last executing test programs: 5m9.127262486s ago: executing program 1 (id=1115): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801d673944ebfb31da4aa3496ebf95ce4f18ec3779213a74b46dadb1bc2bfcce14e3943b493c4c8793a153f2862d23b8a9a5290ecfbefa40ede00a7f6b6bbb2328806edc71dc7ce3bd2b8cd9bc89cbd20ebf5c8620c28f94f204aec1ba5f5532c97c1cb84d28b3f5fd07ad7d3f79c9f6e7519d0dd8d5d7be117d649e89119613e7af354ff72e562f1851fde9a"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) (async) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f00000006c0)=[0x7d3, 0x810, 0x8, 0x899d, 0x7fffffff, 0x825, 0x7, 0x805, 0xfffffe01, 0x1, 0x8, 0x2, 0x6, 0x6, 0x0], 0xffffffff, 0x4000005}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb9", 0x47}], 0x1}, 0x20048050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r8 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r8, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYRES32], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYRES32], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="94010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002dbd7000ffdbdf25130000000500130100000000060010004307000006001401030000000c00430008000000df07000006001000432d9cde0800a400030000000600120007000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24004004) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="288a13ce", @ANYRES16=r5, @ANYBLOB="05002bbd7000fcdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0c0023800500070051000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="288a13ce", @ANYRES16=r5, @ANYBLOB="05002bbd7000fcdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0c0023800500070051000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 5m8.79946452s ago: executing program 1 (id=1119): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r1, 0x1a1c1000) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000080000000400000000000000020000000000000001000000010000000900000000000000000000000000000000000000000000000000000000000000bb0a0000f2000000060000000000000008000000000000000000000000000080ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/768]) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x7, 0xd091}) 5m8.707022075s ago: executing program 1 (id=1121): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x200000, 0x0) 5m8.706533339s ago: executing program 1 (id=1122): setrlimit(0xb, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) (async, rerun: 64) timer_create(0x3, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c080106, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000003c0)={0x2c, r1, 0x483, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) (async, rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = mq_open(&(0x7f0000000240)='[-)\x00', 0x80, 0xa, &(0x7f00000002c0)={0x5f0a, 0x51, 0xfff}) mq_getsetattr(r4, &(0x7f0000000300)={0x8, 0x6, 0x4f, 0x100}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) (async, rerun: 32) setpgid(0x0, r2) (rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x120) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x62b00, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) (async, rerun: 32) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x591180, 0x0) (rerun: 32) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 5m8.655959683s ago: executing program 1 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0xb4, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1144a73544f6a5bf208a94158394d74ff68a61a8a06671e2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "65f9d31093801155"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="997c752c2fca8537714201e6ce7b04bd"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "12d8340ddf27877e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="71ff7ffb0e8e1c9c10f678012bd4513e0c2b9398263b3324"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b08861b4a6732eb28263f0e4bdb0e9ffc55e86f4727b47cf335cca95cca64d30"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x19}]}]}, 0xb4}}, 0x4) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="946ad078ae7f27d8cbe7e2259d7fdc3b1fb488a6fbac764ad4f141eb84470aa478cdd241701970b7b0bc5b613b6a3b3d43879cdc0cb392ca6ed92819244dc9a44eb1d91078d679edaf6c97b3cb99e9aa2f463812562704d3d7825d91907407f6811cb7c5b2580808634350236c0ab52a661f2f145f52b7cfb6554e57583e7899c0c856a668dd938354a9584ce335fa4d", @ANYRES16=r2, @ANYBLOB="020026bd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00d7000000080001007063690011000200303030303a30303a31302e300000000008000b0000080000"], 0x88}}, 0x8014) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f00000004c0), 0x8000000000000001, 0x44041) (async) r4 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x80003, 0x19d}, &(0x7f0000000040), &(0x7f0000000200)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) ppoll(&(0x7f00000001c0)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa4717000) 5m8.441709691s ago: executing program 1 (id=1124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0x4007010000000000}, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 5m8.300424052s ago: executing program 32 (id=1124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0x4007010000000000}, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 1m27.9225615s ago: executing program 3 (id=2181): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0xc0000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x8}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648d000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000097000040"]) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x4c, r8, 0xf19, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ']\'%-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20042014}, 0x4000004) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r9, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 1m27.84430826s ago: executing program 3 (id=2182): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffff9, 0x2c0000) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x51) 1m27.612715127s ago: executing program 3 (id=2183): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 1m27.39097879s ago: executing program 3 (id=2184): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x84}}, 0x20050800) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x2000) madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000000d060500000000000000000000000006050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 1m26.987608507s ago: executing program 3 (id=2185): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000780)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='5', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r2}, &(0x7f0000000000)=0x8) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r3, 0xd6baf000) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 1m26.354879737s ago: executing program 3 (id=2186): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x202880, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) 1m25.828128318s ago: executing program 33 (id=2186): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x202880, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) 6.662752174s ago: executing program 5 (id=2684): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x2, 0x1, 0x5f}, './file0\x00'}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.534892868s ago: executing program 5 (id=2685): socket(0x2b, 0x1, 0x5) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x300, 0x0, 0x35314258}}) mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 6.47832463s ago: executing program 5 (id=2686): creat(&(0x7f0000001380)='./file0\x00', 0x4) 6.398918341s ago: executing program 5 (id=2687): r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="fb", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x187c82, 0x0) write$sequencer(r1, &(0x7f0000000180)=[@l, @e], 0x10) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x13558c3, 0x0) 6.398493917s ago: executing program 5 (id=2688): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x8, @raw_data="24c68d6a23e49bb0d4b5e7813d9d11b799b508b3643d1d213807b8ef1b8984ddba6ffc5f5d1411423f2b3bb545b61201ce62c16137bcf57c565a6287b9671ef47bbe381bcb378921bb13f489dcaf4f5f2edbefb84d75d32c899b3943ea607442bfb00c56ba7048bd50558250130f1e54b4df9f939a1dfa4496e7e1fe0ec0a3e9ae24420e6630625b304c7a8102a1fa8824edf26fbef59238ec895e9d35d234feebdbaebf84720ee47b9357c745e7ac2390a8825cda2e1cba0b75c519cb175a194023d672f843ce0a"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) lstat(&(0x7f0000000000)='./cgroup\x00', 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x2}) sendfile(r0, r0, 0x0, 0x7ffff000) 6.248231601s ago: executing program 0 (id=2689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1a3741, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x2, 0x9, 0x0, 0x6, 0x4, 0x3, 0xfc, 0x9, 0x2e, 0x3d, 0x40, 0x0, 0x3, 0x1, 0xca, 0x7, 0x31, 0x1, '\x00', 0x4, 0x6}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000102505a8a440000102030109021b00010110c001090400af0107010300090501024000027e00993793cc7c4329106d5d3beef61dcc5df9cdbe8aaf13e3e5052a"], &(0x7f00000007c0)={0x0, 0x0, 0x3a, &(0x7f0000001640)=ANY=[@ANYBLOB]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYRES16], 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="4b0003000000", 0x6) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000440)={0x1, r6}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x8000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r11 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x8) write$FUSE_GETXATTR(r11, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r10, 0x5708e000) 5.37100722s ago: executing program 2 (id=2691): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r1, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 5.37066738s ago: executing program 5 (id=2692): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2fa3c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 5.260173618s ago: executing program 2 (id=2693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x67, 0xff, 0x62, 0x40, 0x45e, 0x284, 0xa098, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0x5, 0x70, 0x2, [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x3b, 0x5a, 0xd7, 0x8, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0xd, 0x64}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x4, 0x4f, 0x49}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x2, r3, 0x29, r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000034c0)={@loopback, @dev, 0x0}, &(0x7f0000003500)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003600)={'syztnl0\x00', &(0x7f0000003540)={'ip_vti0\x00', 0x0, 0x98, 0x7800, 0x8, 0x401, {{0x24, 0x4, 0x2, 0x6, 0x90, 0x65, 0x0, 0xbe, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x5, "e234ea"}, @noop, @noop, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x0, [{@rand_addr=0x64010102, 0x3}]}, @ssrr={0x89, 0xf, 0xc, [@dev={0xac, 0x14, 0x14, 0x39}, @local, @local]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0xc, [{@remote, 0xa}, {@broadcast, 0x2}, {@local, 0x10001}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x3}, {@loopback, 0x3a}, {@loopback, 0xffffb226}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xff}, {@empty, 0x2}]}]}}}}}) sendmsg$inet(r0, &(0x7f0000003780)={&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003440)=[{&(0x7f00000001c0)="0a7de91e396086b32f4b38fcdef95c12c3c8b3ea4319b02fcfdc67d899a722e56f161b8cb3899e28d23c3fef78eff9baa5521f46315088e8153c2e730a27b1aca8421d99bd1bbf4c8c446d576a04b6f936501a47bac401d15144772958f73587b890c64c6761d4e99c7f2b6698d3cf42118c68ef9ce9bc577b795fc5ad1b35b19ae004d3177a615ba74b83bc4995819fcb0be73d28dc8791a7181d1f34cf5157785e3a2190c1a0cf4fa236276e5b1db2055df3edd275d82ce62e189ec9a1ffb7c72fcbf82c46a4e7577eb028", 0xcc}, {&(0x7f00000002c0)="2fa54e867e3580b02961fdc4721bb4ac845e330631bf6c85c03d9f127d41a308d9ddcd756b69311775f413dd77b333cd2f4bcfd97115765f2c25643dbd249bee034c8c824f3d6ab736fbf71dc59338f2d58b186f5d4dd9d740dcb4a78bc7c05277f41c0007c87724e9ea0fc07548a7a31e983872934b97a1ef690393374599341d3c803391fbeb7d4ffeb6923f8721934848649938e06ce3ca8501b89fb56e490496c51d8be8bffd8e7892aa41576c934c50b896714c82e6cdf744f13ea8d8559d995a8f7bc3b365c643c20ab44802d292f487d5cdfd15685346af41619f655ab9094ec1f7", 0xe5}, {&(0x7f00000003c0)="be7eb8f68cb71ac986fa192e70ea0f948fa29418b9afb7ac8efc92acef6e204cd7a97bc8483daa5fb82176d0d7fe4f8d30bed9cfc279b3ea24a629deb6302d6d5e8f52852e45e1f7a4c599140bbd1b93da925a9e8ae832a98f", 0x59}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="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", 0x1000}], 0x6, &(0x7f0000003640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @private=0xa010101}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @generic={0x88, 0x10, "1f3fbb84c665f691f2e00751ca00"}, @rr={0x7, 0xf, 0x99, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x7, 0x19, [@dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x1, [{@multicast2, 0x1}, {@empty, 0x7fff}]}, @cipso={0x86, 0x6, 0x1}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @private=0xa010101}}}], 0x108}, 0x8095) (async, rerun: 32) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x7, 0x1, '\xd5:\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 3.866799189s ago: executing program 2 (id=2698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000380)="26f20f1edec4e17ddfffc481797eafc60000000f234536450ffbed48b8d4000000000000000f23c00f21f83500000f000f23f8c744240000e0ffffc744240246000000c7442406000000000f011c24c74424000a000000c7442402cbe00000c7442406000000000f011c24470f01f8b922020000b8f4470000ba000000000f30", 0x80}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000500)) (async) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x30314247}}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0xf, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0x0, 0x54, 0x6, 0x2, 0xb}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x41, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000400)={0x3, @pix={0xd9ea, 0x2, 0x59565955, 0x3, 0x4, 0xffff, 0x5, 0x10000, 0x1, 0x1, 0x0, 0x4}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r7, 0x80184560, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8ee, 0x0, 0x8}]}) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000010180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000010280)={&(0x7f00000101c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01801400020076657468315f746f5f68737200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x844) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f00000000c0)) (async) io_setup(0xae, &(0x7f0000000000)=0x0) io_cancel(r11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x57deb2c1d03c6cbb}, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000180)="e370d6", 0x3}], 0x1) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000002180)={{0x3, 0x0, 0x80, {0x5000, 0x8080000, 0x2}}, "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", "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"}) 3.651822417s ago: executing program 2 (id=2700): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000000800024000000024080001"], 0xc8}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x10) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x10) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x400, 0x103) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r2, 0x52fbe000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r2, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r3 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x7c28}], 0x1, 0x40000001, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.490210133s ago: executing program 2 (id=2702): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x143, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x131, 0x1, 0x1, 0x3, 0xb8, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, "ddf7"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x97, 0x98d6, 0x4, 0xe}, [@ncm={0x6, 0x24, 0x1a, 0x3ff, 0xd}, @ncm={0x6, 0x24, 0x1a, 0xb5, 0x15}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mdlm_detail={0xd6, 0x24, 0x13, 0x5, "3c4641b8d3183da81658ffd55e2dabc1a84532e36a820536eb92aaaf1f0f3af1641a1ef3aefa83c45cadae7da321e8338cd41534a162165e460ffd780cf8fec57268f9a7b234eea2d97c6569c26a9a53170d2206ccac1ba2f15597a17ebc5839c9e856f09390fc85fa93e3806825b7fcdb2ff3251f965ec5626f466ae8e5ff192ce998467ff13eb43c655628b55c0da08b4868a216707b08381402a2ab34c09d1df3e4c3dbfacf5ac9bd92a121f09444c2b770baab7cdf046c1fd62c912ee61a0ba717e9a31d31ed59b4cbf1a968427ad392"}, @mbim_extended={0x8, 0x24, 0x1c, 0xdc3a, 0x6}, @obex={0x5, 0x24, 0x15, 0xffff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf7, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0xed, 0x81}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x1, 0xdc, 0x1, 0x8, 0x26}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x0, 0xfff}]}, 0x4, [{0x5d, &(0x7f0000000640)=@string={0x5d, 0x3, "b7db7120e61bbb2df914a3e050fee1eefed7ee6031e507e3a2ebe9828987dc4b79bd8860790fb58166825b8630852e9ed241dcdccf32e1ff6baf5ec6c02f10044e9cce628a9cd2d454d645b9685f8c102a5ec4e288dff669ce3558"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x406}}, {0xd8, &(0x7f00000007c0)=@string={0xd8, 0x3, "f30a9d450a6e810cab434f825afcb63132da248cf928e599bd50228cea2201bb571510ede73f5bd81d356af4a004aa550ee60d4020aa95ee76cb9867f5a4a5dc6ba46e666e89e38d111c76bc933214b08afdd2079f2b7d10ac7fd9210e826fe274745e62ac38619f99f9409aa2b00d644dd6db9a21e3abd8eb7ccb9a59afdd10a9911fa4076214075943e72312b20b70082e79b82cc57b12b079bd41965f2fd5938ae48732c82b4d9e977b1adacbe2a9900e0e11dfc44b04fa919d6eaedf373559ee9ba5bbec4e24e923c998bacd3f82a7aacb3fa14f"}}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r3, 0x4, 0xc00) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="ea", 0x1}, {&(0x7f00000000c0)="a3", 0x1}], 0x2) r4 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) r5 = socket(0x22, 0x2, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)=""/253, 0xfd}], 0x2}, 0x7f}], 0x1, 0x40, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r9, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) r10 = gettid() syz_open_procfs(r10, &(0x7f0000000080)='attr/current\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003b1fe9208151403005d65010287e5f72e1200f1ffff46000000ff0000d3a53e001dfa9dca5d44fceb1fccc3d8a6e3bf77d6970d0db563f4f3fb11caf46cd218eb8191360b843eab5d3b14e8"], &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f0f00010c"], 0x1, [{0x0, 0x0}]}) 2.235734194s ago: executing program 0 (id=2706): mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 2.154817329s ago: executing program 0 (id=2707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x800003f, r4, 0x0) (async) fanotify_mark(r4, 0x201, 0x800003f, r4, 0x0) fanotify_mark(r4, 0x1, 0x11, r3, 0x0) (async) fanotify_mark(r4, 0x1, 0x11, r3, 0x0) fanotify_mark(r4, 0x80, 0x800, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r4, 0x80, 0x800, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001400)={{0x0, 0x0, 0x0, r5, 0x0, 0x10, 0x1}, 0x0, 0x0, 0xffffffffffffff63, 0x8c17, 0x72e, 0xffffffffffff37d6, 0x37, 0x1, 0x3, 0x100}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001400)={{0x0, 0x0, 0x0, r5, 0x0, 0x10, 0x1}, 0x0, 0x0, 0xffffffffffffff63, 0x8c17, 0x72e, 0xffffffffffff37d6, 0x37, 0x1, 0x3, 0x100}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r2, &(0x7f0000002200)=ANY=[], 0xff2e) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00 \x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf25010000000000000008410000004c0018000000ff696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) mount$bind(0x0, 0x0, 0x0, 0x21, 0xedc0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000300)=ANY=[@ANYBLOB=',msize=0']) unshare(0x22020600) (async) unshare(0x22020600) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'vcan0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x101, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x2, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x5, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0x2}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) personality(0x5400004) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)=0x1) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.830810812s ago: executing program 0 (id=2708): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="0300f198aaaebabeca0000850800", 0x5e, 0x26004085, &(0x7f0000000840)={0x11, 0x4, r1, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r2, 0xe6a64000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.718554213s ago: executing program 4 (id=2709): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) close_range(r0, r0, 0x2) 1.606927257s ago: executing program 0 (id=2710): creat(&(0x7f0000000140)='./file0\x00', 0x71) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 1.48683083s ago: executing program 4 (id=2711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=']) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000180)=""/48, &(0x7f0000000140)=0x30) pwritev(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) write$nci(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="50010600f2000000d57bab2b7372eaf6ae17ba448ebe0d31b10abfe70da2c2ad0400000030113b6e0cafec47a3ddd4ee9712035d43b70091fae31982ffb060a9ff8851d4dbae6a8452b9641e452c37ab13c6da125c87d4f0bf8c1b82dbf04c9bfc084e0dcad618331a12ea3347de1a460b7fa74d0a32266a50eeaca3f2c7390c65b8624bbaf16377b37fa55bfff207fd10ca44512fef35f84c071a01b45adeefbc22a90c497a86a4b1d75580fe7767704216af02536afeb65ab5a6be4e7088990843d84f5d13efd0d71464389eb905000000000000001b04efb5f5e87b13017f000b04003a04000000"], 0xe9) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10450420}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100027bd7000fedbdf250500000008000100", @ANYRES32=r5, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYRESDEC=r3], 0x24}}, 0x4008000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000000)={"1d8388602d0aabd3e3212c08171b0ac4", 0x0, 0x0, {0x8001, 0x7}, {0xaad, 0x1}, 0xeb71, [0x800, 0x3, 0x2f, 0x8000000000000001, 0x6aae6847, 0x70b, 0x1, 0x3, 0x100000001, 0x0, 0x9ab2, 0x8000000000000000, 0x2, 0x3fa7c52c, 0xdae6, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000012c0)={{r2}, r7, 0x2, @unused=[0xb92, 0x6, 0x7ff, 0x1000], @subvolid=0x92f}) 1.452540401s ago: executing program 0 (id=2712): syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0xa6, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x3, 0x38, 0x1, {0x22, 0x43f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xb4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xe, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x27, 0xc, 0x10, 0x1}, 0x116, &(0x7f0000000080)={0x5, 0xf, 0x116, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x10001, 0xf00, 0x0, [0xf, 0xc000, 0x0, 0xff00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x6, 0x8, 0x8, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x84, 0x2, 0x81, 0xf00, 0x1, [0x0, 0x30]}, @generic={0xcc, 0x10, 0x4, "5f9e7f26b2c9baa6b9a1e62441327391cb9340eae93782d74c338439ed65a11e8c47ba488d1497f567b76caf27f222b90c879a10be297a448ee41ad7619086d8789c30e0d24c6d371a0271e7b2704966bdf4449bf50add20456803453dcd0c08252ef087bb47162c6d6936afa5afa1518762a55f852050d85ce271404034791b15ae60d3b17bf5e93c4f57c466d4574dfef10bcba46e6d77cee69079edef22a4d14f00da91f41acb0e4aae96bf519701a4e0c725d68237ccbed1d26ef794fc552d6faee9acd176ba47"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x2, 0x1}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f00000002c0)={{0x12, 0x1, 0x211, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x150, 0x8, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "7b2dd589ed"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x3ff, 0x7, 0x8}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xa0, 0x1, 0x82}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x7f, 0xf1}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x8, 0xc, 0x8, 0x20, 0x61}, 0x30, &(0x7f0000000380)={0x5, 0xf, 0x30, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x10, 0x4, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6e, 0xb5, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "23b40b9d4d6dd08755b4e4c1492e09ef"}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2009}}, {0x35, &(0x7f0000000480)=@string={0x35, 0x3, "cac84b90082b515af53b0158810fb2eff7299be15a61bbc5d41c9de0910ff31266b07f1701ac65be4d5ec9807030f0c1e0c292"}}]}) r0 = syz_usb_connect$cdc_ecm(0x1, 0x6f, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x5c, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, '\r'}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xa34c, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x4, 0x20, 0x3, 0x7, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x7a, 0xd9, 0xff, 0xff, 0x6}, 0x50, &(0x7f0000000600)={0x5, 0xf, 0x50, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0xa2, 0x5, 0x4bdc, 0xff0f, 0xa, [0xc030, 0xc038, 0x30, 0x3f00, 0xc0cf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xd, 0x0, 0x5, 0xa}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xf, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7f, 0x7c, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x6, 0x4}, @ptm_cap={0x3}]}, 0x9, [{0x38, &(0x7f0000000680)=@string={0x38, 0x3, "1006d68ead55c15407cc9d00104553b05804bb8de6b6f194eb0e0bbb09a269791113756bf7020d927b353a6527104858f77e467280e0"}}, {0x6e, &(0x7f00000006c0)=@string={0x6e, 0x3, "1204061514dbc6e9da472604a9e6e814e69de85a28829d38548fc9d016721dd8c11ee543e8afdf0498bdc20d932afc74209c3cdc5f54b898d267b78c70d16966dd71e89b4b17c34358398d31e30ef4b3480214e5c1088d8a8ba38b9c53c809dc2023df386b46c25785fa62c4"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x31f57655d5ca1eab}}, {0x52, &(0x7f0000000780)=@string={0x52, 0x3, "09e0b48e64bf7e400e475cfb0aa71f2f4a6fd453b5dafa77f560bb3dd845104333de88616975a9998146ed4df3269ce3c444f14565c4213a60dd7f0e993d8a8301800282399e9d73fa077be6f59b5f98"}}, {0x82, &(0x7f0000000800)=@string={0x82, 0x3, "5a5ae38e386b97ae2eded4ca89978d1eb40fc917fdca78a879d814a18ab29ea0dd019e4e7ee9b1ae6e87ff4959daed6c870e84378d825207fd83639e07111e803c29979cc71c279a35f50cdb431f83a139b6c9cf34d62fe0e1163b568f2e09719f6d35424c547a8037dfdf2adb6e958125bbd5a21d2a220458e125c8cedd9cd9"}}, {0x60, &(0x7f00000008c0)=@string={0x60, 0x3, "1595c690a3cf1d1e4f3fbfe0fca559394fba8d7dd9d1b43331a7ae606cbebaa06daf27cdce40d59065bfad13f8693ad5af2e5e76234910a23aa73cac14aab111652ffb916137372807c9356b4d9f0e087d7762ff7739131196081752ee77"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44d}}, {0xab, &(0x7f0000000980)=@string={0xab, 0x3, "57935564477bb0180d61626b3bb29b40e4e296b33540fa33f6f20b8a52dab03bca023c465bde4116eafdbc9281094b938219e0b81e2b2e1f8a5c30d930bd2f0cb7fff66e99686535fd6d5344b40e25763d155ac37f2411f096d53855ae24e05dd1caa1086e8b50257211a845fce369f07544f6418366d0441b8290391bf6e476e5fa068a7b41fe55f7e4f948f25595d371a213a1f01008453b6a5d505f6b3a4fbeee928f7f7fa7001c"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x820}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='map_files\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000b80)) read$FUSE(r1, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000043c0)={0x7, 0x4, {0xffffffffffffffff}, {0xee00}, 0x4, 0xb5}) fstat(r1, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004480)='./file0\x00', &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_crypto(0x10, 0x3, 0x15) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000004580)={0x0, &(0x7f0000004540)=[@rdmsr={0x32, 0x18, {0x3ae}}, @wr_crn={0x46, 0x20, {0x8, 0x6c}}], 0x38}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000045c0)=0x0) statx(r1, &(0x7f0000004600)='./file0\x00', 0x400, 0x100, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004740)={0x0}, &(0x7f0000004780)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000047c0)={0xffc00000, 0x40, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xa3, 0x9}) r13 = getuid() sendmsg$netlink(r1, &(0x7f0000004900)={&(0x7f0000000bc0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc, &(0x7f0000004380)=[{&(0x7f0000002c40)={0x24, 0x10, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @uid=0xee01}]}, @typed={0x8, 0xd9, 0x0, 0x0, @uid=r2}]}, 0x24}, {&(0x7f0000002c80)={0x10ec, 0x41, 0x10, 0x70bd25, 0x25dfdbfd, "", [@generic="3511a7afdbb2cdbe87a0f7e53235d0463805f5302c248597a6f7e8d4a1ef7c10857bf60e2a54bf59803048ed945ba5dba6a98316c3fba4d9fa2bb004656bf9924b2f8240f8", @nested={0x81, 0x9c, 0x0, 0x1, [@generic="59cffb172a2b479bcf9a51a0e746add87a07affa329519916fb7182bf157063812349ae5fa15d6ebf73f8ad1efa78ab303cf4e8817e012087d7545ece394aabf80e25a5713137a262348de6e16c643cad02174f6bed47aa111970f36f5bc39f64663821228d698c195dc6c7de63e3a0549a7d01413004a4ddb21ab818f"]}, @generic="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", @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x7fff}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x10ec}, {&(0x7f0000003e40)={0x520, 0x2b, 0x8, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x10f, 0x0, 0x0, @uid=r3}, @generic="c3c0537ae1459c3a623c445ffc8595298e7dd2ef0d2f17e55ead20ddf9de507987ab7f74d0669e11b216e841af6c8cf7b4289d445d508512e2f26aca11a2da4897b94d1ae04f0846c5b317c7682e653d1509f73ddcd3e455b12578797dc78cbdbd1a5a0c7a1809d9de1b5c28e706ff4eb367f2bbe685855b34eb50138aaa791561155fec58bc071f99c69a587aba209897b9e2188bbfd664fd5c328700dc412cfc58989a64d9b7806a30f1c11a57f6fa530d6cbe20e268bdfeee508b9c8a1e968adc39df7ba78896fff5a311655999a273248e2ca6872656f99c99987d00ad9ce371c808eaee18aac59c751f084d", @typed={0x2e, 0xb9, 0x0, 0x0, @binary="2bef8c88c1247efd3a7d0432ed0878694a8d33841320d8f65ed18343b9d1984c4539629b83ab72d54702"}, @generic="e2ceb92d8e04859f", @nested={0x3cc, 0xc8, 0x0, 0x1, [@typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@loopback}, @typed={0x5, 0x29, 0x0, 0x0, @str='\x00'}, @generic="2ad2571091d073cf3b6cbbaf67be00d01d4444ecf9a134f66be6c4f480674a70a41d1b5dc9310076ab6e7b4d6ec88665bd2f15c9ba0c7d012e218813d58145e2115f80489798fdcb1335b45bbb5312da873c9967341b1756e4e39186e8a57dad3e86b28f996ed9fc487f0fb0d84a786924e2d00bffa6e7e6baf06cb45c38232837036d099b8732e5d22fa1f34a8d357cf6ee4296d0d267543adbfff76ea3bb228180d3f82b0744222692df40ed2941fe43d4a2ff4745941c730a72ba6d8ec519c1d270e764483863bb0d970b819a5aad9ee6afd4edfdd8685c0a402420019895116e4741ccf9e5c94b2fcce92e4e8e78ede201f46f1e696b30", @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x2}, @generic="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", @generic="b746a50b0a20c5484ccf898edb2c45968810a2c93bb683c15739a57c8f34626259c379356c52f2e5ec23cb87c1496bfc8a11f659a56a5ca17e8df02b1cf6decd197f0a4316c9c0552e16626b483260e229833fb4ab7ffd8fd316c935e49bf54580b6cd69068a61f8525198c4118dfe6a8dcaeb8c3fcf1f24d03b33a399c4c28df703372395c4ae9e886377e17b8e", @generic="7fcf13cb09590d7df7388e6876a8c62a438ea189ef2897c7534f6f410f41e114d211333cc5a9910f07935dc4dbe2c862476397d1f6ac654ec9edf892581e2b9b8b390a3c4defdec40a91b2c71a15a192c9ed49e87f6199fb54f75c4a86f15ca5fc4af60d26", @generic="89db0fb044f7a6c69afa5d1999db8437b7790d9fb24cd44924d56a24ccf2362fb117c2f2973adca109aafd77da9d329644377ee4eb3f", @generic="c512cb7ec13927b81cb1510c7838e6b85f85d2924d5d95eeac5a974ddda12f6bb791bd19dc2d433a461cdb97b85c59ffe82e2f8a097d08c1a278f92d5e0d80a4eef208e75abc2480faa68500ad0dccc6a9a25bc2572faaf916077e5807e9565e5250b2414791cb1985b2c4bad25586b631243d03ccde06400d97"]}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}]}, 0x520}], 0x3, &(0x7f0000004800)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r7, r1, r1, r1, r1, r8, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r10}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}], 0xe8, 0x800}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) mount_setattr(r1, &(0x7f0000004940)='./file0\x00', 0x8000, &(0x7f0000004980)={0x100000, 0x100000, 0xc0000, {r1}}, 0x20) r14 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000049c0), 0x1, 0x0) preadv(r14, &(0x7f0000004a80)=[{&(0x7f0000004a00)=""/114, 0x72}], 0x1, 0x0, 0xfb8f) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000004ac0)=""/63) syz_usb_control_io(r0, &(0x7f0000004c80)={0x2c, &(0x7f0000004b00)={0x0, 0x5, 0x14, {0x14, 0xa, "0ca5d90634f3fefba15ac86829e3f07e48f2"}}, &(0x7f0000004b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000004b80)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x9, 0xfe, 0xa, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xff, 0x81, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x2, 0xf, 0x1, 0x7e}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7ffffde, 0xf000, 0x3a, [0x0, 0x3f00, 0xffc000, 0xc0]}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x7, 0xf00, 0x0, [0xff3fc0, 0xffc0f0, 0xff0f]}]}}, &(0x7f0000004c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0xa0, 0x7, "a7073555", "70e62b02"}}, &(0x7f0000004c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x7, 0x41, 0x7, 0x1b, 0xdcf8}}}, &(0x7f00000050c0)={0x84, &(0x7f0000004cc0)={0x20, 0x17, 0x39, "063943b0279fce30449ac51c7c36d948e5ecfef2db0bdf7c16aa5a66305713f5d5a732acb6468008377d7616a4daeb9f7440b22f1bc48ccfba"}, &(0x7f0000004d00)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000004d40)={0x0, 0x8, 0x1}, &(0x7f0000004d80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000004dc0)={0x20, 0x0, 0x4, {0x9e, 0x8}}, &(0x7f0000004e00)={0x40, 0x7, 0x2, 0x6c8a}, &(0x7f0000004e40)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000004e80)={0x40, 0xb, 0x2, "925a"}, &(0x7f0000004ec0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000004f00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000004f40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000004f80)={0x40, 0x19, 0x2, "dca2"}, &(0x7f0000004fc0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000005000)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000005040)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000005080)={0x40, 0x21, 0x1, 0xf2}}) r15 = syz_usb_connect$uac1(0x0, 0xb8, &(0x7f0000005180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@processing_unit={0xa, 0x24, 0x7, 0x2, 0x4, 0x8, "2725b5"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xd, "1fa9"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x1, "0ca51b5acbbf"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x10}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x2, 0x3, [0x8, 0x5, 0x9], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2f, 0x0, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa, 0x2, 0x7, 0x7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x4, "7093"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x3, 0xe, {0x7, 0x25, 0x1, 0x2, 0x1, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x1, 0x5, {0x7, 0x25, 0x1, 0x83, 0xc2, 0xfffe}}}}}}}]}}, &(0x7f0000005600)={0xa, &(0x7f0000005240)={0xa, 0x6, 0x310, 0x2b, 0x0, 0x0, 0x40, 0x9}, 0x5, &(0x7f0000005280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000052c0)=@lang_id={0x4, 0x3, 0x423}}, {0x97, &(0x7f0000005300)=@string={0x97, 0x3, "1dbaaa93ecf1165a10a0330c85a975f23419980ab751c31c15ba252e2298d9c0e53c01417ac0277d602ba24b70986a21afdfe5290445023c492a213cd0cad3290d9db376758a5a64935dc7712cccaf9c26f854306f6b588907a82a8e7c0ca0a3abce12c186cb51bbdacf9e7df0adeebd62bea6a2a73ffddb3d4a27a06d6db85b4c3b88a5c87fcdd08e8c54b4a94c1ccab60256009f"}}, {0x66, &(0x7f00000053c0)=@string={0x66, 0x3, "bcf541fa48ba6f4df7db251f27f45855b7a89726fe07c9a289356d29af9948d8648230dd70e8bf635b2c1964227911216a0050908a9815fb56f8467c2c9521f5301a19116eeed5a2f3a29e672f6601248d49e73d958bfe672979f6b21bfb43b930c73afe"}}, {0xc5, &(0x7f0000005440)=@string={0xc5, 0x3, "48cbe73c6481f3e96ce58f4a09827a306d7bcfbdddd5945e20de66dd9c17ea05225cdc0e25ef45e4335e7da4d8be92e3e46024efc1a3473b7e053e8129bd9d1c219980440ee26585ecfc91784432d792d9dd87ad4950a80970b3f8477e04a7f41275a8ce3193e7cbcc6002ae2b7d4c7aa3a469655fe0ef66ed02255edbc880e36e8e392fc1cb2207fd9eef48a9587c3009c8af9c14f326cd82ef05bfe50222e4f19d1bbd94a51706ac1f0c703a0f6b6a85d995b31f18a1870a6ea0a9913cf9665b0f1e"}}, {0x97, &(0x7f0000005540)=@string={0x97, 0x3, "3327cf4e04ea43f785276fb6d420c906225ee11e399ee0f94d7bdd259726fa399383e58798219f264b3ac59ee15e12295a9897897a86633ea32f229042d05f073194c14defd149630a2a893bf74b67453e7f068db90c16486696196cd37ce61a1c3e456c54a981d5a8200b8ffd6c87a9e3e839ee57dff1951c7ddc3e0486cd10ef3ca52b098fd29cedde9cda310c4b67b9046f5f95"}}]}) write$UHID_INPUT(r1, &(0x7f0000005680)={0x8, {"ac6439c4e3ebb916ee6539c394687f8ef464cce6c68a833bd6866c470ebaaea9e7b4917679eced5fd8c7711955460cf3a69323142f72ba97fa4f9fa1e6dd5752535cf6a5c43dd0a682b9bfaf1b08222cf0502a518deeb61e78b85c5d0b4fe29c0d9a0cf93af6cecf38a0e02b9b3f72e8bf04f5404460757db06f7aabd53bf4e098e296bcdd44e2f07b8ecb9ff7e6197a4b6b61b9f73615bac181969e521c1099acccdebcd91b35e2380e05a90c522c767d6f4c024c18b56896ce0a9fa2b4630e8fe3c3ae8ec8ac01332dad3341f69d2474104f729022fad190207ec5edbf096b8ccf99d782bdb6944aee95bd10432b1b67d51b015c25f6b84c484e78e210304ae64e89d1b75247a393f5f6c503669cbf0d88735eb429cfed746b091282274b64ee18538d8a0dc5014115079605abd7cf4368f99f58de71d95b6940b64b2dd9e6d02e416d64d87b2a4af3961da58dd16ac8fb2b2738ac099d068568eb2c6883c6d15ab68a317d54a3219d1737268b33512b47cacdc55dfecb6d28e98a8317707cb16fa009336a2ef76db52e60aef71fe67eb49f2b62f54b8f0f87ff06af62509f53e11e80d198bd2028612a28db4c836ba8cac98a6208e6690a075c09944f4ab29eed252122151fd8c677ed433d82adb0896d085ad58802408519b44554e01de85e39ae30d0a24c556927a9f84b50fdac9aaf5fdba8e1c5e8290b3b848e5aa73645f010124cc46b343852d60784f85996e100bb5c4e9e6c63e2d8614b6f843c45df191771cb3bd2b3d6ad5a61f273bd67e1ca575714571db53de6411026d848c5aedf432baca3462addcbc9d6b5289958b1c5100056e78d0b4373de12b4413f7ece02bf0e13f2c2f8024048fc53abf6772b9d407c15b4b82b2a8ee525f2d4351a06bcbd43b9b2bdd693df413fd0900b1610d583d07ced0229470c56153d054a724374596469329bcd48ce361b0fd28e41ef7e32ac6f88b735d884bf3678bee89106b4c3048131d71e09eb32f74906380ab7932d69819893cf474123c27f326246922029e69fb8797dcf50b9ab2b6e5a6954c0f3a666e65c0dd600c6fc155ceaa979786c39f7ddc4fef62eb548d6bbd125a592f35c2b022c020342f178bce807e87aa4af4925fb9fa0908f0ba3410ca8b0552e8ba894c60c62d354734720fbde4a377ba2d915cbeb68a4d2a4525452f3af9ac9e19f51a35c92732c43abe7e57380a73a96c8529e8b20013a38e17951014d0642617338e2df36640c53ca249f10e5907e2bca89dbb6fa413124ead1c9a47882ff5c16222b8c193fd4958d6caa76dc445142e7a8f7184d1cde2afca30f6f136e6e9c921172d0a252b1b963849298609ba509642ac42cd8d3efbce5c2ab1014d8d08289627ffc4547f375b60fb983ea79579d61d4b08f018576a1d1ba9e18e1fb324b8bdcea478804cf56680d7c0dae4b7341c53e2407846f0128a14998c892744303cf41dd46ce0553384997216d6f12cab316724adbf379f0862ffb6a98905582ff85d2283c24ba45d560835ff406ea045f5c4ae01b768a7d4cbf981ea878f996574abbdbb31473df5733adfc8839a0aadc2d63bdd794e54933c8a4407c55806297e567bf016df96385a765b597e0661eb42daf0a95b6e4be6e463ee107f1b0e7d64022a791f3e182424ac2198e5258c52a08ba685569e408aa4bb6060328a1555198cf36035cc1faf1de3ee28e3e162e7daf84d36ad3e39bae0d0e7a0ac4fddc221e19e3ef5666b815aebaf7c616d096133b3b1f568f24883246471bd093c0fd28194fd7d9d70edc8cdfd704115c565497b5be77b790573bea663b9cbdfc2d7d20b04df55ae0092f38a060322ace473747840018fb50ba384b8250d02b2503403435ae061a22349cb206615eb12bb07f699f3d4ba60b7573f000ceddc849c6deaac643a7eef276507a621b83c822f166d04e277fd9aa4328272dee7e212ecc9307073090bfdbd7d6c2f0b1ab28f6fa30abbde1066092fd0506c7b30d66ed0ff2c648f3bc6d690a57068e421d2b3e6d52c0ec0b0d0f35c585d4979db6c9291c39657cab16fac99528b491302986aa62381da4375a570496f9db6a303f2f948177a1b592640acfe03666d2ac1f609a4328a7acfacfdd31888ba2e6785e7049162cac3567c7389663b9159ef0bdf714e502e4d1116725f5b538d82fef46187fcaf2e7a8288e1a0a42119e6ef8d4fc59a237e24a7479ce2ed0c615fa4c7046039fcac1aa04fc5e42432fef5b3cd3bba47da1a209e63e079f99d66e6ca47a3fac5efc0a458985d3aadaccdbfe7ddc8c13bc07a3e9eb4a2c5ef49ff2c3fbe3163c65f435112b6e4edffe7b72bf4e5cee34f880aa79520b8339cb5d06bd5b493c7e79fab57ee51d2b1ad7d2658927a81450f26e4e11290f32f7e757169fadea9625d5c49d7cc7bf2283141cb8819425ef69d3f867c93983aadf13c9f158d1ad7f070dfa1d846438c850671ca04020c72096b335a451bf281aee8d4e7da4b4b41010821969c9548bc2beb3cad665ff06b0c80e4135679dbc311c9f0e05cba5f4e6986a379bb40714c3e6efa61716117d852ead47a26b7c9262fda5f01eade90298fa36c555fc2d64d035e6e574cff21287179ab206fcc95b8c82cb757636760c667ba1a5baf1e1bf15157c25b64571b6d69501f5b2c8bd41162be6c532179b3ad9b991dcb8f1df452a358d2c3f52f625b25d74ad79352a27be08184afdc2907a81f2752db658806d2eb7d57e63671b0d75ecfde299f2c98b29a18dc8d33467eff1db2f9c3591b81802a94862b93222760c878ba512c5fba16a65ac3c4aa700b653bcfdda009759f85f81b6d5baa204faa37937b9b7fe8bc4cbc5556de3534e86b52f88797d980e2d92244694ddbfc1e0f27d63430674d763c088448862731bc82fcc0274bde17d9886c74453a036f52b9e49d087dbd20e5e195adfcb114855411206a54ffd34d0866242340bc3cbcc499ddb23dd7150cb0b9558c089ccec2d625b9e4347e86dc401f1f03ce01467f46e214b7e8677cc5907b5cb4e5454a58c8936a187e99dda57d74b583c84342beb97947cf074272d6bad74fafba2268cc33c29512835577d31886a023807a63a954b1efe9318379c96870dc78e44eb08e25bb9d3e9072823779d36036e69c65011f303aee3d38620dbe476f6483b26b51538b2727cc0b73e334a8069e11efb9903efea4c3ca75453a3dc312adfbc9216ec40781d73ec379c1cb7dea297bbf70afb63d7a79ed78aa6a74125797c5d348aaa5705c74201bfce34fae7d5a5fc0af6990a3203c5693df6652778999136ac72e37433ab43ee0c3f0bd6af8176800c310f75d7c53c4aa1bd5cea75ef90b1b0777fdc5a1ff48ca7c5db8eca492396eeccf3de2b6adf79ae862af61e90ff41acb95bda068b821a3a7fe11deda571656b662312b8e4e929541a6db9d4f1485b311d2d8391ca41467055923be25bdf7072199e4a53c3042e3220d8be0a3577af3e1d46fcc7c0a44e09185cac9d89ed44895cbfb9f0bbc89bd0e5648dc81cc9a080618beaad958a9bc46565061a0422888e1cdac896261ff5f6e165f25398b3dfe08b1385e1607af300d4c1d29407a94324ae23612d76ff0ddf002845586b6a6af05efaed3e0643d36942bea9ea6edc368f5700b6df916d54c6bb6f9e609311f0a40aacedc730dec60197eec4a92f6e4cd8b16c87ee6a64fbed9703d69b05ef5ad45ab8c4a5603fb9e2afeaee0fbc846d707257715abe62fb007f299b170ed1850a0a9523aa2ede9d5b2b1fb0be63e49f77a1e5fa24d7135eed49defa77cd7082adc0a736185e34e65e25a0cffb09fd0c26fd67ca5eb5a8b3963c602893a3e4ac5d9f7cf9e8970aed9bf722caaf47168c16338b684745471c1a631f1177ecde42ea16e6f55a78a4667627bdb0e604a1fdcb6bf91f669e09b2c93013da0015a749145158031abe5c77722869d0f48ca05a1976d632847478b18f975cce9a224b944b0609dd34177d2730569d5e49c7d431bb0252fe9b21dacaf3442735a033a902eba590b3295c522492fa06ef0841b20c89a8f9973a04d7331aa57320ef88eb0162c4f1e5a462569b98094ee17933c1e665cfbe8f6b4337ca608af010688b19b9f81aca5d399cbf22c935791070bc0bdc7ca315c72770981c93c053974a4f9991115b1518a567c51f9ef8208d7cee4e7db4bd367ffb54a8d5a4bb0f16bf8cbaad83a5dac1ea53414f7972ca2a71b63ad378517da764c810b873c5ed415bae89c246720e92f4ca5f819bfb800db6e95249a80e289eda43a2f981e3e192a22f5fd21bf9ef8be9a7e579075b6bf535e0861963b29cacc61eed8e974be674056c3bde7760729ef228c282c9eb43fa588767d5f10ac0fa98fdb34e0d95e4657b1267559246ecff9326bd9e2f594b4139c2bb371ec66d26da48514805f8ec5988bc2193989d2ddbf8b4f7d808db77072798cb10b085251e5ba46f359cc04ea74de39db24560bdfc96af16a00d1f33db7e45c2a810f9d1a9efa7f185dd38d4d9a482adafe72991dcf7063699b38284fcc7b89c72427ee304830a63b3b6a1cfbb936b4822d86c82dcdf3b0e8b858ea91ed243fa2b20db17357f4d4e42cfa20ee238433c44dd0d7428d643656be39376aca53f4d01632b6c326907294ccb79f6f8db276b000a504440fd0e2a011e21b2dd9b9f3b86d082c44d40915b7bb56883ff991a8ce3b9dfac8544d00c8885ba1595bb1cf8521103c9bae33a44dde6e9fcbae636c951ebd7001a733d642975ca45cb6a1c1033c08c65539e9dd886ce42334b57e00cd08977c988e536bfc4716fc8e0e628163a096fcfb14f7065866f64a9122a722c1717ba625a36d9cc9f8c391f976e221559b4975e581e70790ae53454d30e2747ad4ea0acfa0542cb847fe428dc1b568e3657e1c0cbe0cf39513f27a27484b2bafe3634638766d9a6fbbc058348ee5452aef296fcee2017056e15769f12aaebfcf246ea3951d23e6f187748b37e9f441fb9e8f2d59c996e60f92c372ac0fc3ed15f5c7944119a2f26c745eb0773e62aa420bd41d04095a5e4cebc2e387169554dbf2cab43aea181e1d4ee8093f5b6d3ed04353787114d5489804e73fc704445de3ec41f95bd8543bbe0d966f7b3a3387f725f1376da5e1637e50c575ce8facaef2b2daf174ffb8316e0e23a38682bddfa6f83252490a7d3c4570f58e4ce4d22078e9b7c0dc2da12f32f72b25e029991471d21d7b4fb57e927d934719f9ba9d677a79fa096f27edb0fa96330758e96ca5f6673bcc78743578bd17c6c3db1983ce927d385bcb87fd7a8412cb72fc90c50c36a835c52bf2cd60f42bb0aadd12c8c06970eaf92939e37b7128e49511d576c940dec179429f9c3c44d514b2257014cf307e279cfcda2d008137bb133f17998b113dd3f7ec71cfde2dd6914a79bde2f4c7c8c401daf7ba431695d664d0ab564816d9b44e0c3fbf0c3b076fc63cc39f318cb12a9605d54b3c06c13c41fa1b09146426a3052ffc5ae90875acf5fd2da0f3889c3a45473e888175607be34f7873551c0adf1fd57e056ffcc48663ad182b8c1b34e30ab6861b35c4a1225eea0ea457418916437f0fc1fefd9186e6c443863e332f522f12838bc129da47a3c0ab8ba0a383304f3348f5762deeb967ccc6fa39ae8de3d44adbd031cfc41454d24daaf77f296a2360b29e55e17a5d6c9593c3967da24e6b68898f8769c7cdba21cf341e5ba2e6d08b00418419d46e31c5f459f19e3ad99129a6bc548443179283dad90834be8a244af9ddb", 0x1000}}, 0x1006) syz_usb_disconnect(r15) syz_usb_connect(0x5, 0xfc7, &(0x7f00000066c0)={{0x12, 0x1, 0x110, 0xda, 0xfd, 0x14, 0x8, 0x19d2, 0x2, 0xf566, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb5, 0x4, 0x89, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x1, 0x6, 0xf, 0x7c, 0xfb, 0x5f, 0x3, [@generic={0x99, 0xb, "f1a3bcaf42ec2fec75d572614245fc7e2ff6ca93e4e919cd57d3843f2f9e4dd5f57d6bf1a09fd8c22aed4ddb5cf0a570bdf6ead541f8bdea33aabd0e9532e5c88438382722bc34b8ffc9401022107cb8d643466bfd503e70a11ef4006237d4a7e538e74b54eeb8a637451924ffa7a969131d0e02ceeb80825b2b5425139a46e13d126fa364111e1d14d0c904d863eb845689b1d9e10e71"}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0xbf, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x7, 0x7e, 0xa}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x80, 0x2, 0x98, [@generic={0x10, 0x11, "cfe23a765fe911cadfea19fd2175"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x0, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x4, 0x6, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xe, 0x5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x8, 0xe, 0xc}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0x6, 0x0, [@generic={0x41, 0x8, "fd930570f1894df906b085a9e65cc223c7c4246a7042c300fb239aeb314d828f4cadb1cb09b1f65af65521e5b51bd984ac915e707e6e6cdcf1866954bf0bea"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x0, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3b, 0x1, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x8}, @generic={0x22, 0x7, "f332f69a62c71930d7373d6147c5c99c11fdb7a9f3408a6ca252778882fad6eb"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x4c, 0x90, [@generic={0xb7, 0x24, "c7fc2aafa9c1faf49ce20a955abddc5b9e0698a11bb48e0cbbb97de235a65ae995f65fbb03750b0ee1fc46785feb84bb59fe70d4c6c3281eed8d83c498e139196e2ff6993dd065be77129ddac828965a3e8ad1d3e3194076b262329a8874422048ca832dcb559d758762e6767ebff25e884de002bb4f1e39876dcf0ed2138109d3b5f1ab215c85b101140b60689ec084cbb8fd5a29770ce1f56f2c1242eae4631d32f1cb1502f2651f386514176a118d72039d2859"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x40, 0x3, 0xa}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x9, 0x5, [@generic={0xe0, 0x11, "68cc305450c96f7e2c218a8ac21a7793e07c7c9f84bf49dd9aeaf65d100df17e600da6989efcd519b73401a6c4349f9fbed1185cb5a85cd1285495331dd7b6809059d6f303d99f8552c38db9ec04e1c6501022259d132cabf4a45ce13254610a809365b99bac890b15aa25a7ec3b9cdc940f9a6d08841750a44ec6ccd929f3ab3ac279660dcb3a3689a9c50ee37cecd40a9850f8c4c093f9ed16c8cd638a23f69a3a965b212c2d42184c8ccc7ba54faeb18452461b790db3d3019516e6728725ab9e57bc1ff06caceed7ddf126bb8cb81827a5e8976a70b7116d9fe95fbc"}, @generic={0x1a, 0x10, "56ae260a454cbc00dab6251863c51b8f42fdc09dfd8b45b6"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x4, 0x8, 0x85, [@generic={0x36, 0xa, "137316024cd879b4d12858a4d5d78e8f5ec54f8cdf8742bb0aab8928bf0a8ad64839f69a673e73053426d0244e2220632b3f70c3"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0x6, 0x5}}]}}, {{0x9, 0x4, 0x7b, 0x0, 0xe, 0xff, 0xbc, 0x91, 0x7, [@generic={0x58, 0x29, "5874320784f7c4fdc7f35b59b2a9f9fbf555d8738b169e4e8869ee2837b479b50281f5f44a609a143eddc22125b9a3966e2c9e4d602ad22977dcd751af13b7a53c83381b4154db0bdd5174569a051494dcf46fabd5fe"}], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0x6, 0xfa}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x80, 0x8f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x40}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc3}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x7, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x40, 0x10, 0x68}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0xb, 0xec, [@generic={0x45, 0x10, "77d39be5512bfcb58b4ce28c62b31385d50303e85ad9551b30c4fce57c869327e84b20ed0605ef7fff3b4971644992c176fb284e11eb2056357656c6ccd12e69a45a0b"}, @generic={0xa8, 0x8, "cf38513ae6e9faf05487091e762a1b13bc23f0a5a5e1df7f5eead11800fe21fdb11c513e8cefbcf6f999aeccdc06c926723fcc6b6a035e5b7998e83bbac1163811e64fb60379e902feff4c89a0cb19a9f350b5b3ee49dbc1a08c90a792976884e9f49949470bbcb709d77e5dcaef7c48295a05a98c95bf44dd812af24eb135b479eeb9b7f776c243b234b9b104863ed928d9fbe96ffbaafa06c4fd2cbfd1311ef7ada2a6f25c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x2, 0x7f, 0x4, [@generic={0x71, 0x10, "89e79a2853d8ac0c5f8b2aef5d26b217a00016d8544b0550c08764e49b3ee526029ae1e4eeaa1148ba7a73e4847d08fb3f40be4d3859308642dd9d63adcd8b46efb6668916794ef555040f1544e9be603aeb2875d32638dd5a5c3457d4c6b110f7baaa490423c9466827a1215078b2"}, @generic={0x19, 0xe, "416e57acb37339179f83b6ba82c4a8aa269d5c3b40f00d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x83, 0x8, 0x1, [@generic={0x16, 0x23, "72c91c45d89355893933bfae18bdc5dac8e5d561"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xd3c1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe5, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x0, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x4, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd0}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xb, 0xd1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}, @generic={0xbd, 0x23, "05c4d5495ebc02fe378b22904996c28d7fa428c358f2bb86ae9effc9e15b4a0e6f8c1ab5ab3127bc0967f8aeb0dfd7de4a0dde600ac1191b78f5a6962b050d4a56195aeb1cc5e755e58b6b3bd1d8e00eeb9e8d84575e8b342416aa7072914ce14dd5b1e6aead5a9b5980db213ff1fb3a031a57f353c963930f97bff8fef488688709280dae2f9d3cc50c15bfcb8205663cd259e70acb5f721950685ba33f1fcb3cc7d21f5a881bb652f8cb285495964fa803df6e9524740604fc44"}]}}]}}, {{0x9, 0x4, 0x8, 0x8, 0x5, 0xf6, 0x40, 0x2, 0x4, [@generic={0xdd, 0x4, "870dfa419cdcc3cc7dc243062cbe51b693b70f89e86ac44319fce3ab0a24f2b0cf6116c1865558bf841136aeb92bcfa8177135aa140d6899484f96bfa2394005c657c74e3b31a87a38a587c47aa68e2322551d399c9a889667b9c15b9a016834926b75b8752ed3833d86433561187dcd8d78c787f4e45eca088922ba1b1b268e15f01aafe9d6aabc580a0ea2d147651abea0517c82a1578f82d18c678fb3f7c42b04933864c918b371cec335608cce65d32fed1765ebf48d108c5a90ebcbfc63aa42ce5b77a3799f1477ff73b984c67fbd6c7af1495db891dbb0d8"}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0xff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0xf8, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0x6, 0x4, [@generic={0x5e, 0xb, "5abeac297f5098011ad8ed907da369a9d1175755bcb5eb97091d350a6705b6a18efebfdff170ecd1f218e774f93a05efcc9b2176702873b05bd72a21a12170dd1b9ad61ccead6f5d2c5042cbc1c76451a6a17f6e6a2e6f944909905b"}, @generic={0x90, 0x7, "26e77f6f2a2440030fb570ed580d5e57124bd61cf7af16600728036cfcba38243cac53f020e584f4d5e50ee20db2fb9efadba6646bf56553041e5fb4bab0a543b91a7466550d3c428ba68d79dc7fd032905976d22e522ccc9640bf466c983532ed61c8e1a52119979bccc35dfedfb93fe47da0f1bc2ee0fdc220652620634d72575c3e51599575e3cdb41410c295"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x8, 0x7f, [@generic={0xd3, 0xb, "465001b5a0588a4226fed32620421e2a9ea3af554d61303800e4b7c7b4202d4a8fef31df8db34742af99927d90eaf872b3b808db3239b59b3e506018e416a27f164eff4da88607b9fd3bf8a7361b3eedee269a15dbcfb5c00e943bd7991f13faeabf68c07f8f2a54c371d0eb27987a516df089fa8fd48c6e2fe968b0e72984af9da847b4d1186d3eca03ce0b947cd0e059e014abba45a67ba1a6635d43c2cdb1b6e1a01e8cec950496b24ec6f1c478afe45e71f09830bb23fbd73028120c191cdd668cde3b568282a1927f850147787406"}, @generic={0x8d, 0x23, "398e140fc88f0c5ca5c48b2ea321ccd42b6fd5534e658379c965a6d4c1d2bde9a1e783a259c4fcdb85a12feda4b46af1a9a697da8ac31ecdf82b11cff319e12f46b668321b55ca009fd0ba1dc799abb565255e816d0ac026d474925676951fa82f1b2dc35c3d8e211468d536f0e5df1b8fe96133bd0432fcb9b8a91fbfde5d75b2268fb154514854f4dd3c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xa, 0x2, 0x9, [@generic={0xa4, 0x2, "a93cdd58c6dc376c5070640c995a7398dba9f87263559d0d2c73e59a2a455f2caba28925d3876703d1c06b528d76994bed16e1896abea0dad9b70d61deed5269e060a72a2048f8910ef2c3756eebed51207d7d38e4f0f7accb7825be360c5ce99dae76aef56a1d05d29803323e68ae73545c2da24204a57a3119ba88ab136cf604aa4b6ac928c4725b98a749fe2ecd5ef34f6f4a9853096ac0e0ed5e513132418c38"}]}}]}}, {{0x9, 0x4, 0x7b, 0x5, 0xf, 0xa2, 0x97, 0x2b, 0x14, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x2, 0x94, [@generic={0x6c, 0x6, "6f5801aa01055b48d947d2cf7eefec04492a9dd41390796846362df8fd96782404520bd45d603a576a756b3f727654fb6a93a1cbc5e9fa9cf53ddc7fb6829e70b2b41f612c9617a1a0a97f938bfb530dfa75f9fb1f3b40dd61bff29a62ed91282bd11ca1ee0f5fe7ccb1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x768}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x0, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xb9}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0xa, 0xb, 0x6}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x9, 0xaa}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x4d, 0x0, 0x3, [@generic={0x7b, 0xc, "d174febea1483d3151fdd0dce0ef30499e508990d0b9c1eb2c72f92356125780b8edcd41b3fc446813b0c6d4e4d72aa81c1b5d24fd76228f3549b61d1893c3d2d2ba2035d51496aede6a6eee4aeb46b716d7a95e7a146ae55a59bb098e2606c5985776ebc9eb8f15b234e0560c6bf169987345aff19906fbbc"}, @generic={0xa1, 0x23, "72a6d1cc7dbeb3e5438c98f696dd9a4c677f2ad61374bd0ab2d5246cf0109aa890f8f3da2b27c594d128de7637092f391cf5d06152d65f4dcd787285162307482cfef5543478f755268ea8d2a6a2ff41718ea8c4bcd11972d2f3603233439e3b191a909484cdff0ea0a7f0d8a4462ab154e66ba2a8f603d61e65fd357dfcb91d3b570c634bba7c23fce62c34b1aaaf1b7b76031aea218503217cc0c8e4395a"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x9, 0x4, [@generic={0x9a, 0x21, "e8e1461e9a6c606cb40039bc894578f234e7b64c77b43f2d72f56a4158e6bcb111f7e49f587629d7f5bca99bb652d8e23946854ab0b84118ea26291f4d73e21c1334de79baf117468a1e96060c8a7f1acb9ec2f517068b15a61a924583675616ff3f0a6ee8e66675428090d7a412cfc5a64202fa851ebbcc1126876e01e22a0b08ade7ab3cc553368fadc835a99ca75cf87cfe7a2329c5d7"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x0, 0x50, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x7, 0x40, 0xff, [@generic={0xfb, 0x31, "9b51de94fa883272722d8051bdd28f948b7b20b6c8e5afe241d093c2be0298955b4d65b37513a316ecf0f288fe8aa9063dfd4fd65971a2840c3ba1c79d6043a29cd01812bbf2370ac5af7bf9818e19cbf1dfbf0a004af68ffd793731559c492661fda83729cadf5c3a3a0074d78bc5e5f58494657e8b3b7d2dbf5db91fd8cd41bf304c0eb7de69aa273b910ced899ad1f0ac6733f3606b7a9e51b89e80b13781c99ede80db6d3d0e1a03ca497c38d70f0863ba9a95a4d0321315f86e3ee2486617bfe813d24f281bb51bcc71433edda9cad79a735b7b8c04131e4d6d3fac981bcc825f92eafa45df8958149451b4baa2fd2fb2c14612e1025a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0xc4, 0x10, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3d, 0xcfd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1, 0x5, 0xc, [@generic={0xad, 0x23, "8ed39cc39710dcf703e848ec1e141ce8e942093f78debf56cbc1fdb5da613664c06e42d29021f04dec8ccbf358ebeed6be6448ed8e25a3fd129502a5377bd9e7c509b64ce46dc1dcbca5cab2bb16d687816642888ed230315871c97e0be734e48d66ed57d9b8c6bf6183c3ecb623f5ff1efcfae731532067572448bda8984fc0b7e41feec1f81dc6f762f9a9bbf15e09753da5980cc005f9a90500ceaa7a4a943c86a2a2d805578eb87b79"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x60}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0x81, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x3, 0xfa, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x7, 0x5a, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}]}}]}}]}}]}}, &(0x7f0000007840)={0xa, &(0x7f00000076c0)={0xa, 0x6, 0x310, 0x6, 0x9, 0xf4, 0xff, 0xfd}, 0x59, &(0x7f0000007700)={0x5, 0xf, 0x59, 0x5, [@generic={0x41, 0x10, 0x4, "509133ea5623245269e1b844e9c45e86abe186ca6c89fb26027995bda6a24fd3c78f8b81f47d3bc41ec960d38cc861f32f9f269deebbba8e1ba5bc6d6184"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x1, 0x7}, @ptm_cap={0x3}]}, 0x2, [{0x58, &(0x7f0000007780)=@string={0x58, 0x3, "00f207cb74fc4e4f794228fc5e296349d5636e62801c4dd264d0e3a0c03bed7f57714d40fd0fd037ee5bd99cefa40d688a3a5c4e9ef930c5e194fea96d6641e4ed03aff7d820e89a7cda7acb3b231792b6911d10e742"}}, {0x4, &(0x7f0000007800)=@lang_id={0x4}}]}) r16 = openat$incfs(r1, &(0x7f0000007880)='.log\x00', 0x301e41, 0x1) bind$inet(r16, &(0x7f00000078c0)={0x2, 0x4e21, @local}, 0x10) 1.410463951s ago: executing program 4 (id=2713): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001e40)={0x2, 0x2, 0x1, "5e95dddbfaa6280b6b0ea0c99a4a0686b1a21d2417d407755cdffba7e464a4f5", 0x34324948}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x5c13c2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) getpid() syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r4, &(0x7f0000000080), 0x1c) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000280)={0x20, r9, 0x0}) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) lseek(r0, 0x100000000, 0x3) r10 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "bb2a8cacc0c644f5", "dd5d58ded0c97fffdd3c23a8351aa016", "4dc85d6b", "1826eeedf6f902ba"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r11, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r12 = dup(r3) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000101, 0x0, 0x5}]}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001400)=""/166) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 990.907855ms ago: executing program 4 (id=2714): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x280a00, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002000)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x64}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c07540d", 0xd7}], 0x1}, 0x20004804) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 898.854283ms ago: executing program 4 (id=2715): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r1, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e00643c0200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 610.892367ms ago: executing program 4 (id=2716): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x9}}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x410400, 0x28) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0x12, r2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') execveat$binfmt(r3, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x800) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x70a80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r4, 0xd6baf000) mremap(&(0x7f00001cd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000880)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="203caa000000aa010e17464f395c3e83b601df62e644d9422916bb3a31758b8d898714fc0b45e373ee5bc60f8c0f5baf3226980a82a5e1972f6e8b1edbd1d59e20bd0278762f23f0beb67a9a4e150aa9f727f615a56d18a8dcae3b430040f30900000000000000e075ef589e34925f203c78002bf2d51ae0e87b312b92c71766d48412ada5fdb6b49c088c0bbeb4579b2178480bd30881979101002da40bea72fcd57570860b3d6da551000000000000"], &(0x7f0000000480)=ANY=[@ANYBLOB="00035a8edb450400000004030708"], &(0x7f0000000dc0)=ANY=[@ANYBLOB="000f31000000050f3100041410040f64c7f3b683c1f078ef641fd7af14482efc8f1b3ebd4c8372ff030a1003000d00398002187606"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x1, 0x9, 0x8, "2dda16ad", "17f6caba"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x8, 0xb4, 0x0, 0x34, 0x8001}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="201518000000e5535a9c9cb4d2b614bbda2b9808577f65d78359345714bb"], &(0x7f0000000900)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x92d}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "8ffc"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "12ea"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x5}}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) r8 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) r9 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) close_range(r8, r9, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x2, "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", 0xd, 0x36, 0xc0, 0x81, 0x2, 0x7, 0x40}, r7}}, 0x128) r10 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x6a, 0x4, 0x4, 0x4) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000) 0s ago: executing program 2 (id=2717): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfe05, 0xa83) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lsm_list_modules(0x0, 0x0, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): e [ 444.447578][ T5905] hackrf 6-1:0.214: Could not detect board [ 444.453645][ T5905] hackrf 6-1:0.214: probe with driver hackrf failed with error -71 [ 444.461999][ T10] m920x_read = error: -19 [ 444.467780][ T5905] usb 6-1: USB disconnect, device number 3 [ 444.473955][ T10] dvb-usb: error while querying for an remote control event. [ 444.598493][ T10] m920x_read = error: -19 [ 444.602910][ T10] dvb-usb: error while querying for an remote control event. [ 444.726775][ T5905] m920x_read = error: -19 [ 444.731301][ T5905] dvb-usb: error while querying for an remote control event. [ 444.855151][ T5905] m920x_read = error: -19 [ 444.861627][ T5905] dvb-usb: error while querying for an remote control event. [ 444.894529][T13298] netlink: 'syz.4.2253': attribute type 16 has an invalid length. [ 444.903893][T13298] netlink: 'syz.4.2253': attribute type 3 has an invalid length. [ 444.913069][T13298] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2253'. [ 444.983384][ T5905] m920x_read = error: -19 [ 444.987820][ T5905] dvb-usb: error while querying for an remote control event. [ 445.049548][T13300] fuse: Unknown parameter '0x0000000000000004' [ 445.067246][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2254'. [ 445.113001][ T5905] m920x_read = error: -19 [ 445.117411][ T5905] dvb-usb: error while querying for an remote control event. [ 445.250981][ T5905] m920x_read = error: -19 [ 445.256927][ T5905] dvb-usb: error while querying for an remote control event. [ 445.391856][ T5905] m920x_read = error: -19 [ 445.398359][ T5905] dvb-usb: error while querying for an remote control event. [ 445.511198][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.521771][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.530095][ T5905] m920x_read = error: -19 [ 445.542724][ T5905] dvb-usb: error while querying for an remote control event. [ 445.667598][T13284] m920x_read = error: -19 [ 445.677115][T13284] dvb-usb: error while querying for an remote control event. [ 445.817275][ T5905] m920x_read = error: -19 [ 445.836640][ T5905] dvb-usb: error while querying for an remote control event. [ 445.967676][T13284] m920x_read = error: -19 [ 445.972088][T13284] dvb-usb: error while querying for an remote control event. [ 446.009346][T13320] /dev/rnullb0: Can't open blockdev [ 446.108628][T13284] m920x_read = error: -19 [ 446.113216][T13284] dvb-usb: error while querying for an remote control event. [ 446.257496][T13284] m920x_read = error: -19 [ 446.261893][T13284] dvb-usb: error while querying for an remote control event. [ 446.285451][T13344] /dev/rnullb0: Can't open blockdev [ 446.345069][T13352] netlink: 'syz.5.2270': attribute type 6 has an invalid length. [ 446.394452][T13284] m920x_read = error: -19 [ 446.409273][T13284] dvb-usb: error while querying for an remote control event. [ 446.447474][T13356] /dev/rnullb0: Can't open blockdev [ 446.481928][T13358] /dev/rnullb0: Can't open blockdev [ 446.533681][T13284] m920x_read = error: -19 [ 446.545213][T13284] dvb-usb: error while querying for an remote control event. [ 446.672818][ T5905] m920x_read = error: -19 [ 446.682902][ T5905] dvb-usb: error while querying for an remote control event. [ 446.787289][T13369] /dev/rnullb0: Can't open blockdev [ 446.811467][ T5905] m920x_read = error: -19 [ 446.820598][ T5905] dvb-usb: error while querying for an remote control event. [ 446.909536][T13375] usb usb6: usbfs: process 13375 (syz.2.2278) did not claim interface 8 before use [ 446.971802][ T5905] m920x_read = error: -19 [ 446.976390][ T5905] dvb-usb: error while querying for an remote control event. [ 446.990479][T13376] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2278'. [ 447.052068][T13376] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2278'. [ 447.122040][ T5905] m920x_read = error: -19 [ 447.135419][ T5905] dvb-usb: error while querying for an remote control event. [ 447.171374][T13381] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2280'. [ 447.272946][ T10] m920x_read = error: -19 [ 447.277483][ T10] dvb-usb: error while querying for an remote control event. [ 447.399397][ T10] m920x_read = error: -19 [ 447.403804][ T10] dvb-usb: error while querying for an remote control event. [ 447.559830][ T10] m920x_read = error: -19 [ 447.566505][ T10] dvb-usb: error while querying for an remote control event. [ 447.730794][ T5905] m920x_read = error: -19 [ 447.735217][ T5905] dvb-usb: error while querying for an remote control event. [ 447.860415][ T5905] m920x_read = error: -19 [ 447.869075][ T5905] dvb-usb: error while querying for an remote control event. [ 447.897362][T13417] /dev/rnullb0: Can't open blockdev [ 447.998234][ T10] m920x_read = error: -19 [ 448.002721][ T10] dvb-usb: error while querying for an remote control event. [ 448.080436][T13435] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 448.092322][T13436] /dev/rnullb0: Can't open blockdev [ 448.101070][T13435] /dev/rnullb0: Can't open blockdev [ 448.126419][ T10] m920x_read = error: -19 [ 448.132011][ T10] dvb-usb: error while querying for an remote control event. [ 448.162668][T13442] 9p: Bad value for 'rfdno' [ 448.246731][T13446] /dev/sg0: Can't lookup blockdev [ 448.266954][ T5905] m920x_read = error: -19 [ 448.271433][ T5905] dvb-usb: error while querying for an remote control event. [ 448.318971][ T951] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 448.404997][ T5905] m920x_read = error: -19 [ 448.409428][ T5905] dvb-usb: error while querying for an remote control event. [ 448.430592][T13458] /dev/rnullb0: Can't open blockdev [ 448.445256][T13459] /dev/rnullb0: Can't open blockdev [ 448.479230][ T951] usb 6-1: Using ep0 maxpacket: 8 [ 448.488763][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 448.531287][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.543282][ T5905] m920x_read = error: -19 [ 448.547752][ T5905] dvb-usb: error while querying for an remote control event. [ 448.562690][ T951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.595053][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 448.613108][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.613384][ T951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 448.681952][ T951] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 448.694628][ T10] m920x_read = error: -19 [ 448.699019][ T10] dvb-usb: error while querying for an remote control event. [ 448.754468][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.773575][T13476] /dev/rnullb0: Can't open blockdev [ 448.784104][ T951] usb 6-1: config 0 descriptor?? [ 448.803033][T13433] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 448.842755][ T5905] m920x_read = error: -19 [ 448.847632][ T5905] dvb-usb: error while querying for an remote control event. [ 448.992734][T13284] m920x_read = error: -19 [ 448.997541][T13284] dvb-usb: error while querying for an remote control event. [ 449.152705][T13284] m920x_read = error: -19 [ 449.157205][T13284] dvb-usb: error while querying for an remote control event. [ 449.281002][ T951] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 449.306055][T13284] m920x_read = error: -19 [ 449.310535][T13284] dvb-usb: error while querying for an remote control event. [ 449.330907][T13498] 9pnet: p9_errstr2errno: server reported unknown error @ [ 449.384523][ T51] Bluetooth: hci0: Malformed Event: 0x2f [ 449.441394][T13284] m920x_read = error: -19 [ 449.442884][ T951] usb 3-1: device descriptor read/64, error -71 [ 449.455510][T13284] dvb-usb: error while querying for an remote control event. [ 449.580540][T13284] m920x_read = error: -19 [ 449.585388][ T5864] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 449.585793][ T5944] usb 6-1: USB disconnect, device number 4 [ 449.601841][T13284] dvb-usb: error while querying for an remote control event. [ 449.719466][T13284] m920x_read = error: -19 [ 449.729893][T13284] dvb-usb: error while querying for an remote control event. [ 449.761992][ T951] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 449.847534][ T10] m920x_read = error: -19 [ 449.851948][ T10] dvb-usb: error while querying for an remote control event. [ 449.911707][ T951] usb 3-1: device descriptor read/64, error -71 [ 449.976121][ T10] m920x_read = error: -19 [ 449.983852][ T10] dvb-usb: error while querying for an remote control event. [ 450.041418][ T951] usb usb3-port1: attempt power cycle [ 450.125673][ T10] m920x_read = error: -19 [ 450.130846][ T10] dvb-usb: error while querying for an remote control event. [ 450.265112][ T10] m920x_read = error: -19 [ 450.269513][ T10] dvb-usb: error while querying for an remote control event. [ 450.392752][ T10] m920x_read = error: -19 [ 450.397236][ T10] dvb-usb: error while querying for an remote control event. [ 450.405270][T13547] /dev/rnullb0: Can't open blockdev [ 450.446232][ T951] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 450.482907][ T951] usb 3-1: device descriptor read/8, error -71 [ 450.521236][ T5905] m920x_read = error: -19 [ 450.528294][ T5905] dvb-usb: error while querying for an remote control event. [ 450.660958][ T5905] m920x_read = error: -19 [ 450.665365][ T5905] dvb-usb: error while querying for an remote control event. [ 450.739143][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2325'. [ 450.748434][ T951] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 450.778655][ T951] usb 3-1: device descriptor read/8, error -71 [ 450.783690][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.793915][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.801929][ T5905] m920x_read = error: -19 [ 450.806380][ T5905] dvb-usb: error while querying for an remote control event. [ 450.897209][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.909710][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.919567][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.921621][ T951] usb usb3-port1: unable to enumerate USB device [ 450.936396][ T5905] m920x_read = error: -19 [ 450.941149][ T5905] dvb-usb: error while querying for an remote control event. [ 450.954537][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.067807][ T5905] m920x_read = error: -19 [ 451.081774][ T5905] dvb-usb: error while querying for an remote control event. [ 451.205659][ T5905] m920x_read = error: -19 [ 451.210280][ T5905] dvb-usb: error while querying for an remote control event. [ 451.333904][T13593] /dev/rnullb0: Can't open blockdev [ 451.339275][ T5905] m920x_read = error: -19 [ 451.351132][ T5905] dvb-usb: error while querying for an remote control event. [ 451.472569][ T5905] m920x_read = error: -19 [ 451.477165][ T5905] dvb-usb: error while querying for an remote control event. [ 451.627523][ T5905] m920x_read = error: -19 [ 451.636980][ T5905] dvb-usb: error while querying for an remote control event. [ 451.771898][ T5905] m920x_read = error: -19 [ 451.776432][ T5905] dvb-usb: error while querying for an remote control event. [ 451.910818][ T5905] m920x_read = error: -19 [ 451.920156][ T5905] dvb-usb: error while querying for an remote control event. [ 452.043571][ T5905] m920x_read = error: -19 [ 452.048104][ T5905] dvb-usb: error while querying for an remote control event. [ 452.127963][T13621] program syz.4.2336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.178575][ T5905] m920x_read = error: -19 [ 452.184479][ T5905] dvb-usb: error while querying for an remote control event. [ 452.327890][ T5905] m920x_read = error: -19 [ 452.337760][ T5905] dvb-usb: error while querying for an remote control event. [ 452.405963][T13633] /dev/rnullb0: Can't open blockdev [ 452.460138][ T5905] m920x_read = error: -19 [ 452.466049][ T5905] dvb-usb: error while querying for an remote control event. [ 452.479410][T13634] overlayfs: upper fs does not support tmpfile. [ 452.487120][T13634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2340'. [ 452.496691][T13633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2340'. [ 452.584357][ T5905] m920x_read = error: -19 [ 452.595032][ T5905] dvb-usb: error while querying for an remote control event. [ 452.723370][ T5905] m920x_read = error: -19 [ 452.727917][ T5905] dvb-usb: error while querying for an remote control event. [ 452.851577][ T5905] m920x_read = error: -19 [ 452.856006][ T5905] dvb-usb: error while querying for an remote control event. [ 452.979900][ T5905] m920x_read = error: -19 [ 452.984314][ T5905] dvb-usb: error while querying for an remote control event. [ 453.004861][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803f553c00: rx timeout, send abort [ 453.013238][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803f553c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 453.028073][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803f553400: rx timeout, send abort [ 453.043530][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803f553400: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 453.215463][ T5944] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 453.224286][T13646] binder: 13642:13646 ioctl c0306201 200000000080 returned -14 [ 453.407506][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 453.416783][ T5944] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 453.425563][ T5944] usb 3-1: config 0 has no interface number 0 [ 453.438270][ T5944] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.463641][ T5944] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.485191][ T5944] usb 3-1: config 0 interface 85 has no altsetting 0 [ 453.504062][ T5944] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 453.514607][ T951] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 453.528666][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.546825][ T5944] usb 3-1: Product: syz [ 453.556845][ T5944] usb 3-1: Manufacturer: syz [ 453.566996][ T5944] usb 3-1: SerialNumber: syz [ 453.581425][ T5944] usb 3-1: config 0 descriptor?? [ 453.678222][ T951] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 453.691030][ T951] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 453.709288][ T951] usb 6-1: Product: syz [ 453.718358][ T951] usb 6-1: SerialNumber: syz [ 453.733979][ T951] usb 6-1: config 0 descriptor?? [ 453.972573][ T951] hso 6-1:0.0: Failed to find BULK IN ep [ 454.059729][ T5905] m920x_read = error: -19 [ 454.064128][ T5905] dvb-usb: error while querying for an remote control event. [ 454.196439][ T7764] usb 6-1: USB disconnect, device number 5 [ 454.223900][ T5905] m920x_read = error: -19 [ 454.236567][ T5905] dvb-usb: error while querying for an remote control event. [ 454.326475][T13660] /dev/rnullb0: Can't open blockdev [ 454.338075][ T30] audit: type=1800 audit(1756478056.752:20): pid=13658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2349" name="bus" dev="tmpfs" ino=1289 res=0 errno=0 [ 454.369751][ T5905] m920x_read = error: -19 [ 454.378868][ T5905] dvb-usb: error while querying for an remote control event. [ 454.426609][ T5864] Bluetooth: hci1: command tx timeout [ 454.458753][T13663] netlink: 'syz.4.2350': attribute type 4 has an invalid length. [ 454.467964][T13663] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2350'. [ 454.567935][ T5905] m920x_read = error: -19 [ 454.572351][ T5905] dvb-usb: error while querying for an remote control event. [ 454.711745][ T5905] m920x_read = error: -19 [ 454.720369][ T5905] dvb-usb: error while querying for an remote control event. [ 454.757629][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059949c00: rx timeout, send abort [ 454.850836][ T5905] m920x_read = error: -19 [ 454.855383][ T5905] dvb-usb: error while querying for an remote control event. [ 454.991012][ T5905] m920x_read = error: -19 [ 454.995439][ T5905] dvb-usb: error while querying for an remote control event. [ 455.064760][ T7764] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 455.128826][ T5905] m920x_read = error: -19 [ 455.133226][ T5905] dvb-usb: error while querying for an remote control event. [ 455.229466][ T7764] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 455.239177][ T7764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.258655][ T7764] usb 6-1: config 0 descriptor?? [ 455.266414][ T7764] cp210x 6-1:0.0: cp210x converter detected [ 455.278762][ T5905] m920x_read = error: -19 [ 455.283169][ T5905] dvb-usb: error while querying for an remote control event. [ 455.292222][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059949400: rx timeout, send abort [ 455.300520][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059949c00: abort rx timeout. Force session deactivation [ 455.420226][ T5905] m920x_read = error: -19 [ 455.426933][ T5905] dvb-usb: error while querying for an remote control event. [ 455.556523][ T5905] m920x_read = error: -19 [ 455.560968][ T5905] dvb-usb: error while querying for an remote control event. [ 455.577250][T13676] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 455.695565][ T5905] m920x_read = error: -19 [ 455.700292][ T5905] dvb-usb: error while querying for an remote control event. [ 455.700792][T13672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.723901][T13672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.750616][T13672] /dev/rnullb0: Can't open blockdev [ 455.780224][ T7764] usb 6-1: cp210x converter now attached to ttyUSB0 [ 455.817079][ T7764] usb 6-1: USB disconnect, device number 6 [ 455.834261][ T5905] m920x_read = error: -19 [ 455.838748][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059949400: abort rx timeout. Force session deactivation [ 455.870648][ T7764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 455.888817][ T5905] dvb-usb: error while querying for an remote control event. [ 455.897826][ T7764] cp210x 6-1:0.0: device disconnected [ 456.006784][ T5905] m920x_read = error: -19 [ 456.011185][ T5905] dvb-usb: error while querying for an remote control event. [ 456.108351][ T5944] appletouch 3-1:0.85: Failed to request geyser raw mode [ 456.128850][ T5944] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 456.131550][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.147243][ T5905] m920x_read = error: -19 [ 456.151622][ T5905] dvb-usb: error while querying for an remote control event. [ 456.171219][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.174131][ T5944] usb 3-1: USB disconnect, device number 43 [ 456.198683][T13695] gfs2: gfs2 mount does not exist [ 456.205644][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.217012][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.284647][ T5905] m920x_read = error: -19 [ 456.290406][ T5905] dvb-usb: error while querying for an remote control event. [ 456.411629][ T10] m920x_read = error: -19 [ 456.416105][ T10] dvb-usb: error while querying for an remote control event. [ 456.550588][ T10] m920x_read = error: -19 [ 456.554996][ T10] dvb-usb: error while querying for an remote control event. [ 456.678956][ T10] m920x_read = error: -19 [ 456.683382][ T10] dvb-usb: error while querying for an remote control event. [ 456.690872][ T5905] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 456.822012][ T10] m920x_read = error: -19 [ 456.826408][ T10] dvb-usb: error while querying for an remote control event. [ 456.845861][ T5905] usb 3-1: device descriptor read/64, error -71 [ 456.912425][T13720] binder: 13719:13720 ioctl c0306201 200000000040 returned -14 [ 456.985209][ T10] m920x_read = error: -19 [ 456.995640][ T10] dvb-usb: error while querying for an remote control event. [ 457.017117][T13721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.033230][T13721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.042164][T13721] kAFS: No cell specified [ 457.106461][ T5905] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 457.117133][T13284] m920x_read = error: -19 [ 457.121544][T13284] dvb-usb: error while querying for an remote control event. [ 457.189667][T13736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.199247][T13736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.209723][T13736] /dev/rnullb0: Can't open blockdev [ 457.245645][ T5905] usb 3-1: device descriptor read/64, error -71 [ 457.252069][T13284] m920x_read = error: -19 [ 457.256643][T13284] dvb-usb: error while querying for an remote control event. [ 457.277475][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 457.363331][ T5905] usb usb3-port1: attempt power cycle [ 457.374309][T13284] m920x_read = error: -19 [ 457.378682][T13284] dvb-usb: error while querying for an remote control event. [ 457.437838][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 457.444886][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 457.454076][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.463389][ T10] usb 6-1: config 0 descriptor?? [ 457.502375][ T9] m920x_read = error: -19 [ 457.506892][ T9] dvb-usb: error while querying for an remote control event. [ 457.630274][ T9] m920x_read = error: -19 [ 457.634723][ T9] dvb-usb: error while querying for an remote control event. [ 457.684285][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 457.692565][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 457.702547][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 457.709848][ T10] usb 6-1: media controller created [ 457.724412][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.732845][ T5905] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 457.758676][ T9] m920x_read = error: -19 [ 457.763395][ T9] dvb-usb: error while querying for an remote control event. [ 457.772776][ T5905] usb 3-1: device descriptor read/8, error -71 [ 457.887939][ T9] m920x_read = error: -19 [ 457.892364][ T9] dvb-usb: error while querying for an remote control event. [ 458.015304][ T9] m920x_read = error: -19 [ 458.020229][ T9] dvb-usb: error while querying for an remote control event. [ 458.036610][ T5905] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 458.071554][ T5905] usb 3-1: device descriptor read/8, error -71 [ 458.137558][T13753] /dev/rnullb0: Can't open blockdev [ 458.144240][ T9] m920x_read = error: -19 [ 458.149860][ T9] dvb-usb: error while querying for an remote control event. [ 458.209215][ T5905] usb usb3-port1: unable to enumerate USB device [ 458.230332][ T10] az6027: usb out operation failed. (-71) [ 458.236715][ T10] az6027: usb out operation failed. (-71) [ 458.242875][ T10] stb0899_attach: Driver disabled by Kconfig [ 458.249298][ T10] az6027: no front-end attached [ 458.249298][ T10] [ 458.259034][ T10] az6027: usb out operation failed. (-71) [ 458.265778][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 458.275543][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 458.303981][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 458.312978][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 458.327959][ T10] usb 6-1: USB disconnect, device number 7 [ 458.338035][ T9] m920x_read = error: -19 [ 458.342404][ T9] dvb-usb: error while querying for an remote control event. [ 458.363249][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 458.377690][T13756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.485561][ T9] m920x_read = error: -19 [ 458.490803][ T9] dvb-usb: error while querying for an remote control event. [ 458.613893][ T9] m920x_read = error: -19 [ 458.618335][ T9] dvb-usb: error while querying for an remote control event. [ 458.743916][ T9] m920x_read = error: -19 [ 458.748367][ T9] dvb-usb: error while querying for an remote control event. [ 458.872078][ T9] m920x_read = error: -19 [ 458.876547][ T9] dvb-usb: error while querying for an remote control event. [ 458.998686][ T10] m920x_read = error: -19 [ 459.003110][ T10] dvb-usb: error while querying for an remote control event. [ 459.124678][T13755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.131129][T13755] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 459.137230][T13755] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 459.143723][ T10] m920x_read = error: -19 [ 459.148193][ T10] dvb-usb: error while querying for an remote control event. [ 459.150484][T13755] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 459.162660][T13755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.168652][T13755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.175648][T13755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.266061][ T10] m920x_read = error: -19 [ 459.270490][ T10] dvb-usb: error while querying for an remote control event. [ 459.394309][ T10] m920x_read = error: -19 [ 459.398786][ T10] dvb-usb: error while querying for an remote control event. [ 459.463850][T13766] QAT: Device 253 not found [ 459.522753][ T10] m920x_read = error: -19 [ 459.534121][T13770] /dev/rnullb0: Can't open blockdev [ 459.585961][T13773] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 459.586629][ T10] dvb-usb: error while querying for an remote control event. [ 459.594888][T13773] /dev/rnullb0: Can't open blockdev [ 459.708403][T13775] sctp: [Deprecated]: syz.2.2386 (pid 13775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.708403][T13775] Use struct sctp_sack_info instead [ 459.714767][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.737648][ T10] m920x_read = error: -19 [ 459.742035][ T10] dvb-usb: error while querying for an remote control event. [ 459.752531][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.865094][ T9] m920x_read = error: -19 [ 459.869519][ T9] dvb-usb: error while querying for an remote control event. [ 459.993359][ T9] m920x_read = error: -19 [ 459.997806][ T9] dvb-usb: error while querying for an remote control event. [ 460.046416][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 460.131953][ T9] m920x_read = error: -19 [ 460.137665][ T9] dvb-usb: error while querying for an remote control event. [ 460.225954][ T10] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 460.249124][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 460.272536][ T9] m920x_read = error: -19 [ 460.288151][ T9] dvb-usb: error while querying for an remote control event. [ 460.301643][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.334525][ T10] usb 3-1: config 0 has no interfaces? [ 460.350943][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 460.411135][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.422926][ T9] m920x_read = error: -19 [ 460.427304][ T9] dvb-usb: error while querying for an remote control event. [ 460.499006][ T5864] Bluetooth: hci0: command 0x0401 tx timeout [ 460.505370][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.536671][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.633158][ T10] usb 3-1: config 0 descriptor?? [ 460.752042][ T10] m920x_read = error: -19 [ 460.756518][ T10] dvb-usb: error while querying for an remote control event. [ 460.781780][T13810] netlink: 456 bytes leftover after parsing attributes in process `syz.5.2396'. [ 460.815173][T13810] /dev/rnullb0: Can't open blockdev [ 460.858046][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.874064][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.883523][ T10] m920x_read = error: -19 [ 460.895181][ T10] dvb-usb: error while querying for an remote control event. [ 460.920477][ T10] usb 3-1: USB disconnect, device number 48 [ 461.020278][ T9] m920x_read = error: -19 [ 461.033050][ T9] dvb-usb: error while querying for an remote control event. [ 461.089211][T13817] /dev/rnullb0: Can't open blockdev [ 461.158259][ T10] m920x_read = error: -19 [ 461.162875][ T10] dvb-usb: error while querying for an remote control event. [ 461.255862][T13820] /dev/rnullb0: Can't open blockdev [ 461.297226][ T10] m920x_read = error: -19 [ 461.301683][ T10] dvb-usb: error while querying for an remote control event. [ 461.350625][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.356670][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 461.425522][ T10] m920x_read = error: -19 [ 461.434056][ T10] dvb-usb: error while querying for an remote control event. [ 461.553792][ T10] m920x_read = error: -19 [ 461.558211][ T10] dvb-usb: error while querying for an remote control event. [ 461.588853][T13834] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 461.614256][T13835] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 461.639294][T13835] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2405'. [ 461.663823][T13834] batman_adv: batadv0: Adding interface: team0 [ 461.682069][ T9] m920x_read = error: -19 [ 461.686454][ T9] dvb-usb: error while querying for an remote control event. [ 461.692069][T13834] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.726971][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.737713][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.751471][T13839] netlink: 'syz.4.2407': attribute type 16 has an invalid length. [ 461.760349][T13839] netlink: 'syz.4.2407': attribute type 2 has an invalid length. [ 461.770687][T13839] netlink: 'syz.4.2407': attribute type 2 has an invalid length. [ 461.779320][T13839] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2407'. [ 461.789221][T13834] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 461.808985][T13839] /dev/rnullb0: Can't open blockdev [ 461.831074][T13835] team0: entered promiscuous mode [ 461.836320][ T9] m920x_read = error: -19 [ 461.840676][ T9] dvb-usb: error while querying for an remote control event. [ 461.848263][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 461.856676][T13835] team_slave_0: entered promiscuous mode [ 461.862868][T13835] team_slave_1: entered promiscuous mode [ 461.871825][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.884256][T13835] batman_adv: batadv0: Interface activated: team0 [ 461.891354][T13835] batman_adv: batadv0: Interface deactivated: team0 [ 461.899635][T13835] batman_adv: batadv0: Removing interface: team0 [ 461.907606][T13835] bridge0: port 3(team0) entered blocking state [ 461.914796][T13835] bridge0: port 3(team0) entered disabled state [ 461.921531][T13835] team0: entered allmulticast mode [ 461.926844][T13835] team_slave_0: entered allmulticast mode [ 461.933294][T13835] team_slave_1: entered allmulticast mode [ 461.941491][T13835] bridge0: port 3(team0) entered blocking state [ 461.947879][T13835] bridge0: port 3(team0) entered forwarding state [ 461.970735][ T9] m920x_read = error: -19 [ 461.984918][ T9] dvb-usb: error while querying for an remote control event. [ 462.132653][ T5862] m920x_read = error: -19 [ 462.139593][ T5862] dvb-usb: error while querying for an remote control event. [ 462.182651][T13849] binder: 13847:13849 ioctl 4040534e 200000000640 returned -22 [ 462.270029][ T5862] m920x_read = error: -19 [ 462.274423][ T5862] dvb-usb: error while querying for an remote control event. [ 462.414266][ T5862] m920x_read = error: -19 [ 462.418763][ T5862] dvb-usb: error while querying for an remote control event. [ 462.543327][T13864] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2416'. [ 462.547985][ T5862] m920x_read = error: -19 [ 462.557110][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 462.569122][ T5862] dvb-usb: error while querying for an remote control event. [ 462.592444][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.624901][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.634993][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.657489][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.671390][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.686334][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.719119][ T5862] m920x_read = error: -19 [ 462.723616][ T5862] dvb-usb: error while querying for an remote control event. [ 462.768530][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.776765][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.784226][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.796328][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.803881][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.858005][ T5862] m920x_read = error: -19 [ 462.863229][ T5862] dvb-usb: error while querying for an remote control event. [ 462.986328][ T5862] m920x_read = error: -19 [ 462.990747][ T5862] dvb-usb: error while querying for an remote control event. [ 463.069002][ T5862] usb 1-1: USB disconnect, device number 35 [ 463.125302][ T9] m920x_read = error: -19 [ 463.129715][ T9] dvb-usb: error while querying for an remote control event. [ 463.229761][T13896] program syz.2.2424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.253796][ T9] m920x_read = error: -19 [ 463.259327][ T9] dvb-usb: error while querying for an remote control event. [ 463.278531][T13897] netlink: 'syz.5.2423': attribute type 4 has an invalid length. [ 463.285278][T13876] chnl_net:caif_netlink_parms(): no params data found [ 463.286525][T13897] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2423'. [ 463.313746][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.314726][ T9] kernel read not supported for file /binder/state (pid: 9 comm: kworker/0:0) [ 463.376267][T13897] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 463.386308][ T9] m920x_read = error: -19 [ 463.390736][ T9] dvb-usb: error while querying for an remote control event. [ 463.397315][T13897] /dev/rnullb0: Can't open blockdev [ 463.413134][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.465865][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.483987][T13876] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.493327][T13876] bridge_slave_0: entered allmulticast mode [ 463.504954][T13903] /dev/rnullb0: Can't open blockdev [ 463.512678][T13876] bridge_slave_0: entered promiscuous mode [ 463.520885][ T9] m920x_read = error: -19 [ 463.528854][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.561828][T13876] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.570981][T13876] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.579711][T13876] bridge_slave_1: entered allmulticast mode [ 463.587916][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.593961][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 463.613106][T13876] bridge_slave_1: entered promiscuous mode [ 463.647784][T13876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.662088][T13876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.701100][T13876] team0: Port device team_slave_0 added [ 463.712466][T13876] team0: Port device team_slave_1 added [ 463.751540][T13876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.759361][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.792349][T13876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.826457][ T9] dvb-usb: error while querying for an remote control event. [ 463.855963][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.880704][T13876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.888212][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.916155][T13876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.960241][ T5862] m920x_read = error: -19 [ 463.964700][ T5862] dvb-usb: error while querying for an remote control event. [ 463.988362][T13876] hsr_slave_0: entered promiscuous mode [ 463.996527][T13876] hsr_slave_1: entered promiscuous mode [ 464.003634][T13876] debugfs: 'hsr0' already exists in 'hsr' [ 464.009537][T13876] Cannot create hsr debugfs directory [ 464.087998][ T9] m920x_read = error: -19 [ 464.097323][ T9] dvb-usb: error while querying for an remote control event. [ 464.151880][ T59] bridge_slave_1: left allmulticast mode [ 464.160310][ T59] bridge_slave_1: left promiscuous mode [ 464.166814][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.185341][ T59] bridge_slave_0: left allmulticast mode [ 464.191328][ T59] bridge_slave_0: left promiscuous mode [ 464.197226][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.231565][ T9] m920x_read = error: -19 [ 464.246959][ T9] dvb-usb: error while querying for an remote control event. [ 464.376208][ T9] m920x_read = error: -19 [ 464.380624][ T9] dvb-usb: error while querying for an remote control event. [ 464.394908][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.407006][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.409697][T13923] /dev/rnullb0: Can't open blockdev [ 464.424366][ T59] bond0 (unregistering): Released all slaves [ 464.500146][ T59] tipc: Disabling bearer [ 464.505999][ T9] m920x_read = error: -19 [ 464.513050][ T59] tipc: Left network mode [ 464.517618][ T9] dvb-usb: error while querying for an remote control event. [ 464.643337][ T9] m920x_read = error: -19 [ 464.651254][ T9] dvb-usb: error while querying for an remote control event. [ 464.719434][T13929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2433'. [ 464.742760][T13929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2433'. [ 464.770172][T13929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2433'. [ 464.783866][ T9] m920x_read = error: -19 [ 464.789686][ T9] dvb-usb: error while querying for an remote control event. [ 464.953525][ T9] m920x_read = error: -19 [ 464.968946][ T9] dvb-usb: error while querying for an remote control event. [ 465.031412][ T5864] Bluetooth: hci3: command tx timeout [ 465.117229][ T9] m920x_read = error: -19 [ 465.140816][ T9] dvb-usb: error while querying for an remote control event. [ 465.323644][ T10] m920x_read = error: -19 [ 465.337612][ T10] dvb-usb: error while querying for an remote control event. [ 465.491751][ T5862] m920x_read = error: -19 [ 465.516225][ T5862] dvb-usb: error while querying for an remote control event. [ 465.644233][ T59] hsr_slave_0: left promiscuous mode [ 465.651234][ T5862] m920x_read = error: -19 [ 465.655725][ T5862] dvb-usb: error while querying for an remote control event. [ 465.672824][ T59] hsr_slave_1: left promiscuous mode [ 465.686911][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.694522][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.705844][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.729749][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.745233][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 465.759326][ T59] veth1_macvtap: left promiscuous mode [ 465.765005][ T59] veth0_macvtap: left promiscuous mode [ 465.772563][ T59] veth1_vlan: left promiscuous mode [ 465.799584][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 465.805760][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.816341][ T9] m920x_read = error: -19 [ 465.822319][ T9] dvb-usb: error while querying for an remote control event. [ 465.832898][T13956] /dev/rnullb0: Can't open blockdev [ 465.872729][ T5925] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 465.915559][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 465.927010][ T10] usb 6-1: descriptor type invalid, skip [ 465.934493][ T10] usb 6-1: config 0 has no interfaces? [ 465.945055][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.958790][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.966860][ T10] usb 6-1: Product: syz [ 465.968549][T13961] netlink: 'syz.4.2439': attribute type 40 has an invalid length. [ 465.971245][ T9] m920x_read = error: -19 [ 465.983463][ T10] usb 6-1: Manufacturer: syz [ 465.988085][ T10] usb 6-1: SerialNumber: syz [ 465.995428][ T9] dvb-usb: error while querying for an remote control event. [ 466.008610][ T10] usb 6-1: config 0 descriptor?? [ 466.015051][ T59] team0 (unregistering): Port device team_slave_1 removed [ 466.030842][ T59] team0 (unregistering): Port device team_slave_0 removed [ 466.039900][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 466.048430][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.059651][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.070700][ T5925] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 466.079906][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.089496][ T5925] usb 3-1: config 0 descriptor?? [ 466.118983][ T10] m920x_read = error: -19 [ 466.123940][ T10] dvb-usb: error while querying for an remote control event. [ 466.247171][ T10] m920x_read = error: -19 [ 466.251561][ T10] dvb-usb: error while querying for an remote control event. [ 466.264854][ T9] usb 6-1: USB disconnect, device number 9 [ 466.342560][T13876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.356292][T13876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.379748][T13876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.391846][T13876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 466.399086][ T10] m920x_read = error: -19 [ 466.403463][ T10] dvb-usb: error while querying for an remote control event. [ 466.524977][ T9] m920x_read = error: -19 [ 466.530370][ T9] dvb-usb: error while querying for an remote control event. [ 466.532361][T13876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.592691][T13876] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.596456][T13986] /dev/rnullb0: Can't open blockdev [ 466.617684][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.624863][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.636436][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.648514][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.657644][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.664802][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.673921][ T10] m920x_read = error: -19 [ 466.678975][ T10] dvb-usb: error while querying for an remote control event. [ 466.802930][ T9] m920x_read = error: -19 [ 466.816064][ T9] dvb-usb: error while querying for an remote control event. [ 466.830054][T13992] input: syz0 as /devices/virtual/input/input34 [ 466.955381][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 466.963429][ T9] m920x_read = error: -19 [ 466.970051][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 466.971966][ T9] dvb-usb: error while querying for an remote control event. [ 466.985706][ T5925] usb 3-1: USB disconnect, device number 50 [ 467.104206][T13876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.116449][ T9] m920x_read = error: -19 [ 467.120857][ T9] dvb-usb: error while querying for an remote control event. [ 467.161394][T13876] veth0_vlan: entered promiscuous mode [ 467.172126][T13876] veth1_vlan: entered promiscuous mode [ 467.199977][T13876] veth0_macvtap: entered promiscuous mode [ 467.211346][T13876] veth1_macvtap: entered promiscuous mode [ 467.245740][T13876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.259897][T13876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.267325][ T9] m920x_read = error: -19 [ 467.267347][ T9] dvb-usb: error while querying for an remote control event. [ 467.279508][ T5864] Bluetooth: hci3: command tx timeout [ 467.285505][ T951] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 467.303606][ T1325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.326914][ T1325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.357623][ T1325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.378520][ T1325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.391504][ T10] m920x_read = error: -19 [ 467.399009][ T10] dvb-usb: error while querying for an remote control event. [ 467.456392][ T951] usb 6-1: Using ep0 maxpacket: 16 [ 467.465170][ T951] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 467.475426][ T951] usb 6-1: config 0 has no interface number 0 [ 467.482634][ T951] usb 6-1: config 0 interface 10 has no altsetting 0 [ 467.491566][ T951] usb 6-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice= b.d6 [ 467.508603][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.516648][ T951] usb 6-1: Product: syz [ 467.526986][ T951] usb 6-1: Manufacturer: syz [ 467.531775][ T951] usb 6-1: SerialNumber: syz [ 467.540824][ T10] m920x_read = error: -19 [ 467.548775][ T951] usb 6-1: config 0 descriptor?? [ 467.553668][ T10] dvb-usb: error while querying for an remote control event. [ 467.570305][ T951] qmi_wwan 6-1:0.10: probe with driver qmi_wwan failed with error -22 [ 467.691775][ T10] m920x_read = error: -19 [ 467.703185][ T10] dvb-usb: error while querying for an remote control event. [ 467.777864][T14037] /dev/rnullb0: Can't open blockdev [ 467.801220][ T10] usb 6-1: USB disconnect, device number 10 [ 467.833651][ T9] m920x_read = error: -19 [ 467.839204][ T9] dvb-usb: error while querying for an remote control event. [ 467.961039][ T9] m920x_read = error: -19 [ 467.961064][ T9] dvb-usb: error while querying for an remote control event. [ 468.075132][ T10] m920x_read = error: -19 [ 468.075157][ T10] dvb-usb: error while querying for an remote control event. [ 468.193536][ T10] m920x_read = error: -19 [ 468.193562][ T10] dvb-usb: error while querying for an remote control event. [ 468.312732][ T10] m920x_read = error: -19 [ 468.312756][ T10] dvb-usb: error while querying for an remote control event. [ 468.427844][ T10] m920x_read = error: -19 [ 468.427868][ T10] dvb-usb: error while querying for an remote control event. [ 468.545429][ T9] m920x_read = error: -19 [ 468.545454][ T9] dvb-usb: error while querying for an remote control event. [ 468.562316][T14066] /dev/rnullb0: Can't open blockdev [ 468.663732][ T9] m920x_read = error: -19 [ 468.663758][ T9] dvb-usb: error while querying for an remote control event. [ 468.784141][ T9] m920x_read = error: -19 [ 468.803601][ T9] dvb-usb: error while querying for an remote control event. [ 468.853171][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 468.930560][ T9] m920x_read = error: -19 [ 468.937718][ T9] dvb-usb: error while querying for an remote control event. [ 469.069250][ T9] m920x_read = error: -19 [ 469.073768][ T9] dvb-usb: error while querying for an remote control event. [ 469.197575][ T9] m920x_read = error: -19 [ 469.201975][ T9] dvb-usb: error while querying for an remote control event. [ 469.219104][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 469.225736][ T5944] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 469.235720][ T5944] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 469.325796][ T9] m920x_read = error: -19 [ 469.330208][ T9] dvb-usb: error while querying for an remote control event. [ 469.454324][ T9] m920x_read = error: -19 [ 469.459220][ T9] dvb-usb: error while querying for an remote control event. [ 469.475804][ T5864] Bluetooth: hci3: command tx timeout [ 469.582511][ T9] m920x_read = error: -19 [ 469.586908][ T9] dvb-usb: error while querying for an remote control event. [ 469.721535][ T9] m920x_read = error: -19 [ 469.725925][ T9] dvb-usb: error while querying for an remote control event. [ 469.850008][ T9] m920x_read = error: -19 [ 469.855226][ T9] dvb-usb: error while querying for an remote control event. [ 469.895780][T14132] /dev/rnullb0: Can't open blockdev [ 469.978189][ T9] m920x_read = error: -19 [ 469.983503][ T9] dvb-usb: error while querying for an remote control event. [ 470.026806][T14142] Mount JFS Failure: -22 [ 470.031172][T14142] jfs_mount failed w/return code = -22 [ 470.116939][ T9] m920x_read = error: -19 [ 470.121331][ T9] dvb-usb: error while querying for an remote control event. [ 470.143723][T14153] /dev/rnullb0: Can't open blockdev [ 470.245517][ T9] m920x_read = error: -19 [ 470.249920][ T9] dvb-usb: error while querying for an remote control event. [ 470.384167][ T9] m920x_read = error: -19 [ 470.388591][ T9] dvb-usb: error while querying for an remote control event. [ 470.523221][ T9] m920x_read = error: -19 [ 470.527757][ T9] dvb-usb: error while querying for an remote control event. [ 470.651454][ T9] m920x_read = error: -19 [ 470.655908][ T9] dvb-usb: error while querying for an remote control event. [ 470.780397][ T9] m920x_read = error: -19 [ 470.784769][ T9] dvb-usb: error while querying for an remote control event. [ 470.908533][ T9] m920x_read = error: -19 [ 470.913000][ T9] dvb-usb: error while querying for an remote control event. [ 471.037816][ T9] m920x_read = error: -19 [ 471.042224][ T9] dvb-usb: error while querying for an remote control event. [ 471.165191][ T9] m920x_read = error: -19 [ 471.169567][ T9] dvb-usb: error while querying for an remote control event. [ 471.293351][ T9] m920x_read = error: -19 [ 471.297736][ T9] dvb-usb: error while querying for an remote control event. [ 471.422166][ T951] m920x_read = error: -19 [ 471.426528][ T951] dvb-usb: error while querying for an remote control event. [ 471.442590][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.442741][ T5944] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 471.454758][ T5944] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 471.550106][ T43] m920x_read = error: -19 [ 471.554472][ T43] dvb-usb: error while querying for an remote control event. [ 471.689594][ T951] m920x_read = error: -19 [ 471.693966][ T951] dvb-usb: error while querying for an remote control event. [ 471.701589][ T5864] Bluetooth: hci3: command tx timeout [ 471.816808][ T951] m920x_read = error: -19 [ 471.821175][ T951] dvb-usb: error while querying for an remote control event. [ 471.945095][ T951] m920x_read = error: -19 [ 471.949530][ T951] dvb-usb: error while querying for an remote control event. [ 472.074366][ T951] m920x_read = error: -19 [ 472.078767][ T951] dvb-usb: error while querying for an remote control event. [ 472.201732][ T43] m920x_read = error: -19 [ 472.206116][ T43] dvb-usb: error while querying for an remote control event. [ 472.331382][ T43] m920x_read = error: -19 [ 472.335789][ T43] dvb-usb: error while querying for an remote control event. [ 472.469999][ T43] m920x_read = error: -19 [ 472.474480][ T43] dvb-usb: error while querying for an remote control event. [ 472.597341][ T43] m920x_read = error: -19 [ 472.601719][ T43] dvb-usb: error while querying for an remote control event. [ 472.725905][ T43] m920x_read = error: -19 [ 472.730315][ T43] dvb-usb: error while querying for an remote control event. [ 472.853866][ T43] m920x_read = error: -19 [ 472.858240][ T43] dvb-usb: error while querying for an remote control event. [ 472.984821][ T9] m920x_read = error: -19 [ 472.989444][ T9] dvb-usb: error while querying for an remote control event. [ 473.110453][ T9] m920x_read = error: -19 [ 473.114875][ T9] dvb-usb: error while querying for an remote control event. [ 473.250284][ T9] m920x_read = error: -19 [ 473.254675][ T9] dvb-usb: error while querying for an remote control event. [ 473.389343][ T9] m920x_read = error: -19 [ 473.393723][ T9] dvb-usb: error while querying for an remote control event. [ 473.517951][ T9] m920x_read = error: -19 [ 473.522356][ T9] dvb-usb: error while querying for an remote control event. [ 473.644998][ T9] m920x_read = error: -19 [ 473.649395][ T9] dvb-usb: error while querying for an remote control event. [ 473.666368][ T5944] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 473.672479][ T5944] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 473.722642][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.732081][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.773488][ T9] m920x_read = error: -19 [ 473.778027][ T9] dvb-usb: error while querying for an remote control event. [ 473.789246][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.800924][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.916060][ T9] m920x_read = error: -19 [ 473.929398][ T9] dvb-usb: error while querying for an remote control event. [ 474.051243][ T9] m920x_read = error: -19 [ 474.051269][ T9] dvb-usb: error while querying for an remote control event. [ 474.160333][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 474.168739][ T9] m920x_read = error: -19 [ 474.173130][ T9] dvb-usb: error while querying for an remote control event. [ 474.203032][T14197] /dev/rnullb0: Can't open blockdev [ 474.307734][ T9] m920x_read = error: -19 [ 474.313519][ T9] dvb-usb: error while querying for an remote control event. [ 474.333884][ T43] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 474.350730][ T43] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 474.368315][ T43] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 474.379009][ T43] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 474.392237][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 474.401397][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.415065][T14179] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 474.430180][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.444601][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.457872][ T9] m920x_read = error: -19 [ 474.462318][ T9] dvb-usb: error while querying for an remote control event. [ 474.473863][T14207] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2472'. [ 474.599955][ T9] m920x_read = error: -19 [ 474.604353][ T9] dvb-usb: error while querying for an remote control event. [ 474.733969][T14179] /dev/rnullb0: Can't open blockdev [ 474.746188][ T9] m920x_read = error: -19 [ 474.750580][ T9] dvb-usb: error while querying for an remote control event. [ 474.760507][ T43] ath6kl: Failed to submit usb control message: -71 [ 474.767181][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 474.789003][ T43] ath6kl: Unable to send get target info: -71 [ 474.796460][ T43] ath6kl: Failed to init ath6kl core: -71 [ 474.804641][ T43] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 474.833311][ T43] usb 3-1: USB disconnect, device number 51 [ 474.875863][ T9] m920x_read = error: -19 [ 474.880804][ T9] dvb-usb: error while querying for an remote control event. [ 474.941993][T14229] /dev/rnullb0: Can't open blockdev [ 475.015563][ T9] m920x_read = error: -19 [ 475.020109][ T9] dvb-usb: error while querying for an remote control event. [ 475.152308][ T9] m920x_read = error: -19 [ 475.156725][ T9] dvb-usb: error while querying for an remote control event. [ 475.246633][T14252] kAFS: No cell specified [ 475.256695][T14252] /dev/rnullb0: Can't open blockdev [ 475.291313][ T9] m920x_read = error: -19 [ 475.293764][T14254] /dev/rnullb0: Can't open blockdev [ 475.295722][ T9] dvb-usb: error while querying for an remote control event. [ 475.430134][ T9] m920x_read = error: -19 [ 475.434531][ T9] dvb-usb: error while querying for an remote control event. [ 475.453693][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 475.579833][ T10] m920x_read = error: -19 [ 475.584226][ T10] dvb-usb: error while querying for an remote control event. [ 475.646309][ T43] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 475.657819][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.668757][ T43] usb 6-1: Product: syz [ 475.672985][ T43] usb 6-1: Manufacturer: syz [ 475.688984][ T43] usb 6-1: SerialNumber: syz [ 475.701832][ T43] r8152-cfgselector 6-1: Unknown version 0x0000 [ 475.711032][ T43] r8152-cfgselector 6-1: config 0 descriptor?? [ 475.719958][ T10] m920x_read = error: -19 [ 475.732205][ T10] dvb-usb: error while querying for an remote control event. [ 475.858149][ T10] m920x_read = error: -19 [ 475.862539][ T10] dvb-usb: error while querying for an remote control event. [ 475.947000][ T43] r8152-cfgselector 6-1: Needed 1 retries to read version [ 475.971332][ T43] r8152-cfgselector 6-1: Unknown version 0x4060 [ 475.981437][ T43] r8152-cfgselector 6-1: bad CDC descriptors [ 475.996839][ T10] m920x_read = error: -19 [ 476.002019][ T10] dvb-usb: error while querying for an remote control event. [ 476.084166][T14285] /dev/rnullb0: Can't open blockdev [ 476.146665][ T10] m920x_read = error: -19 [ 476.151058][ T10] dvb-usb: error while querying for an remote control event. [ 476.172119][T14248] /dev/rnullb0: Can't open blockdev [ 476.194704][ T43] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 476.274851][ T9] m920x_read = error: -19 [ 476.279240][ T9] dvb-usb: error while querying for an remote control event. [ 476.313452][T14309] /dev/rnullb0: Can't open blockdev [ 476.381083][T14317] /dev/rnullb0: Can't open blockdev [ 476.413815][ T9] m920x_read = error: -19 [ 476.418284][ T9] dvb-usb: error while querying for an remote control event. [ 476.437407][ T30] audit: type=1326 audit(1756478077.433:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.4.2506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fb7d8ebe9 code=0x0 [ 476.543297][ T9] m920x_read = error: -19 [ 476.552358][ T9] dvb-usb: error while querying for an remote control event. [ 476.691863][ T9] m920x_read = error: -19 [ 476.697759][ T9] dvb-usb: error while querying for an remote control event. [ 476.821538][ T9] m920x_read = error: -19 [ 476.846351][ T9] dvb-usb: error while querying for an remote control event. [ 476.981541][ T10] m920x_read = error: -19 [ 476.986275][ T10] dvb-usb: error while querying for an remote control event. [ 477.119258][ T10] m920x_read = error: -19 [ 477.123649][ T10] dvb-usb: error while querying for an remote control event. [ 477.226291][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 477.258239][ T10] m920x_read = error: -19 [ 477.262634][ T10] dvb-usb: error while querying for an remote control event. [ 477.316448][T14336] /dev/rnullb0: Can't open blockdev [ 477.401774][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 477.416422][ T10] m920x_read = error: -19 [ 477.440180][ T10] dvb-usb: error while querying for an remote control event. [ 477.453449][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 477.492237][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.509610][ T9] usb 6-1: Product: syz [ 477.518212][T14350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2514'. [ 477.527707][ T9] usb 6-1: Manufacturer: syz [ 477.533319][ T9] usb 6-1: SerialNumber: syz [ 477.543500][ T9] usb 6-1: config 0 descriptor?? [ 477.559151][T14350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 477.579002][ T10] m920x_read = error: -19 [ 477.583410][ T10] dvb-usb: error while querying for an remote control event. [ 477.707260][ T10] m920x_read = error: -19 [ 477.711667][ T10] dvb-usb: error while querying for an remote control event. [ 477.755429][T14360] /dev/rnullb0: Can't open blockdev [ 477.772863][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 477.832472][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 477.846634][ T10] m920x_read = error: -19 [ 477.853737][ T10] dvb-usb: error while querying for an remote control event. [ 477.995996][ T10] m920x_read = error: -19 [ 478.001197][ T10] dvb-usb: error while querying for an remote control event. [ 478.006863][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 478.043212][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.059532][ T43] usb 3-1: config 250 has an invalid interface number: 88 but max is 0 [ 478.079016][ T43] usb 3-1: config 250 has no interface number 0 [ 478.086932][ T43] usb 3-1: config 250 interface 88 has no altsetting 0 [ 478.096440][ T43] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9 [ 478.105886][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.114424][ T43] usb 3-1: Product: syz [ 478.118624][ T43] usb 3-1: Manufacturer: syz [ 478.123238][ T43] usb 3-1: SerialNumber: syz [ 478.135016][ T10] m920x_read = error: -19 [ 478.141366][ T10] dvb-usb: error while querying for an remote control event. [ 478.273906][ T10] m920x_read = error: -19 [ 478.278365][ T10] dvb-usb: error while querying for an remote control event. [ 478.356273][T14340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2511'. [ 478.366281][T14340] /dev/rnullb0: Can't open blockdev [ 478.431501][T14390] /dev/rnullb0: Can't open blockdev [ 478.458977][ T10] m920x_read = error: -19 [ 478.466261][ T10] dvb-usb: error while querying for an remote control event. [ 478.584485][ T10] m920x_read = error: -19 [ 478.588918][ T10] dvb-usb: error while querying for an remote control event. [ 478.622354][T14405] /dev/rnullb0: Can't open blockdev [ 478.745207][ T10] m920x_read = error: -19 [ 478.749654][ T10] dvb-usb: error while querying for an remote control event. [ 478.897247][T14410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.927394][ T10] m920x_read = error: -19 [ 478.935739][ T10] dvb-usb: error while querying for an remote control event. [ 478.947706][T14410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.086769][ T10] m920x_read = error: -19 [ 479.091985][ T10] dvb-usb: error while querying for an remote control event. [ 479.135514][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.158507][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.182127][ T10] m920x_read = error: -19 [ 480.186607][ T10] dvb-usb: error while querying for an remote control event. [ 480.269661][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 480.286448][ T9] usb 6-1: USB disconnect, device number 12 [ 482.292641][ T10] m920x_read = error: -19 [ 482.304909][ T10] dvb-usb: error while querying for an remote control event. [ 482.420691][ T43] qmi_wwan 3-1:250.88: bogus CDC Union: master=0, slave=0 [ 482.440554][ T5862] m920x_read = error: -19 [ 482.449074][ T5862] dvb-usb: error while querying for an remote control event. [ 482.449900][ T43] qmi_wwan 3-1:250.88: probe with driver qmi_wwan failed with error -22 [ 482.516623][ T43] usb 3-1: USB disconnect, device number 52 [ 482.528162][T14440] syzkaller1: entered promiscuous mode [ 482.546579][T14440] syzkaller1: entered allmulticast mode [ 482.592846][ T5862] m920x_read = error: -19 [ 482.597243][ T5862] dvb-usb: error while querying for an remote control event. [ 482.731939][ T5862] m920x_read = error: -19 [ 482.741021][ T5862] dvb-usb: error while querying for an remote control event. [ 482.893053][ T10] m920x_read = error: -19 [ 482.899758][ T10] dvb-usb: error while querying for an remote control event. [ 483.031254][ T10] m920x_read = error: -19 [ 483.036988][ T10] dvb-usb: error while querying for an remote control event. [ 483.045557][ T5862] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 483.106082][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 483.170146][ T10] m920x_read = error: -19 [ 483.174629][ T10] dvb-usb: error while querying for an remote control event. [ 483.212880][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 483.220289][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 483.233299][ T5862] usb 1-1: config 2 has an invalid interface number: 254 but max is 1 [ 483.243975][ T5862] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 483.256523][ T5862] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 483.265504][ T5862] usb 1-1: config 2 has no interface number 0 [ 483.273136][ T5862] usb 1-1: config 2 interface 254 altsetting 2 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 483.285943][ T5862] usb 1-1: config 2 interface 254 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.298504][ T10] m920x_read = error: -19 [ 483.303725][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.319907][ T10] dvb-usb: error while querying for an remote control event. [ 483.334034][ T5862] usb 1-1: config 2 interface 254 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 483.353916][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.378275][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.390395][ T5862] usb 1-1: config 2 interface 254 has no altsetting 0 [ 483.404025][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.422449][ T5862] usb 1-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=a9.71 [ 483.436417][ T9] usb 6-1: Product: syz [ 483.446679][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.462085][ T9] usb 6-1: Manufacturer: syz [ 483.466739][ T9] usb 6-1: SerialNumber: syz [ 483.471595][ T10] m920x_read = error: -19 [ 483.475964][ T10] dvb-usb: error while querying for an remote control event. [ 483.494702][ T5862] usb 1-1: Product: syz [ 483.501308][ T5862] usb 1-1: Manufacturer: syz [ 483.518553][ T5862] usb 1-1: SerialNumber: syz [ 483.608703][ T10] m920x_read = error: -19 [ 483.613153][ T10] dvb-usb: error while querying for an remote control event. [ 483.736901][ T10] m920x_read = error: -19 [ 483.741589][ T10] dvb-usb: error while querying for an remote control event. [ 483.793190][T14448] /dev/rnullb0: Can't open blockdev [ 483.817325][ T5862] em28xx 1-1:2.254: New device syz syz @ 480 Mbps (2040:8268, interface 254, class 254) [ 483.839331][ T5862] em28xx 1-1:2.254: Video interface 254 found: [ 483.865176][ T10] m920x_read = error: -19 [ 483.870104][ T10] dvb-usb: error while querying for an remote control event. [ 483.909769][ T5862] em28xx 1-1:2.254: unknown em28xx chip ID (0) [ 484.000102][ T10] m920x_read = error: -19 [ 484.004954][ T5862] em28xx 1-1:2.254: reading from i2c device at 0xa0 failed (error=-5) [ 484.017406][ T9] usb 6-1: 0:2 : does not exist [ 484.024012][ T10] dvb-usb: error while querying for an remote control event. [ 484.041027][ T5862] em28xx 1-1:2.254: board has no eeprom [ 484.750474][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 484.778145][T14479] /dev/rnullb0: Can't open blockdev [ 484.991854][ T10] m920x_read = error: -19 [ 484.996244][ T10] dvb-usb: error while querying for an remote control event. [ 485.095269][ T5862] em28xx 1-1:2.254: Identified as PCTV tripleStick (292e) (card=94) [ 485.103323][ T5862] em28xx 1-1:2.254: Currently, V4L2 is not supported on this model [ 485.112511][ T10] em28xx 1-1:2.254: Binding DVB extension [ 485.120719][ T10] em28xx 1-1:2.254: no endpoint for DVB mode and transfer type 0 [ 485.135969][ T9] usb 6-1: USB disconnect, device number 13 [ 485.142146][ T5862] usb 1-1: USB disconnect, device number 36 [ 485.148115][ T10] em28xx 1-1:2.254: failed to pre-allocate USB transfer buffers for DVB. [ 485.156661][ T10] em28xx 1-1:2.254: Registering input extension [ 485.164365][ T5862] em28xx 1-1:2.254: Disconnecting em28xx [ 485.173338][ T5862] em28xx 1-1:2.254: Closing input extension [ 485.201386][ T10] m920x_read = error: -19 [ 485.205781][ T10] dvb-usb: error while querying for an remote control event. [ 485.214237][ T5862] em28xx 1-1:2.254: Freeing device [ 485.257110][T10237] udevd[10237]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.340474][ T10] m920x_read = error: -19 [ 485.345097][ T10] dvb-usb: error while querying for an remote control event. [ 485.476204][ T5862] m920x_read = error: -19 [ 485.480681][ T5862] dvb-usb: error while querying for an remote control event. [ 485.597226][ T5862] m920x_read = error: -19 [ 485.601686][ T5862] dvb-usb: error while querying for an remote control event. [ 485.727585][ T5862] m920x_read = error: -19 [ 485.732048][ T5862] dvb-usb: error while querying for an remote control event. [ 485.853517][ T5862] m920x_read = error: -19 [ 485.857934][ T5862] dvb-usb: error while querying for an remote control event. [ 485.992498][ T5862] m920x_read = error: -19 [ 485.997034][ T5862] dvb-usb: error while querying for an remote control event. [ 486.120814][ T5862] m920x_read = error: -19 [ 486.126430][ T5862] dvb-usb: error while querying for an remote control event. [ 486.261117][ T5862] m920x_read = error: -19 [ 486.270370][ T5862] dvb-usb: error while querying for an remote control event. [ 486.409406][ T5862] m920x_read = error: -19 [ 486.413804][ T5862] dvb-usb: error while querying for an remote control event. [ 486.549885][ T5862] m920x_read = error: -19 [ 486.559042][ T5862] dvb-usb: error while querying for an remote control event. [ 486.699302][ T5862] m920x_read = error: -19 [ 486.703790][ T5862] dvb-usb: error while querying for an remote control event. [ 486.837209][ T5862] m920x_read = error: -19 [ 486.843237][ T5862] dvb-usb: error while querying for an remote control event. [ 486.943962][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 486.965922][ T5862] m920x_read = error: -19 [ 486.970309][ T5862] dvb-usb: error while querying for an remote control event. [ 487.061615][ T5944] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 487.104367][ T5862] m920x_read = error: -19 [ 487.111247][ T5862] dvb-usb: error while querying for an remote control event. [ 487.118795][ T43] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 487.131437][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.144232][ T43] usb 6-1: Product: syz [ 487.150936][ T43] usb 6-1: Manufacturer: syz [ 487.159178][ T43] usb 6-1: SerialNumber: syz [ 487.211212][ T5944] usb 1-1: device descriptor read/64, error -71 [ 487.232635][ T5862] m920x_read = error: -19 [ 487.237059][ T5862] dvb-usb: error while querying for an remote control event. [ 487.360883][ T5862] m920x_read = error: -19 [ 487.366572][ T5862] dvb-usb: error while querying for an remote control event. [ 487.468139][ T5944] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 487.489138][ T5862] m920x_read = error: -19 [ 487.497835][ T5862] dvb-usb: error while querying for an remote control event. [ 487.617436][ T5862] m920x_read = error: -19 [ 487.623074][ T5862] dvb-usb: error while querying for an remote control event. [ 487.628266][ T5944] usb 1-1: device descriptor read/64, error -71 [ 487.746986][ T5944] usb usb1-port1: attempt power cycle [ 487.767169][ T5862] m920x_read = error: -19 [ 487.777265][ T5862] dvb-usb: error while querying for an remote control event. [ 487.839684][T14476] syz.2.2545 (14476) used greatest stack depth: 18256 bytes left [ 487.896122][ T5862] m920x_read = error: -19 [ 487.900520][ T5862] dvb-usb: error while querying for an remote control event. [ 488.034692][ T5862] m920x_read = error: -19 [ 488.039097][ T5862] dvb-usb: error while querying for an remote control event. [ 488.119921][ T5944] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 488.152787][ T5944] usb 1-1: device descriptor read/8, error -71 [ 488.162682][ T5862] m920x_read = error: -19 [ 488.167073][ T5862] dvb-usb: error while querying for an remote control event. [ 488.301629][ T5862] m920x_read = error: -19 [ 488.306164][ T5862] dvb-usb: error while querying for an remote control event. [ 488.419457][ T5944] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 488.440722][ T10] m920x_read = error: -19 [ 488.445111][ T10] dvb-usb: error while querying for an remote control event. [ 488.452042][ T5944] usb 1-1: device descriptor read/8, error -71 [ 488.568917][ T10] m920x_read = error: -19 [ 488.569314][ T5944] usb usb1-port1: unable to enumerate USB device [ 488.573309][ T10] dvb-usb: error while querying for an remote control event. [ 488.686492][ T10] m920x_read = error: -19 [ 488.690936][ T10] dvb-usb: error while querying for an remote control event. [ 488.830860][ T10] m920x_read = error: -19 [ 488.848148][ T10] dvb-usb: error while querying for an remote control event. [ 488.894841][T14539] QAT: failed to copy from user cfg_data. [ 488.902222][T14539] /dev/rnullb0: Can't open blockdev [ 488.964476][ T5862] m920x_read = error: -19 [ 488.968874][ T5862] dvb-usb: error while querying for an remote control event. [ 489.114333][ T5862] m920x_read = error: -19 [ 489.118734][ T5862] dvb-usb: error while querying for an remote control event. [ 489.135778][ T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 489.155184][ T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 489.172317][ T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 489.187632][ T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 489.199460][ T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 489.212027][ T43] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 489.236297][ T43] usb 6-1: USB disconnect, device number 14 [ 489.263781][ T5862] m920x_read = error: -19 [ 489.278658][ T5862] dvb-usb: error while querying for an remote control event. [ 489.413780][ T5862] m920x_read = error: -19 [ 489.420597][ T5862] dvb-usb: error while querying for an remote control event. [ 489.552706][ T5862] m920x_read = error: -19 [ 489.557141][ T5862] dvb-usb: error while querying for an remote control event. [ 489.680987][ T5862] m920x_read = error: -19 [ 489.690646][ T5862] dvb-usb: error while querying for an remote control event. [ 489.748448][T14543] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2565'. [ 489.819958][ T5862] m920x_read = error: -19 [ 489.825576][ T5862] dvb-usb: error while querying for an remote control event. [ 489.969452][ T5862] m920x_read = error: -19 [ 489.975346][ T5862] dvb-usb: error while querying for an remote control event. [ 489.988580][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.017830][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.119544][ T5862] m920x_read = error: -19 [ 490.135956][ T5862] dvb-usb: error while querying for an remote control event. [ 490.236791][ T43] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 490.268940][ T5862] m920x_read = error: -19 [ 490.273357][ T5862] dvb-usb: error while querying for an remote control event. [ 490.418515][ T10] m920x_read = error: -19 [ 490.423140][ T10] dvb-usb: error while querying for an remote control event. [ 490.429317][ T43] usb 6-1: config 8 has an invalid interface number: 250 but max is 0 [ 490.460327][ T43] usb 6-1: config 8 has no interface number 0 [ 490.481878][ T43] usb 6-1: config 8 interface 250 has no altsetting 0 [ 490.517575][ T43] usb 6-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 490.535968][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.544084][ T43] usb 6-1: Product: syz [ 490.554854][ T43] usb 6-1: Manufacturer: syz [ 490.565625][ T43] usb 6-1: SerialNumber: syz [ 490.568877][ T10] m920x_read = error: -19 [ 490.589453][ T10] dvb-usb: error while querying for an remote control event. [ 490.722409][ T10] m920x_read = error: -19 [ 490.737672][ T10] dvb-usb: error while querying for an remote control event. [ 490.799473][T14555] /dev/rnullb0: Can't open blockdev [ 490.822463][ T43] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 490.876558][ T43] usb 6-1: USB disconnect, device number 15 [ 490.878169][ T10] m920x_read = error: -19 [ 490.898209][ T10] dvb-usb: error while querying for an remote control event. [ 491.070685][ T10] m920x_read = error: -19 [ 491.075252][ T10] dvb-usb: error while querying for an remote control event. [ 491.209494][ T10] m920x_read = error: -19 [ 491.213912][ T10] dvb-usb: error while querying for an remote control event. [ 491.348894][ T10] m920x_read = error: -19 [ 491.367761][ T10] dvb-usb: error while querying for an remote control event. [ 491.521754][ T10] m920x_read = error: -19 [ 491.526205][ T10] dvb-usb: error while querying for an remote control event. [ 491.653638][T14571] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 491.669197][ T10] m920x_read = error: -19 [ 491.673587][ T10] dvb-usb: error while querying for an remote control event. [ 491.819080][ T10] m920x_read = error: -19 [ 491.839577][ T10] dvb-usb: error while querying for an remote control event. [ 491.885186][T14577] rtc_cmos 00:00: Alarms can be up to one day in the future [ 491.989896][ T10] m920x_read = error: -19 [ 491.994297][ T10] dvb-usb: error while querying for an remote control event. [ 492.150278][ T10] m920x_read = error: -19 [ 492.154737][ T10] dvb-usb: error while querying for an remote control event. [ 492.289251][ T10] m920x_read = error: -19 [ 492.293643][ T10] dvb-usb: error while querying for an remote control event. [ 492.449600][ T5862] m920x_read = error: -19 [ 492.454118][ T5862] dvb-usb: error while querying for an remote control event. [ 492.577932][ T5862] m920x_read = error: -19 [ 492.596579][ T5862] dvb-usb: error while querying for an remote control event. [ 492.663067][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.703830][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.712777][T14559] /dev/rnullb0: Can't open blockdev [ 492.725357][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.727555][ T5862] m920x_read = error: -19 [ 492.743960][ T5862] dvb-usb: error while querying for an remote control event. [ 492.749335][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.812395][ T43] rtc rtc0: __rtc_set_alarm: err=-22 [ 492.888025][ T5862] m920x_read = error: -19 [ 492.892422][ T5862] dvb-usb: error while querying for an remote control event. [ 493.037761][ T5862] m920x_read = error: -19 [ 493.042159][ T5862] dvb-usb: error while querying for an remote control event. [ 493.187322][ T9] m920x_read = error: -19 [ 493.191717][ T9] dvb-usb: error while querying for an remote control event. [ 493.283427][ T43] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 493.326867][ T9] m920x_read = error: -19 [ 493.331287][ T9] dvb-usb: error while querying for an remote control event. [ 493.401056][ T5862] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 493.433132][ T43] usb 3-1: device descriptor read/64, error -71 [ 493.471972][ T9] m920x_read = error: -19 [ 493.486535][ T9] dvb-usb: error while querying for an remote control event. [ 493.592017][ T5862] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 493.604257][ T9] m920x_read = error: -19 [ 493.608634][ T9] dvb-usb: error while querying for an remote control event. [ 493.626081][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.649105][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.678962][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 493.689692][ T43] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 493.704651][ T5862] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 493.719096][ T5862] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 493.738146][ T5862] usb 6-1: Manufacturer: syz [ 493.750323][ T5862] usb 6-1: config 0 descriptor?? [ 493.775321][ T9] m920x_read = error: -19 [ 493.779735][ T9] dvb-usb: error while querying for an remote control event. [ 493.850287][ T43] usb 3-1: device descriptor read/64, error -71 [ 493.914393][ T9] m920x_read = error: -19 [ 493.920592][ T9] dvb-usb: error while querying for an remote control event. [ 493.980256][ T43] usb usb3-port1: attempt power cycle [ 494.042531][ T9] m920x_read = error: -19 [ 494.051691][ T9] dvb-usb: error while querying for an remote control event. [ 494.181893][ T9] m920x_read = error: -19 [ 494.194375][ T9] dvb-usb: error while querying for an remote control event. [ 494.214281][ T5862] appleir 0003:05AC:8243.0010: item fetching failed at offset 0/1 [ 494.222603][ T5862] appleir 0003:05AC:8243.0010: parse failed [ 494.234376][ T5862] appleir 0003:05AC:8243.0010: probe with driver appleir failed with error -22 [ 494.354243][ T5862] m920x_read = error: -19 [ 494.358658][ T5862] dvb-usb: error while querying for an remote control event. [ 494.363535][ T43] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 494.404789][ T43] usb 3-1: device descriptor read/8, error -71 [ 494.480903][ T5862] m920x_read = error: -19 [ 494.485293][ T5862] dvb-usb: error while querying for an remote control event. [ 494.587848][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 494.619795][ T5862] m920x_read = error: -19 [ 494.624255][ T5862] dvb-usb: error while querying for an remote control event. [ 494.666599][ T43] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 494.695285][ T43] usb 3-1: device descriptor read/8, error -71 [ 494.748057][ T9] usb 1-1: device descriptor read/64, error -71 [ 494.765320][ T5862] m920x_read = error: -19 [ 494.770033][ T5862] dvb-usb: error while querying for an remote control event. [ 494.826349][ T43] usb usb3-port1: unable to enumerate USB device [ 494.897740][ T5862] m920x_read = error: -19 [ 494.902130][ T5862] dvb-usb: error while querying for an remote control event. [ 495.015350][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 495.036977][ T5862] m920x_read = error: -19 [ 495.041362][ T5862] dvb-usb: error while querying for an remote control event. [ 495.164992][ T9] usb 1-1: device descriptor read/64, error -71 [ 495.182380][ T5862] m920x_read = error: -19 [ 495.193122][ T5862] dvb-usb: error while querying for an remote control event. [ 495.293463][ T9] usb usb1-port1: attempt power cycle [ 495.314778][ T5862] m920x_read = error: -19 [ 495.323911][ T5862] dvb-usb: error while querying for an remote control event. [ 495.453904][ T10] m920x_read = error: -19 [ 495.458306][ T10] dvb-usb: error while querying for an remote control event. [ 495.593399][ T10] m920x_read = error: -19 [ 495.608756][ T10] dvb-usb: error while querying for an remote control event. [ 495.656995][ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 495.689497][ T9] usb 1-1: device descriptor read/8, error -71 [ 495.742604][ T10] m920x_read = error: -19 [ 495.748233][ T10] dvb-usb: error while querying for an remote control event. [ 495.881446][ T5862] m920x_read = error: -19 [ 495.888304][ T5862] dvb-usb: error while querying for an remote control event. [ 495.945656][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 495.979083][ T9] usb 1-1: device descriptor read/8, error -71 [ 496.020500][ T5862] m920x_read = error: -19 [ 496.030649][ T5862] dvb-usb: error while querying for an remote control event. [ 496.095457][ T9] usb usb1-port1: unable to enumerate USB device [ 496.160961][ T9] m920x_read = error: -19 [ 496.171680][T14608] /dev/rnullb0: Can't open blockdev [ 496.178309][ T9] dvb-usb: error while querying for an remote control event. [ 496.308971][ T9] m920x_read = error: -19 [ 496.319368][ T9] dvb-usb: error while querying for an remote control event. [ 496.340219][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'. [ 496.354204][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'. [ 496.370126][ T7764] usb 6-1: USB disconnect, device number 16 [ 496.377457][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'. [ 496.458570][ T9] m920x_read = error: -19 [ 496.463048][ T9] dvb-usb: error while querying for an remote control event. [ 496.609497][ T5862] m920x_read = error: -19 [ 496.613944][ T5862] dvb-usb: error while querying for an remote control event. [ 496.715290][T14618] /dev/rnullb0: Can't open blockdev [ 496.747291][ T5862] m920x_read = error: -19 [ 496.752015][ T5862] dvb-usb: error while querying for an remote control event. [ 496.917769][ T5862] m920x_read = error: -19 [ 496.923870][ T5862] dvb-usb: error while querying for an remote control event. [ 496.960001][ T30] audit: type=1326 audit(1756478096.628:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz.2.2588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2ab98ebe9 code=0x0 [ 497.047226][ T5862] m920x_read = error: -19 [ 497.051659][ T5862] dvb-usb: error while querying for an remote control event. [ 497.187012][ T5862] m920x_read = error: -19 [ 497.191452][ T5862] dvb-usb: error while querying for an remote control event. [ 497.195264][T14630] /dev/rnullb0: Can't open blockdev [ 497.284457][T14636] /dev/rnullb0: Can't open blockdev [ 497.324692][ T10] m920x_read = error: -19 [ 497.329085][ T10] dvb-usb: error while querying for an remote control event. [ 497.353756][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.363271][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.497012][ T10] m920x_read = error: -19 [ 497.501422][ T10] dvb-usb: error while querying for an remote control event. [ 497.566893][T14652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2599'. [ 497.575975][T14652] tipc: Invalid UDP bearer configuration [ 497.576019][T14652] tipc: Enabling of bearer rejected, failed to enable media [ 497.591760][ T5862] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 497.601573][T14652] netlink: 'syz.4.2599': attribute type 3 has an invalid length. [ 497.609724][T14652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2599'. [ 497.645268][ T10] m920x_read = error: -19 [ 497.649673][ T10] dvb-usb: error while querying for an remote control event. [ 497.668507][T14655] /dev/rnullb0: Can't open blockdev [ 497.754106][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.781465][ T10] m920x_read = error: -19 [ 497.786346][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.787397][T14658] /dev/rnullb0: Can't open blockdev [ 497.796182][ T10] dvb-usb: error while querying for an remote control event. [ 497.796252][ T5862] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 497.818767][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.837400][ T5862] usb 6-1: config 0 descriptor?? [ 497.873144][ T30] audit: type=1326 audit(1756478097.488:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.0.2603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f484278ebe9 code=0x0 [ 497.912544][ T10] m920x_read = error: -19 [ 497.916971][ T10] dvb-usb: error while querying for an remote control event. [ 498.000502][T14674] /dev/rnullb0: Can't open blockdev [ 498.006070][T14673] /dev/rnullb0: Can't open blockdev [ 498.053032][ T10] m920x_read = error: -19 [ 498.062319][ T10] dvb-usb: error while querying for an remote control event. [ 498.190490][ T10] m920x_read = error: -19 [ 498.198662][ T10] dvb-usb: error while querying for an remote control event. [ 498.286803][ T5862] hid_parser_main: 5 callbacks suppressed [ 498.286836][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.318772][ T10] m920x_read = error: -19 [ 498.323362][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.334186][ T10] dvb-usb: error while querying for an remote control event. [ 498.349559][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.364112][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.383088][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.395209][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.411047][ T5862] steelseries 0003:1038:12B6.0011: unknown main item tag 0x0 [ 498.431102][ T5862] steelseries 0003:1038:12B6.0011: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 498.447102][ T5944] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 498.468425][ T10] m920x_read = error: -19 [ 498.482741][ T10] dvb-usb: error while querying for an remote control event. [ 498.618671][T13284] m920x_read = error: -19 [ 498.623228][T13284] dvb-usb: error while querying for an remote control event. [ 498.696388][T14671] /dev/rnullb0: Can't open blockdev [ 498.714567][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 498.723003][ T5944] usb 1-1: no configurations [ 498.729700][ T5944] usb 1-1: can't read configurations, error -22 [ 498.749565][ T5862] m920x_read = error: -19 [ 498.761405][ T5862] dvb-usb: error while querying for an remote control event. [ 498.906995][ T5862] m920x_read = error: -19 [ 498.915333][ T5862] dvb-usb: error while querying for an remote control event. [ 498.976031][ T5862] usb 6-1: USB disconnect, device number 17 [ 499.067071][T13284] m920x_read = error: -19 [ 499.071461][T13284] dvb-usb: error while querying for an remote control event. [ 499.175341][T14699] /dev/rnullb0: Can't open blockdev [ 499.206552][ T5862] m920x_read = error: -19 [ 499.210961][ T5862] dvb-usb: error while querying for an remote control event. [ 499.338166][T13284] m920x_read = error: -19 [ 499.342555][T13284] dvb-usb: error while querying for an remote control event. [ 499.490406][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'. [ 499.534047][T14723] nbd: must specify a size in bytes for the device [ 499.747725][T14735] blk_print_req_error: 2 callbacks suppressed [ 499.747746][T14735] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 499.820229][T14735] hpfs: hpfs_map_sector(): read error [ 499.952242][T14740] ISOFS: Unable to identify CD-ROM format. [ 500.243145][ T5944] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 500.318155][T13284] m920x_read = error: -19 [ 500.322551][T13284] dvb-usb: error while querying for an remote control event. [ 500.349135][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.390203][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.413603][T14754] tipc: Started in network mode [ 500.418867][T14754] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 500.419331][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 500.427893][T14754] tipc: Enabling of bearer rejected, failed to enable media [ 500.440504][T13284] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 500.453798][T13284] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 500.461783][T13284] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 500.480152][T13284] hid-generic 0006:0004:0009.0012: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 500.503277][T13284] m920x_read = error: -19 [ 500.508300][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.521466][T13284] dvb-usb: error while querying for an remote control event. [ 500.529127][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 500.573174][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 500.597128][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 500.600963][T14760] fido_id[14760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 500.638810][ T10] m920x_read = error: -19 [ 500.643189][ T10] dvb-usb: error while querying for an remote control event. [ 500.651896][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 500.666437][T14762] kvm: pic: non byte read [ 500.671298][T14762] kvm: pic: non byte read [ 500.676741][T14762] /dev/rnullb0: Can't open blockdev [ 500.700513][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.719715][ T5944] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 500.734504][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.743472][ T5944] usb 6-1: Product: syz [ 500.767499][ T10] m920x_read = error: -19 [ 500.777559][ T10] dvb-usb: error while querying for an remote control event. [ 500.841734][ T5944] usb 6-1: Manufacturer: syz [ 500.846478][ T5944] usb 6-1: SerialNumber: syz [ 500.863804][ T5944] usb 6-1: config 0 descriptor?? [ 500.874365][T14744] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 500.896843][ T10] m920x_read = error: -19 [ 500.901641][ T10] dvb-usb: error while querying for an remote control event. [ 501.045155][ T10] m920x_read = error: -19 [ 501.054640][ T10] dvb-usb: error while querying for an remote control event. [ 501.205391][ T10] m920x_read = error: -19 [ 501.209798][ T10] dvb-usb: error while querying for an remote control event. [ 501.311721][T14771] Invalid ELF header type: 3 != 1 [ 501.318460][T14771] Invalid ELF header type: 3 != 1 [ 501.339405][T14771] Invalid ELF header type: 3 != 1 [ 501.352624][T14771] Invalid ELF header type: 3 != 1 [ 501.358112][T13284] m920x_read = error: -19 [ 501.375824][T13284] dvb-usb: error while querying for an remote control event. [ 501.394605][T14772] ptm ptm10: ldisc open failed (-12), clearing slot 10 [ 501.493906][T13284] m920x_read = error: -19 [ 501.498394][T13284] dvb-usb: error while querying for an remote control event. [ 501.622160][T13284] m920x_read = error: -19 [ 501.628962][T13284] dvb-usb: error while querying for an remote control event. [ 501.761618][T13284] m920x_read = error: -19 [ 501.766040][T13284] dvb-usb: error while querying for an remote control event. [ 501.910912][ T10] m920x_read = error: -19 [ 501.915308][ T10] dvb-usb: error while querying for an remote control event. [ 501.956559][T14800] /dev/rnullb0: Can't open blockdev [ 502.050090][ T10] m920x_read = error: -19 [ 502.055850][ T10] dvb-usb: error while querying for an remote control event. [ 502.183282][T14804] fuse: Bad value for 'group_id' [ 502.188347][T14804] fuse: Bad value for 'group_id' [ 502.194057][ T10] m920x_read = error: -19 [ 502.198415][ T10] dvb-usb: error while querying for an remote control event. [ 502.239751][T14807] binder: 14805:14807 ioctl 701 6 returned -22 [ 502.250638][T14807] /dev/sg0: Can't lookup blockdev [ 502.286727][ T5944] rc_core: IR keymap rc-snapstream-firefly not found [ 502.295002][ T5944] Registered IR keymap rc-empty [ 502.302635][ T5944] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 502.317327][ T10] m920x_read = error: -19 [ 502.321971][ T10] dvb-usb: error while querying for an remote control event. [ 502.331418][ T5944] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 502.347388][ T5944] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input37 [ 502.383465][ T5944] usb 6-1: USB disconnect, device number 18 [ 502.389476][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 502.443498][T14814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 502.457944][ T10] m920x_read = error: -19 [ 502.462358][ T10] dvb-usb: error while querying for an remote control event. [ 502.573976][ T43] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 502.584397][ T10] m920x_read = error: -19 [ 502.588775][ T10] dvb-usb: error while querying for an remote control event. [ 502.640036][T14817] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2643'. [ 502.723272][ T5862] m920x_read = error: -19 [ 502.727662][ T5862] dvb-usb: error while querying for an remote control event. [ 502.733444][T14823] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.744319][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 502.755039][T14823] hfs: can't find a HFS filesystem on dev loop4 [ 502.761708][ T43] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 502.773536][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.801952][ T43] usb 1-1: config 0 descriptor?? [ 502.820584][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 502.851786][T13284] m920x_read = error: -19 [ 502.857886][T13284] dvb-usb: error while querying for an remote control event. [ 502.926732][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 502.981291][T13284] m920x_read = error: -19 [ 502.985811][T13284] dvb-usb: error while querying for an remote control event. [ 502.990324][T14829] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.004224][T14829] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.014323][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 503.024768][T14829] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.034459][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 503.044486][T14829] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 503.052242][T14829] UDF-fs: Scanning with blocksize 512 failed [ 503.058445][ T5862] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 503.068119][T14829] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.078189][T14829] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.087734][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 503.097753][T14829] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.107516][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 503.117336][T14829] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 503.118994][T13284] m920x_read = error: -19 [ 503.125185][T14829] UDF-fs: Scanning with blocksize 1024 failed [ 503.134348][T13284] dvb-usb: error while querying for an remote control event. [ 503.136514][T14829] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.143260][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.153500][T14829] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.165669][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.176277][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 503.182739][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.200688][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.208819][ T10] usb 3-1: SerialNumber: syz [ 503.213710][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 503.223472][T14829] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 503.231465][T14829] UDF-fs: Scanning with blocksize 2048 failed [ 503.238517][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 503.248667][T14829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 503.258748][T14829] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 503.266555][T14829] UDF-fs: Scanning with blocksize 4096 failed [ 503.272886][T14829] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 503.276357][ T5862] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 503.289656][ T5862] usb 6-1: config 0 has no interface number 1 [ 503.295947][T13284] m920x_read = error: -19 [ 503.300329][T13284] dvb-usb: error while querying for an remote control event. [ 503.307834][ T5862] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 503.317009][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.329056][ T5862] usb 6-1: config 0 descriptor?? [ 503.347387][ T5862] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.357252][ T5862] usb 6-1: MIDIStreaming interface descriptor not found [ 503.416763][ T5862] gspca_main: spca561-2.14.0 probing abcd:cdee [ 503.440775][ T9] m920x_read = error: -19 [ 503.445200][ T9] dvb-usb: error while querying for an remote control event. [ 503.459281][T14817] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 503.589248][T13284] m920x_read = error: -19 [ 503.593670][T13284] dvb-usb: error while querying for an remote control event. [ 503.728566][ T5905] m920x_read = error: -19 [ 503.745531][ T5905] dvb-usb: error while querying for an remote control event. [ 503.783304][ T43] gspca_vc032x: reg_w err -71 [ 503.791043][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.881195][ T5905] m920x_read = error: -19 [ 503.886836][ T5905] dvb-usb: error while querying for an remote control event. [ 503.934968][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.948244][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.959520][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.971103][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.981324][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.992703][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.004031][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.007481][ T5862] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 504.015308][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.030310][ T5905] m920x_read = error: -19 [ 504.031595][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.034720][ T5905] dvb-usb: error while querying for an remote control event. [ 504.057596][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.077235][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.086491][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.095655][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.104467][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.117846][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.127849][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.138264][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.147302][ T5862] m920x_read = error: -19 [ 504.149635][ T43] gspca_vc032x: Unknown sensor... [ 504.151841][ T5862] dvb-usb: error while querying for an remote control event. [ 504.162731][ T43] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 504.190653][ T43] usb 1-1: USB disconnect, device number 47 [ 504.381784][ T5862] m920x_read = error: -19 [ 504.386687][ T5862] dvb-usb: error while querying for an remote control event. [ 504.400539][T14817] /dev/rnullb0: Can't open blockdev [ 504.427379][ T10] usb 3-1: 0:2 : does not exist [ 504.447876][ T10] usb 3-1: unit 5 not found! [ 504.473795][ T10] usb 3-1: USB disconnect, device number 57 [ 504.504919][ T9596] udevd[9596]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 504.521108][ T5862] m920x_read = error: -19 [ 504.540741][ T5862] dvb-usb: error while querying for an remote control event. [ 504.559063][T14846] NILFS (nullb0): couldn't find nilfs on the device [ 504.658511][ T5862] m920x_read = error: -19 [ 504.665511][ T5862] dvb-usb: error while querying for an remote control event. [ 504.786631][ T10] m920x_read = error: -19 [ 504.791290][ T10] dvb-usb: error while querying for an remote control event. [ 504.865256][T14857] "syz.0.2657" (14857) uses obsolete ecb(arc4) skcipher [ 505.043183][ T10] m920x_read = error: -19 [ 505.047586][ T10] dvb-usb: error while querying for an remote control event. [ 505.194574][ T5862] m920x_read = error: -19 [ 505.199028][ T5862] dvb-usb: error while querying for an remote control event. [ 505.254942][T14872] netlink: 'syz.2.2660': attribute type 12 has an invalid length. [ 505.282940][T14872] netlink: 'syz.2.2660': attribute type 12 has an invalid length. [ 505.342482][ T5862] m920x_read = error: -19 [ 505.347029][ T5862] dvb-usb: error while querying for an remote control event. [ 505.496197][ T5862] m920x_read = error: -19 [ 505.514756][ T5862] dvb-usb: error while querying for an remote control event. [ 505.540491][T14882] /dev/rnullb0: Can't open blockdev [ 505.647325][ T5862] m920x_read = error: -19 [ 505.660412][ T5862] dvb-usb: error while querying for an remote control event. [ 505.802303][ T5862] m920x_read = error: -19 [ 505.812946][ T5862] dvb-usb: error while querying for an remote control event. [ 505.941253][ T10] m920x_read = error: -19 [ 505.945834][ T10] dvb-usb: error while querying for an remote control event. [ 506.023295][ T951] usb 6-1: USB disconnect, device number 19 [ 506.070051][ T10] m920x_read = error: -19 [ 506.074461][ T10] dvb-usb: error while querying for an remote control event. [ 506.103788][T14898] QAT: Device 253 not found [ 506.122893][ T5862] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 506.173994][T14909] /dev/rnullb0: Can't open blockdev [ 506.197878][ T10] m920x_read = error: -19 [ 506.204084][ T10] dvb-usb: error while querying for an remote control event. [ 506.229638][T14913] /dev/rnullb0: Can't open blockdev [ 506.258851][T14915] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 506.258851][T14915] The task syz.5.2669 (14915) triggered the difference, watch for misbehavior. [ 506.268404][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.287363][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.307337][ T5862] usb 3-1: no configurations [ 506.315818][ T5862] usb 3-1: can't read configurations, error -22 [ 506.334362][ T10] m920x_read = error: -19 [ 506.342918][ T10] dvb-usb: error while querying for an remote control event. [ 506.465218][ T10] m920x_read = error: -19 [ 506.469699][ T10] dvb-usb: error while querying for an remote control event. [ 506.477163][ T5862] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 506.616075][ T10] m920x_read = error: -19 [ 506.620457][ T10] dvb-usb: error while querying for an remote control event. [ 506.647406][ T5862] usb 3-1: no configurations [ 506.652448][ T5862] usb 3-1: can't read configurations, error -22 [ 506.660642][ T5862] usb usb3-port1: attempt power cycle [ 506.742974][ T10] m920x_read = error: -19 [ 506.747370][ T10] dvb-usb: error while querying for an remote control event. [ 506.764664][ T951] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 506.871252][ T10] m920x_read = error: -19 [ 506.875700][ T10] dvb-usb: error while querying for an remote control event. [ 506.927992][ T951] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 506.936377][ T951] usb 1-1: config 0 has no interface number 0 [ 506.942579][ T951] usb 1-1: config 0 interface 41 has no altsetting 0 [ 506.958060][ T951] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 506.967225][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.975522][ T951] usb 1-1: Product: syz [ 506.980294][ T951] usb 1-1: Manufacturer: syz [ 506.985134][ T951] usb 1-1: SerialNumber: syz [ 506.992049][ T951] usb 1-1: config 0 descriptor?? [ 506.999545][ T10] m920x_read = error: -19 [ 507.012382][ T10] dvb-usb: error while querying for an remote control event. [ 507.020995][ T5862] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 507.046425][ T5862] usb 3-1: no configurations [ 507.051263][ T5862] usb 3-1: can't read configurations, error -22 [ 507.128033][ T5905] m920x_read = error: -19 [ 507.132522][ T5905] dvb-usb: error while querying for an remote control event. [ 507.213524][ T5862] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 507.246673][ T5862] usb 3-1: no configurations [ 507.251325][ T5862] usb 3-1: can't read configurations, error -22 [ 507.267167][ T5905] m920x_read = error: -19 [ 507.271572][ T5905] dvb-usb: error while querying for an remote control event. [ 507.283880][ T5862] usb usb3-port1: unable to enumerate USB device [ 507.356253][T14935] overlayfs: failed to resolve './file0': -2 [ 507.418153][ T5905] m920x_read = error: -19 [ 507.422549][ T5905] dvb-usb: error while querying for an remote control event. [ 507.555677][ T5862] m920x_read = error: -19 [ 507.564759][ T5862] dvb-usb: error while querying for an remote control event. [ 507.663192][ T951] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 507.679150][ T951] usb 1-1: USB disconnect, device number 48 [ 507.710276][ T5862] m920x_read = error: -19 [ 507.714710][ T5862] dvb-usb: error while querying for an remote control event. [ 507.767132][T14947] /dev/rnullb0: Can't open blockdev [ 507.811178][T14949] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2683'. [ 507.820563][T14949] unsupported nla_type 224 [ 507.854855][ T5862] m920x_read = error: -19 [ 507.859383][ T5862] dvb-usb: error while querying for an remote control event. [ 507.982150][T14954] ./cgroup: Can't lookup blockdev [ 507.986691][ T5862] m920x_read = error: -19 [ 507.991667][ T5862] dvb-usb: error while querying for an remote control event. [ 508.157851][ T5862] m920x_read = error: -19 [ 508.163530][ T5862] dvb-usb: error while querying for an remote control event. [ 508.295652][ T5862] m920x_read = error: -19 [ 508.303550][ T5862] dvb-usb: error while querying for an remote control event. [ 508.432407][ T5905] m920x_read = error: -19 [ 508.445171][ T5905] dvb-usb: error while querying for an remote control event. [ 508.571140][ T5905] m920x_read = error: -19 [ 508.584759][ T5905] dvb-usb: error while querying for an remote control event. [ 508.604430][ T5862] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 508.713221][ T5905] m920x_read = error: -19 [ 508.725385][ T5905] dvb-usb: error while querying for an remote control event. [ 508.765368][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 508.780591][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.797540][ T5862] usb 1-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 508.817311][ T5862] usb 1-1: config 1 interface 0 has no altsetting 0 [ 508.833798][ T5862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.854260][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.870454][ T10] m920x_read = error: -19 [ 508.876299][ T10] dvb-usb: error while querying for an remote control event. [ 508.893477][ T5862] usb 1-1: Product: syz [ 508.900128][ T5862] usb 1-1: Manufacturer: syz [ 508.908976][ T5862] usb 1-1: SerialNumber: syz [ 508.932200][T14964] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 509.009683][ T10] m920x_read = error: -19 [ 509.014081][ T10] dvb-usb: error while querying for an remote control event. [ 509.148400][ T5905] m920x_read = error: -19 [ 509.158735][ T5905] dvb-usb: error while querying for an remote control event. [ 509.185434][T14964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.220010][T14964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.238799][T14964] Bluetooth: MGMT ver 1.23 [ 509.251005][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 509.298926][ T10] m920x_read = error: -19 [ 509.303487][ T10] dvb-usb: error while querying for an remote control event. [ 509.427000][ T10] m920x_read = error: -19 [ 509.437028][ T10] dvb-usb: error while querying for an remote control event. [ 509.513059][ T5905] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 509.565449][ T10] m920x_read = error: -19 [ 509.570472][ T10] dvb-usb: error while querying for an remote control event. [ 509.696290][ T10] m920x_read = error: -19 [ 509.701466][ T10] dvb-usb: error while querying for an remote control event. [ 509.710497][ T5905] usb 3-1: config 11 has an invalid interface number: 130 but max is 0 [ 509.721901][ T5905] usb 3-1: config 11 has no interface number 0 [ 509.728299][ T5905] usb 3-1: config 11 interface 130 has no altsetting 0 [ 509.739073][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a0.98 [ 509.749096][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.757220][ T5905] usb 3-1: Product: syz [ 509.763732][ T5905] usb 3-1: Manufacturer: syz [ 509.769618][ T5905] usb 3-1: SerialNumber: syz [ 509.833187][ T10] m920x_read = error: -19 [ 509.837630][ T10] dvb-usb: error while querying for an remote control event. [ 509.960880][T13284] m920x_read = error: -19 [ 509.965712][T13284] dvb-usb: error while querying for an remote control event. [ 509.995621][T14981] /dev/rnullb0: Can't open blockdev [ 510.017682][ T5905] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 510.042718][ T5905] usb 3-1: USB disconnect, device number 62 [ 510.099963][T13284] m920x_read = error: -19 [ 510.107079][T14987] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 510.110494][T13284] dvb-usb: error while querying for an remote control event. [ 510.113648][T14987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 510.116176][T14987] vhci_hcd vhci_hcd.0: Device attached [ 510.137148][T14989] vhci_hcd: connection closed [ 510.137409][ T12] vhci_hcd: stop threads [ 510.148969][ T12] vhci_hcd: release socket [ 510.155160][ T12] vhci_hcd: disconnect device [ 510.249491][ T5905] m920x_read = error: -19 [ 510.254545][ T5905] dvb-usb: error while querying for an remote control event. [ 510.377870][ T5905] m920x_read = error: -19 [ 510.386610][ T5905] dvb-usb: error while querying for an remote control event. [ 510.506718][T13284] m920x_read = error: -19 [ 510.511164][T13284] dvb-usb: error while querying for an remote control event. [ 510.636400][T13284] m920x_read = error: -19 [ 510.643430][T13284] dvb-usb: error while querying for an remote control event. [ 510.762832][T13284] m920x_read = error: -19 [ 510.771630][T13284] dvb-usb: error while querying for an remote control event. [ 510.901786][T13284] m920x_read = error: -19 [ 510.909847][T13284] dvb-usb: error while querying for an remote control event. [ 511.011369][T15007] /dev/rnullb0: Can't open blockdev [ 511.029137][T15009] /dev/rnullb0: Can't open blockdev [ 511.040978][ T5905] m920x_read = error: -19 [ 511.047082][ T5905] dvb-usb: error while querying for an remote control event. [ 511.168900][ T5905] m920x_read = error: -19 [ 511.174918][ T5905] dvb-usb: error while querying for an remote control event. [ 511.286958][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 511.297790][T13284] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 511.317240][ T5905] m920x_read = error: -19 [ 511.324092][ T5905] dvb-usb: error while querying for an remote control event. [ 511.457527][ T5905] m920x_read = error: -19 [ 511.462045][T13284] usb 3-1: device descriptor read/64, error -71 [ 511.468937][ T51] Bluetooth: hci0: command 0x1003 tx timeout [ 511.470089][ T5864] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 511.475016][ T5905] dvb-usb: error while querying for an remote control event. [ 511.525722][ T5862] usb 1-1: USB disconnect, device number 49 [ 511.649972][ T5905] m920x_read = error: -19 [ 511.654444][ T5905] dvb-usb: error while querying for an remote control event. [ 511.779030][T13284] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 511.799616][ T5862] m920x_read = error: -19 [ 511.810299][ T5862] dvb-usb: error while querying for an remote control event. [ 511.893007][T15017] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 511.927860][T13284] usb 3-1: device descriptor read/64, error -71 [ 511.938659][ T5862] m920x_read = error: -19 [ 511.943046][ T5862] dvb-usb: error while querying for an remote control event. [ 512.003042][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.033357][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.053946][T15017] /dev/rnullb0: Can't open blockdev [ 512.059690][T13284] usb usb3-port1: attempt power cycle [ 512.081148][ T5862] m920x_read = error: -19 [ 512.085538][ T5862] dvb-usb: error while querying for an remote control event. [ 512.272452][ T5905] m920x_read = error: -19 [ 512.276851][ T5905] dvb-usb: error while querying for an remote control event. [ 512.408998][ T5905] m920x_read = error: -19 [ 512.413658][ T5905] dvb-usb: error while querying for an remote control event. [ 512.430436][T13284] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 512.452753][T13284] usb 3-1: device descriptor read/8, error -71 [ 512.485203][T15024] sp0: Synchronizing with TNC [ 512.540964][ T5905] m920x_read = error: -19 [ 512.546626][ T5905] dvb-usb: error while querying for an remote control event. [ 512.665643][ T5905] m920x_read = error: -19 [ 512.670080][ T5905] dvb-usb: error while querying for an remote control event. [ 512.708288][T13284] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 512.741006][T13284] usb 3-1: device descriptor read/8, error -71 [ 512.815582][ T5905] m920x_read = error: -19 [ 512.819984][ T5905] dvb-usb: error while querying for an remote control event. [ 512.875171][T13284] usb usb3-port1: unable to enumerate USB device [ 512.954904][T15032] /dev/rnullb0: Can't open blockdev [ 512.965034][ T5905] m920x_read = error: -19 [ 512.969423][ T5905] dvb-usb: error while querying for an remote control event. [ 513.018710][T15034] devpts: Bad value for 'max' [ 513.104074][ T5905] m920x_read = error: -19 [ 513.108941][ T5905] dvb-usb: error while querying for an remote control event. [ 513.143664][T15037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.242826][T13284] m920x_read = error: -19 [ 513.247322][T13284] dvb-usb: error while querying for an remote control event. [ 513.383731][T13284] m920x_read = error: -19 [ 513.388128][T13284] dvb-usb: error while querying for an remote control event. [ 513.467355][ T5905] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 513.531470][T13284] m920x_read = error: -19 [ 513.535894][T13284] dvb-usb: error while querying for an remote control event. [ 513.563929][T15044] /dev/rnullb0: Can't open blockdev [ 513.627758][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 513.636766][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0 [ 513.645412][ T5905] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a17, bcdDevice= 0.40 [ 513.659737][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.667810][ T5905] usb 1-1: Product: ч [ 513.675337][T13284] m920x_read = error: -19 [ 513.679722][T13284] dvb-usb: error while querying for an remote control event. [ 513.704870][ T5905] usb 1-1: Manufacturer: Ћ [ 513.709430][ T5905] usb 1-1: SerialNumber: syz [ 513.831104][T13284] m920x_read = error: -19 [ 513.835561][T13284] dvb-usb: error while querying for an remote control event. [ 513.970080][T13284] m920x_read = error: -19 [ 513.974537][T13284] dvb-usb: error while querying for an remote control event. [ 514.008522][T15040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.027641][T15040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.039814][T15049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.067931][T15040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.078323][T15040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.086509][T15049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.107387][T15040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.120803][T13284] m920x_read = error: -19 [ 514.125235][T13284] dvb-usb: error while querying for an remote control event. [ 514.125471][T15040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.269417][T13284] m920x_read = error: -19 [ 514.273881][T13284] dvb-usb: error while querying for an remote control event. [ 514.295978][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.359219][T15040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.392892][T15040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.568614][T15054] /dev/rnullb0: Can't open blockdev [ 514.686155][ T951] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 514.715572][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2719'. [ 514.870878][ T951] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 514.893173][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.934513][ T951] usb 3-1: config 0 descriptor?? [ 514.996227][T14005] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 515.168278][T14005] usb 6-1: Invalid ep0 maxpacket: 16 [ 515.317209][T14005] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 515.488712][T14005] usb 6-1: Invalid ep0 maxpacket: 16 [ 515.497401][T14005] usb usb6-port1: attempt power cycle [ 515.572821][T15072] binder: 15069:15072 ioctl c0306201 200000000080 returned -14 [ 515.872831][T14005] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 515.895207][T14005] usb 6-1: Invalid ep0 maxpacket: 16 [ 516.033181][T14005] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 516.066025][T14005] usb 6-1: Invalid ep0 maxpacket: 16 [ 516.072044][T14005] usb usb6-port1: unable to enumerate USB device [ 520.363369][ T951] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 520.374941][ T951] asix 3-1:0.0: probe with driver asix failed with error -110 [ 530.667230][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.678388][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.687208][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.695073][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.704046][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.862756][T15075] chnl_net:caif_netlink_parms(): no params data found [ 532.077952][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.089248][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.096813][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.106176][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.113972][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 532.149981][T14005] usb 5-1: USB disconnect, device number 39 [ 532.205266][ T1301] ================================================================== [ 532.213390][ T1301] BUG: KASAN: slab-use-after-free in handle_tx+0x1ec/0x610 [ 532.220749][ T1301] Read of size 8 at addr ffff88805bac2020 by task aoe_tx0/1301 [ 532.228309][ T1301] [ 532.230657][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 532.230702][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.230730][ T1301] Call Trace: [ 532.230739][ T1301] [ 532.230748][ T1301] dump_stack_lvl+0x189/0x250 [ 532.230784][ T1301] ? __virt_addr_valid+0x1c8/0x5c0 [ 532.230815][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.230839][ T1301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.230870][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.230892][ T1301] ? lock_release+0x4b/0x3e0 [ 532.230932][ T1301] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 532.230959][ T1301] ? __virt_addr_valid+0x1c8/0x5c0 [ 532.230994][ T1301] ? __virt_addr_valid+0x4a5/0x5c0 [ 532.231022][ T1301] print_report+0xca/0x240 [ 532.231042][ T1301] ? handle_tx+0x1ec/0x610 [ 532.231060][ T1301] kasan_report+0x118/0x150 [ 532.231080][ T1301] ? handle_tx+0x1ec/0x610 [ 532.231102][ T1301] handle_tx+0x1ec/0x610 [ 532.231127][ T1301] dev_hard_start_xmit+0x2d7/0x830 [ 532.231154][ T1301] __dev_queue_xmit+0x1b8d/0x3b50 [ 532.231172][ T1301] ? __dev_queue_xmit+0x27b/0x3b50 [ 532.231187][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.231203][ T1301] ? trace_sched_exit_tp+0x36/0x110 [ 532.231224][ T1301] ? __schedule+0x17ae/0x4cc0 [ 532.231242][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 532.231258][ T1301] ? do_raw_spin_lock+0x121/0x290 [ 532.231278][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.231295][ T1301] ? do_raw_spin_unlock+0x122/0x240 [ 532.231315][ T1301] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 532.231334][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.231350][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.231367][ T1301] tx+0x6b/0x190 [ 532.231386][ T1301] ? __pfx_tx+0x10/0x10 [ 532.231405][ T1301] kthread+0x1cd/0x3e0 [ 532.231426][ T1301] ? __pfx_kthread+0x10/0x10 [ 532.231443][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 532.231456][ T1301] ? __kthread_parkme+0x7b/0x200 [ 532.231473][ T1301] ? __kthread_parkme+0x1a1/0x200 [ 532.231492][ T1301] kthread+0x711/0x8a0 [ 532.231512][ T1301] ? __pfx_kthread+0x10/0x10 [ 532.231529][ T1301] ? __pfx_kthread+0x10/0x10 [ 532.231548][ T1301] ? rcu_is_watching+0x15/0xb0 [ 532.231563][ T1301] ? __pfx_kthread+0x10/0x10 [ 532.231582][ T1301] ret_from_fork+0x47c/0x820 [ 532.231599][ T1301] ? __pfx_ret_from_fork+0x10/0x10 [ 532.231617][ T1301] ? __switch_to_asm+0x39/0x70 [ 532.231631][ T1301] ? __switch_to_asm+0x33/0x70 [ 532.231644][ T1301] ? __pfx_kthread+0x10/0x10 [ 532.231664][ T1301] ret_from_fork_asm+0x1a/0x30 [ 532.231684][ T1301] [ 532.231689][ T1301] [ 532.477130][ T1301] Allocated by task 10234: [ 532.481544][ T1301] kasan_save_track+0x3e/0x80 [ 532.486233][ T1301] __kasan_kmalloc+0x93/0xb0 [ 532.490829][ T1301] __kmalloc_cache_noprof+0x21c/0x3a0 [ 532.496210][ T1301] alloc_tty_struct+0xa6/0x780 [ 532.500979][ T1301] tty_init_dev+0x59/0x4d0 [ 532.505389][ T1301] tty_open+0x5ab/0xd10 [ 532.509551][ T1301] chrdev_open+0x4cc/0x5e0 [ 532.513975][ T1301] do_dentry_open+0x950/0x13f0 [ 532.518746][ T1301] vfs_open+0x3b/0x340 [ 532.522831][ T1301] path_openat+0x2ee5/0x3830 [ 532.527417][ T1301] do_filp_open+0x1fa/0x410 [ 532.531943][ T1301] do_sys_openat2+0x121/0x1c0 [ 532.536636][ T1301] __x64_sys_openat+0x138/0x170 [ 532.541491][ T1301] do_syscall_64+0xfa/0xfa0 [ 532.546004][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.551893][ T1301] [ 532.554212][ T1301] Freed by task 5944: [ 532.558183][ T1301] kasan_save_track+0x3e/0x80 [ 532.562868][ T1301] __kasan_save_free_info+0x46/0x50 [ 532.568065][ T1301] __kasan_slab_free+0x5b/0x80 [ 532.572835][ T1301] kfree+0x18e/0x440 [ 532.576733][ T1301] process_scheduled_works+0xae1/0x17b0 [ 532.582275][ T1301] worker_thread+0x8a0/0xda0 [ 532.586865][ T1301] kthread+0x711/0x8a0 [ 532.590938][ T1301] ret_from_fork+0x47c/0x820 [ 532.595535][ T1301] ret_from_fork_asm+0x1a/0x30 [ 532.600305][ T1301] [ 532.602626][ T1301] Last potentially related work creation: [ 532.608339][ T1301] kasan_save_stack+0x3e/0x60 [ 532.613116][ T1301] kasan_record_aux_stack+0xbd/0xd0 [ 532.618318][ T1301] insert_work+0x3d/0x330 [ 532.622660][ T1301] __queue_work+0xcd2/0xfb0 [ 532.627170][ T1301] queue_work_on+0x181/0x270 [ 532.631763][ T1301] tty_release_struct+0xb8/0xd0 [ 532.636610][ T1301] tty_release+0xcb0/0x1640 [ 532.641113][ T1301] __fput+0x449/0xa70 [ 532.645098][ T1301] task_work_run+0x1d4/0x260 [ 532.649697][ T1301] do_exit+0x6b5/0x2300 [ 532.653857][ T1301] do_group_exit+0x21c/0x2d0 [ 532.658449][ T1301] get_signal+0x1286/0x1340 [ 532.662956][ T1301] arch_do_signal_or_restart+0x9a/0x750 [ 532.668518][ T1301] exit_to_user_mode_loop+0x75/0x130 [ 532.673802][ T1301] do_syscall_64+0x2bd/0xfa0 [ 532.678397][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.684291][ T1301] [ 532.686616][ T1301] The buggy address belongs to the object at ffff88805bac2000 [ 532.686616][ T1301] which belongs to the cache kmalloc-cg-2k of size 2048 [ 532.700925][ T1301] The buggy address is located 32 bytes inside of [ 532.700925][ T1301] freed 2048-byte region [ffff88805bac2000, ffff88805bac2800) [ 532.714734][ T1301] [ 532.717057][ T1301] The buggy address belongs to the physical page: [ 532.723494][ T1301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bac0 [ 532.732254][ T1301] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 532.740746][ T1301] memcg:ffff88802b878201 [ 532.744981][ T1301] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 532.752519][ T1301] page_type: f5(slab) [ 532.756498][ T1301] raw: 00fff00000000040 ffff88801a84b3c0 dead000000000100 dead000000000122 [ 532.765171][ T1301] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88802b878201 [ 532.773755][ T1301] head: 00fff00000000040 ffff88801a84b3c0 dead000000000100 dead000000000122 [ 532.782424][ T1301] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88802b878201 [ 532.791095][ T1301] head: 00fff00000000003 ffffea00016eb001 00000000ffffffff 00000000ffffffff [ 532.799764][ T1301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 532.808515][ T1301] page dumped because: kasan: bad access detected [ 532.814944][ T1301] page_owner tracks the page as allocated [ 532.820655][ T1301] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5857, tgid 5857 (syz-executor), ts 70159419266, free_ts 26837036191 [ 532.842016][ T1301] post_alloc_hook+0x240/0x2a0 [ 532.846782][ T1301] get_page_from_freelist+0x21e4/0x22c0 [ 532.852326][ T1301] __alloc_frozen_pages_noprof+0x181/0x370 [ 532.858136][ T1301] alloc_pages_mpol+0x232/0x4a0 [ 532.862983][ T1301] allocate_slab+0x8a/0x330 [ 532.867488][ T1301] ___slab_alloc+0xbd1/0x13e0 [ 532.872183][ T1301] __kmalloc_cache_noprof+0x282/0x3a0 [ 532.877568][ T1301] ipv6_add_dev+0x24e/0x1370 [ 532.882170][ T1301] addrconf_notify+0x794/0x1010 [ 532.887029][ T1301] notifier_call_chain+0x1b3/0x3e0 [ 532.892150][ T1301] register_netdevice+0x1608/0x1ae0 [ 532.897358][ T1301] wg_newlink+0x391/0x640 [ 532.901717][ T1301] rtnl_newlink_create+0x30d/0xb00 [ 532.906852][ T1301] rtnl_newlink+0x16d6/0x1c70 [ 532.911543][ T1301] rtnetlink_rcv_msg+0x7cc/0xb70 [ 532.916511][ T1301] netlink_rcv_skb+0x205/0x470 [ 532.921280][ T1301] page last free pid 1 tgid 1 stack trace: [ 532.927086][ T1301] __free_frozen_pages+0xbc4/0xd30 [ 532.932210][ T1301] free_contig_range+0x1bd/0x4a0 [ 532.937163][ T1301] destroy_args+0x69/0x660 [ 532.941584][ T1301] debug_vm_pgtable+0x39f/0x3b0 [ 532.946548][ T1301] do_one_initcall+0x233/0x820 [ 532.951339][ T1301] do_initcall_level+0x104/0x190 [ 532.956282][ T1301] do_initcalls+0x59/0xa0 [ 532.960616][ T1301] kernel_init_freeable+0x334/0x4b0 [ 532.965826][ T1301] kernel_init+0x1d/0x1d0 [ 532.970167][ T1301] ret_from_fork+0x47c/0x820 [ 532.974762][ T1301] ret_from_fork_asm+0x1a/0x30 [ 532.979531][ T1301] [ 532.981859][ T1301] Memory state around the buggy address: [ 532.987484][ T1301] ffff88805bac1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 532.995544][ T1301] ffff88805bac1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.003628][ T1301] >ffff88805bac2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.011684][ T1301] ^ [ 533.016790][ T1301] ffff88805bac2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.024848][ T1301] ffff88805bac2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.032905][ T1301] ================================================================== [ 533.041031][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.047102][ T1301] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 533.054319][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 533.063354][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.073414][ T1301] Call Trace: [ 533.076700][ T1301] [ 533.079635][ T1301] dump_stack_lvl+0x99/0x250 [ 533.084239][ T1301] ? __asan_memcpy+0x40/0x70 [ 533.088846][ T1301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.094076][ T1301] ? __pfx__printk+0x10/0x10 [ 533.098691][ T1301] vpanic+0x281/0x750 [ 533.102693][ T1301] ? __pfx_vpanic+0x10/0x10 [ 533.107208][ T1301] ? rcu_is_watching+0x15/0xb0 [ 533.111983][ T1301] panic+0xb9/0xc0 [ 533.115713][ T1301] ? __pfx_panic+0x10/0x10 [ 533.120138][ T1301] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 533.126042][ T1301] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 533.131943][ T1301] ? is_module_address+0x17/0xf0 [ 533.136901][ T1301] ? handle_tx+0x1ec/0x610 [ 533.141318][ T1301] check_panic_on_warn+0x89/0xb0 [ 533.146265][ T1301] ? handle_tx+0x1ec/0x610 [ 533.150683][ T1301] end_report+0x78/0x160 [ 533.154925][ T1301] kasan_report+0x129/0x150 [ 533.159432][ T1301] ? handle_tx+0x1ec/0x610 [ 533.163862][ T1301] handle_tx+0x1ec/0x610 [ 533.168112][ T1301] dev_hard_start_xmit+0x2d7/0x830 [ 533.173231][ T1301] __dev_queue_xmit+0x1b8d/0x3b50 [ 533.178264][ T1301] ? __dev_queue_xmit+0x27b/0x3b50 [ 533.183379][ T1301] ? rcu_is_watching+0x15/0xb0 [ 533.188170][ T1301] ? trace_sched_exit_tp+0x36/0x110 [ 533.193468][ T1301] ? __schedule+0x17ae/0x4cc0 [ 533.198154][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 533.203530][ T1301] ? do_raw_spin_lock+0x121/0x290 [ 533.208565][ T1301] ? rcu_is_watching+0x15/0xb0 [ 533.213333][ T1301] ? do_raw_spin_unlock+0x122/0x240 [ 533.218586][ T1301] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 533.224487][ T1301] ? rcu_is_watching+0x15/0xb0 [ 533.229261][ T1301] ? rcu_is_watching+0x15/0xb0 [ 533.234029][ T1301] tx+0x6b/0x190 [ 533.237588][ T1301] ? __pfx_tx+0x10/0x10 [ 533.241760][ T1301] kthread+0x1cd/0x3e0 [ 533.245875][ T1301] ? __pfx_kthread+0x10/0x10 [ 533.250650][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 533.256455][ T1301] ? __kthread_parkme+0x7b/0x200 [ 533.261396][ T1301] ? __kthread_parkme+0x1a1/0x200 [ 533.266443][ T1301] kthread+0x711/0x8a0 [ 533.270521][ T1301] ? __pfx_kthread+0x10/0x10 [ 533.275118][ T1301] ? __pfx_kthread+0x10/0x10 [ 533.279729][ T1301] ? rcu_is_watching+0x15/0xb0 [ 533.284497][ T1301] ? __pfx_kthread+0x10/0x10 [ 533.289096][ T1301] ret_from_fork+0x47c/0x820 [ 533.293710][ T1301] ? __pfx_ret_from_fork+0x10/0x10 [ 533.298825][ T1301] ? __switch_to_asm+0x39/0x70 [ 533.303605][ T1301] ? __switch_to_asm+0x33/0x70 [ 533.308374][ T1301] ? __pfx_kthread+0x10/0x10 [ 533.312978][ T1301] ret_from_fork_asm+0x1a/0x30 [ 533.317754][ T1301] [ 533.321156][ T1301] Kernel Offset: disabled [ 533.325483][ T1301] Rebooting in 86400 seconds..