last executing test programs: 2m39.178512578s ago: executing program 4 (id=1672): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2m38.846410487s ago: executing program 4 (id=1674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc, 0x7}}) unshare(0x22020600) (async) unshare(0x22020600) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) shmctl$SHM_LOCK(r1, 0xb) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000483a01fe8000000000000000000000a6bed718000000bbff02000000000000000000000000000104009078000000066cf6cd53ffff3c0100000000000000000035fe8000000000000000000000000000aa2f1f0040000000e70000040107c2040000000e00000000000000"], 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000483a01fe8000000000000000000000a6bed718000000bbff02000000000000000000000000000104009078000000066cf6cd53ffff3c0100000000000000000035fe8000000000000000000000000000aa2f1f0040000000e70000040107c2040000000e00000000000000"], 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605000000000000000000070000800900020073797a30000000000900020073797a31000000000c000780080012000000000015000300686173683a096c02ce08db443cf169702c706f02742c6e65740000000005000500020000"], 0x60}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605000000000000000000070000800900020073797a30000000000900020073797a31000000000c000780080012000000000015000300686173683a096c02ce08db443cf169702c706f02742c6e65740000000005000500020000"], 0x60}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x3, 0x101000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x22880}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="33fafdfffffffbdbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000067000000140004006361696630000000000000000000000008000500060000001c00e700e8943fa79fc71b27d936dd16d8b9f248994824d61fab5cde0a00e800ffffffffffff0000040017800a00e80008021100000000001c00e700aec40a292aea768861e0675f4584bdddae9c689c518705c61c00e7003a1e54482d8d8a8e394dab547c992bd183272e1721b9437d2c001780040002000400030004000300040001"], 0xec}, 0x1, 0x0, 0x0, 0xc044}, 0xc2010) setns(r4, 0x0) 2m38.69426997s ago: executing program 4 (id=1675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0xffffffffffffff53) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000000001050500000000001000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010066fe2653899b3fc30c00028005000100000000002c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffffffffffff08000740010000013400068014000400fe80000000000000000000000000000114000500fe8000000000000000000000000000aa08000200e0000002"], 0xc8}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) io_uring_setup(0x933, &(0x7f00000002c0)={0x0, 0x32b8, 0x1, 0x2, 0x304}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a00000c00401400e2233f1815a97f000001000000ca1f493f038b38f4b007d665cfb271d9a3396786e799534dd8d88b5a9dac9f06867abb6aa8630209c67919bc2cbbee94a5d035d4b318e686744bb6310d0dd84dd099dc578d0d83230041e8857315f4b2a35333e17c965745b46aaf01002058e124ec0000000000000000000000df23810c1b392ac011a8f7cde9be258a3b3f0b8a0547ab5c89b7ee5e019476c250c310dd223391aff43077792ae3e8e34aa482546544bb2c3a15b7a469ebb98d0106897266da1652a88f41ef58e7f46610fcdbb8ec6006946a17d4236d0b2bf8936c1346cefff4f3be5eb26d96926f8d4b0c04635563e31aeece8dacef665317f1aafd64ae36ae17cf359d415b945b1b92a7f753d26710239066b15cf487689ecc8766ee16f5d04f3bb319fa03c43ca40f8ce0fd0c380197b0ec5855cf1aee71559c93605e947981dd4a2fd29f2f4e21b3349032babb3a8930ff7b8717e0e5d3629af4b7e9e9539e23c26f675666390d", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x51, 0xcd9b, 0x11d, {0x7ff, 0xcac}, {0x8004, 0x4}, @period={0x5a, 0x5360, 0xa0f, 0x3, 0x2, {0x3d, 0xff53, 0xcfd5, 0x6}, 0x0, 0x0}}) io_setup(0x9, &(0x7f0000001d00)=0x0) io_submit(r7, 0x1ffffffffffffec5, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000100)="331e767999fcd25f16458f4625beb50ccf5f5cefa8fb1e529ba065a5408dce94db48b94aaaf38e5a4a227022569863287447e19719aec40f9bc75aa3e46a465636b066cc1098833cb68b222af67ffef277f2465f770e6d1e6ffee834afce354bbb7e4f", 0x1, 0x7, 0x0, 0x2}]) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m37.541462894s ago: executing program 4 (id=1683): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) mount$fuseblk(&(0x7f0000000100), 0x0, 0x0, 0x10c091, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b7000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x3b43, &(0x7f0000000040)={0x0, 0x7b4e, 0x4000, 0x9, 0xa0002f5, 0x0, r0}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f000000c000), 0x40000, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$USERIO_CMD_REGISTER(r5, 0x0, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0xd9, 0x80, 0x83, 0x40, 0x421, 0x42d, 0x6712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x2, 0x7, 0x80, 0x10, "", [{{0x9, 0x4, 0x4d, 0x0, 0x0, 0x2, 0x2, 0xff, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x35e1, 0x1}, {0x6, 0x24, 0x1a, 0x3fe, 0x31}, [@mdlm_detail={0x5, 0x24, 0x13, 0xc, 'W'}]}]}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) 2m35.838727454s ago: executing program 4 (id=1687): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001740)=""/241, 0xf1}], 0x1}, 0x100) sendmmsg$alg(r5, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c37", 0x41}, {&(0x7f00000001c0)="e741ee786430ac48f959b0", 0xb}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x3c}], 0x18}], 0x1, 0x20000010) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f5057110bf00000000006700000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) 2m32.978439382s ago: executing program 4 (id=1701): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000100)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x401, 0xffff, 0x10001, 0xdeca, 0x81, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x75, 0x5, 0xe57f, 0x4, 0x9, r3}) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000ec0)={0x2, 0x1, 0x9, 0x4, 0x4, 0x1}) (async) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2m17.708751959s ago: executing program 32 (id=1701): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000100)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x401, 0xffff, 0x10001, 0xdeca, 0x81, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x75, 0x5, 0xe57f, 0x4, 0x9, r3}) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000ec0)={0x2, 0x1, 0x9, 0x4, 0x4, 0x1}) (async) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 18.474480698s ago: executing program 5 (id=2071): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES16=0x0], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x20008800) add_key$user(0x0, 0x0, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e301090581038936050a7036a0be34b9fcaaed8acb5fbd4ccc043c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x80080, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xe9, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x69}}, [{{0x9, 0x5, 0x82, 0x2, 0x260, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xd3, 0x0, 0xd, 0x20, 0x7b}, 0xe4, &(0x7f00000001c0)={0x5, 0xf, 0xe4, 0x4, [@generic={0x58, 0x10, 0x2, "dbe832957be0e66170634cbfe83b516bba4c14e7ba8d53a8251b1c265967522d84b36ed4dfdfe4911dbbf3d90d6bd4cd442da3d79afdceae43a8e6dcbc1bb40eb958ddfb4586e9a25f2ff4340ef80869878c118dd2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x6, 0xff, 0x40, 0x4}, @generic={0x72, 0x10, 0x4, "543199d4c66031968bd1c02a4d3b27bfd9772be9b946be2d2fffc03d7f75242ae7ec0978f497febd1437b3ec2ef67331b054de9200a80768e33d7b721fae65aa23bf692c76b111aa565ad2053f8c4f9456ed9770d9df72bacfea250e798e823eec7cde15db8f7e3ac2eb9209105724"}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc1e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0xf, &(0x7f0000000300)=@string={0xf, 0x3, "cdcb00"/13}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x804}}, {0xc4, &(0x7f0000000580)=@string={0xc4, 0x3, "c9b77fba4fe90493294ce88098e0902a7a5effbcc35855dc847011641a079867047af3f8bda3239839d5a3e15bdd4618c86a372d66bfe814acf78fd9139625caed91e91d5aec7ac95c58255cb03ba9ea8499671fac0eedc1950b7d688d42e1fed41b38d6a484c764255f367aa2f4d5b0aaa46633894fad07852c5676cc861931fbbcea0b7c0a3611f8341a6f87d7c24212c1dbab7b184e85f92286f53fdd6d33d7166c19b63d6bb0b6098663ad8b25c74fb758aa12a428e8a344ec3303a083326315"}}, {0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="4e0311837bcae4d0b81ad9db6a4140270b2d9e9d29f30dd83918e678dd66d372fb5a4a557c30d170ea4bf02d0052cbb43cad6e5665727a739d03682b9cbbdfa633383ef6fd3a6c88b242b4f984aa"]}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000380)={0x40, 0x17, 0x81, "1528c0ec34c2c749b5b48b8ab88ca12a2737b2b0f71d0938a439cca3946ff283a53d7e70a8e857eb8ccf16d434db42fc268346d89ba7bf0ff341095472f99e5d532c572187d58be51c0ddea886e92c1708ad6bfc7666025e1a1683d8768507a30160909baa8be3069b19ab5ff50298a23b98fa040a7e921ad6a75f3dad25a5d27e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$key(0xffffffffffffffff, 0x0, 0x20048800) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0xfdce, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 15.235392003s ago: executing program 5 (id=2083): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r0 = getpgrp(0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ptrace(0x11, r0) ptrace$peekuser(0x3, r0, 0x5) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r1 = syz_clone3(&(0x7f0000000200)={0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x7}, &(0x7f00000000c0)=""/146, 0x92, &(0x7f0000000180)=""/17, &(0x7f00000001c0)=[r0, 0x0, r0, r0, r0, r0, r0], 0x7}, 0x58) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x8880, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r4, 0x0) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000002c0)={r1, 0x0, 0x3}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x2, 0x5001) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000340)={&(0x7f0000000300)="6ed763c74273233a4319ccea585471e888ae9b6b3e8746e711a666fe5ecf73578b7bef6df55b", 0x26}) ptrace(0x4208, r3) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x0, 0x5002) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x8, 0x0, @val=@netfilter={0x5, 0x0, 0x4, 0x1}}, 0x20) r6 = syz_clone(0x200, &(0x7f0000000400)="12961056cf528962eea387725c2451f946a5d1309f2036330d92dfe5cc3558df5126f8fd0407356d5374419f678bec0a8e451a2b25bdae948458bb5824e8e48a5f2e0c56352dddfbc04ae11dcbcbda777fdb6757a65f56a3d4d680bf5d314f4c6067b3eafd49ab1317af", 0x6a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="5f35b09db86c0ac9ca6d89728b802337611850bffbb19e951a") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r8, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2d, 0x6e}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1ff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x30}}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200048c4) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000006c0)=0x0) ptrace$poke(0x5, r9, &(0x7f0000000700), 0x8) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r4, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x0, 0x3, 0x2c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7800, 0x0, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x17c, r10, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x4}) 14.055160889s ago: executing program 5 (id=2085): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0x1, 0x4}, 0x38) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x6004881}, 0x4000080) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000ab5600", "f4bd00009c050d2c335e5f4f00", [0x0, 0x2000000000001]}}) 12.373220577s ago: executing program 5 (id=2088): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11.442658756s ago: executing program 3 (id=2091): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010428bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000051c0000240012800e00010069703665727370616e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.980244482s ago: executing program 5 (id=2093): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x26713000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x800004, 0x200, 0x2, 0x4, 0xe, 0xe, 0x1, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x8000e3, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r2, 0x5502) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000140)=0x9, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xde879000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_io_uring_setup(0x2ed7, &(0x7f0000000000)={0x0, 0x6361, 0x800, 0x3, 0x32}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, r3, 0x10000000) 7.325984554s ago: executing program 0 (id=2104): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x40000000, 0x0, 0x0, 0x1c, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x4, 0x400]}}) (async) r1 = dup(r0) (async) r2 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x8, 0xfffffffffffffffe}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{&(0x7f0000000e40)={0xa, 0x0, 0x5, @loopback, 0xfffffd1d}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000e80)="d4093150a86342624ba1c506f82bfd00b70ba6c101a4491994793d6f7aeaac5576b335c935bb12b10c90ad44ecd772717fdd1919aa7a4c3ea4e7fabaaf7b08ec8a721dc3f210580adc09804d4cfc44d5705aa55dadc3", 0x56}, {&(0x7f0000000f00)="3fee5ae8bb6428c29a71a7be80e7fb95ee4521336fe4b8333f447ea7b30ec62bd9df65f9c2e00a344503d649bb08ccf77cba4f3997fc688e7281384292644848198b77443d924ce98666d3b23949022dbd1f77f6e9137e62f981e5d41b52132cc19671144e80e022d6fb233fa3a11a7c1012feeb54832210af97dff4a018c7bcf4f82ac45f64c7d14362b63d536bc56a8919b7ce5ff6ee6ec2c5fb3ecc3e004145b2450812ecb1ef9d0b3620f49a5afd0d7751860e7d51053569946c52fa576af5d7f1ada3051068fb34f4901ab0d8455e73af1657c12d855ff5e520", 0xdc}, {&(0x7f0000001000)="7919c6da3b22aa9185656ac1d8ab53ee99176b8d507e7a6eb9", 0x19}, {&(0x7f0000001040)="b9e3af075b558d10c79ae3f82145124a48640011e0f336b677f73002000000f2aa371291d1eb2c2b233b552ce24f805a36eb356d940000000098b2dcb13bbf6f56a6bbdfd5fa0670cffcd0e7b4c489b7779a5722b077a0c460a68e239269f88216996e5db1aed8f0acadb07733dd8bccf1cab6f1760989c75fa26a26bcd6c79f71698b62264486f66d022b2de423be7f819ce508b8aa89b3f147b7290d1a36edfb3394ff0d4abdac45c4716c727cee347208a8dcb77afc080000", 0xba}, {&(0x7f0000001140)="304f825e815ccfae018e19b1419e5bce1b5fc43424ca05c130bb5b4909c827a890c2bb1462f0bdc3149638f022", 0x2d}], 0x5, &(0x7f0000001c00)=[@tclass={{0x14, 0x29, 0x43, 0xffff0000}}, @hopopts_2292={{0x160, 0x29, 0x36, {0x33, 0x29, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x4, [0x31aa38, 0x0]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x1, 0xf4, "7d6f8894d0c94a3a09b211f8f8067c547e00f0bdb9babc0cbb52ea91502fa0631d92e6b2c4f3b3e3a032fe80e54be94783e18e8ab880af19b5857e2790f0f3579760bc76a30cbdf1c6b4aac025bb0c60101aab361e389116d80966f3f199c6be38ff677476fdaf36c4bf2f32f23f115d5f7f0d74992f9c662a5b08263eb1fce17d77c2a43c0656dea956cba6ac12997d15e0f57cdd3d434d6db2057fe05e996d0d52596617c2138a89938891d6059271989c748e9132a97a897359de2c85d99177bc61ecc7a599c6d2d315988d2f41563d119084d40043383d303a97d984e180f6511f53aff08012092841d4049639bc962e9f69"}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0xe2, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1]}}}, @dstopts={{0x1030, 0x29, 0x37, {0x6c, 0x202, '\x00', [@pad1, @generic={0x5, 0x1000, "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"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x11f0}}, {{&(0x7f0000002e00)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002e40)="8bd9d1c87aabdecc927edb324a2c9b0602ce535a7869ab9d734d0f3af5bc3d406935edb01848a1f8562fca8d1a3c1497cf56ac646cf42d72216b020c3f506f22e6b25501076f583018c06d1ec91096bf34311feb42e2d9902e5562face8b782f087063813ed0f9", 0x67}, {&(0x7f0000002ec0)="89cb8512a0de77d216455ebd4e9a0d85ee182f64d8e52f76085fd99ca09118784d5f1c51459cf3596aac1f5015583992fca301ecee925a9adb4bb4e4d45972", 0x3f}, {&(0x7f0000002f00)="d5369e04ae6ee4c9922684a9380850371af44ee2b31d8e74bc624ed41039017caef2965c450cb2838aac7ec1c13d1e0792d583de448213ad2aa1f1f297e3b43672", 0x41}, {&(0x7f0000002f80)="8ca73e090c505cafae4b0004b0e004423dfd909efc0b1781abae57cf3b91d076ce0f2ae73f6336bd778730ef54a31eba62b3adc480f095b45557efb93d8ef6d100cbd6597babf89f2f7c1cc707c72ce74ed5bbd6d4feaed8841746916237310283441e2c038bb834f0da0f532b1b005184f06ce3eb180762a9bd5962419840b636a03287ad817fac5398d4d17e7f75b3c91a2dcd2e9e7732797cd9f703120960479d", 0xa2}, {&(0x7f0000003040)="4b42710c3d41a56466ab66f9df31b85a209e8fd9b143a77dfe75ec4e3fd9a831cb603ed626b2bd6511af327018459f803a5e89ae8d519ce015effbdb49256085bab68f0f631b58350859092a4fcc9f1ce93741008577a12d70f133bc4cfdc2b38e16e8158a5d502cc7c9e3dd5d08a80c24ddfdaad7ab448655562bf81ccc3d3f119efb65", 0x84}, {&(0x7f0000003100)="f3c8b7223c756e20749585b2bae992d113ecc02e012864b53ddf6df738440a75148eb3601f4e72ffdf0acdff8534f48a5e602aed182367e4271df0fbb10eaf1b190d9ebddb550c98d7e2584bb2cc0d5a80c721021fd74be44d", 0x59}], 0x6, &(0x7f0000003200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @tclass={{0x14}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x88, 0x8, 0x1, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @empty]}}}, @hopopts={{0xf0, 0x29, 0x36, {0x16, 0x1a, '\x00', [@generic={0x7f, 0xcd, "e53cab1132f62d7e5cb2c018792bc03e7d60f237d005f02605865ea45dced56b0f9da58001b9fa1e72e4a9fefd264bcf075cc237aa7ba54d6294fcebf0324271d4fc28798d1c034cce9898b1a788e789ca47cb3287cbcc7752c2279bce91ce1505fb0ec538d4370a49869188a08ee6ae3467ad6b4c8a24fc2feff9f8cdf35646efd9f025a797ca04b015d68f572fd205dbed7a7dfe34313f085e587e4f3bb97b4b8638a46b63a268eba9c264ef3e9e9caa08deeaade9836ccc053c4cfc0e9fcfd3e2bb61fd9e8184b5cc9bcbd5"}, @ra={0x5, 0x2, 0xa}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0xbb, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0x1d8}}, {{&(0x7f0000001200)={0xa, 0x4e22, 0x4, @empty, 0x2d}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001240)="aa73ac631e8f396e9af8d714d6523270b745b8b94133548c42d4004ee8e895a8930a1941bc45f32d4a3f98580c4901279e55e29e2d944d560b8fc21c2218a3a6770308518ba840ca7d08c7beaf7d04304336fe3c909862a7d62d1a7da35697efdb28d013536ee71642561df51250bfe374a6934e4cfb8f15e2043557cb677a1e9598ca8751add78a1d6d18e78f383ea745c7180f9d100664a22c386453f6cbbef9c18e9b84b7e701758d3a04cd6661d1b3640cc0e23b26b1e181c15ab965b4cf4ebdcd83ac1a82d9aa43da844fdd1487c391767028e7c15cd5c3c774dd4783448de027938982a97271896ce4", 0xec}, {&(0x7f0000001340)}, {&(0x7f0000001380)="37500d41c9a084be82c339439b4c4e47b86c821be9494d411c4613828ebe6b841c99876fd908be14cfb333fb413f04ce8ac22fc0cd17e7526d9ec97201dd1bc8fa2cde5b1f720ac69bcad16853b722c5357bb7f807e78abc5da758ce29d69ca58265034cc0baf63e46451ea1b4d536345c03c3ee3cbf76ab982a1a48d798a9d54742f7fd6de43c8e262551d587695f1af3f6e349e67f4824760953f4e0083a98e49820ea5f7e1205f6e22f5b6bc573113f6ad2c4acd5f571423e5f62bc049331cbd821153f87905c3c6e6b7bd2ad5bd8613bafdb33f3a438c7b134a98b5b6619c27d9883aad9087c48b671ca5a13", 0xee}, {&(0x7f00000015c0)="7ece806611988f3f12fb16ebeea72f49123c4be698b1102616ec814aad0f7c5b04564a8ec5af248e56a6f4a598ebd0cb6d381de6be2c994deee586b76cd4bb5d925b043bcfcfadbe23ab1928f77a7f34a5877a1366871be71e83d65d50578f802f5da7fe86aa1b33d10b9ef0796d6f700580b3ae93892116e8e6f8bad44a4908a1f43dba5ab3cd531d9750126c1aefee9e36187a7e9477fa8112b0f16aa3c3170387eb2ab824d4e6326e53fc26bf41b8208a30a0f20f0b419921f79a580c43ea704161b4dd86d9c3a65f348caffb714dcf", 0xd1}, {&(0x7f00000016c0)="820210eee594f752972c63441f47092c82dead514ebe2a5f4653ee27ad363ff116f8da909318afc821f430a1132b700dc8472064d8efaf729fdbd3046e8fd5e5093ed1f39208c6d5e5b036cacdca234d5b26ec14f47d4d52fe121c3c3d3f7cfc7047707f47bc5bc3f355b854", 0x6c}, {&(0x7f0000001740)="f79002071d9dccfa0d7afd4a2b86791d61119297229c6a2f5db5d8a112bd2731ed85f0f3ff8a7d83fc573f8fdf8e71274883452cdf6c15a6eb3fc125dbf22069fcfcd5a6672a6a75b6265867e29010cd45796f82818619d890173aa5b21d5e042f61d10216c3f3138d0c339eeff65fa75e357fbf9eb89bc20a1febf4bd701992182aae6cb399674bce36fd8ea8eebc011baa1bcd1ee1481409c3e3587511bd3ff4e32d9b3a092e6b8ffb6d73a63c1cb4ed681104d3a3234694be60", 0xbb}], 0x6, &(0x7f0000001880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x87, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}], 0x38}}], 0x3, 0x4008000) (async) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r3], 0x108}}], 0x1, 0xc040) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0x4, 0x1, 0x5, 0x2, 0x3, 0x9, 0x87, 0x38, 0x2c0, 0x9, 0xa84, 0x20, 0x3, 0x6, 0x3, 0x5}, [{0x60000000, 0xa89b, 0xff, 0x0, 0x2, 0x5, 0x9, 0x557}, {0x6, 0x1, 0x200, 0x7, 0x2, 0x7, 0xe0, 0x2}, {0x1, 0x5, 0x6, 0x7, 0xd, 0x0, 0x800, 0x5a}], "8e5e6b9f0da3217646d523368ccc5b028b897120a954e3b869e30d341907b783aa583dd97cc08c8ee69674524306bf2b4f5506bd774fed6a38311e416c92d55174e630d6c130b089e348", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8e2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) 7.207002949s ago: executing program 2 (id=2105): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/83, 0x53}], 0x2}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}}], 0x2, 0xf00) 6.236095891s ago: executing program 0 (id=2107): r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000001580)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newnexthop={0x28, 0x68, 0x1, 0x6, 0x7ffffffc, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xa, 0x2, [{0x1, 0x4}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x8001, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x7, 0x4) 5.868509269s ago: executing program 3 (id=2109): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e0001000000003e5c5f84243c2f"], 0x14}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xce, 0x0, 0x8}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r7, r0, 0x80000) 5.647308236s ago: executing program 2 (id=2110): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x82, 0x1, "88"}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x20031, 0x4) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x8) 5.381367316s ago: executing program 0 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 5.062737611s ago: executing program 5 (id=2112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000087c0), 0x0, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) eventfd(0x7) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r7, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001d0000042dbd700e00dadf250700ba9fd6582e499866c0215c82d9c20000", @ANYRES32=r7, @ANYBLOB="8000920608000b000500000008000b00050000000a000100000000000000000008000d000104000005000c0004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4c810}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=@ceph_nfs_confh={0x10, 0x2, {0x7, 0x9}}, &(0x7f0000002300), 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r10) close_range(r9, 0xffffffffffffffff, 0x0) 4.946514766s ago: executing program 3 (id=2113): socket$kcm(0x10, 0x2, 0x10) set_mempolicy(0x4005, &(0x7f0000000040)=0x16, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xe, 0xfff3}, {}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0xd4) 4.476562291s ago: executing program 1 (id=2114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb0768c189c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f6773538faee834613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x74, r4, 0xc02, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10, 0x80}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4e}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x172}], @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="78000000000000002900000039000000670c02a40000000000000000000000000000000000000001fc020000000000000000000000000001fc020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb200100000000000000000000000000021400000000000000290000004300000000100000000000001400000000000000290000000b0000008000000000000000280000000000000029000000370000003c01000000000000000100c2040000001000000000000000", @ANYBLOB="a7"], 0x150}}], 0x2, 0x20000800) 4.432285111s ago: executing program 0 (id=2115): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100049040000000100000040800000002e81216f114eb750ed5225ccef4ed97be1c7854bc1c52fa48061a2ad93d140a10b33c5bc7b269907317892848112588cdbf1a18249ad45a82e91c0744bc5fc72e8095b7cfe77c98de07d8bb5eb", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028008001400520000000400120005000a00000000000500130001000000"], 0x50}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x8, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) gettid() 4.068598248s ago: executing program 3 (id=2116): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="78000000000000002900000039000000670c02a40000000000000000000000000000000000000001fc020000000000000000000000000001fc020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb200100000000000000000000000000021400000000000000290000004300000000100000000000001400000000000000290000000b0000008000000000000000280000000000000029000000370000003c01000000000000000100c2040000001000000000000000", @ANYBLOB="a7"], 0x150}}], 0x2, 0x20000800) (fail_nth: 22) 4.001000103s ago: executing program 0 (id=2117): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = eventfd2(0x8, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x11) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x2, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000c9910200200012800b0001006272696467650000100002800c0021007f"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x48, 0x25, 0x109, 0x870bd22, 0xfffffffc, {0xff}, [@nested={0xc, 0x3d, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @nested={0x10, 0x3e, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0xcb}]}, @generic="2042efeaaa5f756b9aa25c0963"]}, 0x48}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 3.611359127s ago: executing program 1 (id=2118): close(0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000200)=[@nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_code={0x12e, 0xffffffffffffffe1, {0x2, "640fc7bbb8000000c74424006a000000c744240204820000ff2c24804e003ac48281913c02b8010000000f01d90f009d58780000c4a1a15f909c33000047d9fa0f01c5dbe1"}}], 0x75}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x40524, &(0x7f0000000040)={0x0, 0x3cae, 0x1c080, 0x5, 0x20002f7}) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800a447c00427fa1de600001100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$igmp(0x2, 0x3, 0x2) chdir(0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = open(0x0, 0x4100, 0x112) getdents(r5, 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000e80)={0x5, 0x2, {0x4, @usage=0x40000, 0x0, 0x4, 0x4, 0xfff, 0x4, 0x3ff, 0x4, @usage=0x5, 0x0, 0x2, [0x400, 0x3, 0x2, 0x7ff, 0x1, 0x9]}, {0x1, @usage=0xffffffff, 0x0, 0x1, 0xc04, 0x3, 0x10001, 0xf36a, 0x4, @struct={0x3ff, 0xa000000}, 0x3d06, 0xbd5, [0x81, 0xfffffffffffffffa, 0x7, 0x9, 0x7, 0x200000000]}, {0x0, @struct={0x81, 0x8000}, 0x0, 0x338, 0x30152ead, 0x0, 0x803, 0x2, 0x9, @usage=0x10, 0xcec, 0x7, [0x2, 0x8001, 0x307, 0x3ff, 0x4, 0x311]}, {0x2, 0x5, 0x7fff}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x885, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, &(0x7f0000001e80)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4) sendmmsg$inet(r5, 0x0, 0x0, 0x4000) 3.518919348s ago: executing program 3 (id=2119): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x25, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r8}) ioctl$I2C_RDWR(r4, 0x707, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001c00000829bd7000fd069d2206884bbd", @ANYRES32=r2, @ANYBLOB="4000310608000100ac141429"], 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x4010) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x100000000009, 0x6, 0xf, 0x80000002}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004041}, 0x20050850) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000085804145000000000000109022400010000a0010904000001030003000921fc7f4301220a00090582031000fe0000"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x110}}, 0x90) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="900324f658b79640ac7d9251e42544c2970afda9b0ef6909844451acfb414d63bb12615fec996e20fed5637143927def70b0ad3c81dc64b9b72804c8b6de637ab0696659f051ac6cfd5b1dcb9574136de68d81bcc1e03c367df7f6dc92e0df3d26701bbf489211aebe3b11b4575f5cddae528940397568b034cafd719361bdd45bf04c92154d53472022206c3977f3eb"]}]}) 2.596554476s ago: executing program 0 (id=2120): r0 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7977ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453a5e3f66a", 0xc4, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="01f400000000000051fa6dd4f9", 0xd, 0xfffffffffffffffe) unshare(0x20040600) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x5, 0x62, "9fc3cdf9934e6f720ae33a23c6d5fab11cb0b5a8c18feeaba4cab9a77b21e76313540c61bfba172198be8679803b0d4392d5a76bc2946f68af2315ffe45916730ba08af9be4f360effccdbb137d926e9bcff37632e8bb5689ca4f2b5894c71cb9809"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x5, 0xc2, {0xc2, 0x23, "57f150c00b8164f69965b21d024112b958b409ffb6eecd519c17d394f83b2f456ec888aa24785f40d6e320d5bf77346053aa4981cc552465816210e05722abff9382384bac77671c2a049b64196bf20d6a218a8f04c299a07f7b712d67a32b1073190db3e0e5815a621dc2f19e5cfbdd454046d4929502a4ee59530b47796b0b94106ea99d7f0e65bc401e09ae13178e2c6150eb72c87bf8526d7c4b0444c11f4d3525202cb9d12268e54abd7dc6fff3da188223a287207ea7646be59a2e984a"}}, &(0x7f0000000480)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "f58394e7a2d6db6b59b7a1a53cb4bcf1f46381c51c2c51654a98414075d4d8983291ddc0a5a01ddbe626b1d1607d630e9951a577ef2c8e2a5d75cbddacebb5697bb8b5abac3fed464ea8f77736291d72ed5a88f24f3898d0f7e97b45a5f1bced20d26c79ec97f5dbba70f4fa00cf20604c4f22663dc601e6ad3d0f37"}}}, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)={0x0, 0xe, 0x71, "b06de78e29c9be041748babff6595bf4319c7875e294c00cc5d81a88f4fc75f43a68b068fa87e89fbbe663ee182e0220ae503cd52fcd4c380cd91cddd574b7179eef1dedc18a8cb7e58352ef764af5cae2b197adaa688925dee38fdabe46933bb59da5336035f16fcbb94c4999b5920693"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6d}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x7f}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x30}, &(0x7f0000000780)={0xc0, 0xa2, 0x2f, "3c7943ac81c59501a6e9247ce8374c6a8ba445b56a9d4f67e3d3f5ac20eb11079433c8217438b7ea9e7ea7c3abc285"}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x8b, 0x0, 0x2}, {0x8b6, 0x0, 0x4}]}) (async) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x8b, 0x0, 0x2}, {0x8b6, 0x0, 0x4}]}) syz_usb_control_io$uac3(r3, 0x0, 0x0) (async) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 2.595850204s ago: executing program 1 (id=2121): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x830, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4ca}, @TCA_TBF_PTAB={0x404, 0x3, [0x8000, 0x6a3, 0x3ff, 0x3, 0x101, 0x2a8dbac0, 0x100, 0xff, 0x3aa8, 0xffffffff, 0x280, 0x7, 0xa, 0xfffff2d2, 0x7ff, 0x9, 0x10001, 0x2, 0x1, 0xffffffff, 0xfff, 0xff, 0x9, 0x5, 0x10000, 0xffff0, 0xbc77, 0x4, 0x0, 0x2d071b7c, 0xf301, 0x9, 0xfffffc00, 0x100, 0x7f, 0x4, 0x100000, 0x7ff, 0x80000000, 0x9, 0xb, 0x8, 0x7a89fc6b, 0x7fff, 0xfffffff8, 0x4, 0x6, 0x2, 0x9, 0x9, 0x9, 0x1, 0x3, 0xd23, 0x2, 0xfff, 0x6, 0x3, 0x1, 0x0, 0x5, 0x6, 0x2, 0x3ff, 0x0, 0x0, 0x4953, 0x67, 0x5, 0x8ced, 0x0, 0x1000, 0x7, 0x3, 0x3, 0x1000, 0x3, 0x1, 0xfffffff7, 0x2f, 0x800, 0x6ca, 0x3, 0x9, 0x0, 0x8, 0x1, 0x4, 0x8, 0x3, 0x5, 0x1, 0x60, 0x1ff, 0x9c, 0xfffffffc, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x100, 0xc, 0x3, 0x4, 0xb1c3, 0x6, 0x7, 0x4, 0x3, 0x4, 0x4, 0x101, 0xffff, 0x8, 0x7fffffff, 0x5, 0x5, 0x9, 0xa, 0xe, 0x1ff, 0xffff507d, 0x7, 0x9113, 0xd4e, 0x5, 0x9, 0x0, 0x9, 0x5, 0x10001, 0x4, 0xc37, 0x5, 0xe, 0x6, 0x7fff, 0x4, 0xfffffffe, 0x5, 0x4, 0x9, 0x18e, 0xb, 0x7ffffffd, 0x4, 0x7f80000, 0x4, 0xcd12, 0x4, 0x3, 0x400, 0xf8000000, 0x8d7, 0x7ff, 0x2, 0x80000001, 0x9, 0x20, 0x3, 0x7, 0x8e91, 0x95d, 0x1, 0x2b36, 0x6, 0x7, 0xe, 0xb5, 0x0, 0xd, 0x2, 0x200, 0x9, 0x401, 0x3, 0x40000000, 0xfffffffb, 0x5, 0x7ff, 0x7, 0x9, 0x4, 0x43cb, 0x7, 0x4, 0x7, 0x4, 0xfffffffc, 0x4, 0x9172, 0xfffffffe, 0x7, 0x14000000, 0x3, 0x9d1, 0x8, 0x8, 0x8, 0x6, 0x0, 0x5, 0x7, 0x2, 0x1, 0x4, 0x8, 0x8, 0x5, 0x401, 0x8ec, 0xb56, 0x3, 0x6d5, 0x1, 0x1, 0x1, 0xffff8000, 0x6, 0x587, 0x9, 0x1, 0x7, 0x9, 0x80000001, 0xfffffffd, 0x8000, 0x1, 0x4, 0x4, 0x2, 0xab, 0xfffffffe, 0x10001, 0x7a8, 0x4, 0x2, 0x800, 0x5, 0x80, 0x3, 0x8, 0xfffffff2, 0xa, 0x0, 0x3, 0x465, 0x7fff, 0x9, 0x9ee, 0x0, 0x1ff, 0x2, 0x44]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1400}, @TCA_TBF_RTAB={0x404, 0x2, [0x101, 0x8000, 0x4, 0x101, 0x3, 0x1, 0x8, 0x63, 0x4, 0x5, 0x57f2b443, 0xf, 0x0, 0x9, 0x2, 0xb25, 0x4, 0x10000, 0x0, 0x3, 0x10, 0x7, 0x8, 0x401, 0x2, 0x5, 0x21, 0x6d, 0x2, 0x7, 0x8, 0x2, 0x2, 0x4, 0x0, 0x3, 0xffffde66, 0x8, 0x3ff, 0x5, 0x1, 0x3, 0x8, 0x8, 0x33, 0x1, 0x2, 0x4, 0x1ff, 0xd4c3, 0x9, 0x4, 0x6, 0x2, 0x1ff, 0x9e, 0x5, 0x6, 0xfffffff8, 0x6, 0x27, 0x2, 0x1d, 0x401, 0x800, 0x4, 0x2, 0x9, 0x101, 0x80000000, 0x0, 0x9, 0x4, 0xfffff7d2, 0x3800, 0x400, 0x2, 0x0, 0xf56b, 0xe, 0x64, 0xecf, 0x1ff, 0x4, 0x8000, 0x8, 0x6, 0x8001, 0x4, 0x7, 0xfffffffc, 0xfff, 0x5661a45b, 0x9, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x9, 0xfffffffd, 0x7, 0xe3, 0x400, 0x7fff, 0x7, 0x1, 0x1, 0x4, 0x55dfa59d, 0x10000, 0x5, 0x10, 0xbf, 0xfffffffe, 0x9, 0xffffffff, 0x3, 0x7, 0x3, 0xdcc7, 0x2, 0x419, 0x4, 0x3, 0x7, 0x7ff, 0x8, 0x10000, 0xd8, 0x8001, 0x8, 0xd, 0x8, 0x80, 0xffff, 0x90, 0x3, 0x9, 0x6, 0x6, 0x68, 0x7f, 0x81, 0x10, 0x5, 0x8, 0x0, 0xf, 0x7, 0xfffffff7, 0x717, 0x6, 0x6, 0x5, 0xe9, 0x2, 0x7ff, 0x0, 0x4, 0xd79f, 0x9, 0xd, 0x3, 0x4, 0x3, 0x4, 0x1, 0x4, 0x5, 0x1, 0x5, 0x3, 0xf, 0x5, 0x4, 0x3, 0x10000, 0x6, 0xdf, 0x3494, 0x5, 0xc, 0xf0e, 0xffff, 0x4, 0x7fffffff, 0x3, 0x8, 0xff, 0x0, 0xfff, 0x7, 0x8, 0x0, 0xfffffffb, 0x0, 0xffffffff, 0x7, 0x7, 0x2, 0x7, 0x0, 0xe, 0x1, 0x1, 0x6, 0x6, 0x7fff, 0xbd99, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x8, 0x5, 0xcc, 0x8001, 0x19, 0xfffffac0, 0x1e8, 0x8, 0x8, 0xfffffffd, 0x40, 0x0, 0x9, 0x80, 0x9, 0x73f949b6, 0x7, 0x0, 0x1, 0x2, 0xe74, 0x4, 0x8, 0x93, 0x2, 0xfffffff9, 0x5, 0x7287, 0x1, 0x401, 0x2, 0x9afb, 0x879, 0x8315, 0x6, 0xffff, 0x80000001, 0x6, 0x2, 0x0, 0x1]}, @TCA_TBF_PBURST={0x8, 0x7, 0x12d}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5d778543d4b9e3ee}]}}]}, 0x85c}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) 2.317223256s ago: executing program 2 (id=2122): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0xba, 0x80000008, 0x3}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRWALK(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040)) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffdfff6f}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x662a2, 0x22}}}}}}]}, 0x48}}, 0x24008000) 2.185336353s ago: executing program 1 (id=2123): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) r1 = dup(r0) r2 = socket(0x10, 0x80000, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7002000013002900000700"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x68, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x1055, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = dup(r9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20020004) ioctl$PTP_EXTTS_REQUEST2(r10, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r8, r11, &(0x7f0000000000)=0x8, 0x80000001) sendmsg$nl_route_sched(r8, 0x0, 0x44004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x13, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000280c0000180000000400000000060000000000000052100004000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffff755c25214344a9e729d6200951c51bc91d03d54dee222fbfa400000000000007040000f0ffffffb7020000080000001823000026477081ad0c5ba4ce10e262964f83dfc2374575", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x223a, 0x86, &(0x7f0000000400)=""/134, 0x41100, 0x24, '\x00', r3, @fallback=0x23, r4, 0x8, &(0x7f0000000500)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x5, 0xfffffff7, 0x9}, 0x10, r5, r6, 0x1, &(0x7f0000000a00)=[r7, r8, r12], &(0x7f0000000a40)=[{0x4, 0x5, 0xc}], 0x10, 0x101}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e1401"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) 1.619724526s ago: executing program 2 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006d40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ceaedd7a01d541e89baeb955d94a62b31891409e2886a11c395be5d74400991cfa9e035a92ace6d329dde8ce287abff2bfc41b1d04ba912572aaa0"], 0x3690}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x2}, &(0x7f0000000200)=0xb3f4, 0x0, 0x0, 0x3fc, 0x4cbd, 0x1, 0x30, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xe}, 0x0, 0x0, 0x10000, 0x101, 0x7, 0x6, 0x6, 0x5}}], 0xb0, 0x10}, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001e00ff0225bd700000000000010000007c0106"], 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x24048910) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1d0, 0x1d8, 0x1d8, 0x1d0, 0x1d8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x6128}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x1, 0x3, 0x0, 0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x5, 0x10000, 0x6, 'snmp_trap\x00', 'syz1\x00', {0xfffffffffffffffe}}}}, {{@ip={@local, @loopback, 0x0, 0xffffffff, 'macvlan1\x00', 'tunl0\x00', {}, {}, 0x11, 0x3}, 0x3202, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x64, r10, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0xbc66096df5ecf0ec}, 0x44) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00010023bd7000ffdbdf2507000000", @ANYRES32=r11, @ANYBLOB="800081040a0002"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000500)={&(0x7f0000000340)={&(0x7f00000000c0)="f5f8b6201f083f5ff20e43f72fccb5624a83dbf4e06ee1d6be7cd0af3459258f1f7e34", 0x23, 0x0, 0x0, 0x6}}, 0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x26, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffa8, 0x0, 0x0, 0x0, 0x800}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc357}, @jmp={0x5, 0x1, 0x6, 0x2, 0x0, 0x40, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0x5b}]}, &(0x7f0000000700)='syzkaller\x00', 0x4000400, 0xfa, &(0x7f0000000800)=""/250, 0x41000, 0x51, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x3, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000009c0)=[{0x3, 0x4, 0x1, 0x7}, {0x3, 0x1, 0x6, 0x9}, {0x3, 0x2, 0xff, 0x9}], 0x10, 0x98be}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x3c, 0x11, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x80, 0x180}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_EVENT={0x8, 0x2c, 0x56}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) 1.257547584s ago: executing program 1 (id=2125): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000020206030000000000ef4d4e0b1a02000000000000ea000500010007000000050004000100000005000500030000000900ffffffff7a30000000004fe37fa3d531853dc521a2e8e53fa27bbc66726a24985eee6776be90297dcc8002e0060b293259dcd8252487a50c6fa8ae697d410cb1d7644b6f18d6c40e7a08d4449ea886d6dc1f1da76017c98cecb48cd4bbd14002a4aa022a47b3f3accdf70be5eda841d8cc1fff0611afde7492516d89f93e48108dd50cca8c877fd6c75c68393a5a9cf091e709be45afd03d86e38297e28a34cf9bc91cd40962bd2bede9d2d4f08581d5496186faf61bab55b154d2"], 0x38}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x21, 0x1, 0xfffffffe) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) setns(r1, 0x24020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x3b6) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000400)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/40, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000080)=0x10000001) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000040)={0x2}) fcntl$setstatus(r7, 0x4, 0x0) 1.05077844s ago: executing program 2 (id=2126): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=')-)@\'&(-\x00', 0x10200, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x1]}, {0x7ff, 0x9, 0x100, 0x7812}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4044814) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="c4ad7f3626942c38c1935038a1cbd297", 0x10) (async, rerun: 32) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r1, 0x2, 0x10, r0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x215}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x185}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0xa}) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000440)=0x2, 0x4) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000040) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000580)="a5235cf89b582a90541b55348c467272", 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x120, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8015}, 0x24020844) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xe6, 0x20a000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000840)=0xe65e) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000008c0)=""/225, &(0x7f00000009c0)=0xe1) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x35}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) poll(&(0x7f0000000b00)=[{r0, 0x99}], 0x1, 0x779) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, 0x1411, 0xe11, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40441c5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000c80)={'pimreg\x00'}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000d00)={r6, r7/1000+60000}, 0x10) (async) fchmodat(r0, &(0x7f0000000d40)='./file0\x00', 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d80)={0x195}, 0x8) 914.688983ms ago: executing program 1 (id=2127): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) signalfd4(r1, 0x0, 0x0, 0x800) openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_open_dev$ndb(0x0, 0x0, 0x2040) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0) syz_usb_control_io(r2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x58}], 0x1) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r6, 0x0, 0x44080) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="e09dd486000044"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='\x00', 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00061800000054"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) 501.202707ms ago: executing program 2 (id=2128): epoll_create(0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './cgroup'}, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a00010072656469720000001400000011"], 0xcc}}, 0x4000040) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x32, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe}}}}}, 0x0) rmdir(&(0x7f0000000280)='./bus\x00') r8 = accept4(r5, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x12) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') 0s ago: executing program 3 (id=2129): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="78000000000000002900000039000000670c02a40000000000000000000000000000000000000001fc020000000000000000000000000001fc020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb200100000000000000000000000000021400000000000000290000004300000000100000000000001400000000000000290000000b0000008000000000000000280000000000000029000000370000003c01000000000000000100c2040000001000000000000000", @ANYBLOB="a7"], 0x150}}], 0x2, 0x20000800) (fail_nth: 23) kernel console output (not intermixed with test programs): uerying for an remote control event. [ 572.153872][ T8887] m920x_read = error: -19 [ 572.173216][ T8887] dvb-usb: error while querying for an remote control event. [ 572.353861][ T8887] m920x_read = error: -19 [ 572.362761][ T8887] dvb-usb: error while querying for an remote control event. [ 572.504048][ T8887] m920x_read = error: -19 [ 572.508835][ T8887] dvb-usb: error while querying for an remote control event. [ 572.673864][ T8887] m920x_read = error: -19 [ 572.686771][ T8887] dvb-usb: error while querying for an remote control event. [ 572.844276][ T8887] m920x_read = error: -19 [ 572.868435][ T8887] dvb-usb: error while querying for an remote control event. [ 572.893270][ T4999] Dev loop5: unable to read RDB block 7 [ 572.927075][ T4999] loop5: unable to read partition table [ 572.962098][ T4999] loop5: partition table beyond EOD, truncated [ 573.043991][ T8887] m920x_read = error: -19 [ 573.061968][ T8887] dvb-usb: error while querying for an remote control event. [ 573.223879][ T8887] m920x_read = error: -19 [ 573.257508][ T8887] dvb-usb: error while querying for an remote control event. [ 573.334567][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 573.398947][T13485] input: syz1 as /devices/virtual/input/input79 [ 573.425979][ T8887] m920x_read = error: -19 [ 573.448401][ T8887] dvb-usb: error while querying for an remote control event. [ 573.556796][T13491] loop2: detected capacity change from 0 to 7 [ 573.595123][ T8887] m920x_read = error: -19 [ 573.608320][T13491] loop2: [ 573.616640][ T8887] dvb-usb: error while querying for an remote control event. [ 573.635139][T13491] loop2: partition table partially beyond EOD, truncated [ 573.650754][T13487] netlink: 'syz.3.1969': attribute type 12 has an invalid length. [ 573.784088][ T8887] m920x_read = error: -19 [ 573.797196][ T8887] dvb-usb: error while querying for an remote control event. [ 573.984971][ T8887] m920x_read = error: -19 [ 573.989822][ T8887] dvb-usb: error while querying for an remote control event. [ 574.203999][ T8887] m920x_read = error: -19 [ 574.213412][ T8887] dvb-usb: error while querying for an remote control event. [ 574.364958][ T8887] m920x_read = error: -19 [ 574.369463][ T8887] dvb-usb: error while querying for an remote control event. [ 574.430992][ T4999] Dev loop5: unable to read RDB block 7 [ 574.474342][ T4999] loop5: unable to read partition table [ 574.511639][ T4999] loop5: partition table beyond EOD, truncated [ 574.533939][ T8887] m920x_read = error: -19 [ 574.555187][ T8887] dvb-usb: error while querying for an remote control event. [ 574.714022][ T8887] m920x_read = error: -19 [ 574.753425][ T8887] dvb-usb: error while querying for an remote control event. [ 574.913900][ T8902] m920x_read = error: -19 [ 574.920800][ T8902] dvb-usb: error while querying for an remote control event. [ 575.092193][ T4999] Dev loop5: unable to read RDB block 7 [ 575.098168][ T8902] m920x_read = error: -19 [ 575.102661][ T8887] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 575.136284][ T8902] dvb-usb: error while querying for an remote control event. [ 575.150363][ T4999] loop5: unable to read partition table [ 575.174169][ T4999] loop5: partition table beyond EOD, truncated [ 575.284034][ T8902] m920x_read = error: -19 [ 575.291459][ T8902] dvb-usb: error while querying for an remote control event. [ 575.330733][ T8887] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 575.350806][ T8887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.369493][ T8887] usb 3-1: Product: syz [ 575.393829][ T8887] usb 3-1: Manufacturer: syz [ 575.414241][ T8900] m920x_read = error: -19 [ 575.418678][ T8900] dvb-usb: error while querying for an remote control event. [ 575.436376][ T8887] usb 3-1: SerialNumber: syz [ 575.473634][ T8887] usb 3-1: config 0 descriptor?? [ 575.527689][ T8887] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 575.553916][ T8900] m920x_read = error: -19 [ 575.577506][ T8900] dvb-usb: error while querying for an remote control event. [ 575.645210][ T8902] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 575.707169][T13505] program syz.2.1975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.741244][ T8900] m920x_read = error: -19 [ 575.756705][ T8900] dvb-usb: error while querying for an remote control event. [ 575.825474][ T8902] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 575.860117][ T8902] usb 6-1: config index 0 descriptor too short (expected 65016, got 133) [ 575.891086][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.915298][ T8900] m920x_read = error: -19 [ 575.932085][ T8900] dvb-usb: error while querying for an remote control event. [ 575.953947][ T5772] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 575.972503][ T8902] usb 6-1: config index 1 descriptor too short (expected 65016, got 133) [ 576.004987][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.041640][ T8902] usb 6-1: config index 2 descriptor too short (expected 65016, got 133) [ 576.071659][ T8887] gspca_stk1135: reg_w 0x3 err -71 [ 576.089830][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.100252][ T8907] m920x_read = error: -19 [ 576.107503][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.118347][ T8907] dvb-usb: error while querying for an remote control event. [ 576.140320][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 576.153943][ T8887] gspca_stk1135: Sensor write failed [ 576.175466][ T8902] usb 6-1: config index 3 descriptor too short (expected 65016, got 133) [ 576.190441][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.198743][ T5772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.222704][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.236087][ T8887] gspca_stk1135: Sensor write failed [ 576.244874][ T5772] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.258940][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.265583][ T8907] m920x_read = error: -19 [ 576.270290][ T8907] dvb-usb: error while querying for an remote control event. [ 576.279536][ T8902] usb 6-1: config index 4 descriptor too short (expected 65016, got 133) [ 576.288443][ T8887] gspca_stk1135: Sensor read failed [ 576.300852][ T5772] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 576.311086][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.323216][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.338469][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.353761][ T8887] gspca_stk1135: Sensor read failed [ 576.386782][ T5772] usb 1-1: Product: syz [ 576.391223][ T8902] usb 6-1: config index 5 descriptor too short (expected 65016, got 133) [ 576.400138][ T8887] gspca_stk1135: Detected sensor type unknown (0x0) [ 576.412767][ T5772] usb 1-1: Manufacturer: syz [ 576.417771][ T8907] m920x_read = error: -19 [ 576.424789][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.438448][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.451541][ T8907] dvb-usb: error while querying for an remote control event. [ 576.460129][ T5772] usb 1-1: SerialNumber: syz [ 576.472874][ T8887] gspca_stk1135: Sensor read failed [ 576.508591][ T5772] usb 1-1: selecting invalid altsetting 1 [ 576.523102][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.547957][ T8887] gspca_stk1135: Sensor read failed [ 576.562759][ T5772] usb 1-1: unit 6 not found! [ 576.591719][ T8907] m920x_read = error: -19 [ 576.598792][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.614360][ T8902] usb 6-1: config index 6 descriptor too short (expected 65016, got 133) [ 576.633324][ T8887] gspca_stk1135: Sensor write failed [ 576.646609][ T8907] dvb-usb: error while querying for an remote control event. [ 576.659378][ T8887] gspca_stk1135: serial bus timeout: status=0x00 [ 576.670462][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.697126][ T8887] gspca_stk1135: Sensor write failed [ 576.712591][T13518] FAULT_INJECTION: forcing a failure. [ 576.712591][T13518] name failslab, interval 1, probability 0, space 0, times 0 [ 576.731833][ T8902] usb 6-1: config index 7 descriptor too short (expected 65016, got 133) [ 576.741190][ T8887] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 576.757500][ T8902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.776904][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.1.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.776938][T13518] Tainted: [L]=SOFTLOCKUP [ 576.776945][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.776957][T13518] Call Trace: [ 576.776974][T13518] [ 576.776983][T13518] dump_stack_lvl+0xe8/0x150 [ 576.777021][T13518] should_fail_ex+0x412/0x560 [ 576.777050][T13518] should_failslab+0xa8/0x100 [ 576.777073][T13518] __kmalloc_cache_noprof+0x88/0x660 [ 576.777102][T13518] ? sctp_add_bind_addr+0x8c/0x370 [ 576.777120][T13518] ? __pfx_sctp_get_port_local+0x10/0x10 [ 576.777167][T13518] sctp_add_bind_addr+0x8c/0x370 [ 576.777185][T13518] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 576.777220][T13518] sctp_do_bind+0x5b2/0x9d0 [ 576.777256][T13518] sctp_connect_new_asoc+0x270/0x6b0 [ 576.777285][T13518] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 576.777316][T13518] ? __local_bh_enable_ip+0xd0/0x130 [ 576.777337][T13518] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 576.777364][T13518] ? security_sctp_bind_connect+0x7e/0x2c0 [ 576.777392][T13518] sctp_sendmsg+0x1576/0x2c50 [ 576.777432][T13518] ? __pfx_sctp_sendmsg+0x10/0x10 [ 576.777466][T13518] ? aa_sk_perm+0x6d5/0x900 [ 576.777512][T13518] ? __pfx_aa_sk_perm+0x10/0x10 [ 576.777550][T13518] ? sock_rps_record_flow+0x19/0x350 [ 576.777576][T13518] ? inet_sendmsg+0x2f4/0x370 [ 576.777602][T13518] ____sys_sendmsg+0x80a/0x9f0 [ 576.777641][T13518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.777688][T13518] ? import_iovec+0x73/0xa0 [ 576.777716][T13518] ___sys_sendmsg+0x2a5/0x360 [ 576.777735][T13518] ? __lock_acquire+0x6b5/0x2cf0 [ 576.777768][T13518] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.777804][T13518] ? kstrtouint+0x6e/0xe0 [ 576.777860][T13518] ? __fget_files+0x2a/0x420 [ 576.777883][T13518] ? __fget_files+0x3a0/0x420 [ 576.777917][T13518] __sys_sendmmsg+0x27c/0x4e0 [ 576.777943][T13518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 576.777960][T13518] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 576.778007][T13518] ? ksys_write+0x242/0x270 [ 576.778038][T13518] ? __pfx_ksys_write+0x10/0x10 [ 576.778072][T13518] __x64_sys_sendmmsg+0xa0/0xc0 [ 576.778091][T13518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.778112][T13518] do_syscall_64+0x174/0x580 [ 576.778131][T13518] ? trace_irq_disable+0x3b/0x140 [ 576.778158][T13518] ? clear_bhb_loop+0x40/0x90 [ 576.778182][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.778203][T13518] RIP: 0033:0x7fa76419ce59 [ 576.778222][T13518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.778238][T13518] RSP: 002b:00007fa76509b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 576.778260][T13518] RAX: ffffffffffffffda RBX: 00007fa764415fa0 RCX: 00007fa76419ce59 [ 576.778274][T13518] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 576.778287][T13518] RBP: 00007fa76509b090 R08: 0000000000000000 R09: 0000000000000000 [ 576.778298][T13518] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 576.778316][T13518] R13: 00007fa764416038 R14: 00007fa764415fa0 R15: 00007fa76453fa48 [ 576.778347][T13518] [ 576.782429][ T8887] usb 3-1: USB disconnect, device number 27 [ 577.105577][ T8907] m920x_read = error: -19 [ 577.111638][ T8907] dvb-usb: error while querying for an remote control event. [ 577.149372][T13520] trusted_key: syz.3.1980 sent an empty control message without MSG_MORE. [ 577.205091][ T8902] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 577.225105][ T8902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.234113][ T5729] m920x_read = error: -19 [ 577.245478][ T5729] dvb-usb: error while querying for an remote control event. [ 577.256274][ T8902] usb 6-1: Product: syz [ 577.265552][ T8902] usb 6-1: Manufacturer: syz [ 577.276086][ T8902] usb 6-1: SerialNumber: syz [ 577.299133][ T8902] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 577.375509][ T5729] m920x_read = error: -19 [ 577.380188][ T5729] dvb-usb: error while querying for an remote control event. [ 577.410867][ T8907] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 577.513860][ T5729] m920x_read = error: -19 [ 577.519929][ T5729] dvb-usb: error while querying for an remote control event. [ 577.535857][ T8902] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 577.654461][ T5729] m920x_read = error: -19 [ 577.659061][ T5729] dvb-usb: error while querying for an remote control event. [ 577.691262][ T5772] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 577.722158][ T8902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 577.733286][ T8902] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.769481][ T5772] usb 1-1: USB disconnect, device number 23 [ 577.777589][ T8902] usb 4-1: config 1 has no interface number 0 [ 577.802061][ T8902] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 577.833936][ T8887] m920x_read = error: -19 [ 577.841486][ T8902] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 577.885169][ T8887] dvb-usb: error while querying for an remote control event. [ 577.916933][ T8902] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 577.961187][ T8902] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 577.980108][ T8902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.013963][ T8887] m920x_read = error: -19 [ 578.019263][ T8887] dvb-usb: error while querying for an remote control event. [ 578.022814][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.043960][ T8902] usb 4-1: Product: syz [ 578.043986][ T8902] usb 4-1: Manufacturer: syz [ 578.044004][ T8902] usb 4-1: SerialNumber: syz [ 578.174021][ T8887] m920x_read = error: -19 [ 578.183490][ T8887] dvb-usb: error while querying for an remote control event. [ 578.293383][ T8902] usb 4-1: 1:0 : does not exist [ 578.334506][ T8902] usb 4-1: BAAD GENERIC IO: no channels? [ 578.353987][ T8887] m920x_read = error: -19 [ 578.368156][ T8887] dvb-usb: error while querying for an remote control event. [ 578.476528][T13511] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 578.547094][ T8887] m920x_read = error: -19 [ 578.575094][ T8887] dvb-usb: error while querying for an remote control event. [ 578.591509][T13511] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 578.646794][T13511] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 578.734396][ T5772] m920x_read = error: -19 [ 578.741360][T13511] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 578.753926][ T5772] dvb-usb: error while querying for an remote control event. [ 578.817032][T13511] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 578.854526][ T8902] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 578.863875][ T8907] usb 6-1: Service connection timeout for: 256 [ 578.883904][ T8907] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 578.900432][T13511] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 578.914322][ T5772] m920x_read = error: -19 [ 578.934844][ T5772] dvb-usb: error while querying for an remote control event. [ 578.968545][ T8902] usb 4-1: USB disconnect, device number 126 [ 578.971866][T13511] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 579.002447][ T8907] ath9k_htc: Failed to initialize the device [ 579.074169][T13511] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 579.103922][ T5772] m920x_read = error: -19 [ 579.118078][T13511] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 579.128293][ T5772] dvb-usb: error while querying for an remote control event. [ 579.167145][T13511] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 579.213138][ T8907] usb 6-1: ath9k_htc: USB layer deinitialized [ 579.273952][ T5772] m920x_read = error: -19 [ 579.293604][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.319322][ T8890] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 579.320978][ T5772] dvb-usb: error while querying for an remote control event. [ 579.484082][ T8902] m920x_read = error: -19 [ 579.489039][ T8902] dvb-usb: error while querying for an remote control event. [ 579.512791][ T8890] usb 1-1: device descriptor read/64, error -71 [ 579.613872][ T8902] m920x_read = error: -19 [ 579.626041][ T8902] dvb-usb: error while querying for an remote control event. [ 579.783939][ T8902] m920x_read = error: -19 [ 579.799435][ T8902] dvb-usb: error while querying for an remote control event. [ 579.853978][ T8890] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 579.954419][ T8902] m920x_read = error: -19 [ 579.973182][ T8902] dvb-usb: error while querying for an remote control event. [ 580.014053][ T8890] usb 1-1: device descriptor read/64, error -71 [ 580.062324][ T3601] usb 6-1: USB disconnect, device number 12 [ 580.114820][ T8907] m920x_read = error: -19 [ 580.129271][ T8907] dvb-usb: error while querying for an remote control event. [ 580.137466][ T4999] Dev loop5: unable to read RDB block 7 [ 580.145231][ T8890] usb usb1-port1: attempt power cycle [ 580.174027][ T4999] loop5: unable to read partition table [ 580.206858][ T4999] loop5: partition table beyond EOD, truncated [ 580.293814][ T8907] m920x_read = error: -19 [ 580.301852][ T8907] dvb-usb: error while querying for an remote control event. [ 580.443983][ T8907] m920x_read = error: -19 [ 580.461131][ T8907] dvb-usb: error while querying for an remote control event. [ 580.584231][ T8890] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 580.603914][ T8907] m920x_read = error: -19 [ 580.645085][ T8907] dvb-usb: error while querying for an remote control event. [ 580.657272][ T8890] usb 1-1: device descriptor read/8, error -71 [ 580.788916][ T8907] m920x_read = error: -19 [ 580.841286][ T8907] dvb-usb: error while querying for an remote control event. [ 580.966324][ T8890] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 581.003948][ T8907] m920x_read = error: -19 [ 581.007575][ T8890] usb 1-1: device descriptor read/8, error -71 [ 581.049666][ T8907] dvb-usb: error while querying for an remote control event. [ 581.134094][ T8892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 581.154712][ T8890] usb usb1-port1: unable to enumerate USB device [ 581.203902][ T8907] m920x_read = error: -19 [ 581.225950][ T8907] dvb-usb: error while querying for an remote control event. [ 581.274996][ T4999] Dev loop5: unable to read RDB block 7 [ 581.289918][ T4999] loop5: unable to read partition table [ 581.331199][ T4999] loop5: partition table beyond EOD, truncated [ 581.364071][ T8892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.404062][ T8907] m920x_read = error: -19 [ 581.409423][ T8892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.459878][ T8907] dvb-usb: error while querying for an remote control event. [ 581.483613][ T8892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 581.564949][ T8892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.612192][ T8892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.657434][ T8907] m920x_read = error: -19 [ 581.706053][ T8907] dvb-usb: error while querying for an remote control event. [ 581.715226][ T8892] usb 3-1: config 0 descriptor?? [ 581.849590][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1987'. [ 581.876680][ T8907] m920x_read = error: -19 [ 581.931413][ T8907] dvb-usb: error while querying for an remote control event. [ 581.943874][T13552] bridge_slave_1: left allmulticast mode [ 581.967352][T13552] bridge_slave_1: left promiscuous mode [ 582.029884][T13555] xt_hashlimit: size too large, truncated to 1048576 [ 582.070379][T13552] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.086681][ T5772] m920x_read = error: -19 [ 582.104928][ T5772] dvb-usb: error while querying for an remote control event. [ 582.208182][T13552] bridge_slave_0: left allmulticast mode [ 582.244194][ T5772] m920x_read = error: -19 [ 582.262533][ T5772] dvb-usb: error while querying for an remote control event. [ 582.347759][T13552] bridge_slave_0: left promiscuous mode [ 582.425058][ T5772] m920x_read = error: -19 [ 582.443154][ T8892] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 582.446249][ T5772] dvb-usb: error while querying for an remote control event. [ 582.549707][T13552] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.634018][ T8902] m920x_read = error: -19 [ 582.651186][ T8902] dvb-usb: error while querying for an remote control event. [ 582.803923][ T5772] m920x_read = error: -19 [ 582.832899][ T5772] dvb-usb: error while querying for an remote control event. [ 582.932060][T13565] Invalid logical block size (26) [ 582.993894][ T5772] m920x_read = error: -19 [ 583.010862][ T5772] dvb-usb: error while querying for an remote control event. [ 583.154632][ T5772] m920x_read = error: -19 [ 583.195831][ T5772] dvb-usb: error while querying for an remote control event. [ 583.366781][ T5772] m920x_read = error: -19 [ 583.417024][ T5772] dvb-usb: error while querying for an remote control event. [ 583.553976][ T8902] m920x_read = error: -19 [ 583.578690][ T8902] dvb-usb: error while querying for an remote control event. [ 583.669854][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.748081][ T29] kworker/1:1 (29) used greatest stack depth: 14432 bytes left [ 583.770848][ T5772] m920x_read = error: -19 [ 583.820586][ T5772] dvb-usb: error while querying for an remote control event. [ 583.855657][ T5729] usb 3-1: USB disconnect, device number 28 [ 584.014208][ T8902] m920x_read = error: -19 [ 584.025482][ T8902] dvb-usb: error while querying for an remote control event. [ 584.213886][ T8900] m920x_read = error: -19 [ 584.225725][ T8900] dvb-usb: error while querying for an remote control event. [ 584.393996][ T5729] m920x_read = error: -19 [ 584.414970][ T5729] dvb-usb: error while querying for an remote control event. [ 584.576428][ T5729] m920x_read = error: -19 [ 584.618535][ T5729] dvb-usb: error while querying for an remote control event. [ 584.774528][ T5729] m920x_read = error: -19 [ 584.824789][ T5729] dvb-usb: error while querying for an remote control event. [ 584.986076][ T8900] m920x_read = error: -19 [ 585.008103][ T8900] dvb-usb: error while querying for an remote control event. [ 585.174181][ T5729] m920x_read = error: -19 [ 585.202069][ T5729] dvb-usb: error while querying for an remote control event. [ 585.233203][ T4999] Dev loop5: unable to read RDB block 7 [ 585.261024][ T4999] loop5: unable to read partition table [ 585.297361][ T4999] loop5: partition table beyond EOD, truncated [ 585.383888][ T5729] m920x_read = error: -19 [ 585.406395][ T5729] dvb-usb: error while querying for an remote control event. [ 585.573809][ T5729] m920x_read = error: -19 [ 585.597143][ T5729] dvb-usb: error while querying for an remote control event. [ 585.753960][ T5729] m920x_read = error: -19 [ 585.783741][ T5729] dvb-usb: error while querying for an remote control event. [ 585.957934][ T5729] m920x_read = error: -19 [ 585.993788][ T5729] dvb-usb: error while querying for an remote control event. [ 586.154855][ T5729] m920x_read = error: -19 [ 586.193160][ T5729] dvb-usb: error while querying for an remote control event. [ 586.353864][ T8900] m920x_read = error: -19 [ 586.390529][ T8900] dvb-usb: error while querying for an remote control event. [ 586.531784][ T8900] m920x_read = error: -19 [ 586.555148][ T8900] dvb-usb: error while querying for an remote control event. [ 586.705120][ T8900] m920x_read = error: -19 [ 586.743617][ T8900] dvb-usb: error while querying for an remote control event. [ 586.894102][ T8900] m920x_read = error: -19 [ 586.934832][ T8900] dvb-usb: error while querying for an remote control event. [ 587.084047][ T5729] m920x_read = error: -19 [ 587.106247][ T5729] dvb-usb: error while querying for an remote control event. [ 587.275857][ T5729] m920x_read = error: -19 [ 587.290840][ T5729] dvb-usb: error while querying for an remote control event. [ 587.434230][ T8900] m920x_read = error: -19 [ 587.460932][ T8900] dvb-usb: error while querying for an remote control event. [ 587.628283][ T8900] m920x_read = error: -19 [ 587.662408][ T8900] dvb-usb: error while querying for an remote control event. [ 587.781717][ T4999] Dev loop5: unable to read RDB block 7 [ 587.813938][ T8900] m920x_read = error: -19 [ 587.825358][ T4999] loop5: unable to read partition table [ 587.833887][ T8900] dvb-usb: error while querying for an remote control event. [ 587.861908][ T4999] loop5: partition table beyond EOD, truncated [ 587.983921][ T5729] m920x_read = error: -19 [ 587.998737][ T5729] dvb-usb: error while querying for an remote control event. [ 588.143460][T13589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.154044][ T5729] m920x_read = error: -19 [ 588.189222][ T5729] dvb-usb: error while querying for an remote control event. [ 588.189975][T13597] binder: 13596:13597 ioctl c00c620f 200000000180 returned -22 [ 588.313845][ T8900] m920x_read = error: -19 [ 588.326678][ T8900] dvb-usb: error while querying for an remote control event. [ 588.464178][ T8900] m920x_read = error: -19 [ 588.485331][ T8900] dvb-usb: error while querying for an remote control event. [ 588.635056][ T5729] m920x_read = error: -19 [ 588.673604][ T5729] dvb-usb: error while querying for an remote control event. [ 588.835280][ T5729] m920x_read = error: -19 [ 588.896880][ T5729] dvb-usb: error while querying for an remote control event. [ 588.986368][ T8892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 589.043896][ T5729] m920x_read = error: -19 [ 589.075918][ T5729] dvb-usb: error while querying for an remote control event. [ 589.223895][ T5729] m920x_read = error: -19 [ 589.257446][ T5729] dvb-usb: error while querying for an remote control event. [ 589.328447][ T8892] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 589.352594][ T8892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.371630][ T8892] usb 3-1: Product: syz [ 589.396607][ T5729] m920x_read = error: -19 [ 589.398596][ T8892] usb 3-1: Manufacturer: syz [ 589.435110][ T8890] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 589.439936][ T5729] dvb-usb: error while querying for an remote control event. [ 589.453014][ T8892] usb 3-1: SerialNumber: syz [ 589.469744][ T8892] usb 3-1: config 0 descriptor?? [ 589.500679][ T4999] Dev loop5: unable to read RDB block 7 [ 589.513192][ T4999] loop5: unable to read partition table [ 589.519101][ T4999] loop5: partition table beyond EOD, truncated [ 589.564810][ T8892] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 029 [ 589.608418][ T8890] usb 1-1: device descriptor read/64, error -71 [ 589.621337][T13613] input: syz0 as /devices/virtual/input/input80 [ 589.628953][ T5729] m920x_read = error: -19 [ 589.643321][ T5729] dvb-usb: error while querying for an remote control event. [ 589.794071][ T5729] m920x_read = error: -19 [ 589.821250][ T5729] dvb-usb: error while querying for an remote control event. [ 589.978670][ T8890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 589.984932][ T5729] m920x_read = error: -19 [ 590.022888][ T5729] dvb-usb: error while querying for an remote control event. [ 590.151894][ T8890] usb 1-1: device descriptor read/64, error -71 [ 590.194194][ T5729] m920x_read = error: -19 [ 590.231747][ T5729] dvb-usb: error while querying for an remote control event. [ 590.295125][ T8890] usb usb1-port1: attempt power cycle [ 590.395194][ T5729] m920x_read = error: -19 [ 590.413772][ T5729] dvb-usb: error while querying for an remote control event. [ 590.493275][ T4999] Dev loop5: unable to read RDB block 7 [ 590.518774][ T4999] loop5: unable to read partition table [ 590.537978][ T4999] loop5: partition table beyond EOD, truncated [ 590.563912][ T5729] m920x_read = error: -19 [ 590.567107][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.610207][ T5729] dvb-usb: error while querying for an remote control event. [ 590.673934][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.734297][ T8890] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 590.753970][ T5729] m920x_read = error: -19 [ 590.774963][ T5729] dvb-usb: error while querying for an remote control event. [ 590.823920][ T8890] usb 1-1: device descriptor read/8, error -71 [ 590.860132][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 590.944085][ T5729] m920x_read = error: -19 [ 590.963228][T13629] fuse: Unknown parameter ' ' [ 590.972884][ T5729] dvb-usb: error while querying for an remote control event. [ 591.042470][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 591.095244][ T8890] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 591.132400][T13624] netlink: 'syz.1.2003': attribute type 6 has an invalid length. [ 591.153983][ T5729] m920x_read = error: -19 [ 591.180348][ T8890] usb 1-1: device descriptor read/8, error -71 [ 591.197520][ T5729] dvb-usb: error while querying for an remote control event. [ 591.234644][ T8892] (null): failure setting delay to 10us [ 591.245287][T13629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.296770][ T8892] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 591.332601][T13624] netlink: 'syz.1.2003': attribute type 5 has an invalid length. [ 591.357336][ T8892] usb 3-1: USB disconnect, device number 29 [ 591.383981][ T5729] m920x_read = error: -19 [ 591.392987][ T8890] usb usb1-port1: unable to enumerate USB device [ 591.399576][T13629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.422687][ T5729] dvb-usb: error while querying for an remote control event. [ 591.593927][ T5729] m920x_read = error: -19 [ 591.632629][ T5729] dvb-usb: error while querying for an remote control event. [ 591.795238][ T5729] m920x_read = error: -19 [ 591.828632][ T5729] dvb-usb: error while querying for an remote control event. [ 591.986186][ T5729] m920x_read = error: -19 [ 592.022136][ T5729] dvb-usb: error while querying for an remote control event. [ 592.204191][ T5729] m920x_read = error: -19 [ 592.244205][ T5729] dvb-usb: error while querying for an remote control event. [ 592.405167][ T5729] m920x_read = error: -19 [ 592.427116][ T5729] dvb-usb: error while querying for an remote control event. [ 592.584038][ T5729] m920x_read = error: -19 [ 592.615736][ T5729] dvb-usb: error while querying for an remote control event. [ 592.775119][ T5729] m920x_read = error: -19 [ 592.806448][ T5729] dvb-usb: error while querying for an remote control event. [ 592.954568][ T5729] m920x_read = error: -19 [ 592.966555][ T5729] dvb-usb: error while querying for an remote control event. [ 593.104285][ T5729] m920x_read = error: -19 [ 593.117984][ T5729] dvb-usb: error while querying for an remote control event. [ 593.267010][ T5729] m920x_read = error: -19 [ 593.282330][ T5729] dvb-usb: error while querying for an remote control event. [ 593.423985][ T5729] m920x_read = error: -19 [ 593.450131][ T5729] dvb-usb: error while querying for an remote control event. [ 593.604095][ T5729] m920x_read = error: -19 [ 593.621068][ T5729] dvb-usb: error while querying for an remote control event. [ 593.754177][ T5729] m920x_read = error: -19 [ 593.768049][ T5729] dvb-usb: error while querying for an remote control event. [ 593.943861][ T5729] m920x_read = error: -19 [ 593.962750][ T5729] dvb-usb: error while querying for an remote control event. [ 594.135226][ T8902] m920x_read = error: -19 [ 594.162038][ T8902] dvb-usb: error while querying for an remote control event. [ 594.310955][ T8902] m920x_read = error: -19 [ 594.336442][ T8902] dvb-usb: error while querying for an remote control event. [ 594.413758][ T5729] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 594.451669][ T4999] Dev loop5: unable to read RDB block 7 [ 594.485971][ T4999] loop5: unable to read partition table [ 594.494140][ T8902] m920x_read = error: -19 [ 594.518529][ T8902] dvb-usb: error while querying for an remote control event. [ 594.527575][ T4999] loop5: partition table beyond EOD, truncated [ 594.613750][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 594.660767][ T5729] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 594.734501][ T8902] m920x_read = error: -19 [ 594.749498][ T5729] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 594.770160][ T8902] dvb-usb: error while querying for an remote control event. [ 594.804956][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.851265][ T5729] usb 1-1: Product: syz [ 594.873553][ T5729] usb 1-1: Manufacturer: syz [ 594.904836][ T5729] usb 1-1: SerialNumber: syz [ 594.923798][ T8900] m920x_read = error: -19 [ 594.938951][ T8900] dvb-usb: error while querying for an remote control event. [ 594.944614][T13660] tipc: Started in network mode [ 594.948200][ T5729] usb 1-1: config 0 descriptor?? [ 595.011438][ T5729] gspca_main: sq930x-2.14.0 probing 2770:930c [ 595.031292][T13660] tipc: Node identity , cluster identity 4711 [ 595.049784][T13660] tipc: Failed to obtain node identity [ 595.063834][T13660] tipc: Enabling of bearer rejected, failed to enable media [ 595.096986][ T8902] m920x_read = error: -19 [ 595.116313][ T8902] dvb-usb: error while querying for an remote control event. [ 595.168880][T13662] syzkaller0: entered promiscuous mode [ 595.254877][T13662] syzkaller0: entered allmulticast mode [ 595.263964][ T8902] m920x_read = error: -19 [ 595.284819][ T8902] dvb-usb: error while querying for an remote control event. [ 595.323811][ T8900] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 595.444901][ T8907] m920x_read = error: -19 [ 595.464440][ T8907] dvb-usb: error while querying for an remote control event. [ 595.570859][ T8900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.615738][ T8907] m920x_read = error: -19 [ 595.635514][ T8907] dvb-usb: error while querying for an remote control event. [ 595.645282][ T8900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.701094][ T8900] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 595.709058][T13654] bridge3: entered promiscuous mode [ 595.734146][ T5729] gspca_sq930x: ucbus_write failed -110 [ 595.759450][ T8900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.763824][T13654] bridge3: entered allmulticast mode [ 595.783841][ T8907] m920x_read = error: -19 [ 595.807414][ T8907] dvb-usb: error while querying for an remote control event. [ 595.826435][ T8900] usb 6-1: config 0 descriptor?? [ 595.895053][T13666] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 595.954281][ T8907] m920x_read = error: -19 [ 595.984441][ T8907] dvb-usb: error while querying for an remote control event. [ 595.993971][ T5729] gspca_sq930x: Sensor ov9630 not yet treated [ 596.014668][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.042349][ T5729] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 596.104863][ T5729] usb 1-1: USB disconnect, device number 32 [ 596.143040][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.178134][ T8902] m920x_read = error: -19 [ 596.193320][ T8902] dvb-usb: error while querying for an remote control event. [ 596.353988][ T5772] m920x_read = error: -19 [ 596.358586][ T5772] dvb-usb: error while querying for an remote control event. [ 596.376295][T13664] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2013'. [ 596.425357][ T8900] razer 0003:1532:010E.0024: reserved main item tag 0xd [ 596.479237][ T8900] hid_parser_main: 17 callbacks suppressed [ 596.479266][ T8900] razer 0003:1532:010E.0024: unknown main item tag 0x5 [ 596.519867][ T5729] m920x_read = error: -19 [ 596.540257][ T5729] dvb-usb: error while querying for an remote control event. [ 596.611705][ T8900] razer 0003:1532:010E.0024: failed to enable macro keys: -71 [ 596.657755][ T8900] razer 0003:1532:010E.0024: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 596.694169][ T5729] m920x_read = error: -19 [ 596.711697][ T5729] dvb-usb: error while querying for an remote control event. [ 596.727900][ T8900] usb 6-1: USB disconnect, device number 13 [ 596.855018][ T5729] m920x_read = error: -19 [ 596.870325][ T5729] dvb-usb: error while querying for an remote control event. [ 596.994400][ T8900] m920x_read = error: -19 [ 597.009054][ T8900] dvb-usb: error while querying for an remote control event. [ 597.143948][ T5729] m920x_read = error: -19 [ 597.153891][ T5729] dvb-usb: error while querying for an remote control event. [ 597.227001][T13671] fido_id[13671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 597.303976][ T8900] m920x_read = error: -19 [ 597.318127][ T8900] dvb-usb: error while querying for an remote control event. [ 597.326162][ T5729] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 597.463922][ T4999] Dev loop5: unable to read RDB block 7 [ 597.482189][ T4999] loop5: unable to read partition table [ 597.488260][ T8900] m920x_read = error: -19 [ 597.511256][ T8900] dvb-usb: error while querying for an remote control event. [ 597.531541][ T4999] loop5: partition table beyond EOD, truncated [ 597.542179][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.589313][ T5729] usb 1-1: config 0 interface 0 has no altsetting 0 [ 597.629117][ T5729] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 597.673937][ T8900] m920x_read = error: -19 [ 597.680690][ T8900] dvb-usb: error while querying for an remote control event. [ 597.689215][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.729731][ T5729] usb 1-1: Product: syz [ 597.757108][ T5729] usb 1-1: Manufacturer: syz [ 597.773532][ T5729] usb 1-1: SerialNumber: syz [ 597.811735][ T5729] usb 1-1: config 0 descriptor?? [ 597.834343][ T8900] m920x_read = error: -19 [ 597.844381][ T8900] dvb-usb: error while querying for an remote control event. [ 597.864704][ T5729] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 597.927389][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 597.976716][ T5729] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 597.994041][ T5772] m920x_read = error: -19 [ 598.010294][ T5772] dvb-usb: error while querying for an remote control event. [ 598.042344][ T5729] usb 1-1: media controller created [ 598.070194][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 598.070218][ T30] audit: type=1326 audit(1779958557.670:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 598.156829][ T5772] m920x_read = error: -19 [ 598.167100][ T5772] dvb-usb: error while querying for an remote control event. [ 598.192784][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.275354][ T30] audit: type=1326 audit(1779958557.690:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 598.327252][ T5772] m920x_read = error: -19 [ 598.338187][ T5772] dvb-usb: error while querying for an remote control event. [ 598.433217][ T30] audit: type=1326 audit(1779958557.690:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 598.480952][ T8900] m920x_read = error: -19 [ 598.498419][ T8900] dvb-usb: error while querying for an remote control event. [ 598.592613][ T30] audit: type=1326 audit(1779958557.780:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 598.639690][ T5729] DVB: Unable to find symbol tda10046_attach() [ 598.648729][ T8900] m920x_read = error: -19 [ 598.660810][ T8900] dvb-usb: error while querying for an remote control event. [ 598.691713][ T5729] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 598.728571][ T5729] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 598.747529][ T30] audit: type=1326 audit(1779958557.780:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 598.813885][ T8900] m920x_read = error: -19 [ 598.823400][ T8900] dvb-usb: error while querying for an remote control event. [ 598.875629][ T30] audit: type=1326 audit(1779958557.780:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 598.954306][ T8900] m920x_read = error: -19 [ 598.966881][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.985947][ T8900] dvb-usb: error while querying for an remote control event. [ 599.011159][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.019906][ T30] audit: type=1326 audit(1779958557.780:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 599.088587][T13691] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 599.164050][ T5772] m920x_read = error: -19 [ 599.168736][ T5772] dvb-usb: error while querying for an remote control event. [ 599.187624][ T30] audit: type=1326 audit(1779958557.780:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 599.277894][T13691] veth0_vlan: left promiscuous mode [ 599.328132][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.369337][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.394777][T13691] veth0_vlan: entered promiscuous mode [ 599.413029][ T30] audit: type=1326 audit(1779958557.780:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 599.507090][ T8900] m920x_read = error: -19 [ 599.517500][T13691] team0: Device veth0_vlan failed to register rx_handler [ 599.537170][ T8900] dvb-usb: error while querying for an remote control event. [ 599.553808][ T30] audit: type=1326 audit(1779958557.780:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13679 comm="syz.5.2017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12f9b9ce59 code=0x7ffc0000 [ 599.709572][ T4999] Dev loop5: unable to read RDB block 7 [ 599.757111][ T4999] loop5: unable to read partition table [ 599.789338][ T8900] m920x_read = error: -19 [ 599.806673][ T4999] loop5: partition table beyond EOD, truncated [ 599.832617][ T8900] dvb-usb: error while querying for an remote control event. [ 599.873376][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.961209][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.035704][ T8900] m920x_read = error: -19 [ 600.063591][ T8900] dvb-usb: error while querying for an remote control event. [ 600.234091][ T8900] m920x_read = error: -19 [ 600.250371][ T8900] dvb-usb: error while querying for an remote control event. [ 600.437525][ T8900] m920x_read = error: -19 [ 600.450287][ T8900] dvb-usb: error while querying for an remote control event. [ 600.594470][ T8902] m920x_read = error: -19 [ 600.634515][ T8902] dvb-usb: error while querying for an remote control event. [ 600.775997][ T4999] Dev loop5: unable to read RDB block 7 [ 600.787134][ T4999] loop5: unable to read partition table [ 600.794623][ T8902] m920x_read = error: -19 [ 600.796048][ T4999] loop5: partition table beyond EOD, truncated [ 600.831763][ T8902] dvb-usb: error while querying for an remote control event. [ 601.003916][ T8902] m920x_read = error: -19 [ 601.020050][ T8902] dvb-usb: error while querying for an remote control event. [ 601.041409][ T5729] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 601.116746][ T5729] usb 1-1: USB disconnect, device number 33 [ 601.209731][ T8902] m920x_read = error: -19 [ 601.252866][ T8902] dvb-usb: error while querying for an remote control event. [ 601.274358][T13711] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2025'. [ 601.424502][ T5729] m920x_read = error: -19 [ 601.440589][ T5729] dvb-usb: error while querying for an remote control event. [ 601.472691][T13713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.543928][ T5772] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 601.570152][T13713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.595818][ T5729] m920x_read = error: -19 [ 601.610979][ T5729] dvb-usb: error while querying for an remote control event. [ 601.718928][T13711] block device autoloading is deprecated and will be removed. [ 601.753969][ T5729] m920x_read = error: -19 [ 601.771839][ T5729] dvb-usb: error while querying for an remote control event. [ 601.795344][ T5772] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.837456][ T5772] usb 6-1: not running at top speed; connect to a high speed hub [ 601.915672][ T5772] usb 6-1: config 16 has an invalid interface number: 36 but max is 0 [ 601.974074][ T5772] usb 6-1: config 16 has no interface number 0 [ 602.026835][ T5772] usb 6-1: config 16 interface 36 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 602.048074][ T5729] m920x_read = error: -19 [ 602.089561][ T5729] dvb-usb: error while querying for an remote control event. [ 602.116857][ T5772] usb 6-1: config 16 interface 36 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 602.210307][ T5772] usb 6-1: config 16 interface 36 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.247344][ T8900] m920x_read = error: -19 [ 602.281774][ T8900] dvb-usb: error while querying for an remote control event. [ 602.331255][ T5772] usb 6-1: config 16 interface 36 has no altsetting 0 [ 602.437126][ T5772] usb 6-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d [ 602.454468][ T8900] m920x_read = error: -19 [ 602.485096][ T8900] dvb-usb: error while querying for an remote control event. [ 602.506503][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.566431][ T5772] usb 6-1: Product: syz [ 602.596659][ T5772] usb 6-1: Manufacturer: syz [ 602.619274][ T5772] usb 6-1: SerialNumber: syz [ 602.637000][T13725] debugfs: '1ща^!00000000000000000003' already exists in 'ieee80211' [ 602.644106][ T8900] m920x_read = error: -19 [ 602.687677][ T8900] dvb-usb: error while querying for an remote control event. [ 602.727597][T13712] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 602.779155][T13730] FAULT_INJECTION: forcing a failure. [ 602.779155][T13730] name failslab, interval 1, probability 0, space 0, times 0 [ 602.854516][ T8900] m920x_read = error: -19 [ 602.866534][ T8900] dvb-usb: error while querying for an remote control event. [ 602.869279][T13730] CPU: 1 UID: 0 PID: 13730 Comm: syz.3.2028 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.869313][T13730] Tainted: [L]=SOFTLOCKUP [ 602.869320][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 602.869331][T13730] Call Trace: [ 602.869338][T13730] [ 602.869347][T13730] dump_stack_lvl+0xe8/0x150 [ 602.869375][T13730] should_fail_ex+0x412/0x560 [ 602.869401][T13730] should_failslab+0xa8/0x100 [ 602.869430][T13730] __kmalloc_cache_noprof+0x88/0x660 [ 602.869454][T13730] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 602.869475][T13730] ? sctp_add_bind_addr+0x8c/0x370 [ 602.869499][T13730] sctp_add_bind_addr+0x8c/0x370 [ 602.869521][T13730] sctp_copy_local_addr_list+0x314/0x4f0 [ 602.869552][T13730] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 602.869580][T13730] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 602.869609][T13730] ? sctp_v6_is_any+0x64/0x80 [ 602.869630][T13730] ? sctp_copy_one_addr+0x93/0x360 [ 602.869652][T13730] sctp_bind_addr_copy+0xb3/0x3c0 [ 602.869681][T13730] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 602.869710][T13730] sctp_connect_new_asoc+0x2ff/0x6b0 [ 602.869736][T13730] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 602.869765][T13730] ? __local_bh_enable_ip+0xd0/0x130 [ 602.869783][T13730] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 602.869808][T13730] ? security_sctp_bind_connect+0x7e/0x2c0 [ 602.869833][T13730] sctp_sendmsg+0x1576/0x2c50 [ 602.869870][T13730] ? __pfx_sctp_sendmsg+0x10/0x10 [ 602.869895][T13730] ? aa_sk_perm+0x6d5/0x900 [ 602.869927][T13730] ? __pfx_aa_sk_perm+0x10/0x10 [ 602.869955][T13730] ? sock_rps_record_flow+0x19/0x350 [ 602.869980][T13730] ? inet_sendmsg+0x2f4/0x370 [ 602.870004][T13730] ____sys_sendmsg+0x80a/0x9f0 [ 602.870040][T13730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.870075][T13730] ? import_iovec+0x73/0xa0 [ 602.870101][T13730] ___sys_sendmsg+0x2a5/0x360 [ 602.870119][T13730] ? __lock_acquire+0x6b5/0x2cf0 [ 602.870144][T13730] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.870176][T13730] ? kstrtouint+0x6e/0xe0 [ 602.870229][T13730] ? __fget_files+0x2a/0x420 [ 602.870250][T13730] ? __fget_files+0x3a0/0x420 [ 602.870282][T13730] __sys_sendmmsg+0x27c/0x4e0 [ 602.870306][T13730] ? __pfx___sys_sendmmsg+0x10/0x10 [ 602.870321][T13730] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 602.870367][T13730] ? ksys_write+0x242/0x270 [ 602.870391][T13730] ? __irq_exit_rcu+0xca/0x220 [ 602.870412][T13730] ? __pfx_ksys_write+0x10/0x10 [ 602.870442][T13730] ? handle_softirqs+0x715/0x840 [ 602.870467][T13730] __x64_sys_sendmmsg+0xa0/0xc0 [ 602.870485][T13730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.870506][T13730] do_syscall_64+0x174/0x580 [ 602.870525][T13730] ? clear_bhb_loop+0x40/0x90 [ 602.870548][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.870567][T13730] RIP: 0033:0x7f544179ce59 [ 602.870586][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.870601][T13730] RSP: 002b:00007f54426cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 602.870621][T13730] RAX: ffffffffffffffda RBX: 00007f5441a15fa0 RCX: 00007f544179ce59 [ 602.870634][T13730] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 602.870645][T13730] RBP: 00007f54426cd090 R08: 0000000000000000 R09: 0000000000000000 [ 602.870656][T13730] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 602.870668][T13730] R13: 00007f5441a16038 R14: 00007f5441a15fa0 R15: 00007f5441b3fa48 [ 602.870698][T13730] [ 603.453545][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.492414][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.863992][T13728] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!00000000000000000003' [ 603.900051][ T5772] hub 6-1:16.36: bad descriptor, ignoring hub [ 603.914830][ T5772] hub 6-1:16.36: probe with driver hub failed with error -5 [ 603.941370][T13728] CPU: 0 UID: 0 PID: 13728 Comm: syz.0.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.941405][T13728] Tainted: [L]=SOFTLOCKUP [ 603.941412][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.941425][T13728] Call Trace: [ 603.941434][T13728] [ 603.941443][T13728] dump_stack_lvl+0xe8/0x150 [ 603.941474][T13728] sysfs_warn_dup+0x8e/0xa0 [ 603.941501][T13728] sysfs_do_create_link_sd+0xc0/0x110 [ 603.941531][T13728] device_add_class_symlinks+0x1cf/0x240 [ 603.941559][T13728] device_add+0x475/0xbb0 [ 603.941585][T13728] wiphy_register+0x1dc5/0x2dc0 [ 603.941626][T13728] ? __pfx_wiphy_register+0x10/0x10 [ 603.941648][T13728] ? __pfx_netdev_run_todo+0x10/0x10 [ 603.941671][T13728] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 603.941714][T13728] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 603.941751][T13728] ieee80211_register_hw+0x3d82/0x4a70 [ 603.941792][T13728] ? ieee80211_register_hw+0x1911/0x4a70 [ 603.941842][T13728] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 603.941870][T13728] ? __asan_memset+0x22/0x50 [ 603.941896][T13728] ? __hrtimer_setup+0x1b7/0x260 [ 603.941922][T13728] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 603.941948][T13728] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 603.942011][T13728] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 603.942039][T13728] ? kstrndup+0xbf/0x160 [ 603.942070][T13728] hwsim_new_radio_nl+0xf6a/0x1c00 [ 603.942124][T13728] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 603.942164][T13728] ? rcu_is_watching+0x15/0xb0 [ 603.942189][T13728] ? trace_kmalloc+0x2a/0xf0 [ 603.942224][T13728] ? __nla_parse+0x40/0x60 [ 603.942255][T13728] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 603.942280][T13728] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 603.942313][T13728] genl_family_rcv_msg_doit+0x22a/0x330 [ 603.942347][T13728] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 603.942386][T13728] ? bpf_lsm_capable+0x9/0x20 [ 603.942405][T13728] ? security_capable+0x7e/0x2c0 [ 603.942442][T13728] genl_rcv_msg+0x61c/0x7a0 [ 603.942474][T13728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.942498][T13728] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 603.942528][T13728] ? __pfx_ref_tracker_free+0x10/0x10 [ 603.942565][T13728] netlink_rcv_skb+0x232/0x4b0 [ 603.942596][T13728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.942622][T13728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.942669][T13728] ? down_read+0x270/0x2e0 [ 603.942697][T13728] ? genl_rcv+0xd/0x40 [ 603.942722][T13728] genl_rcv+0x28/0x40 [ 603.942744][T13728] netlink_unicast+0x75c/0x8e0 [ 603.942785][T13728] netlink_sendmsg+0x813/0xb40 [ 603.942826][T13728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.942866][T13728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.942897][T13728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.942929][T13728] ____sys_sendmsg+0x972/0x9f0 [ 603.942960][T13728] ? __might_fault+0xaf/0x130 [ 603.942995][T13728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.943037][T13728] ? import_iovec+0x73/0xa0 [ 603.943066][T13728] ___sys_sendmsg+0x2a5/0x360 [ 603.943086][T13728] ? __lock_acquire+0x6b5/0x2cf0 [ 603.943114][T13728] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.943152][T13728] ? futex_wait+0x2a2/0x390 [ 603.943210][T13728] ? __fget_files+0x2a/0x420 [ 603.943234][T13728] ? __fget_files+0x3a0/0x420 [ 603.943271][T13728] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.943294][T13728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.943325][T13728] ? rcu_is_watching+0x15/0xb0 [ 603.943361][T13728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.943385][T13728] do_syscall_64+0x174/0x580 [ 603.943404][T13728] ? trace_irq_disable+0x3b/0x140 [ 603.943433][T13728] ? clear_bhb_loop+0x40/0x90 [ 603.943459][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.943480][T13728] RIP: 0033:0x7f7d3659ce59 [ 603.943500][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.943518][T13728] RSP: 002b:00007f7d373b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.943541][T13728] RAX: ffffffffffffffda RBX: 00007f7d36816090 RCX: 00007f7d3659ce59 [ 603.943555][T13728] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 603.943568][T13728] RBP: 00007f7d36632d6f R08: 0000000000000000 R09: 0000000000000000 [ 603.943580][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.943592][T13728] R13: 00007f7d36816128 R14: 00007f7d36816090 R15: 00007f7d3693fa48 [ 603.943627][T13728] [ 604.824693][ T5772] option 6-1:16.36: GSM modem (1-port) converter detected [ 604.917135][ T5772] usb 6-1: USB disconnect, device number 14 [ 604.957941][ T8900] m920x_read = error: -19 [ 604.962398][ T8900] dvb-usb: error while querying for an remote control event. [ 605.034359][ T5772] option 6-1:16.36: device disconnected [ 605.093794][ T8900] m920x_read = error: -19 [ 605.115210][ T8900] dvb-usb: error while querying for an remote control event. [ 605.253851][ T5772] m920x_read = error: -19 [ 605.276240][ T5772] dvb-usb: error while querying for an remote control event. [ 605.454626][ T5772] m920x_read = error: -19 [ 605.472360][ T5772] dvb-usb: error while querying for an remote control event. [ 605.624023][ T5772] m920x_read = error: -19 [ 605.628571][ T5772] dvb-usb: error while querying for an remote control event. [ 605.675971][ T4999] Dev loop5: unable to read RDB block 7 [ 605.705491][ T4999] loop5: unable to read partition table [ 605.732955][ T4999] loop5: partition table beyond EOD, truncated [ 605.774864][ T8900] m920x_read = error: -19 [ 605.793271][ T8900] dvb-usb: error while querying for an remote control event. [ 605.793808][ T5699] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 605.934369][ T8902] m920x_read = error: -19 [ 605.951838][ T8902] dvb-usb: error while querying for an remote control event. [ 605.980739][ T5772] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 606.067194][T13757] netlink: 'syz.1.2035': attribute type 11 has an invalid length. [ 606.094754][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'. [ 606.123971][ T8902] m920x_read = error: -19 [ 606.128704][ T8902] dvb-usb: error while querying for an remote control event. [ 606.174243][ T5772] usb 3-1: device descriptor read/64, error -71 [ 606.263919][ T8902] m920x_read = error: -19 [ 606.272748][ T8902] dvb-usb: error while querying for an remote control event. [ 606.308899][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2034'. [ 606.414680][ T8902] m920x_read = error: -19 [ 606.435927][ T5772] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 606.453056][ T8902] dvb-usb: error while querying for an remote control event. [ 606.458298][T13753] input: syz1 as /devices/virtual/input/input81 [ 606.603802][ T8902] m920x_read = error: -19 [ 606.626051][ T5772] usb 3-1: device descriptor read/64, error -71 [ 606.628993][T13766] openvswitch: netlink: Flow actions attr not present in new flow. [ 606.632496][ T8902] dvb-usb: error while querying for an remote control event. [ 606.733820][ T8900] m920x_read = error: -19 [ 606.744660][ T8900] dvb-usb: error while querying for an remote control event. [ 606.759342][ T5772] usb usb3-port1: attempt power cycle [ 606.870018][T13770] netlink: 'syz.3.2038': attribute type 9 has an invalid length. [ 606.900144][ T8900] m920x_read = error: -19 [ 606.906320][T13770] netlink: 'syz.3.2038': attribute type 7 has an invalid length. [ 606.910292][ T8900] dvb-usb: error while querying for an remote control event. [ 606.950151][T13770] netlink: 'syz.3.2038': attribute type 8 has an invalid length. [ 607.004706][T13753] netlink: 'syz.5.2034': attribute type 12 has an invalid length. [ 607.063953][ T8900] m920x_read = error: -19 [ 607.080641][ T8900] dvb-usb: error while querying for an remote control event. [ 607.106739][T13775] netlink: 'syz.1.2040': attribute type 9 has an invalid length. [ 607.135755][T13777] netlink: 'syz.3.2041': attribute type 9 has an invalid length. [ 607.143989][T13777] netlink: 'syz.3.2041': attribute type 7 has an invalid length. [ 607.164787][T13775] netlink: 'syz.1.2040': attribute type 7 has an invalid length. [ 607.210481][T13777] netlink: 'syz.3.2041': attribute type 8 has an invalid length. [ 607.213872][ T8900] m920x_read = error: -19 [ 607.245311][ T8900] dvb-usb: error while querying for an remote control event. [ 607.248230][T13775] netlink: 'syz.1.2040': attribute type 8 has an invalid length. [ 607.397413][ T8900] m920x_read = error: -19 [ 607.415055][ T8900] dvb-usb: error while querying for an remote control event. [ 607.565590][ T8900] m920x_read = error: -19 [ 607.587909][ T8900] dvb-usb: error while querying for an remote control event. [ 607.733956][ T8900] m920x_read = error: -19 [ 607.749588][ T8900] dvb-usb: error while querying for an remote control event. [ 607.757357][T13786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2043'. [ 607.923907][ T8900] m920x_read = error: -19 [ 607.934770][ T8900] dvb-usb: error while querying for an remote control event. [ 608.034555][ T5707] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 608.064155][ T5772] m920x_read = error: -19 [ 608.077754][ T5772] dvb-usb: error while querying for an remote control event. [ 608.223990][ T5772] m920x_read = error: -19 [ 608.245625][ T5772] dvb-usb: error while querying for an remote control event. [ 608.405031][ T8902] m920x_read = error: -19 [ 608.414730][ T8902] dvb-usb: error while querying for an remote control event. [ 608.538569][T13794] loop9: detected capacity change from 0 to 7 [ 608.554078][ T8902] m920x_read = error: -19 [ 608.573944][ T8902] dvb-usb: error while querying for an remote control event. [ 608.581950][T13794] Dev loop9: unable to read RDB block 7 [ 608.607333][T13794] loop9: AHDI p1 p2 p3 [ 608.642750][T13794] loop9: partition table partially beyond EOD, truncated [ 608.674140][T13794] loop9: p1 start 1601398130 is beyond EOD, truncated [ 608.695647][T13794] loop9: p2 start 1702059890 is beyond EOD, truncated [ 608.723919][ T8902] m920x_read = error: -19 [ 608.732434][ T8902] dvb-usb: error while querying for an remote control event. [ 608.854575][ T8902] m920x_read = error: -19 [ 608.862355][ T8902] dvb-usb: error while querying for an remote control event. [ 609.004043][ T8902] m920x_read = error: -19 [ 609.033557][ T8902] dvb-usb: error while querying for an remote control event. [ 609.177660][ T8902] m920x_read = error: -19 [ 609.206440][ T8902] dvb-usb: error while querying for an remote control event. [ 609.221796][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 609.363892][ T8902] m920x_read = error: -19 [ 609.390259][ T8902] dvb-usb: error while querying for an remote control event. [ 609.551811][ T8902] m920x_read = error: -19 [ 609.577426][ T8902] dvb-usb: error while querying for an remote control event. [ 609.613264][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 609.708372][T13809] input: syz1 as /devices/virtual/input/input82 [ 609.716579][ T8902] m920x_read = error: -19 [ 609.739934][ T8902] dvb-usb: error while querying for an remote control event. [ 609.895206][ T8902] m920x_read = error: -19 [ 609.920831][ T8902] dvb-usb: error while querying for an remote control event. [ 609.961500][ T4999] Dev loop5: unable to read RDB block 7 [ 609.991494][ T4999] loop5: unable to read partition table [ 610.027849][ T4999] loop5: partition table beyond EOD, truncated [ 610.085433][ T8902] m920x_read = error: -19 [ 610.098753][ T8902] dvb-usb: error while querying for an remote control event. [ 610.165334][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 610.165354][ T30] audit: type=1326 audit(1779958569.800:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 610.231218][T13818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.247952][ T8902] m920x_read = error: -19 [ 610.261619][ T8902] dvb-usb: error while querying for an remote control event. [ 610.304217][T13818] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2052'. [ 610.330953][ T30] audit: type=1326 audit(1779958569.840:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 610.395399][ T8902] m920x_read = error: -19 [ 610.407442][ T8902] dvb-usb: error while querying for an remote control event. [ 610.459599][ T30] audit: type=1326 audit(1779958569.840:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 610.527632][T13824] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2051'. [ 610.555472][ T8902] m920x_read = error: -19 [ 610.569922][ T8902] dvb-usb: error while querying for an remote control event. [ 610.602248][ T30] audit: type=1326 audit(1779958569.840:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 610.696100][ T4999] Dev loop5: unable to read RDB block 7 [ 610.725762][ T4999] loop5: unable to read partition table [ 610.743890][ T8902] m920x_read = error: -19 [ 610.751535][ T30] audit: type=1326 audit(1779958569.850:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 610.784039][ T8902] dvb-usb: error while querying for an remote control event. [ 610.804612][ T4999] loop5: partition table beyond EOD, truncated [ 610.884221][ T30] audit: type=1326 audit(1779958569.850:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 610.933983][ T8900] m920x_read = error: -19 [ 610.938546][ T8900] dvb-usb: error while querying for an remote control event. [ 611.001586][ T30] audit: type=1326 audit(1779958569.850:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 611.074543][ T8900] m920x_read = error: -19 [ 611.082227][ T8900] dvb-usb: error while querying for an remote control event. [ 611.132860][ T30] audit: type=1326 audit(1779958569.860:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 611.190511][ T4999] Dev loop5: unable to read RDB block 7 [ 611.220204][ T4999] loop5: unable to read partition table [ 611.231636][ T8900] m920x_read = error: -19 [ 611.242319][ T8900] dvb-usb: error while querying for an remote control event. [ 611.260794][ T4999] loop5: partition table beyond EOD, truncated [ 611.291092][ T30] audit: type=1326 audit(1779958569.860:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 611.393990][ T8902] m920x_read = error: -19 [ 611.398475][ T8902] dvb-usb: error while querying for an remote control event. [ 611.429936][ T30] audit: type=1326 audit(1779958569.860:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.2.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 611.533860][ T8900] m920x_read = error: -19 [ 611.543081][ T8900] dvb-usb: error while querying for an remote control event. [ 611.703960][ T8900] m920x_read = error: -19 [ 611.718656][ T8900] dvb-usb: error while querying for an remote control event. [ 611.864331][ T8900] m920x_read = error: -19 [ 611.886448][ T8900] dvb-usb: error while querying for an remote control event. [ 612.034743][ T8900] m920x_read = error: -19 [ 612.056346][ T8900] dvb-usb: error while querying for an remote control event. [ 612.273890][ T5772] m920x_read = error: -19 [ 612.288990][ T5772] dvb-usb: error while querying for an remote control event. [ 612.449076][ T8900] m920x_read = error: -19 [ 612.463041][ T8900] dvb-usb: error while querying for an remote control event. [ 612.603029][T13856] FAULT_INJECTION: forcing a failure. [ 612.603029][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 612.633880][ T5772] m920x_read = error: -19 [ 612.638402][ T5772] dvb-usb: error while querying for an remote control event. [ 612.639298][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.2.2062 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.639325][T13856] Tainted: [L]=SOFTLOCKUP [ 612.639332][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.639342][T13856] Call Trace: [ 612.639350][T13856] [ 612.639358][T13856] dump_stack_lvl+0xe8/0x150 [ 612.639385][T13856] should_fail_ex+0x412/0x560 [ 612.639412][T13856] should_failslab+0xa8/0x100 [ 612.639433][T13856] __kmalloc_cache_noprof+0x88/0x660 [ 612.639458][T13856] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 612.639479][T13856] ? sctp_add_bind_addr+0x8c/0x370 [ 612.639510][T13856] sctp_add_bind_addr+0x8c/0x370 [ 612.639533][T13856] sctp_copy_local_addr_list+0x314/0x4f0 [ 612.639564][T13856] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 612.639591][T13856] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 612.639620][T13856] ? sctp_v6_is_any+0x64/0x80 [ 612.639640][T13856] ? sctp_copy_one_addr+0x93/0x360 [ 612.639663][T13856] sctp_bind_addr_copy+0xb3/0x3c0 [ 612.639693][T13856] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 612.639721][T13856] sctp_connect_new_asoc+0x2ff/0x6b0 [ 612.639747][T13856] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 612.639776][T13856] ? __local_bh_enable_ip+0xd0/0x130 [ 612.639794][T13856] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 612.639819][T13856] ? security_sctp_bind_connect+0x7e/0x2c0 [ 612.639845][T13856] sctp_sendmsg+0x1576/0x2c50 [ 612.639881][T13856] ? __pfx_sctp_sendmsg+0x10/0x10 [ 612.639907][T13856] ? aa_sk_perm+0x6d5/0x900 [ 612.639939][T13856] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.639966][T13856] ? sock_rps_record_flow+0x19/0x350 [ 612.639990][T13856] ? inet_sendmsg+0x2f4/0x370 [ 612.640014][T13856] ____sys_sendmsg+0x80a/0x9f0 [ 612.640052][T13856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.640088][T13856] ? import_iovec+0x73/0xa0 [ 612.640114][T13856] ___sys_sendmsg+0x2a5/0x360 [ 612.640131][T13856] ? __lock_acquire+0x6b5/0x2cf0 [ 612.640154][T13856] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.640187][T13856] ? kstrtouint+0x6e/0xe0 [ 612.640239][T13856] ? __fget_files+0x2a/0x420 [ 612.640260][T13856] ? __fget_files+0x3a0/0x420 [ 612.640293][T13856] __sys_sendmmsg+0x27c/0x4e0 [ 612.640317][T13856] ? __pfx___sys_sendmmsg+0x10/0x10 [ 612.640333][T13856] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 612.640379][T13856] ? ksys_write+0x242/0x270 [ 612.640407][T13856] ? __pfx_ksys_write+0x10/0x10 [ 612.640440][T13856] __x64_sys_sendmmsg+0xa0/0xc0 [ 612.640458][T13856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.640478][T13856] do_syscall_64+0x174/0x580 [ 612.640502][T13856] ? trace_irq_disable+0x3b/0x140 [ 612.640528][T13856] ? clear_bhb_loop+0x40/0x90 [ 612.640551][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.640569][T13856] RIP: 0033:0x7f9225f9ce59 [ 612.640587][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.640603][T13856] RSP: 002b:00007f9226e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 612.640623][T13856] RAX: ffffffffffffffda RBX: 00007f9226215fa0 RCX: 00007f9225f9ce59 [ 612.640636][T13856] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 612.640647][T13856] RBP: 00007f9226e81090 R08: 0000000000000000 R09: 0000000000000000 [ 612.640657][T13856] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 612.640668][T13856] R13: 00007f9226216038 R14: 00007f9226215fa0 R15: 00007f922633fa48 [ 612.640698][T13856] [ 613.645025][ T4999] Dev loop5: unable to read RDB block 7 [ 613.650724][ T4999] loop5: unable to read partition table [ 613.676708][ T4999] loop5: partition table beyond EOD, truncated [ 613.684029][ T8900] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 613.803870][ T8902] m920x_read = error: -19 [ 613.816301][ T8902] dvb-usb: error while querying for an remote control event. [ 613.847664][ T8900] usb 3-1: not running at top speed; connect to a high speed hub [ 613.861739][ T8900] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 613.902287][ T8900] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 4 [ 613.958548][ T8900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.984884][ T8902] m920x_read = error: -19 [ 613.997422][ T8900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.007388][ T8902] dvb-usb: error while querying for an remote control event. [ 614.058115][ T8900] usb 3-1: Product: syz [ 614.074210][ T8900] usb 3-1: Manufacturer: syz [ 614.096704][ T8900] usb 3-1: SerialNumber: syz [ 614.153988][ T8902] m920x_read = error: -19 [ 614.160149][ T8902] dvb-usb: error while querying for an remote control event. [ 614.304100][ T8902] m920x_read = error: -19 [ 614.320834][ T8902] dvb-usb: error while querying for an remote control event. [ 614.446293][ T8900] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 614.463891][ T5772] m920x_read = error: -19 [ 614.473318][ T5772] dvb-usb: error while querying for an remote control event. [ 614.490305][ T8900] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 614.577567][T13870] validate_nla: 6 callbacks suppressed [ 614.577630][T13870] netlink: 'syz.3.2066': attribute type 9 has an invalid length. [ 614.614730][ T5772] m920x_read = error: -19 [ 614.621829][T13871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.626788][T13870] netlink: 'syz.3.2066': attribute type 7 has an invalid length. [ 614.642835][ T5772] dvb-usb: error while querying for an remote control event. [ 614.658459][T13871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.680125][ T8900] usb 3-1: USB disconnect, device number 34 [ 614.684489][T13870] netlink: 'syz.3.2066': attribute type 8 has an invalid length. [ 614.772655][T13871] netlink: 'syz.1.2067': attribute type 2 has an invalid length. [ 614.797535][ T5772] m920x_read = error: -19 [ 614.825314][ T5772] dvb-usb: error while querying for an remote control event. [ 614.844974][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.882325][T13871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.985096][ T8900] m920x_read = error: -19 [ 615.001071][ T8900] dvb-usb: error while querying for an remote control event. [ 615.077039][ T4999] Dev loop5: unable to read RDB block 7 [ 615.096070][ T4999] loop5: unable to read partition table [ 615.119735][ T4999] loop5: partition table beyond EOD, truncated [ 615.153934][ T8900] m920x_read = error: -19 [ 615.171030][ T8900] dvb-usb: error while querying for an remote control event. [ 615.320115][ T8900] m920x_read = error: -19 [ 615.340072][ T8900] dvb-usb: error while querying for an remote control event. [ 615.423905][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 615.423925][ T30] audit: type=1326 audit(1779958575.060:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 615.492412][ T5772] m920x_read = error: -19 [ 615.510097][ T5772] dvb-usb: error while querying for an remote control event. [ 615.568718][T13882] FAULT_INJECTION: forcing a failure. [ 615.568718][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 615.597091][ T30] audit: type=1326 audit(1779958575.090:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 615.641970][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.0.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.642004][T13882] Tainted: [L]=SOFTLOCKUP [ 615.642011][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.642023][T13882] Call Trace: [ 615.642031][T13882] [ 615.642040][T13882] dump_stack_lvl+0xe8/0x150 [ 615.642070][T13882] should_fail_ex+0x412/0x560 [ 615.642097][T13882] should_failslab+0xa8/0x100 [ 615.642120][T13882] __kmalloc_cache_noprof+0x88/0x660 [ 615.642145][T13882] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 615.642168][T13882] ? sctp_add_bind_addr+0x8c/0x370 [ 615.642193][T13882] sctp_add_bind_addr+0x8c/0x370 [ 615.642218][T13882] sctp_copy_local_addr_list+0x314/0x4f0 [ 615.642252][T13882] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 615.642279][T13882] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 615.642310][T13882] ? sctp_v6_is_any+0x64/0x80 [ 615.642333][T13882] ? sctp_copy_one_addr+0x93/0x360 [ 615.642358][T13882] sctp_bind_addr_copy+0xb3/0x3c0 [ 615.642391][T13882] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 615.642422][T13882] sctp_connect_new_asoc+0x2ff/0x6b0 [ 615.642460][T13882] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 615.642490][T13882] ? __local_bh_enable_ip+0xd0/0x130 [ 615.642509][T13882] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 615.642536][T13882] ? security_sctp_bind_connect+0x7e/0x2c0 [ 615.642565][T13882] sctp_sendmsg+0x1576/0x2c50 [ 615.642604][T13882] ? __pfx_sctp_sendmsg+0x10/0x10 [ 615.642632][T13882] ? aa_sk_perm+0x6d5/0x900 [ 615.642673][T13882] ? __pfx_aa_sk_perm+0x10/0x10 [ 615.642703][T13882] ? sock_rps_record_flow+0x19/0x350 [ 615.642730][T13882] ? inet_sendmsg+0x2f4/0x370 [ 615.642755][T13882] ____sys_sendmsg+0x80a/0x9f0 [ 615.642795][T13882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.642833][T13882] ? import_iovec+0x73/0xa0 [ 615.642862][T13882] ___sys_sendmsg+0x2a5/0x360 [ 615.642880][T13882] ? __lock_acquire+0x6b5/0x2cf0 [ 615.642906][T13882] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.642941][T13882] ? kstrtouint+0x6e/0xe0 [ 615.642996][T13882] ? __fget_files+0x2a/0x420 [ 615.643020][T13882] ? __fget_files+0x3a0/0x420 [ 615.643055][T13882] __sys_sendmmsg+0x27c/0x4e0 [ 615.643080][T13882] ? __pfx___sys_sendmmsg+0x10/0x10 [ 615.643096][T13882] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 615.643145][T13882] ? ksys_write+0x242/0x270 [ 615.643175][T13882] ? __pfx_ksys_write+0x10/0x10 [ 615.643209][T13882] __x64_sys_sendmmsg+0xa0/0xc0 [ 615.643229][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.643251][T13882] do_syscall_64+0x174/0x580 [ 615.643269][T13882] ? trace_irq_disable+0x3b/0x140 [ 615.643297][T13882] ? clear_bhb_loop+0x40/0x90 [ 615.643322][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.643341][T13882] RIP: 0033:0x7f7d3659ce59 [ 615.643361][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.643377][T13882] RSP: 002b:00007f7d373d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 615.643399][T13882] RAX: ffffffffffffffda RBX: 00007f7d36815fa0 RCX: 00007f7d3659ce59 [ 615.643413][T13882] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 615.643424][T13882] RBP: 00007f7d373d7090 R08: 0000000000000000 R09: 0000000000000000 [ 615.643437][T13882] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 615.643456][T13882] R13: 00007f7d36816038 R14: 00007f7d36815fa0 R15: 00007f7d3693fa48 [ 615.643488][T13882] [ 615.985401][ T30] audit: type=1326 audit(1779958575.100:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.009977][ T30] audit: type=1326 audit(1779958575.100:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.034487][ T30] audit: type=1326 audit(1779958575.100:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.058952][ T30] audit: type=1326 audit(1779958575.100:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.084224][ T30] audit: type=1326 audit(1779958575.100:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.109083][ T30] audit: type=1326 audit(1779958575.100:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.133828][ T30] audit: type=1326 audit(1779958575.100:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.158408][ T30] audit: type=1326 audit(1779958575.100:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.2070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9225f9ce59 code=0x7ffc0000 [ 616.190745][ T8900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 616.237951][ T5772] m920x_read = error: -19 [ 616.242385][ T5772] dvb-usb: error while querying for an remote control event. [ 616.346342][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 616.355784][ T8902] m920x_read = error: -19 [ 616.360367][ T8902] dvb-usb: error while querying for an remote control event. [ 616.368288][ T8900] usb 6-1: device descriptor read/64, error -71 [ 616.432398][T13886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.475448][T13886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2074'. [ 616.489210][T13886] bond3: entered promiscuous mode [ 616.495393][ T5772] m920x_read = error: -19 [ 616.499855][ T5772] dvb-usb: error while querying for an remote control event. [ 616.513007][T13886] bond3: entered allmulticast mode [ 616.613743][ T8900] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 616.630365][ T5772] m920x_read = error: -19 [ 616.641294][ T5772] dvb-usb: error while querying for an remote control event. [ 616.647256][T13888] dummy0: entered promiscuous mode [ 616.678614][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 616.697668][T13888] dummy0: entered allmulticast mode [ 616.713818][T13888] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 616.763856][ T8900] usb 6-1: device descriptor read/64, error -71 [ 616.780695][ T8902] m920x_read = error: -19 [ 616.791360][ T8902] dvb-usb: error while querying for an remote control event. [ 616.884457][ T8900] usb usb6-port1: attempt power cycle [ 616.933880][ T8902] m920x_read = error: -19 [ 616.946399][ T8902] dvb-usb: error while querying for an remote control event. [ 617.093874][ T8902] m920x_read = error: -19 [ 617.101498][ T8902] dvb-usb: error while querying for an remote control event. [ 617.142634][T13886] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 617.190381][T13886] dummy0: left promiscuous mode [ 617.218932][T13886] dummy0: left allmulticast mode [ 617.234662][ T5772] m920x_read = error: -19 [ 617.241244][ T5772] dvb-usb: error while querying for an remote control event. [ 617.259152][ T8900] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 617.271287][T13886] bond3 (unregistering): Released all slaves [ 617.315575][ T8900] usb 6-1: device descriptor read/8, error -71 [ 617.384737][ T5772] m920x_read = error: -19 [ 617.391387][ T5772] dvb-usb: error while querying for an remote control event. [ 617.534703][ T5729] m920x_read = error: -19 [ 617.539214][ T5729] dvb-usb: error while querying for an remote control event. [ 617.563825][ T8900] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 617.594539][ T8900] usb 6-1: device descriptor read/8, error -71 [ 617.683966][ T8902] m920x_read = error: -19 [ 617.688524][ T8902] dvb-usb: error while querying for an remote control event. [ 617.725882][ T8900] usb usb6-port1: unable to enumerate USB device [ 617.824346][ T8900] m920x_read = error: -19 [ 617.837906][ T8900] dvb-usb: error while querying for an remote control event. [ 618.003898][ T8902] m920x_read = error: -19 [ 618.008388][ T8902] dvb-usb: error while querying for an remote control event. [ 618.183911][ T8902] m920x_read = error: -19 [ 618.199637][ T8902] dvb-usb: error while querying for an remote control event. [ 618.354295][ T5729] m920x_read = error: -19 [ 618.367628][ T5729] dvb-usb: error while querying for an remote control event. [ 618.523904][ T5729] m920x_read = error: -19 [ 618.565885][ T5729] dvb-usb: error while querying for an remote control event. [ 618.644985][ T4999] Dev loop5: unable to read RDB block 7 [ 618.679529][ T4999] loop5: unable to read partition table [ 618.704920][ T4999] loop5: partition table beyond EOD, truncated [ 618.724173][ T5729] m920x_read = error: -19 [ 618.747505][ T5729] dvb-usb: error while querying for an remote control event. [ 618.943913][ T8902] m920x_read = error: -19 [ 618.972535][ T8902] dvb-usb: error while querying for an remote control event. [ 619.143865][ T8902] m920x_read = error: -19 [ 619.177183][ T8902] dvb-usb: error while querying for an remote control event. [ 619.324992][ T8902] m920x_read = error: -19 [ 619.346860][ T8902] dvb-usb: error while querying for an remote control event. [ 619.493851][ T8902] m920x_read = error: -19 [ 619.524801][ T8902] dvb-usb: error while querying for an remote control event. [ 619.665032][ T8902] m920x_read = error: -19 [ 619.692121][ T8902] dvb-usb: error while querying for an remote control event. [ 619.799729][ T4999] Dev loop5: unable to read RDB block 7 [ 619.839215][ T4999] loop5: unable to read partition table [ 619.845146][ T8902] m920x_read = error: -19 [ 619.867680][ T8902] dvb-usb: error while querying for an remote control event. [ 619.892369][ T4999] loop5: partition table beyond EOD, truncated [ 620.023867][ T8902] m920x_read = error: -19 [ 620.047236][ T8902] dvb-usb: error while querying for an remote control event. [ 620.204138][ T8900] m920x_read = error: -19 [ 620.231449][ T8900] dvb-usb: error while querying for an remote control event. [ 620.393849][ T8900] m920x_read = error: -19 [ 620.420210][ T8900] dvb-usb: error while querying for an remote control event. [ 620.568173][T13943] FAULT_INJECTION: forcing a failure. [ 620.568173][T13943] name failslab, interval 1, probability 0, space 0, times 0 [ 620.584229][ T8902] m920x_read = error: -19 [ 620.604488][ T8902] dvb-usb: error while querying for an remote control event. [ 620.622276][T13943] CPU: 0 UID: 0 PID: 13943 Comm: syz.1.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.622308][T13943] Tainted: [L]=SOFTLOCKUP [ 620.622315][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.622326][T13943] Call Trace: [ 620.622335][T13943] [ 620.622343][T13943] dump_stack_lvl+0xe8/0x150 [ 620.622372][T13943] should_fail_ex+0x412/0x560 [ 620.622399][T13943] should_failslab+0xa8/0x100 [ 620.622421][T13943] __kmalloc_cache_noprof+0x88/0x660 [ 620.622457][T13943] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 620.622487][T13943] ? sctp_add_bind_addr+0x8c/0x370 [ 620.622512][T13943] sctp_add_bind_addr+0x8c/0x370 [ 620.622536][T13943] sctp_copy_local_addr_list+0x314/0x4f0 [ 620.622569][T13943] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 620.622599][T13943] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 620.622629][T13943] ? sctp_v6_is_any+0x64/0x80 [ 620.622652][T13943] ? sctp_copy_one_addr+0x93/0x360 [ 620.622675][T13943] sctp_bind_addr_copy+0xb3/0x3c0 [ 620.622705][T13943] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 620.622736][T13943] sctp_connect_new_asoc+0x2ff/0x6b0 [ 620.622763][T13943] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 620.622794][T13943] ? __local_bh_enable_ip+0xd0/0x130 [ 620.622812][T13943] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 620.622838][T13943] ? security_sctp_bind_connect+0x7e/0x2c0 [ 620.622866][T13943] sctp_sendmsg+0x1576/0x2c50 [ 620.622905][T13943] ? __pfx_sctp_sendmsg+0x10/0x10 [ 620.622932][T13943] ? aa_sk_perm+0x6d5/0x900 [ 620.622966][T13943] ? __pfx_aa_sk_perm+0x10/0x10 [ 620.623001][T13943] ? sock_rps_record_flow+0x19/0x350 [ 620.623026][T13943] ? inet_sendmsg+0x2f4/0x370 [ 620.623052][T13943] ____sys_sendmsg+0x80a/0x9f0 [ 620.623092][T13943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.623129][T13943] ? import_iovec+0x73/0xa0 [ 620.623158][T13943] ___sys_sendmsg+0x2a5/0x360 [ 620.623176][T13943] ? __lock_acquire+0x6b5/0x2cf0 [ 620.623201][T13943] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.623235][T13943] ? kstrtouint+0x6e/0xe0 [ 620.623292][T13943] ? __fget_files+0x2a/0x420 [ 620.623315][T13943] ? __fget_files+0x3a0/0x420 [ 620.623349][T13943] __sys_sendmmsg+0x27c/0x4e0 [ 620.623375][T13943] ? __pfx___sys_sendmmsg+0x10/0x10 [ 620.623391][T13943] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 620.623440][T13943] ? ksys_write+0x242/0x270 [ 620.623476][T13943] ? __pfx_ksys_write+0x10/0x10 [ 620.623511][T13943] __x64_sys_sendmmsg+0xa0/0xc0 [ 620.623530][T13943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.623551][T13943] do_syscall_64+0x174/0x580 [ 620.623570][T13943] ? trace_irq_disable+0x3b/0x140 [ 620.623597][T13943] ? clear_bhb_loop+0x40/0x90 [ 620.623621][T13943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.623640][T13943] RIP: 0033:0x7fa76419ce59 [ 620.623659][T13943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.623675][T13943] RSP: 002b:00007fa76509b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 620.623696][T13943] RAX: ffffffffffffffda RBX: 00007fa764415fa0 RCX: 00007fa76419ce59 [ 620.623709][T13943] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 620.623722][T13943] RBP: 00007fa76509b090 R08: 0000000000000000 R09: 0000000000000000 [ 620.623734][T13943] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 620.623746][T13943] R13: 00007fa764416038 R14: 00007fa764415fa0 R15: 00007fa76453fa48 [ 620.623779][T13943] [ 621.423990][ T8902] m920x_read = error: -19 [ 621.428449][ T8902] dvb-usb: error while querying for an remote control event. [ 621.487508][ T4999] Dev loop5: unable to read RDB block 7 [ 621.520516][ T4999] loop5: unable to read partition table [ 621.546004][ T8902] m920x_read = error: -19 [ 621.560446][ T4999] loop5: partition table beyond EOD, truncated [ 621.574549][ T8902] dvb-usb: error while querying for an remote control event. [ 621.585900][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 621.733835][ T8902] m920x_read = error: -19 [ 621.739047][ T8902] dvb-usb: error while querying for an remote control event. [ 621.855253][ T8902] m920x_read = error: -19 [ 621.879017][ T8902] dvb-usb: error while querying for an remote control event. [ 622.025767][ T8902] m920x_read = error: -19 [ 622.043093][ T8902] dvb-usb: error while querying for an remote control event. [ 622.203893][ T8902] m920x_read = error: -19 [ 622.214729][ T8902] dvb-usb: error while querying for an remote control event. [ 622.346539][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.367844][ T8902] m920x_read = error: -19 [ 622.392023][ T8902] dvb-usb: error while querying for an remote control event. [ 622.440696][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.527119][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.545550][ T8902] m920x_read = error: -19 [ 622.558136][ T8902] dvb-usb: error while querying for an remote control event. [ 622.582438][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.704008][ T8902] m920x_read = error: -19 [ 622.719384][ T8902] dvb-usb: error while querying for an remote control event. [ 622.727151][ T5729] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 622.863860][ T8902] m920x_read = error: -19 [ 622.868870][ T4999] Dev loop5: unable to read RDB block 7 [ 622.873882][ T8902] dvb-usb: error while querying for an remote control event. [ 622.889785][ T4999] loop5: unable to read partition table [ 622.894906][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 622.912520][ T4999] loop5: partition table beyond EOD, truncated [ 622.928904][ T5729] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 622.946057][ T5729] usb 4-1: config 0 has no interface number 0 [ 622.972988][ T5729] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 623.010723][ T5729] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 623.031887][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.041721][ T5772] m920x_read = error: -19 [ 623.057487][ T5772] dvb-usb: error while querying for an remote control event. [ 623.082674][ T5729] usb 4-1: Product: syz [ 623.098903][ T5729] usb 4-1: Manufacturer: syz [ 623.117426][ T5729] usb 4-1: SerialNumber: syz [ 623.148207][ T5729] usb 4-1: config 0 descriptor?? [ 623.174283][ T5729] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 623.194430][ T5772] m920x_read = error: -19 [ 623.206150][ T5772] dvb-usb: error while querying for an remote control event. [ 623.227499][ T5729] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 623.354218][ T5729] m920x_read = error: -19 [ 623.381926][ T5729] dvb-usb: error while querying for an remote control event. [ 623.534188][ T5729] m920x_read = error: -19 [ 623.549818][ T5729] dvb-usb: error while querying for an remote control event. [ 623.695974][ T5729] m920x_read = error: -19 [ 623.709890][ T5729] dvb-usb: error while querying for an remote control event. [ 623.853874][ T5729] m920x_read = error: -19 [ 623.871982][ T5729] dvb-usb: error while querying for an remote control event. [ 624.014826][ T8902] m920x_read = error: -19 [ 624.030674][ T8902] dvb-usb: error while querying for an remote control event. [ 624.176080][ T8902] m920x_read = error: -19 [ 624.209789][ T8902] dvb-usb: error while querying for an remote control event. [ 624.354102][ T8902] m920x_read = error: -19 [ 624.370235][ T8902] dvb-usb: error while querying for an remote control event. [ 624.513909][ T8902] m920x_read = error: -19 [ 624.531714][ T8902] dvb-usb: error while querying for an remote control event. [ 624.629651][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.640264][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.674912][ T8902] m920x_read = error: -19 [ 624.697972][ T8902] dvb-usb: error while querying for an remote control event. [ 624.736141][T13984] FAULT_INJECTION: forcing a failure. [ 624.736141][T13984] name failslab, interval 1, probability 0, space 0, times 0 [ 624.790308][T13984] CPU: 0 UID: 0 PID: 13984 Comm: syz.0.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.790343][T13984] Tainted: [L]=SOFTLOCKUP [ 624.790350][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.790361][T13984] Call Trace: [ 624.790370][T13984] [ 624.790379][T13984] dump_stack_lvl+0xe8/0x150 [ 624.790407][T13984] should_fail_ex+0x412/0x560 [ 624.790436][T13984] should_failslab+0xa8/0x100 [ 624.790470][T13984] __kmalloc_cache_noprof+0x88/0x660 [ 624.790496][T13984] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 624.790516][T13984] ? sctp_v6_cmp_addr+0x15/0xd0 [ 624.790535][T13984] ? sctp_add_bind_addr+0x8c/0x370 [ 624.790560][T13984] sctp_add_bind_addr+0x8c/0x370 [ 624.790586][T13984] sctp_copy_local_addr_list+0x314/0x4f0 [ 624.790620][T13984] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 624.790649][T13984] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 624.790681][T13984] ? sctp_v6_is_any+0x64/0x80 [ 624.790703][T13984] ? sctp_copy_one_addr+0x93/0x360 [ 624.790726][T13984] sctp_bind_addr_copy+0xb3/0x3c0 [ 624.790761][T13984] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 624.790792][T13984] sctp_connect_new_asoc+0x2ff/0x6b0 [ 624.790820][T13984] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 624.790852][T13984] ? __local_bh_enable_ip+0xd0/0x130 [ 624.790871][T13984] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 624.790898][T13984] ? security_sctp_bind_connect+0x7e/0x2c0 [ 624.790926][T13984] sctp_sendmsg+0x1576/0x2c50 [ 624.790965][T13984] ? __pfx_sctp_sendmsg+0x10/0x10 [ 624.790992][T13984] ? aa_sk_perm+0x6d5/0x900 [ 624.791028][T13984] ? __pfx_aa_sk_perm+0x10/0x10 [ 624.791058][T13984] ? sock_rps_record_flow+0x19/0x350 [ 624.791084][T13984] ? inet_sendmsg+0x2f4/0x370 [ 624.791111][T13984] ____sys_sendmsg+0x80a/0x9f0 [ 624.791151][T13984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.791191][T13984] ? import_iovec+0x73/0xa0 [ 624.791219][T13984] ___sys_sendmsg+0x2a5/0x360 [ 624.791238][T13984] ? __lock_acquire+0x6b5/0x2cf0 [ 624.791264][T13984] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.791300][T13984] ? kstrtouint+0x6e/0xe0 [ 624.791358][T13984] ? __fget_files+0x2a/0x420 [ 624.791381][T13984] ? __fget_files+0x3a0/0x420 [ 624.791417][T13984] __sys_sendmmsg+0x27c/0x4e0 [ 624.791443][T13984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 624.791469][T13984] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 624.791519][T13984] ? ksys_write+0x242/0x270 [ 624.791549][T13984] ? __pfx_ksys_write+0x10/0x10 [ 624.791583][T13984] __x64_sys_sendmmsg+0xa0/0xc0 [ 624.791603][T13984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.791624][T13984] do_syscall_64+0x174/0x580 [ 624.791643][T13984] ? trace_irq_disable+0x3b/0x140 [ 624.791671][T13984] ? clear_bhb_loop+0x40/0x90 [ 624.791696][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.791715][T13984] RIP: 0033:0x7f7d3659ce59 [ 624.791735][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.791751][T13984] RSP: 002b:00007f7d373d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 624.791773][T13984] RAX: ffffffffffffffda RBX: 00007f7d36815fa0 RCX: 00007f7d3659ce59 [ 624.791787][T13984] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 624.791799][T13984] RBP: 00007f7d373d7090 R08: 0000000000000000 R09: 0000000000000000 [ 624.791812][T13984] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 624.791824][T13984] R13: 00007f7d36816038 R14: 00007f7d36815fa0 R15: 00007f7d3693fa48 [ 624.791857][T13984] [ 625.489237][ T8902] m920x_read = error: -19 [ 625.493733][ T8902] dvb-usb: error while querying for an remote control event. [ 625.603839][ T8902] m920x_read = error: -19 [ 625.609143][ T8902] dvb-usb: error while querying for an remote control event. [ 625.724496][ T8902] m920x_read = error: -19 [ 625.743967][ T8902] dvb-usb: error while querying for an remote control event. [ 625.883808][ T8902] m920x_read = error: -19 [ 625.911905][ T8902] dvb-usb: error while querying for an remote control event. [ 625.926674][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 626.064583][ T8902] m920x_read = error: -19 [ 626.085317][ T8902] dvb-usb: error while querying for an remote control event. [ 626.226445][ T8902] m920x_read = error: -19 [ 626.235090][ T8902] dvb-usb: error while querying for an remote control event. [ 626.366261][ T8902] m920x_read = error: -19 [ 626.382069][ T8902] dvb-usb: error while querying for an remote control event. [ 626.524050][ T8902] m920x_read = error: -19 [ 626.530347][T13995] FAULT_INJECTION: forcing a failure. [ 626.530347][T13995] name failslab, interval 1, probability 0, space 0, times 0 [ 626.545181][ T8902] dvb-usb: error while querying for an remote control event. [ 626.604339][T13995] CPU: 0 UID: 0 PID: 13995 Comm: syz.1.2103 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.604373][T13995] Tainted: [L]=SOFTLOCKUP [ 626.604380][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 626.604391][T13995] Call Trace: [ 626.604400][T13995] [ 626.604409][T13995] dump_stack_lvl+0xe8/0x150 [ 626.604438][T13995] should_fail_ex+0x412/0x560 [ 626.604466][T13995] should_failslab+0xa8/0x100 [ 626.604489][T13995] __kmalloc_cache_noprof+0x88/0x660 [ 626.604517][T13995] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 626.604547][T13995] ? sctp_add_bind_addr+0x8c/0x370 [ 626.604573][T13995] sctp_add_bind_addr+0x8c/0x370 [ 626.604598][T13995] sctp_copy_local_addr_list+0x314/0x4f0 [ 626.604640][T13995] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 626.604670][T13995] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 626.604703][T13995] ? sctp_v6_is_any+0x64/0x80 [ 626.604726][T13995] ? sctp_copy_one_addr+0x93/0x360 [ 626.604750][T13995] sctp_bind_addr_copy+0xb3/0x3c0 [ 626.604782][T13995] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 626.604813][T13995] sctp_connect_new_asoc+0x2ff/0x6b0 [ 626.604841][T13995] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 626.604872][T13995] ? __local_bh_enable_ip+0xd0/0x130 [ 626.604891][T13995] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 626.604918][T13995] ? security_sctp_bind_connect+0x7e/0x2c0 [ 626.604944][T13995] sctp_sendmsg+0x1576/0x2c50 [ 626.604983][T13995] ? __pfx_sctp_sendmsg+0x10/0x10 [ 626.605010][T13995] ? aa_sk_perm+0x6d5/0x900 [ 626.605045][T13995] ? __pfx_aa_sk_perm+0x10/0x10 [ 626.605074][T13995] ? sock_rps_record_flow+0x19/0x350 [ 626.605101][T13995] ? inet_sendmsg+0x2f4/0x370 [ 626.605126][T13995] ____sys_sendmsg+0x80a/0x9f0 [ 626.605167][T13995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.605204][T13995] ? import_iovec+0x73/0xa0 [ 626.605234][T13995] ___sys_sendmsg+0x2a5/0x360 [ 626.605253][T13995] ? __lock_acquire+0x6b5/0x2cf0 [ 626.605279][T13995] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.605314][T13995] ? kstrtouint+0x6e/0xe0 [ 626.605371][T13995] ? __fget_files+0x2a/0x420 [ 626.605394][T13995] ? __fget_files+0x3a0/0x420 [ 626.605428][T13995] __sys_sendmmsg+0x27c/0x4e0 [ 626.605454][T13995] ? __pfx___sys_sendmmsg+0x10/0x10 [ 626.605471][T13995] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 626.605518][T13995] ? ksys_write+0x242/0x270 [ 626.605549][T13995] ? __pfx_ksys_write+0x10/0x10 [ 626.605584][T13995] __x64_sys_sendmmsg+0xa0/0xc0 [ 626.605604][T13995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.605638][T13995] do_syscall_64+0x174/0x580 [ 626.605657][T13995] ? trace_irq_disable+0x3b/0x140 [ 626.605684][T13995] ? clear_bhb_loop+0x40/0x90 [ 626.605709][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.605729][T13995] RIP: 0033:0x7fa76419ce59 [ 626.605749][T13995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.605764][T13995] RSP: 002b:00007fa76509b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 626.605785][T13995] RAX: ffffffffffffffda RBX: 00007fa764415fa0 RCX: 00007fa76419ce59 [ 626.605799][T13995] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 626.605811][T13995] RBP: 00007fa76509b090 R08: 0000000000000000 R09: 0000000000000000 [ 626.605823][T13995] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 626.605835][T13995] R13: 00007fa764416038 R14: 00007fa764415fa0 R15: 00007fa76453fa48 [ 626.605865][T13995] [ 627.323797][ T8902] m920x_read = error: -19 [ 627.328278][ T8902] dvb-usb: error while querying for an remote control event. [ 627.464406][ T8902] m920x_read = error: -19 [ 627.481528][ T8902] dvb-usb: error while querying for an remote control event. [ 627.579945][ T8902] usb 4-1: USB disconnect, device number 127 [ 627.631459][ T5772] m920x_read = error: -19 [ 627.636028][ T5772] dvb-usb: error while querying for an remote control event. [ 627.716591][T14004] 8021q: VLANs not supported on ip_vti0 [ 627.754074][ T5772] m920x_read = error: -19 [ 627.768776][ T5772] dvb-usb: error while querying for an remote control event. [ 627.906721][ T8902] m920x_read = error: -19 [ 627.925542][ T8902] dvb-usb: error while querying for an remote control event. [ 628.061847][T14011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.077026][ T5772] m920x_read = error: -19 [ 628.090043][ T5772] dvb-usb: error while querying for an remote control event. [ 628.107193][T14011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.138027][T14014] input: syz0 as /devices/virtual/input/input85 [ 628.210690][T14011] loop9: detected capacity change from 0 to 7 [ 628.243855][ T5772] m920x_read = error: -19 [ 628.254525][ T5772] dvb-usb: error while querying for an remote control event. [ 628.254718][ C1] blk_print_req_error: 10 callbacks suppressed [ 628.254752][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.280475][ C1] buffer_io_error: 340 callbacks suppressed [ 628.280513][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.308286][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.320477][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.339191][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.350127][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.359935][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.371843][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.383457][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.384713][ T8902] m920x_read = error: -19 [ 628.395017][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.406541][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.415813][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.441552][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.450833][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.458967][T14011] ldm_validate_partition_table(): Disk read failed. [ 628.476121][ T8902] dvb-usb: error while querying for an remote control event. [ 628.477286][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.494800][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.502919][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.512173][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.531193][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.540456][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 628.554369][T14011] Dev loop9: unable to read RDB block 0 [ 628.585722][T14011] loop9: unable to read partition table [ 628.603844][ T5729] m920x_read = error: -19 [ 628.608273][ T5729] dvb-usb: error while querying for an remote control event. [ 628.616103][ T5772] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 628.619209][T14011] loop9: partition table beyond EOD, truncated [ 628.668302][T14011] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 628.734359][ T5729] m920x_read = error: -19 [ 628.739019][T14021] veth0_to_bridge: entered promiscuous mode [ 628.756083][ T5772] usb 3-1: device descriptor read/64, error -71 [ 628.765583][ T5729] dvb-usb: error while querying for an remote control event. [ 628.788593][T14021] macvtap1: entered allmulticast mode [ 628.795771][T14021] veth0_to_bridge: entered allmulticast mode [ 628.806167][ T4999] Dev loop5: unable to read RDB block 7 [ 628.824806][ T4999] loop5: unable to read partition table [ 628.851057][T14021] veth0_to_bridge: left allmulticast mode [ 628.857197][ T4999] loop5: partition table beyond EOD, truncated [ 628.869760][T14021] veth0_to_bridge: left promiscuous mode [ 628.914174][ T5729] m920x_read = error: -19 [ 628.929174][ T5729] dvb-usb: error while querying for an remote control event. [ 629.008731][T14023] netlink: 'syz.3.2113': attribute type 13 has an invalid length. [ 629.020480][T14023] netlink: 'syz.3.2113': attribute type 17 has an invalid length. [ 629.033793][ T5772] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 629.054098][ T5729] m920x_read = error: -19 [ 629.069741][ T5729] dvb-usb: error while querying for an remote control event. [ 629.188132][ T5772] usb 3-1: device descriptor read/64, error -71 [ 629.198066][T14023] gretap0: refused to change device tx_queue_len [ 629.226236][ T808] m920x_read = error: -19 [ 629.238049][T14023] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 629.258851][ T808] dvb-usb: error while querying for an remote control event. [ 629.324198][ T5772] usb usb3-port1: attempt power cycle [ 629.555146][ T8884] m920x_read = error: -19 [ 629.581006][ T8884] dvb-usb: error while querying for an remote control event. [ 629.713785][ T5772] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 629.729183][T14028] fuse: Bad value for 'fd' [ 629.754032][ T8904] m920x_read = error: -19 [ 629.774555][ T5772] usb 3-1: device descriptor read/8, error -71 [ 629.797909][ T8904] dvb-usb: error while querying for an remote control event. [ 629.945498][ T8884] m920x_read = error: -19 [ 629.957065][ T8884] dvb-usb: error while querying for an remote control event. [ 630.053790][ T5772] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 630.093762][ T8904] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 630.111880][ T5772] usb 3-1: device descriptor read/8, error -71 [ 630.136309][ T8884] m920x_read = error: -19 [ 630.157702][ T8884] dvb-usb: error while querying for an remote control event. [ 630.223131][T14041] FAULT_INJECTION: forcing a failure. [ 630.223131][T14041] name failslab, interval 1, probability 0, space 0, times 0 [ 630.241625][T14041] CPU: 1 UID: 0 PID: 14041 Comm: syz.3.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.241660][T14041] Tainted: [L]=SOFTLOCKUP [ 630.241668][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.241680][T14041] Call Trace: [ 630.241689][T14041] [ 630.241698][T14041] dump_stack_lvl+0xe8/0x150 [ 630.241739][T14041] should_fail_ex+0x412/0x560 [ 630.241769][T14041] should_failslab+0xa8/0x100 [ 630.241793][T14041] __kmalloc_cache_noprof+0x88/0x660 [ 630.241824][T14041] ? sctp_add_bind_addr+0x8c/0x370 [ 630.241852][T14041] sctp_add_bind_addr+0x8c/0x370 [ 630.241878][T14041] sctp_copy_local_addr_list+0x314/0x4f0 [ 630.241915][T14041] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 630.241947][T14041] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 630.241980][T14041] ? sctp_v6_is_any+0x64/0x80 [ 630.242005][T14041] ? sctp_copy_one_addr+0x93/0x360 [ 630.242030][T14041] sctp_bind_addr_copy+0xb3/0x3c0 [ 630.242063][T14041] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 630.242096][T14041] sctp_connect_new_asoc+0x2ff/0x6b0 [ 630.242125][T14041] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 630.242158][T14041] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 630.242188][T14041] ? security_sctp_bind_connect+0x7e/0x2c0 [ 630.242218][T14041] sctp_sendmsg+0x1576/0x2c50 [ 630.242260][T14041] ? __pfx_sctp_sendmsg+0x10/0x10 [ 630.242288][T14041] ? aa_sk_perm+0x6d5/0x900 [ 630.242314][T14041] ? trace_irq_disable+0x3b/0x140 [ 630.242353][T14041] ? __pfx_aa_sk_perm+0x10/0x10 [ 630.242385][T14041] ? sock_rps_record_flow+0x19/0x350 [ 630.242412][T14041] ? inet_sendmsg+0x2f4/0x370 [ 630.242441][T14041] ____sys_sendmsg+0x80a/0x9f0 [ 630.242481][T14041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.242523][T14041] ? import_iovec+0x73/0xa0 [ 630.242553][T14041] ___sys_sendmsg+0x2a5/0x360 [ 630.242572][T14041] ? __lock_acquire+0x6b5/0x2cf0 [ 630.242600][T14041] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.242637][T14041] ? kstrtouint+0x6e/0xe0 [ 630.242720][T14041] ? __fget_files+0x2a/0x420 [ 630.242746][T14041] ? __fget_files+0x3a0/0x420 [ 630.242783][T14041] __sys_sendmmsg+0x27c/0x4e0 [ 630.242811][T14041] ? __pfx___sys_sendmmsg+0x10/0x10 [ 630.242829][T14041] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 630.242880][T14041] ? ksys_write+0x242/0x270 [ 630.242912][T14041] ? __pfx_ksys_write+0x10/0x10 [ 630.242938][T14041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.242967][T14041] __x64_sys_sendmmsg+0xa0/0xc0 [ 630.242988][T14041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.243009][T14041] do_syscall_64+0x174/0x580 [ 630.243027][T14041] ? trace_irq_disable+0x3b/0x140 [ 630.243055][T14041] ? clear_bhb_loop+0x40/0x90 [ 630.243080][T14041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.243100][T14041] RIP: 0033:0x7f544179ce59 [ 630.243121][T14041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.243138][T14041] RSP: 002b:00007f54426cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 630.243162][T14041] RAX: ffffffffffffffda RBX: 00007f5441a15fa0 RCX: 00007f544179ce59 [ 630.243177][T14041] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 630.243190][T14041] RBP: 00007f54426cd090 R08: 0000000000000000 R09: 0000000000000000 [ 630.243202][T14041] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 630.243215][T14041] R13: 00007f5441a16038 R14: 00007f5441a15fa0 R15: 00007f5441b3fa48 [ 630.243250][T14041] [ 630.247254][ T5772] usb usb3-port1: unable to enumerate USB device [ 630.599550][ T8884] m920x_read = error: -19 [ 630.604105][ T8884] dvb-usb: error while querying for an remote control event. [ 630.703751][ T8904] usb 6-1: Using ep0 maxpacket: 32 [ 630.760022][ T8884] m920x_read = error: -19 [ 630.769609][ T8884] dvb-usb: error while querying for an remote control event. [ 630.903474][ T8885] m920x_read = error: -19 [ 630.913766][ T8885] dvb-usb: error while querying for an remote control event. [ 630.986547][ T8904] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 631.007713][ T8904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.035452][ T8904] usb 6-1: config 0 descriptor?? [ 631.043806][ T8885] m920x_read = error: -19 [ 631.072120][ T8885] dvb-usb: error while querying for an remote control event. [ 631.130138][ T8904] as10x_usb: device has been detected [ 631.166196][ T8904] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 631.203890][ T8885] m920x_read = error: -19 [ 631.211797][ T8885] dvb-usb: error while querying for an remote control event. [ 631.261060][ T8904] usb 6-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 631.354227][ T8885] m920x_read = error: -19 [ 631.360575][ T8885] dvb-usb: error while querying for an remote control event. [ 631.408308][ T8904] as10x_usb: error during firmware upload part1 [ 631.423797][ T5772] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 631.478373][ T8904] Registered device nBox DVB-T Dongle [ 631.488088][ T8904] usb 6-1: USB disconnect, device number 19 [ 631.514692][ T8885] m920x_read = error: -19 [ 631.539657][ T8885] dvb-usb: error while querying for an remote control event. [ 631.608586][ T5772] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 631.659810][ T5772] usb 4-1: config 0 has no interface number 0 [ 631.694147][ T8885] m920x_read = error: -19 [ 631.700985][ T5772] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 631.720478][ T8885] dvb-usb: error while querying for an remote control event. [ 631.761541][ T8904] Unregistered device nBox DVB-T Dongle [ 631.762033][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.787201][ T8904] as10x_usb: device has been disconnected [ 631.817698][ T5772] usb 4-1: Product: syz [ 631.829021][ T5772] usb 4-1: Manufacturer: syz [ 631.845039][ T5772] usb 4-1: SerialNumber: syz [ 631.858098][ T5772] usb 4-1: config 0 descriptor?? [ 631.883819][ T8885] m920x_read = error: -19 [ 631.888357][ T8885] dvb-usb: error while querying for an remote control event. [ 631.900227][ T5772] usb 4-1: selecting invalid altsetting 1 [ 631.922273][ T5772] dvb_ttusb_budget: ttusb_init_controller: error [ 631.951289][ T5772] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 632.005683][ T8885] m920x_read = error: -19 [ 632.011120][ T8885] dvb-usb: error while querying for an remote control event. [ 632.105600][T14045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.134190][ T8885] m920x_read = error: -19 [ 632.142552][ T5699] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 632.161245][ T8885] dvb-usb: error while querying for an remote control event. [ 632.242884][T14058] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2123'. [ 632.260237][ T5772] DVB: Unable to find symbol stv0299_attach() [ 632.294853][ T8885] m920x_read = error: -19 [ 632.311847][ T8885] dvb-usb: error while querying for an remote control event. [ 632.325458][ T5699] usb 1-1: device descriptor read/64, error -71 [ 632.328681][T14060] input: syz0 as /devices/virtual/input/input86 [ 632.340683][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.350047][T14063] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 632.367601][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.420508][T14063] netlink: 'syz.2.2124': attribute type 6 has an invalid length. [ 632.449009][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 632.464367][ T8885] m920x_read = error: -19 [ 632.471885][ T8885] dvb-usb: error while querying for an remote control event. [ 632.521528][T14065] xt_l2tp: missing protocol rule (udp|l2tpip) [ 632.613947][ T5699] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 632.614892][ T8885] m920x_read = error: -19 [ 632.683336][ T8885] dvb-usb: error while querying for an remote control event. [ 632.715827][ T5772] DVB: Unable to find symbol tda8083_attach() [ 632.775570][ T5772] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 632.799705][ T5699] usb 1-1: device descriptor read/64, error -71 [ 632.833930][ T8885] m920x_read = error: -19 [ 632.848072][ T8885] dvb-usb: error while querying for an remote control event. [ 632.936456][ T5699] usb usb1-port1: attempt power cycle [ 633.013950][ T5772] m920x_read = error: -19 [ 633.026459][ T5772] dvb-usb: error while querying for an remote control event. [ 633.162616][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.173900][ T5772] m920x_read = error: -19 [ 633.199710][ T5772] dvb-usb: error while querying for an remote control event. [ 633.226090][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.271222][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.334066][ T5699] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 633.343964][ T5772] m920x_read = error: -19 [ 633.348476][ T5772] dvb-usb: error while querying for an remote control event. [ 633.361265][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.376086][ T5699] usb 1-1: device descriptor read/8, error -71 [ 633.493876][ T5772] m920x_read = error: -19 [ 633.498464][ T5772] dvb-usb: error while querying for an remote control event. [ 633.645371][ T5772] m920x_read = error: -19 [ 633.646408][ T5699] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 633.686612][ T5772] dvb-usb: error while querying for an remote control event. [ 633.736188][ T5699] usb 1-1: device descriptor read/8, error -71 [ 633.769547][ T5772] usb 4-1: USB disconnect, device number 2 [ 633.834377][ T8904] m920x_read = error: -19 [ 633.864096][ T8904] dvb-usb: error while querying for an remote control event. [ 633.886633][ T5699] usb usb1-port1: unable to enumerate USB device [ 633.956915][T14082] FAULT_INJECTION: forcing a failure. [ 633.956915][T14082] name failslab, interval 1, probability 0, space 0, times 0 [ 634.024010][ T8904] m920x_read = error: -19 [ 634.029350][T14082] CPU: 1 UID: 0 PID: 14082 Comm: syz.3.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.029381][T14082] Tainted: [L]=SOFTLOCKUP [ 634.029389][T14082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.029401][T14082] Call Trace: [ 634.029409][T14082] [ 634.029419][T14082] dump_stack_lvl+0xe8/0x150 [ 634.029449][T14082] should_fail_ex+0x412/0x560 [ 634.029479][T14082] should_failslab+0xa8/0x100 [ 634.029503][T14082] __kmalloc_cache_noprof+0x88/0x660 [ 634.029533][T14082] ? sctp_add_bind_addr+0x8c/0x370 [ 634.029562][T14082] sctp_add_bind_addr+0x8c/0x370 [ 634.029588][T14082] sctp_copy_local_addr_list+0x314/0x4f0 [ 634.029634][T14082] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 634.029667][T14082] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 634.029699][T14082] ? sctp_v6_is_any+0x64/0x80 [ 634.029724][T14082] ? sctp_copy_one_addr+0x93/0x360 [ 634.029749][T14082] sctp_bind_addr_copy+0xb3/0x3c0 [ 634.029782][T14082] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 634.029814][T14082] sctp_connect_new_asoc+0x2ff/0x6b0 [ 634.029844][T14082] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 634.029877][T14082] ? __local_bh_enable_ip+0xd0/0x130 [ 634.029897][T14082] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 634.029925][T14082] ? security_sctp_bind_connect+0x7e/0x2c0 [ 634.029954][T14082] sctp_sendmsg+0x1576/0x2c50 [ 634.029995][T14082] ? __pfx_sctp_sendmsg+0x10/0x10 [ 634.030017][T14082] ? irqentry_exit+0x218/0x8b0 [ 634.030038][T14082] ? lockdep_hardirqs_on+0x7a/0x110 [ 634.030058][T14082] ? irqentry_exit+0x218/0x8b0 [ 634.030077][T14082] ? trace_irq_disable+0x3b/0x140 [ 634.030127][T14082] ? inet_sendmsg+0xd6/0x370 [ 634.030151][T14082] ? inet_sendmsg+0x2f4/0x370 [ 634.030178][T14082] ____sys_sendmsg+0x80a/0x9f0 [ 634.030221][T14082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.030263][T14082] ? import_iovec+0x73/0xa0 [ 634.030293][T14082] ___sys_sendmsg+0x2a5/0x360 [ 634.030312][T14082] ? __lock_acquire+0x6b5/0x2cf0 [ 634.030339][T14082] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.030375][T14082] ? kstrtouint+0x6e/0xe0 [ 634.030431][T14082] ? __fget_files+0x2a/0x420 [ 634.030454][T14082] ? __fget_files+0x3a0/0x420 [ 634.030487][T14082] __sys_sendmmsg+0x27c/0x4e0 [ 634.030514][T14082] ? __pfx___sys_sendmmsg+0x10/0x10 [ 634.030533][T14082] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 634.030592][T14082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.030631][T14082] __x64_sys_sendmmsg+0xa0/0xc0 [ 634.030651][T14082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.030673][T14082] do_syscall_64+0x174/0x580 [ 634.030695][T14082] ? clear_bhb_loop+0x40/0x90 [ 634.030721][T14082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.030742][T14082] RIP: 0033:0x7f544179ce59 [ 634.030762][T14082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.030778][T14082] RSP: 002b:00007f54426cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.030800][T14082] RAX: ffffffffffffffda RBX: 00007f5441a15fa0 RCX: 00007f544179ce59 [ 634.030814][T14082] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: 0000000000000003 [ 634.030826][T14082] RBP: 00007f54426cd090 R08: 0000000000000000 R09: 0000000000000000 [ 634.030838][T14082] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000002 [ 634.030851][T14082] R13: 00007f5441a16038 R14: 00007f5441a15fa0 R15: 00007f5441b3fa48 [ 634.030885][T14082] [ 634.035370][ T8904] dvb-usb: error while querying for an remote control event. [ 634.374552][ T31] INFO: task syz.4.1701:12509 blocked for more than 143 seconds. [ 634.503859][ T31] Tainted: G L syzkaller #0 [ 634.523356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.557102][ T31] task:syz.4.1701 state:D stack:28088 pid:12509 tgid:12507 ppid:11863 task_flags:0x480040 flags:0x00080002 [ 634.587302][ T31] Call Trace: [ 634.599772][ T31] [ 634.610424][ T31] __schedule+0x1821/0x5740 [ 634.633739][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.643809][ T31] ? __pfx___schedule+0x10/0x10 [ 634.659440][ T31] ? schedule+0x90/0x360 [ 634.677746][ T31] schedule+0x164/0x360 [ 634.696663][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.713713][ T31] __mutex_lock+0x7f7/0x1550 [ 634.723715][ T31] ? __mutex_lock+0x608/0x1550 [ 634.739694][ T31] ? blk_trace_setup+0x2d3/0x520 [ 634.747744][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.759898][ T31] blk_trace_setup+0x2d3/0x520 [ 634.770329][ T31] ? __pfx_blk_trace_setup+0x10/0x10 [ 634.783707][ T31] ? snprintf+0xe8/0x140 [ 634.791231][ T31] blk_trace_ioctl+0x37f/0x920 [ 634.803681][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 634.818655][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 634.843702][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 634.854075][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 634.873700][ T31] ? do_vfs_ioctl+0x1166/0x1530 [ 634.883721][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 634.893688][ T31] ? do_futex+0x333/0x420 [ 634.905321][ T31] blkdev_ioctl+0x4c1/0x740 [ 634.910331][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 634.916426][ T31] ? __fget_files+0x2a/0x420 [ 634.929523][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 634.941172][ T4999] Dev loop5: unable to read RDB block 7 [ 634.949390][ T4999] loop5: unable to read partition table [ 634.971874][ T4999] loop5: partition table beyond EOD, truncated [ 634.996898][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 635.013783][ T8904] m920x_read = error: -19 [ 635.027500][ T8904] dvb-usb: error while querying for an remote control event. [ 635.030172][ T31] __se_sys_ioctl+0xfc/0x170 [ 635.086235][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.123764][ T31] do_syscall_64+0x174/0x580 [ 635.139829][ T31] ? clear_bhb_loop+0x40/0x90 [ 635.156446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.163853][ T8904] m920x_read = error: -19 [ 635.179506][ T8904] dvb-usb: error while querying for an remote control event. [ 635.192631][ T31] RIP: 0033:0x7f062e79ce59 [ 635.206997][ T31] RSP: 002b:00007f062c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.223586][ T31] RAX: ffffffffffffffda RBX: 00007f062ea16090 RCX: 00007f062e79ce59 [ 635.244411][ T31] RDX: 0000200000000080 RSI: 00000000c0481273 RDI: 0000000000000003 [ 635.264663][ T31] RBP: 00007f062e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 635.285347][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.304813][ T31] R13: 00007f062ea16128 R14: 00007f062ea16090 R15: 00007f062eb3fa48 [ 635.321192][ T31] [ 635.324470][ T8904] m920x_read = error: -19 [ 635.331958][ T8904] dvb-usb: error while querying for an remote control event. [ 635.342063][ T31] [ 635.342063][ T31] Showing all locks held in the system: [ 635.370610][ T31] 1 lock held by khungtaskd/31: [ 635.391725][ T31] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.420197][ T31] 2 locks held by getty/5386: [ 635.433075][ T31] #0: ffff888035b2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.460911][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 635.473807][ T8904] m920x_read = error: -19 [ 635.480268][ T8904] dvb-usb: error while querying for an remote control event. [ 635.501036][ T31] 2 locks held by kworker/0:15/8904: [ 635.519842][ T31] 4 locks held by kworker/u8:24/9355: [ 635.532147][ T31] #0: ffff8880b863aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 635.559965][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 635.583310][ T31] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: taprio_dequeue+0x26/0x540 [ 635.606417][ T31] #3: ffffffff9a704108 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 635.617001][ T8904] m920x_read = error: -19 [ 635.627524][ T8904] dvb-usb: error while querying for an remote control event. [ 635.648670][ T31] 3 locks held by syz.4.1701/12508: [ 635.662908][ T31] 1 lock held by syz.4.1701/12509: [ 635.679533][ T31] #0: ffff8880266511f8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d3/0x520 [ 635.704418][ T31] 1 lock held by syz.2.2128/14078: [ 635.718221][ T31] 2 locks held by syz.2.2128/14079: [ 635.731984][ T31] #0: ffff888031a954d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 635.763846][ T5772] m920x_read = error: -19 [ 635.768318][ T5772] dvb-usb: error while querying for an remote control event. [ 635.777231][ T31] #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 635.803376][ T31] 1 lock held by dhcpcd/14083: [ 635.817853][ T31] #0: ffff8880762a4d00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 635.841185][ T31] 1 lock held by dhcpcd/14085: [ 635.853960][ T31] #0: ffff8881cb838260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 635.876647][ T31] [ 635.880697][ T31] ============================================= [ 635.880697][ T31] [ 635.893837][ T5772] m920x_read = error: -19 [ 635.901235][ T5772] dvb-usb: error while querying for an remote control event. [ 635.910574][ T31] NMI backtrace for cpu 0 [ 635.910596][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 635.910621][ T31] Tainted: [L]=SOFTLOCKUP [ 635.910629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.910640][ T31] Call Trace: [ 635.910648][ T31] [ 635.910656][ T31] dump_stack_lvl+0xe8/0x150 [ 635.910681][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 635.910705][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.910728][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 635.910753][ T31] sys_info+0x135/0x170 [ 635.910773][ T31] watchdog+0xfd3/0x1030 [ 635.910804][ T31] ? watchdog+0x1c9/0x1030 [ 635.910834][ T31] kthread+0x389/0x470 [ 635.910858][ T31] ? __pfx_watchdog+0x10/0x10 [ 635.910879][ T31] ? __pfx_kthread+0x10/0x10 [ 635.910903][ T31] ret_from_fork+0x514/0xb70 [ 635.910926][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 635.910944][ T31] ? __switch_to+0xc79/0x1410 [ 635.910971][ T31] ? __pfx_kthread+0x10/0x10 [ 635.910995][ T31] ret_from_fork_asm+0x1a/0x30 [ 635.911031][ T31] [ 635.911043][ T31] Sending NMI from CPU 0 to CPUs 1: [ 636.028757][ C1] NMI backtrace for cpu 1 [ 636.028779][ C1] CPU: 1 UID: 0 PID: 3601 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.028801][ C1] Tainted: [L]=SOFTLOCKUP [ 636.028807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 636.028818][ C1] Workqueue: events nsim_dev_hwstats_traffic_work [ 636.028848][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 636.028869][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 636.028883][ C1] RSP: 0018:ffffc9000d957a88 EFLAGS: 00000046 [ 636.028897][ C1] RAX: 0000000000000001 RBX: ffff8880b873a600 RCX: 0000000000000001 [ 636.028908][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b873a600 [ 636.028918][ C1] RBP: 1ffff110170e74c1 R08: ffff8880b873a603 R09: 1ffff110170e74c0 [ 636.028930][ C1] R10: dffffc0000000000 R11: ffffed10170e74c1 R12: dffffc0000000000 [ 636.028941][ C1] R13: 1ffff110170e74c2 R14: ffff8880b873a610 R15: ffff8880b873a608 [ 636.028953][ C1] FS: 0000000000000000(0000) GS:ffff88812539f000(0000) knlGS:0000000000000000 [ 636.028967][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.028978][ C1] CR2: 00007fcd498114c0 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 636.028994][ C1] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 636.029005][ C1] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 636.029017][ C1] Call Trace: [ 636.029024][ C1] [ 636.029031][ C1] do_raw_spin_unlock+0xf5/0x210 [ 636.029056][ C1] _raw_spin_unlock_irq+0x1e/0x50 [ 636.029077][ C1] process_scheduled_works+0x953/0x1860 [ 636.029107][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.029125][ C1] ? assign_work+0x3d5/0x5e0 [ 636.029142][ C1] worker_thread+0xa53/0xfc0 [ 636.029168][ C1] kthread+0x389/0x470 [ 636.029187][ C1] ? __pfx_worker_thread+0x10/0x10 [ 636.029203][ C1] ? __pfx_kthread+0x10/0x10 [ 636.029222][ C1] ret_from_fork+0x514/0xb70 [ 636.029240][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 636.029256][ C1] ? __switch_to+0xc79/0x1410 [ 636.029278][ C1] ? __pfx_kthread+0x10/0x10 [ 636.029297][ C1] ret_from_fork_asm+0x1a/0x30 [ 636.029321][ C1] [ 636.423844][ T8885] m920x_read = error: -19 [ 636.428673][ T8885] dvb-usb: error while querying for an remote control event. [ 636.574091][ T5772] m920x_read = error: -19 [ 636.579764][ T5772] dvb-usb: error while querying for an remote control event. [ 636.714889][ T8885] m920x_read = error: -19 [ 636.719340][ T8885] dvb-usb: error while querying for an remote control event. [ 636.728922][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 636.735828][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 636.746535][ T31] Tainted: [L]=SOFTLOCKUP [ 636.750884][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 636.760964][ T31] Call Trace: [ 636.764272][ T31] [ 636.767227][ T31] vpanic+0x56c/0xa60 [ 636.771239][ T31] ? __pfx___schedule+0x10/0x10 [ 636.776129][ T31] ? __pfx_vpanic+0x10/0x10 [ 636.780655][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 636.786840][ T31] panic+0xc5/0xd0 [ 636.790587][ T31] ? __pfx_panic+0x10/0x10 [ 636.795028][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 636.800436][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 636.806774][ T31] watchdog+0x102c/0x1030 [ 636.811156][ T31] ? watchdog+0x1c9/0x1030 [ 636.815609][ T31] kthread+0x389/0x470 [ 636.819701][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.824584][ T31] ? __pfx_kthread+0x10/0x10 [ 636.829228][ T31] ret_from_fork+0x514/0xb70 [ 636.833965][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.839124][ T31] ? __switch_to+0xc79/0x1410 [ 636.843844][ T31] ? __pfx_kthread+0x10/0x10 [ 636.848468][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.853270][ T31] [ 636.856604][ T31] Kernel Offset: disabled [ 636.860931][ T31] Rebooting in 86400 seconds..