T26682] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1730.147017][T26682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1730.215961][T26682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1730.239663][ T5916] m920x_read = error: -19 [ 1730.247907][ T5916] dvb-usb: error while querying for an remote control event. [ 1730.294386][T26682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1730.346488][T26682] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1730.379270][T26682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1730.385422][T26682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1730.386434][ T5916] m920x_read = error: -19 [ 1730.399912][ T5916] dvb-usb: error while querying for an remote control event. [ 1730.435741][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.442732][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.273159][ T5916] m920x_read = error: -19 [ 1731.614967][ T5916] dvb-usb: error while querying for an remote control event. [ 1731.615083][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 1731.765863][ T5916] m920x_read = error: -19 [ 1731.770369][ T5916] dvb-usb: error while querying for an remote control event. [ 1731.779571][ T42] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1731.916525][ T5916] m920x_read = error: -19 [ 1731.920962][ T5916] dvb-usb: error while querying for an remote control event. [ 1731.933214][T26703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5476'. [ 1732.055978][T25129] m920x_read = error: -19 [ 1732.060902][T25129] dvb-usb: error while querying for an remote control event. [ 1732.140198][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1732.156947][T26706] netlink: zone id is out of range [ 1732.192386][T26706] FAULT_INJECTION: forcing a failure. [ 1732.192386][T26706] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.243696][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1732.243714][T26706] CPU: 0 UID: 0 PID: 26706 Comm: syz.5.5478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.243746][T26706] Tainted: [L]=SOFTLOCKUP [ 1732.243753][T26706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1732.243835][T26706] Call Trace: [ 1732.243872][T26706] [ 1732.243911][T26706] dump_stack_lvl+0xe8/0x150 [ 1732.244032][T26706] should_fail_ex+0x412/0x560 [ 1732.244128][T26706] should_failslab+0xa8/0x100 [ 1732.244213][T26706] __kmalloc_cache_noprof+0x88/0x660 [ 1732.244278][T26706] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 1732.244351][T26706] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1732.244435][T26706] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 1732.244545][T26706] genl_family_rcv_msg_doit+0x22a/0x330 [ 1732.244640][T26706] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1732.244751][T26706] ? bpf_lsm_capable+0x9/0x20 [ 1732.244832][T26706] ? security_capable+0x7e/0x2c0 [ 1732.244941][T26706] genl_rcv_msg+0x61c/0x7a0 [ 1732.245026][T26706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1732.245085][T26706] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1732.245160][T26706] ? __lock_acquire+0x6b5/0x2cf0 [ 1732.245273][T26706] netlink_rcv_skb+0x232/0x4b0 [ 1732.245388][T26706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1732.245462][T26706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1732.245599][T26706] ? down_read+0x272/0x2e0 [ 1732.245658][T26706] ? genl_rcv+0xd/0x40 [ 1732.245736][T26706] genl_rcv+0x28/0x40 [ 1732.245799][T26706] netlink_unicast+0x80f/0x9b0 [ 1732.245897][T26706] ? __pfx_netlink_unicast+0x10/0x10 [ 1732.245969][T26706] ? netlink_sendmsg+0x650/0xb40 [ 1732.246053][T26706] ? skb_put+0x11b/0x210 [ 1732.246121][T26706] netlink_sendmsg+0x813/0xb40 [ 1732.246229][T26706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1732.246323][T26706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1732.246410][T26706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1732.246485][T26706] ____sys_sendmsg+0x972/0x9f0 [ 1732.246580][T26706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1732.246682][T26706] ? import_iovec+0x73/0xa0 [ 1732.246778][T26706] ___sys_sendmsg+0x2a5/0x360 [ 1732.246863][T26706] ? __pfx____sys_sendmsg+0x10/0x10 [ 1732.247018][T26706] ? __fget_files+0x2a/0x420 [ 1732.247095][T26706] ? __fget_files+0x3a0/0x420 [ 1732.247203][T26706] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1732.247284][T26706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1732.247372][T26706] ? __pfx_ksys_write+0x10/0x10 [ 1732.247468][T26706] do_syscall_64+0x14d/0xf80 [ 1732.247531][T26706] ? trace_irq_disable+0x3b/0x150 [ 1732.247608][T26706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.247671][T26706] ? clear_bhb_loop+0x40/0x90 [ 1732.247736][T26706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.247798][T26706] RIP: 0033:0x7f888b19c799 [ 1732.247847][T26706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.247899][T26706] RSP: 002b:00007f888c027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1732.247959][T26706] RAX: ffffffffffffffda RBX: 00007f888b415fa0 RCX: 00007f888b19c799 [ 1732.248001][T26706] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1732.248048][T26706] RBP: 00007f888c027090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.248096][T26706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.248136][T26706] R13: 00007f888b416038 R14: 00007f888b415fa0 R15: 00007f888b53fa48 [ 1732.248236][T26706] [ 1732.266297][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 1732.274436][T25129] m920x_read = error: -19 [ 1732.316010][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 1732.450338][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 1732.544624][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 1732.612427][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.672738][ T42] usb 3-1: Product: syz [ 1732.695851][ T42] usb 3-1: Manufacturer: syz [ 1732.717050][T25129] dvb-usb: error while querying for an remote control event. [ 1732.845919][ T42] usb 3-1: SerialNumber: syz [ 1732.868650][ T42] usb 3-1: config 0 descriptor?? [ 1732.912902][T26710] openvswitch: netlink: Actions may not be safe on all matching packets [ 1732.965928][T25129] m920x_read = error: -19 [ 1732.970415][T25129] dvb-usb: error while querying for an remote control event. [ 1733.096153][T25129] m920x_read = error: -19 [ 1733.100626][T25129] dvb-usb: error while querying for an remote control event. [ 1733.243534][T26714] tipc: Enabling of bearer rejected, already enabled [ 1733.252725][T26714] tipc: Enabling of bearer rejected, already enabled [ 1733.589219][T25129] m920x_read = error: -19 [ 1733.652004][T25129] dvb-usb: error while querying for an remote control event. [ 1733.815887][T25129] m920x_read = error: -19 [ 1733.820385][T25129] dvb-usb: error while querying for an remote control event. [ 1733.945864][ T5916] m920x_read = error: -19 [ 1733.945924][ T5916] dvb-usb: error while querying for an remote control event. [ 1734.055905][ T5916] m920x_read = error: -19 [ 1734.055962][ T5916] dvb-usb: error while querying for an remote control event. [ 1734.166078][T25129] m920x_read = error: -19 [ 1734.166109][T25129] dvb-usb: error while querying for an remote control event. [ 1734.200616][ T42] usb 3-1: can't set config #0, error -71 [ 1734.202046][ T42] usb 3-1: USB disconnect, device number 117 [ 1734.275893][T25129] m920x_read = error: -19 [ 1734.275925][T25129] dvb-usb: error while querying for an remote control event. [ 1734.393076][ T42] m920x_read = error: -19 [ 1734.399862][ T42] dvb-usb: error while querying for an remote control event. [ 1734.432309][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5482'. [ 1734.437062][T26724] netlink: 'syz.0.5483': attribute type 26 has an invalid length. [ 1734.475152][T26726] program syz.0.5483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1734.535880][T25129] m920x_read = error: -19 [ 1734.547678][T25129] dvb-usb: error while querying for an remote control event. [ 1734.566312][T26708] Bluetooth: hci4: command 0x0406 tx timeout [ 1734.665014][T26708] Bluetooth: hci1: command 0x0406 tx timeout [ 1734.685978][T25129] m920x_read = error: -19 [ 1734.691614][T25129] dvb-usb: error while querying for an remote control event. [ 1734.710271][T26729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.722246][T26729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.816066][ T42] m920x_read = error: -19 [ 1734.820657][ T42] dvb-usb: error while querying for an remote control event. [ 1734.946006][ T42] m920x_read = error: -19 [ 1734.950437][ T42] dvb-usb: error while querying for an remote control event. [ 1735.142720][T26746] tipc: Enabling of bearer rejected, already enabled [ 1735.153592][T26746] tipc: Enabling of bearer rejected, already enabled [ 1735.223675][ T42] m920x_read = error: -19 [ 1735.235165][ T42] dvb-usb: error while querying for an remote control event. [ 1735.376302][ T42] m920x_read = error: -19 [ 1735.380762][ T42] dvb-usb: error while querying for an remote control event. [ 1735.496613][ T42] m920x_read = error: -19 [ 1735.501294][ T42] dvb-usb: error while querying for an remote control event. [ 1735.619761][T26754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5492'. [ 1735.697008][T25129] m920x_read = error: -19 [ 1735.703163][T25129] dvb-usb: error while querying for an remote control event. [ 1735.755814][ T42] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1735.815924][ T5916] m920x_read = error: -19 [ 1735.820354][ T5916] dvb-usb: error while querying for an remote control event. [ 1735.867303][T26757] openvswitch: netlink: IP tunnel dst address not specified [ 1735.890314][T26757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5491'. [ 1735.938796][T25129] m920x_read = error: -19 [ 1735.943388][T25129] dvb-usb: error while querying for an remote control event. [ 1735.957790][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1735.984202][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1736.006644][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1152, setting to 1024 [ 1736.057098][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1736.066942][ T42] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1736.075891][T25129] m920x_read = error: -19 [ 1736.081772][T25129] dvb-usb: error while querying for an remote control event. [ 1736.095949][ T42] usb 5-1: Manufacturer: syz [ 1736.137531][ T42] usb 5-1: config 0 descriptor?? [ 1736.196157][T25129] m920x_read = error: -19 [ 1736.224787][T25129] dvb-usb: error while querying for an remote control event. [ 1736.300279][ T42] smsusb:smsusb_probe: board id=9, interface number 0 [ 1736.355012][T25129] m920x_read = error: -19 [ 1736.359821][T25129] dvb-usb: error while querying for an remote control event. [ 1736.370956][ T42] smsusb:siano_media_device_register: media controller created [ 1736.409739][ T42] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1736.417841][ T42] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1736.447101][T26759] FAULT_INJECTION: forcing a failure. [ 1736.447101][T26759] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.467585][ T42] ------------[ cut here ]------------ [ 1736.473159][ T42] !PageLargeKmalloc(page) [ 1736.473186][ T42] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#1: kworker/1:1/42 [ 1736.487186][ T42] Modules linked in: [ 1736.491485][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.502372][ T42] Tainted: [L]=SOFTLOCKUP [ 1736.506782][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1736.517063][ T42] Workqueue: usb_hub_wq hub_event [ 1736.523191][ T42] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 1736.529058][ T42] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 49 17 f1 8d 5b 41 5e 5d e9 a7 df 03 ff [ 1736.549077][ T42] RSP: 0018:ffffc90000b26b20 EFLAGS: 00010206 [ 1736.555171][ T42] RAX: 00000000ff000000 RBX: ffffea000257b880 RCX: 0000000000100001 [ 1736.563263][ T42] RDX: ffffc900166e0000 RSI: ffff888095ee2000 RDI: ffffea000257b880 [ 1736.571590][ T42] RBP: 0000000000000000 R08: ffff888078a20403 R09: 1ffff1100f144080 [ 1736.579924][ T42] R10: dffffc0000000000 R11: ffffed100f144081 R12: 1ffff11005038482 [ 1736.587995][ T42] R13: 0000000000000000 R14: ffff888078a20460 R15: dffffc0000000000 [ 1736.596257][ T42] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 1736.605336][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1736.612026][ T42] CR2: 00007f86df2720c0 CR3: 000000003c2f4000 CR4: 00000000003526f0 [ 1736.620094][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1736.628197][ T42] DR3: 000000000000ffe8 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1736.636375][ T42] Call Trace: [ 1736.639705][ T42] [ 1736.642708][ T42] usb_free_urb+0xd0/0x120 [ 1736.646709][T26759] CPU: 0 UID: 0 PID: 26759 Comm: syz.0.5493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.646794][T26759] Tainted: [L]=SOFTLOCKUP [ 1736.646815][T26759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1736.646848][T26759] Call Trace: [ 1736.646871][T26759] [ 1736.646901][T26759] dump_stack_lvl+0xe8/0x150 [ 1736.646988][T26759] should_fail_ex+0x412/0x560 [ 1736.647085][T26759] should_failslab+0xa8/0x100 [ 1736.647170][T26759] __kmalloc_noprof+0xe8/0x760 [ 1736.647209][T26759] ? ima_alloc_init_template+0x183/0x700 [ 1736.647232][T26759] ? __kmalloc_noprof+0x1b8/0x760 [ 1736.647259][T26759] ima_alloc_init_template+0x183/0x700 [ 1736.647292][T26759] ima_store_measurement+0x1ce/0x670 [ 1736.647325][T26759] ? __pfx_ima_store_measurement+0x10/0x10 [ 1736.647349][T26759] ? ima_d_path+0x16b/0x230 [ 1736.647379][T26759] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1736.647419][T26759] process_measurement+0x13e5/0x1c80 [ 1736.647461][T26759] ? __pfx_process_measurement+0x10/0x10 [ 1736.647521][T26759] ? tomoyo_find_next_domain+0x1730/0x1aa0 [ 1736.647571][T26759] ima_bprm_check+0x121/0x180 [ 1736.647596][T26759] ? __pfx_ima_bprm_check+0x10/0x10 [ 1736.647614][T26759] ? tomoyo_bprm_check_security+0xef/0x180 [ 1736.647636][T26759] ? tomoyo_bprm_check_security+0xef/0x180 [ 1736.647658][T26759] ? tomoyo_bprm_check_security+0xef/0x180 [ 1736.647677][T26759] ? tomoyo_bprm_check_security+0x161/0x180 [ 1736.647702][T26759] security_bprm_check+0xcd/0x240 [ 1736.647733][T26759] bprm_execve+0x896/0x1460 [ 1736.647768][T26759] ? __pfx_bprm_execve+0x10/0x10 [ 1736.647823][T26759] ? alloc_bprm+0x508/0x5c0 [ 1736.647901][T26759] ? count+0x1cb/0x230 [ 1736.647991][T26759] do_execveat_common+0x50d/0x690 [ 1736.648125][T26759] __x64_sys_execveat+0xc7/0xf0 [ 1736.648198][T26759] do_syscall_64+0x14d/0xf80 [ 1736.648263][T26759] ? trace_irq_disable+0x3b/0x150 [ 1736.648353][T26759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.648421][T26759] ? clear_bhb_loop+0x40/0x90 [ 1736.648494][T26759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.648551][T26759] RIP: 0033:0x7f86df39c799 [ 1736.648614][T26759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.648658][T26759] RSP: 002b:00007f86e029b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1736.648714][T26759] RAX: ffffffffffffffda RBX: 00007f86df615fa0 RCX: 00007f86df39c799 [ 1736.648757][T26759] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1736.648799][T26759] RBP: 00007f86e029b090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.648834][T26759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.648867][T26759] R13: 00007f86df616038 R14: 00007f86df615fa0 R15: 00007f86df73fa48 [ 1736.648956][T26759] [ 1736.876441][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 1736.876533][ T29] audit: type=1804 audit(1773479743.266:776): pid=26759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.5493" name="/newroot/460/file1" dev="tmpfs" ino=2392 res=0 errno=0 [ 1736.883700][ T42] smsusb_term_device+0x1d7/0x3e0 [ 1736.960558][ T42] smsusb_probe+0x1aba/0x2280 [ 1736.965320][ T42] ? __pfx_smsusb_probe+0x10/0x10 [ 1736.970693][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 1736.975857][ T42] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1736.981473][ T42] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1736.987403][ T42] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1736.993442][ T42] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1736.999316][ T42] usb_probe_interface+0x668/0xc90 [ 1737.004488][ T42] ? __pfx_usb_probe_interface+0x10/0x10 [ 1737.010264][ T42] really_probe+0x267/0xaf0 [ 1737.014916][ T42] __driver_probe_device+0x18c/0x320 [ 1737.020583][ T42] driver_probe_device+0x4f/0x240 [ 1737.025847][ T42] __device_attach_driver+0x279/0x430 [ 1737.031297][ T42] bus_for_each_drv+0x258/0x2f0 [ 1737.036372][ T42] ? __pfx___device_attach_driver+0x10/0x10 [ 1737.042368][ T42] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1737.047950][ T42] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.053178][ T42] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1737.059170][ T42] __device_attach+0x2c5/0x450 [ 1737.064020][ T42] ? __pfx___device_attach+0x10/0x10 [ 1737.069441][ T42] ? _raw_spin_unlock+0x28/0x50 [ 1737.074315][ T42] device_initial_probe+0xa1/0xd0 [ 1737.079443][ T42] bus_probe_device+0x12a/0x220 [ 1737.084310][ T42] ? device_add+0x726/0xb70 [ 1737.088965][ T42] device_add+0x7b6/0xb70 [ 1737.093337][ T42] usb_set_configuration+0x1a87/0x2110 [ 1737.098928][ T42] usb_generic_driver_probe+0x8d/0x150 [ 1737.104708][ T42] usb_probe_device+0x1c4/0x3b0 [ 1737.109670][ T42] ? __pfx_usb_probe_device+0x10/0x10 [ 1737.115090][ T42] really_probe+0x267/0xaf0 [ 1737.119690][ T42] __driver_probe_device+0x18c/0x320 [ 1737.125112][ T42] driver_probe_device+0x4f/0x240 [ 1737.130334][ T42] __device_attach_driver+0x279/0x430 [ 1737.135824][ T42] bus_for_each_drv+0x258/0x2f0 [ 1737.140707][ T42] ? __pfx___device_attach_driver+0x10/0x10 [ 1737.146768][ T42] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1737.152221][ T42] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.157557][ T42] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1737.163428][ T42] __device_attach+0x2c5/0x450 [ 1737.168304][ T42] ? __pfx___device_attach+0x10/0x10 [ 1737.173612][ T42] ? _raw_spin_unlock+0x28/0x50 [ 1737.178556][ T42] device_initial_probe+0xa1/0xd0 [ 1737.183610][ T42] bus_probe_device+0x12a/0x220 [ 1737.188707][ T42] ? device_add+0x726/0xb70 [ 1737.193248][ T42] device_add+0x7b6/0xb70 [ 1737.197815][ T42] usb_new_device+0xa08/0x16f0 [ 1737.202606][ T42] ? __pfx_usb_new_device+0x10/0x10 [ 1737.207971][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 1737.213286][ T42] hub_event+0x2a1c/0x4f30 [ 1737.217826][ T42] ? __pfx_hub_event+0x10/0x10 [ 1737.222616][ T42] ? process_scheduled_works+0xa8d/0x18c0 [ 1737.228418][ T42] ? process_scheduled_works+0xa8d/0x18c0 [ 1737.234262][ T42] process_scheduled_works+0xb6e/0x18c0 [ 1737.239915][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 1737.246039][ T42] ? assign_work+0x3d5/0x5e0 [ 1737.250704][ T42] worker_thread+0xa53/0xfc0 [ 1737.255331][ T42] kthread+0x388/0x470 [ 1737.259477][ T42] ? __pfx_worker_thread+0x10/0x10 [ 1737.264608][ T42] ? __pfx_kthread+0x10/0x10 [ 1737.269283][ T42] ret_from_fork+0x51e/0xb90 [ 1737.273893][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 1737.279186][ T42] ? __switch_to+0xc7d/0x1450 [ 1737.283901][ T42] ? __pfx_kthread+0x10/0x10 [ 1737.288617][ T42] ret_from_fork_asm+0x1a/0x30 [ 1737.293461][ T42] [ 1737.296590][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1737.303968][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1737.314998][ T42] Tainted: [L]=SOFTLOCKUP [ 1737.319359][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1737.329646][ T42] Workqueue: usb_hub_wq hub_event [ 1737.334889][ T42] Call Trace: [ 1737.338361][ T42] [ 1737.341308][ T42] vpanic+0x56c/0xa60 [ 1737.345369][ T42] ? __pfx__printk+0x10/0x10 [ 1737.349976][ T42] ? __pfx_vpanic+0x10/0x10 [ 1737.354526][ T42] ? is_bpf_text_address+0x292/0x2b0 [ 1737.359827][ T42] ? is_bpf_text_address+0x26/0x2b0 [ 1737.365047][ T42] panic+0xc5/0xd0 [ 1737.368785][ T42] ? __pfx_panic+0x10/0x10 [ 1737.373229][ T42] ? ret_from_fork_asm+0x1a/0x30 [ 1737.378235][ T42] __warn+0x315/0x4f0 [ 1737.382228][ T42] ? free_large_kmalloc+0xa3/0x140 [ 1737.387546][ T42] ? free_large_kmalloc+0xa3/0x140 [ 1737.392688][ T42] __report_bug+0x29a/0x540 [ 1737.397211][ T42] ? device_initial_probe+0xa1/0xd0 [ 1737.402421][ T42] ? bus_probe_device+0x12a/0x220 [ 1737.407451][ T42] ? device_add+0x7b6/0xb70 [ 1737.411971][ T42] ? free_large_kmalloc+0xa3/0x140 [ 1737.417118][ T42] ? __pfx___report_bug+0x10/0x10 [ 1737.422192][ T42] ? usb_new_device+0xa08/0x16f0 [ 1737.427139][ T42] ? hub_event+0x2a1c/0x4f30 [ 1737.431760][ T42] ? process_scheduled_works+0xb6e/0x18c0 [ 1737.437499][ T42] ? smscore_unregister_device+0x651/0x780 [ 1737.443325][ T42] ? free_large_kmalloc+0xa3/0x140 [ 1737.448446][ T42] report_bug+0x16a/0x220 [ 1737.452783][ T42] ? free_large_kmalloc+0xa3/0x140 [ 1737.458074][ T42] ? free_large_kmalloc+0xa5/0x140 [ 1737.463196][ T42] handle_bug+0x9c/0x200 [ 1737.467462][ T42] exc_invalid_op+0x1a/0x50 [ 1737.472003][ T42] asm_exc_invalid_op+0x1a/0x20 [ 1737.476889][ T42] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 1737.482682][ T42] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 49 17 f1 8d 5b 41 5e 5d e9 a7 df 03 ff [ 1737.502313][ T42] RSP: 0018:ffffc90000b26b20 EFLAGS: 00010206 [ 1737.508495][ T42] RAX: 00000000ff000000 RBX: ffffea000257b880 RCX: 0000000000100001 [ 1737.516489][ T42] RDX: ffffc900166e0000 RSI: ffff888095ee2000 RDI: ffffea000257b880 [ 1737.524482][ T42] RBP: 0000000000000000 R08: ffff888078a20403 R09: 1ffff1100f144080 [ 1737.532491][ T42] R10: dffffc0000000000 R11: ffffed100f144081 R12: 1ffff11005038482 [ 1737.540481][ T42] R13: 0000000000000000 R14: ffff888078a20460 R15: dffffc0000000000 [ 1737.548494][ T42] usb_free_urb+0xd0/0x120 [ 1737.552960][ T42] smsusb_term_device+0x1d7/0x3e0 [ 1737.558544][ T42] smsusb_probe+0x1aba/0x2280 [ 1737.563273][ T42] ? __pfx_smsusb_probe+0x10/0x10 [ 1737.568442][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 1737.573567][ T42] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1737.579147][ T42] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1737.585157][ T42] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1737.590987][ T42] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1737.596642][ T42] usb_probe_interface+0x668/0xc90 [ 1737.601773][ T42] ? __pfx_usb_probe_interface+0x10/0x10 [ 1737.607411][ T42] really_probe+0x267/0xaf0 [ 1737.612024][ T42] __driver_probe_device+0x18c/0x320 [ 1737.617324][ T42] driver_probe_device+0x4f/0x240 [ 1737.622390][ T42] __device_attach_driver+0x279/0x430 [ 1737.627777][ T42] bus_for_each_drv+0x258/0x2f0 [ 1737.632635][ T42] ? __pfx___device_attach_driver+0x10/0x10 [ 1737.638543][ T42] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1737.643924][ T42] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.649139][ T42] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1737.654976][ T42] __device_attach+0x2c5/0x450 [ 1737.659778][ T42] ? __pfx___device_attach+0x10/0x10 [ 1737.665100][ T42] ? _raw_spin_unlock+0x28/0x50 [ 1737.669966][ T42] device_initial_probe+0xa1/0xd0 [ 1737.675033][ T42] bus_probe_device+0x12a/0x220 [ 1737.679912][ T42] ? device_add+0x726/0xb70 [ 1737.684433][ T42] device_add+0x7b6/0xb70 [ 1737.688772][ T42] usb_set_configuration+0x1a87/0x2110 [ 1737.694265][ T42] usb_generic_driver_probe+0x8d/0x150 [ 1737.699738][ T42] usb_probe_device+0x1c4/0x3b0 [ 1737.704603][ T42] ? __pfx_usb_probe_device+0x10/0x10 [ 1737.710021][ T42] really_probe+0x267/0xaf0 [ 1737.714552][ T42] __driver_probe_device+0x18c/0x320 [ 1737.719854][ T42] driver_probe_device+0x4f/0x240 [ 1737.724893][ T42] __device_attach_driver+0x279/0x430 [ 1737.730278][ T42] bus_for_each_drv+0x258/0x2f0 [ 1737.735215][ T42] ? __pfx___device_attach_driver+0x10/0x10 [ 1737.741224][ T42] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1737.746652][ T42] ? lockdep_hardirqs_on+0x7a/0x110 [ 1737.751863][ T42] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1737.757688][ T42] __device_attach+0x2c5/0x450 [ 1737.762473][ T42] ? __pfx___device_attach+0x10/0x10 [ 1737.767776][ T42] ? _raw_spin_unlock+0x28/0x50 [ 1737.772635][ T42] device_initial_probe+0xa1/0xd0 [ 1737.777674][ T42] bus_probe_device+0x12a/0x220 [ 1737.782624][ T42] ? device_add+0x726/0xb70 [ 1737.787252][ T42] device_add+0x7b6/0xb70 [ 1737.791684][ T42] usb_new_device+0xa08/0x16f0 [ 1737.796500][ T42] ? __pfx_usb_new_device+0x10/0x10 [ 1737.801723][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 1737.807034][ T42] hub_event+0x2a1c/0x4f30 [ 1737.811524][ T42] ? __pfx_hub_event+0x10/0x10 [ 1737.816310][ T42] ? process_scheduled_works+0xa8d/0x18c0 [ 1737.822042][ T42] ? process_scheduled_works+0xa8d/0x18c0 [ 1737.827777][ T42] process_scheduled_works+0xb6e/0x18c0 [ 1737.833360][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 1737.839357][ T42] ? assign_work+0x3d5/0x5e0 [ 1737.843966][ T42] worker_thread+0xa53/0xfc0 [ 1737.848592][ T42] kthread+0x388/0x470 [ 1737.852667][ T42] ? __pfx_worker_thread+0x10/0x10 [ 1737.857790][ T42] ? __pfx_kthread+0x10/0x10 [ 1737.862458][ T42] ret_from_fork+0x51e/0xb90 [ 1737.867082][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 1737.872215][ T42] ? __switch_to+0xc7d/0x1450 [ 1737.876999][ T42] ? __pfx_kthread+0x10/0x10 [ 1737.881600][ T42] ret_from_fork_asm+0x1a/0x30 [ 1737.886410][ T42] [ 1737.890087][ T42] Kernel Offset: disabled [ 1737.894442][ T42] Rebooting in 86400 seconds..