last executing test programs: 15m0.725313765s ago: executing program 3 (id=1296): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000740)={0x0, &(0x7f0000000780)=[@nested_amd_vmload={0x182, 0x18}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x8ee}}, @wrmsr={0x65, 0x20, {0x697}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x54, {0x1, "66b87e008ec82e66410f3881668d64f3430f1eec0f32b9ae0100000f32b9800000c00f3235004000000f3066440f6e1f0f01cf450f01cbc401a166cc"}}, @wr_crn={0x67, 0x20, {0x8, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x71000, 0x2c42}}, @uexit={0x0, 0x18, 0x4}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x8d, 0x1, 0x7, 0x1}}, @cpuid={0x64, 0x18, {0x8, 0x4e7dcc15}}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0xeb02}}, @wr_drn={0x68, 0x20, {0x3, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x9, 0x8}}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x0, 0xfffffff9}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0x9744}}, @cpuid={0x64, 0x18, {0x7, 0x8000}}, @in_dx={0x69, 0x20, {0xf808, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x821, 0x7}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x4000009f}}, @wrmsr={0x65, 0x20, {0x9a6, 0x7}}, @enable_nested={0x12c, 0x18}], 0x314}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 15m0.627613342s ago: executing program 3 (id=1297): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f", 0x96) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000efff000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) 15m0.453839446s ago: executing program 3 (id=1298): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000000280)=""/198, 0xc6}], 0x2, 0x5, 0x3) 15m0.229362504s ago: executing program 3 (id=1301): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='source', 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0x2, 0x8, 0xa, 0x2, 0x3}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000de2ffa1700000a38000000030a03000000000000000000020000000900010073797a30000000000900030073797a31000000000c00024000000000000000011400000011000100000000000900"], 0x60}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000005d80), 0x0, 0x0, 0x0, 0x24000000}], 0x61, 0x62048800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140)=0x1000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000020c0)=""/4093, 0xffd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000ffdbdf250d0000000a0009001c96cd2f6853000008000b000500000008000600", @ANYRES32=0x0, @ANYBLOB="0a2d7fb73ed68e2dc4a37d4574f3f31322d9eb4d1e2f7addc03a029c3900d8217b20165a231dfb089ec3dd3a7ded0f1793e82dc9ab3890e360a3383c71a557b2d69694cb4d138e265a75dabd284fe0841c3070350ce671f4b465357ca0c6c8e1d4ec16b75655529137ac2207b663a64f802e7f8e2ce579e9833848555e0df0725eb2485b2f1aeb52952108cb7267570c33302b791dd0bb04be59858448df2b50d74582b6663fa4aadb7968c36c46ddcb1c923984f43e132a53cd23ddada61701c47ec6"], 0x30}, 0x1, 0x0, 0x0, 0x20048810}, 0x20000004) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x1014, 0x0, @discrete={0x8d, 0x2a}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x24048850}, 0x40) keyctl$read(0xb, r5, &(0x7f00000003c0)=""/200, 0xc8) 14m59.330427713s ago: executing program 3 (id=1308): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f", 0x96) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000100000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) 14m58.93376491s ago: executing program 3 (id=1310): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000008c0)={0xa, @pix_mp={0xa0, 0x5, 0x31324d59, 0x1, 0x2, [{0x1, 0x1}, {0x9, 0x10}, {0xc, 0x400}, {0xffff, 0x2}, {0x7, 0xa}, {0x401, 0x13}, {0x5}, {0x5, 0x1}], 0x1, 0x0, 0x6, 0x1, 0x1}}) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x21002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') syz_usb_control_io(r5, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0xfff, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) 14m43.806178949s ago: executing program 32 (id=1310): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000008c0)={0xa, @pix_mp={0xa0, 0x5, 0x31324d59, 0x1, 0x2, [{0x1, 0x1}, {0x9, 0x10}, {0xc, 0x400}, {0xffff, 0x2}, {0x7, 0xa}, {0x401, 0x13}, {0x5}, {0x5, 0x1}], 0x1, 0x0, 0x6, 0x1, 0x1}}) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x21002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') syz_usb_control_io(r5, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0xfff, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) 14m36.129220563s ago: executing program 0 (id=1388): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) (async) ptrace(0x10, r0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc0100001900010025bd700000000000ac1414030000000000000000000000000000000000000000000000000000000000000003000000000a00008008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 14m35.689554588s ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000c71e9496fcfffeff3d000000008ed8b462b2000000006742309ca62fccf171d7959e0cb0b90be28f63deae2ac8eedf0928901c416fbaf610ebbb99b8", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000340012800b00010067656e65766500002400028005000c000100000005000d000100000008000100030000000500040005000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000404000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d00000003000000040000000700000001000000", @ANYRES32=r2], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r3, 0x500}, 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x1, 'hsr0\x00', {}, 0x400}) r5 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000000001081179808000000000001090224000100000000090400"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000806010300000000000000000300000405000100070000006eabc1029885c8df837c65dcc59c5c847a5f547cef2d57"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080004) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000001940)=""/13, 0xd}], 0x1) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) listen(r10, 0x8) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x101, 0x181902) ioctl$VIDIOC_QUERY_EXT_CTRL(r11, 0xc038563c, &(0x7f0000000300)={0x0, 0x101, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x3fc000, 0x6, [0x0, 0x800000]}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r13, 0x8}, 0x8) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 14m33.190863316s ago: executing program 0 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x4000400) bind(r3, &(0x7f00000003c0)=@can, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x28, 0x41, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x2d}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}, @nested={0x4, 0x20}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) unshare(0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24040004) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0xc400) r7 = getpid() process_vm_readv(r7, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/69, 0x45}], 0x1, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000240)=""/113, 0x71}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000100001002bbd7000fbdbdf2500000000d201ab8b79aeb11979e3d113040ff60d7b2669b740e15ee0f3637fdbf752", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d30000000000000300016802c00018028000100690000000180c200000100"/76], 0x64}}, 0x40000040) 14m32.750243782s ago: executing program 0 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0x0, 0x700001b, 0x148, 0x178, 0x148, 0x258, 0x206, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @broadcast, 0x6223014bd1c2f73b, 0xffffff00, 'veth1_vlan\x00', 'gre0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x18}, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 0x8, 0xf, [0x82d, 0x30, 0x6, 0x7, 0x8, 0xb, 0xd, 0x38, 0x37, 0x30, 0x16, 0x1f, 0x4, 0x24, 0x1e, 0x10], 0x1, 0x0, 0x8}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(r5, &(0x7f00000000c0)='./file0\x00', 0x0) fchdir(r6) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14m32.149066797s ago: executing program 0 (id=1403): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x5) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syz_tun\x00', 0x603}) 14m31.826503042s ago: executing program 0 (id=1405): r0 = getpid() (async) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) syz_pidfd_open(r0, 0x0) (async) r2 = syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 14m31.066606081s ago: executing program 33 (id=1405): r0 = getpid() (async) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) syz_pidfd_open(r0, 0x0) (async) r2 = syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 13.554349948s ago: executing program 1 (id=5555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_getattr(r3, 0x0, &(0x7f0000006040), 0x27, 0x1000) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) 12.710098422s ago: executing program 6 (id=5559): futex(&(0x7f0000000000)=0x1, 0x0, 0x1, 0x0, 0x0, 0x1) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) (async) r1 = socket(0x2b, 0x1, 0x1) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f0001"], 0x18}], 0x1}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000000101044cb69bab000000000200800306001240000c00002c0002801400018008000100e0000001080002009ec50283cddcb7df8ce10100e00000010c0002"], 0x48}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000) (async) unshare(0x24020400) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) fcntl$lock(r5, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x200000002, 0xfffffffffffffff8}) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x1, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) (async, rerun: 32) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) (rerun: 32) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4ffffff) 12.625369759s ago: executing program 1 (id=5560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000940)={@private2, 0x0}, &(0x7f0000000980)=0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4044094) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'erspan0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x6, 0xf, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x1b, 0x18, [@loopback, @loopback, @broadcast, @broadcast, @private=0xa010101, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x2, 0xf, 0x8, 0x4, 0x3, @mcast2, @remote, 0x80, 0x10, 0x18, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x1, 0x700, 0x5, 0x3}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000c40)={0x888, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3a}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x6, 0x8b, 0x2}, {0x6, 0x5, 0x2, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd796}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x98d, 0x14, 0x7, 0x356f}, {0x400, 0xb, 0xfe, 0x80}, {0x5, 0x8, 0x6, 0xfffffffb}, {0x7, 0x6, 0x1, 0x6e}, {0x4, 0x81, 0xf2, 0x8}]}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5b6bc315}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x85}, 0x90) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) inotify_init() fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9b, 0x2}}, './file0\x00'}) r14 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r14, 0xc100565c, 0x0) r15 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r16 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r15) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r16, 0x20}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r17, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 12.616878086s ago: executing program 1 (id=5561): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0046649b2bbe1e2dc30048fd7c08b944ad9635a72236dca22d0f35f65669256c12db63d93bc581351cc30aa47b5aa14786f1a399302298c10ea5f5a479a549ec5d6c6ee2e7564c9cc48a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) fsopen(0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001080), 0x80000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c240304020301030d07"], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000140)={0x0, [[0x6, 0x7fff, 0x9, 0x3, 0xc, 0x4, 0x0, 0x7f3], [0x5, 0xa, 0x7, 0xb4, 0x800, 0x5, 0x3], [0x800, 0x71, 0x0, 0xfffffffc, 0x9, 0x1003, 0x6, 0x800001]], '\x00', [{0x4, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x7f, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xa, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x2818, 0x1, 0x1, 0x1}, {0x4, 0x4, 0x1, 0x0, 0x1}, {0x3d, 0xffff7fff, 0x0, 0x0, 0x1, 0x1}, {0xf, 0x1}, {0x2, 0xfff, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xb7a, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x3ff}) socket$inet6(0xa, 0x3, 0x5) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x14) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@overlay={0x400, 0x7, 0x4, 0x4, 0x58, {0x77359400}, {0x5, 0x8, 0x1, 0x5, 0x0, 0xd5, "6a85f80d"}, 0x8001, 0x3, {}, 0x3, 0x0, r2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 12.599874787s ago: executing program 6 (id=5562): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010003, 0x0, 0x4}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x207d, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000024000/0x4000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0x7dc, 0x38, 0x0, 0x0, 0x40}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0xc223}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000180)) exit(0x1ff) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r10 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000006c0)={0x0, 0xb074, 0x6, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000faff000000000000000003004d517870f69f5e4cc01c0000000000004d2c14ff991a134543e1912c2aef017d7a37ba605291064887c2985af7d4df69941fb84fc7331383ea148913eede4ecf6866c7bc9f09371294d84326c476fe7069156db3cf8b7739addc0285477d5ecb54a4890278cee228d65ce2d409f37fc627b6bbb720f385cdaf1b261e95c1d5bc8866df60690c9713b70269311a6daa5d10ae995441c9b3735005a5bf4c22ba97136859873ba170f2d48056c86643b187e8"], 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x44844) write$tun(r6, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0xde, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffe, 0x64, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 9.471623492s ago: executing program 1 (id=5576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x80000504, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r1, 0x0, 0x0, 0x2000c844) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x60) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x79c, @private2, 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000001540)={&(0x7f00004a0000/0x1000)=nil, 0x1000}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) mkdir(0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200e0100009636"], 0x0, 0x0, 0x0, 0x0}) 9.317382949s ago: executing program 6 (id=5579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x4, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200050000001400000060000000080011"], 0xfdef) r3 = dup(r0) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x100000d, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) close(r4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="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", 0xfa}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 8.869525255s ago: executing program 6 (id=5580): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x440) r0 = socket(0x400000000010, 0x3, 0x2) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000271) close(r4) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x5, 0x6a, 0x9, 0x9, 0xffffffffffffff09, 0x1041, 0x4, 0x0, 0x400033a, 0xf, 0x2000000100000002, 0x49, 0x9, 0x800005, 0x67], 0xd005, 0x101052}) creat(&(0x7f0000000000)='./file0\x00', 0x168) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.728247539s ago: executing program 5 (id=5581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xd, 0xa, 0x100, "3258c5c0d60400080000450d00000f002000a2ed55554e241247000000f600", 0x32435750}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793f10d105012000080000000109021200010000"], 0x0) 6.333576554s ago: executing program 1 (id=5584): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x1200, 0x8804}, 0x24000080) 6.318138785s ago: executing program 1 (id=5585): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) 5.746553593s ago: executing program 6 (id=5589): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xb, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x39, 0xc7, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055443800000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0xc, 0xdc, {0xdc, 0x4, "127bb886a5cf640551b132be9d2dfe06142b5a5a1aa442ca02a9aa289e710e341434005c9eb4422a4efea037c25cf7c5ffee65ca6193437a5bdc84e362f2420d5a93d5f8912222a2a66ef557d40c38c4e93485ade5136143abdda5329d4823eab6bd8ec5b622ca63dab5737fb3acdaf0b312a130e83f3d4991322651e268c92868473205118a32c0645eca473722924bcbcaa71f289bfce0064cc74f5029b021660f5fc61ceaad79e08874ba55c19c0d94b17803de4eb49c300fecdfdb839bee11926d268c7590f0a7bb202f3d6f8508b2e94ec5dd21af54ac15"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x0, 0xcc, "8581693af2d546fc0f37c90921b29e16029837761e91c440ad28aa63ce23c615d30e5921e25ee5b0f8a575b709ae64b6cd34c4f98a994be62447ddfddcf46b4b6d6c487f4f24318e90a4ab095f1fab944bba01d73220c23c7e769947e574422c39cd3e39b50bb9f3951e733f76b5919f6457c3340aadbec868b9b53cc51f3ceea7e447493761df0210ace64a0434d5db18669638fe8075d4a88db9ad1ee8dc8d130b83430cd83e038740375a71738aee195536da1b26056bc176720c3cbae5fd8fa7c66bdfd7231cd352d62a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x81, 0x3, "791d2a"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "6ea5"}, &(0x7f0000000480)={0x20, 0x83, 0x2, "cea4"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "292fba60"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "51b3fe"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0}) 5.397718193s ago: executing program 5 (id=5590): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r0, 0x3461}], 0x1, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000004240)=""/4105, 0xffd}, {&(0x7f0000003200)=""/4099, 0xfffffd32}], 0x2, 0x0, 0x0, 0x1) timer_settime(0x0, 0xb944fe7586b417b1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x4a, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400300000000006504000001ed00007b130000000000006c440000000000007b0a00fe000000007b13000000000000b5000000000000009500000000000000023bc865b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a621a464a3778433e6e393002e7f3be361957adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9aa0d7d600c095090000100000000031eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7005005b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fc152b7b9da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33290933896a59ff61622cfd9aa58fe8d485f062ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed415561c459565b1cd17572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7c00007502c7596566d674e425da5e87e59602a9f6590521d31d381eb3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2e454da0c052427d14c37960242b104e20dc2d9b0c3567aea26454a47b0f0797a7308d402ccdd9069bd50b994fda7a9de54022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c53c18294270a1ad10c80fef7c24b78b4ad83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca57138000b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0602a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844cea001ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e078b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1bb5916b9671b7000000000040f4bee5ad2dea2d070095265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879c8e7dc00624726042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b25393f7536bcda9f64b7c5640bf89d4a74d51dc233dee628c1dfbb55669f84784174b34eb234481547e484c6af101396b6977dd668b401391c1d2e242edccf1cabe6be9868d383ebf1db5aee9b73e92bb82c164ab14bb25189817742e054886ed6d7abbacf6319f3c050e7d53df64633eafcb64291b81188fab69b5a06fe029ce46c5cac1bb1ea8ea98aee207fa4c9618a9ce80bd8b530f4b9ba8860bf1e887ec670312ef0502e3d0a0e30dbaf38c042b7fd207c61e6b73d3b61d194acb4bf4d3e0187d62ee27cbee175eb2312209f68747eeeea30c1634d54799f42753df8e7462c6f5331ea8e56b5c4a373dfe9f111d0206f4e90f71c03bc24960dd84345e59e1289d47a929158babfb331f27370928198d2cd367e928e98c54c67b6382cb958fec947d2ece3695755bc71d55a84bb0a0da43cb9f526a20566e9d00cf9fe6be3adf3e0a05771d66664239d199ce84aa7f684c0ce4c342a85d654624736a3b9b067e2bd298ae8a2527ce59fba9448b13655281431335496da08ac626fe0b57ebb4ad0b9495a183587108b4308bc68eeca9062873703ed0ee726a7867436e01dcd6edf1583e7e17043afda8f46fdd688d461125d724404a310"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0xa, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000293000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r8 = syz_io_uring_complete(0x0, 0x0) sendmsg$nl_crypto(r8, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@alg={0xe8, 0x10, 0x200, 0x70bd2a, 0x25dfdbfb, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4) r9 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xd, 0x924, 0xb, 0x2, 0x32, 0x40, 0x80}, 0x9c) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000340), 0x4) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 4.583218856s ago: executing program 5 (id=5592): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r1], 0x1, r2, 0x0, 0x1c, 0x1ff, 0xff, 0xd, {0x7, 0xfffd, 0x8000, 0xc, 0x0, 0xfff, 0xb, 0x400, 0x401, 0x676, 0x0, 0xfffffc01, 0x84a, 0x0, "9b4e0f5efffcf54cce524d0f3aa831b9bc0337c7998c99e596b019740e0e1189"}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x101}, 0x8) (async) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x101) (async) r6 = syz_open_dev$sg(&(0x7f0000000400), 0x7, 0x2) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000440)) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000480)) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) (async) r8 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x8, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r8, 0x40184152, &(0x7f0000000840)={0x0, &(0x7f0000000800)=[&(0x7f0000000580)="44ed3b444513130732d9815f048c19644ed2eebe9524d3bc860d7d277ca97a5a9f9118697dba5c948e5aa242789ac8f140c10f462c5c0f7d27fa2aff776e218c03154d6c3d7ca8d11f455bf82e9f3d3c9fd47f71c48a83189aacae7bdf7e180b18c4c62c11", &(0x7f0000000600)="d96a314ef45d6b26746221989fdaaf4213d80a56f38520c91cb43158dcb59c5273b2c056cc405b41c0835929ca905389d346aff6ed7f363c22885a4722dc70b47816f8164b106f7767c43e74daaf02dbe0d98b1cbf3d7f94447466f190dcd1077e1cd1245da7cfa27f4e9147ea959d7f025c1e6991604590aed6be66b9457b86afa5fb815134d16960a4d45c8b75910c1b8335322b8e85d33a3e29c7897525c8050aff78adbf78545492", &(0x7f00000006c0)="ab997a99605ae3e21ced74c4c36e838984e84fe3ca2e83322f228253fd1073a5d3209205715553dd9d1443cb45e52a9ceb131de2e2f1c08f52fe68cbb00c8864864be5217effd7ddf2b3b6f6e86282b3e4", &(0x7f0000000740)="36fbbed9de7b0e57e717143b4c0c7764966d68168eea040b0a133b0cade9c1cb07bf5502af001a4a70592d781e57000051edd6784d0971586a7978695d326c3337f7dddc851c843ed3507e4211264879904c42f0f75be7d166a2efdfa415e535f75e18f2ca38aca88fc041cf78098594da35a32f44a00da586c7257e3d707d3bc0132c71a9bcfcc26c986b1bfaa16733112e600714036fd2af595764a14f5600252cd16b01af513aa3c43c8483a9"], 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000900)={0x8, r9}) (async) ioctl$TUNSETLINK(r7, 0x400454cd, 0x300) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000940)) (async) syz_usb_connect$uac3(0x5, 0x129, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x3, 0x1, 0xff, 0xd0, 0x5, {0x8, 0xb, 0x28, 0x0, 0x1, 0x23, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x49, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x403, 0x1, 0x6, 0x3, 0x8, 0x4, 0x3, 0x4}, @extension_unit={0xd, 0x24, 0xa, 0x3, 0x1, [0x2, 0x1]}, @cluster_info_segment={0x6, 0x20, 0x1, 0x24, 0x69}, @processing_unit={0x19, 0x24, 0x9, 0x5, 0x6, [0x1, 0x0, 0x2, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0xfe, 0x6, 0x5, 0x7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x2, 0x1, 0x9, "", ' '}, @as_header={0x17, 0x24, 0x1, 0x2, 0x7f, 0x1, 0x1002, 0xa, 0xf6, 0xe, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf8, 0xc, 0xf9, {0xa, 0x25, 0x25, 0xf3b, 0xa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x8, "03", "b2278e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0xf4, 0x88, 0x8, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x6, 0xff, "", "6ddf25"}, @as_header={0x17, 0x24, 0x1, 0x1b, 0x2, 0x4, 0x1002, 0x1d, 0xc6, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0xd, 0x9, "", "81a1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x10, {0xa, 0x25, 0x25, 0x5, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x200, 0x5, 0x5, 0x8, 0x10}, 0xc, &(0x7f0000000b00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x0, 0x1}]}, 0x7, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb6, &(0x7f0000000b80)=@string={0xb6, 0x3, "487b0666b456de2e91258a18fd7629b1367e7f8a6d87d2890a0e748f9ca850cf18cb93be450af175e042464b9cf9186b22dad1989e147332572d0f696a9089912084aea1e003f2da84c20e60a91aa491832eb1ccc5bef7d299cb2671d7ea8ee8fcdeb1ea0f56ee850176a619773f12fe5ddef7b2fefa93185e2604ac5a27e98322ed935dbdb6a8a7efd474b753d9a5c852c6a0dbfec9cd514c716c7a71c40300255bf0ac883a2051e1412450d4620abe308fcc5a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x240a}}, {0x2a, &(0x7f0000000c80)=@string={0x2a, 0x3, "baf18cf2abd251df3c9269e78b7ff1ebcd681d8fec47de0202f13293b67b0a553d645dd5fc7395f8"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x640b}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1401}}]}) (async) r10 = syz_open_dev$sndpcmp(&(0x7f0000000e00), 0x40, 0x20000) ioctl$OCFS2_IOC_GROUP_ADD64(r10, 0x40186f03, &(0x7f0000000e40)={0x2, 0xf14, 0x9, 0x3}) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0xe0200, 0x29) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000ec0)) (async) write$midi(r11, &(0x7f0000000f00)="db4b923b160ecc4e880c64c59ec23d6bcf5f5866a7480e5df58b163472cc745fd18c83e83a69856fa617854c91b53e21a793ab8368c0f15a0b28c18ee8399363215fafc8288775f6667c3e994c763cb233805983909aaf82cb8833831fe352012b529e181b4f728f42f05fb4f8bfc05e8a134e2d0cbadd19f5879a34ee325a88cc2abf71f550d173aefc5229", 0x8c) ioctl$IOMMU_DESTROY$hwpt(r11, 0x3b80, &(0x7f0000000fc0)={0x8, r9}) setsockopt$MRT_DEL_MFC(r11, 0x0, 0xcd, &(0x7f0000001000)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "33a80aacaa9a93c0cdd53d109e69d756b9bd821cca4723e3c125ba9f3c379fa0", 0xfff, 0x5}, 0x3c) (async) ioctl$IOMMU_GET_HW_INFO(r11, 0x3b8a, &(0x7f0000001180)={0x28, 0x0, 0x0, 0xc0, &(0x7f00000010c0)=""/192}) 4.3610564s ago: executing program 2 (id=5593): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x1080041) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000023"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32=r1], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="40d800"/20, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000020000000200"/28], 0x50) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001200010027bd7000ffdbdf250309040d4e234e220010000000000000ff0000000a06000001000100f0ffffff0000000001000080", @ANYRES32=0x0, @ANYBLOB="080000004649e8da03000000000000000400010004000100"], 0x54}}, 0x8040) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x18}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0xc020}}]}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff) r7 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000200)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80b, 0x20}}], 0x40}) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x0, 0xfffffffe, {}, {0x2, 0x8, 0x9, 0xa3, 0xf, 0x2, "5a438cfa"}, 0xc0, 0x2, {0x0}, 0xb}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) mmap$binder(&(0x7f0000d98000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="831026bd7000fcdbdf251600000018000180140002006e657464657673696d300000000000000500020000000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0xbde8b7aa92ee725b}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xbb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r11, &(0x7f0000000280)='0', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.253582915s ago: executing program 4 (id=5594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYRES32=r1], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.859141145s ago: executing program 4 (id=5595): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000040)={0x9, [[0xe, 0x8, 0x10001, 0x7, 0x7, 0x101, 0xea37, 0x81], [0xad8, 0x680000, 0x340000, 0x1, 0xcd, 0x0, 0x6aa5, 0x7], [0xfffffeff, 0x1, 0x3, 0x4, 0xc65425d, 0x4, 0x7, 0x1]], '\x00', [{0x1e, 0x1000, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x1, 0x1, 0x1}, {0x8001, 0x81, 0x1, 0x1}, {0xc, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x101, 0x1, 0x1}, {0xb7, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x400, 0x1, 0x1}, {0x2, 0x2, 0x0, 0x1}, {0xffffffff, 0x100, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1}], '\x00', 0x10001}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000002c0)={0xfffffffe, [[0x6, 0x3, 0x0, 0x5, 0x0, 0x6, 0x1, 0x6], [0x6, 0x0, 0x2e56afdf, 0x14600, 0x4, 0x0, 0x2, 0x6ee5], [0x85f, 0x401, 0xcf, 0x6, 0xdea, 0xfffffff7, 0x8, 0x5]], '\x00', [{0x10001, 0xa9, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xfff, 0x9b98, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x97, 0x1, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1}, {0x8f7, 0x100, 0x1, 0x1, 0x1}, {0x25f, 0x5745, 0x0, 0x1, 0x1}, {0x8, 0x6260, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1}, {0x53c7, 0xf, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}]}) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x40000, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0xa, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x5, 0x1, 0x1}, {0x4, 0x1, 0x2}, {0xc, 0x5, 0x2}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x4}, @fwd={0x2}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000640)=""/164, 0x64, 0xa4, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x6, 0x2, 0x3, 0x1c, r0, 0x1f, '\x00', r3, r4, 0x4, 0x0, 0x5, 0xf}, 0x50) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fstat(r6, &(0x7f00000007c0)) (async) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000008c0)={'veth1_vlan\x00', 0x200}) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000000900)={0x0, 0x0, 0x4, 0x4, 0x6, 0x4}) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000940)={0x0, 0x7b, "ac1a33bfed8031e2b5140bd70e9346dc455e8ae86c292a158baee7ec107ff3eb9896c6b356f79e49402a70afb438a33ed951e49da40bb84fdb0870533504192a6edfb09c9a4b174044796b22e40e665fc0c96b4b1c940609b649653569a82b542ecd19928d822063e694b46927dd04f58b0ea055a0f411a2f8cbf9"}, &(0x7f0000000a00)=0x83) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000a40)={r8, 0x101}, 0x8) (async) sendmsg$nl_generic(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x84, 0x1b, 0x200, 0x70bd2d, 0x25dfdbfd, {0x5}, [@nested={0x14, 0x2c, 0x0, 0x1, [@typed={0xc, 0x110, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0x4, 0x164}]}, @generic="558f84169e30d50ab167bd5176cfc5c88132936c554066dccbba6feb159458826fde19fa01c1057c5e7be974", @nested={0x1c, 0xec, 0x0, 0x1, [@nested={0x4, 0x13c}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r2}, @typed={0xa, 0xf2, 0x0, 0x0, @str='team0\x00'}]}, @nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x96}]}, @nested={0xc, 0x14d, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r2) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x217}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000d80), r1) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x64, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2040}, 0x40) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000ec0)={r8, 0xffc0}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r7, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @jmp={0x5, 0x0, 0x0, 0x5, 0x8, 0x100, 0x8}]}, &(0x7f0000001040)='syzkaller\x00', 0x40, 0x9a, &(0x7f0000001080)=""/154, 0x41100, 0x38, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x1, 0xb, 0x7, 0xffffffff}, 0x10, 0x4a2e, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001180)=[{0x0, 0x5, 0x10, 0x6}, {0x3, 0x3, 0x4, 0x6}, {0x3, 0x1, 0xa, 0x6}], 0x10, 0x8}, 0x94) (async) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000001280)=0x1, 0x4) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x20010, r1, 0xaceff000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001900)=@filter={'filter\x00', 0xe, 0x5, 0x5fe, [0x0, 0x200000001300, 0x2000000015ac, 0x2000000016f2], 0x0, &(0x7f00000012c0), &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x29, 0x88a8, 'vlan1\x00', 'ip6erspan0\x00', 'ip6erspan0\x00', 'ip6tnl0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0x7dac0d20fe8ae137, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xd6, 0xd6, 0x106, [@realm={{'realm\x00', 0x0, 0x10}, {{0x9, 0x80000, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x80000001, 0x1}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x3, 0x4, 0x886c, 'veth1_to_batadv\x00', 'syz_tun\x00', 'team0\x00', 'gretap0\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xb6, 0x12e, 0x176, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xff000000, 0xff000000, 0x0, 0x4, 0x2, 0x3247d3edc2fbf7ba, 0x4e20, 0x4e24, 0x4e22, 0x4e24}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x30, 0x3ffc, 0x7, 0x0, 0x0, "fb15ccf9d455f6e70956c6eb76fb6dca6208667af25ae8022b5d58b5d06f20c84361cf65ccc0bb21937d7faccf2b1f52baccb50748af43f44122aa9b09ea1505"}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0x20, {0x495}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0x8, 'team_slave_0\x00', 'virt_wifi0\x00', 'macvtap0\x00', 'gre0\x00', @random="096f70950d2e", [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="50c82cc8c8c5", [0xff, 0xff], 0x6e, 0xce, 0x116, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0xf, {0x2}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x11, 0xa, 0x8863, 'macvlan1\x00', 'ipvlan1\x00', 'lo\x00', 'veth1_to_bridge\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xf6, [], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @common=@log={'log\x00', 0x28, {{0x0, "63d373b2fe9aa5700cfa8ded4c8034b8c086f2d23c9c5b50bc005103e580", 0xd}}}}, {0x11, 0x0, 0x8864, 'vxcan1\x00', 'dummy0\x00', '\x00', 'xfrm0\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x1fe, 0x7f, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x80, 0x0, {0x6}}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x676) (async) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f0000001a40)={0x0, 0xffff, 0x70, &(0x7f00000019c0)={0x70}}) 3.803095715s ago: executing program 4 (id=5596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000082c0)=ANY=[@ANYBLOB="b40500000000000071103500000000000500000000000000950000000000000076e3283e872f22aa32e992dbc71a00f3aad7290c86e567fda2dbdb200fa689085cd2af3c1c7c5e464ba74d866c7795972c826bcbe67959d7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000800010000000000140000004500001614000000000190780a010100ac1414aa04009078000000004500fffe00640011001100eb3e1414aa7f000001"], 0x3e) 3.499839802s ago: executing program 2 (id=5597): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0x53, 0xffffffffffffffff, &(0x7f0000000000)=0xff00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="16803e8e0100000027e3550d83010028bd70", @ANYRES32=r3, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 3.358830948s ago: executing program 4 (id=5598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000940)={@private2, 0x0}, &(0x7f0000000980)=0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4044094) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'erspan0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x6, 0xf, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x1b, 0x18, [@loopback, @loopback, @broadcast, @broadcast, @private=0xa010101, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x2, 0xf, 0x8, 0x4, 0x3, @mcast2, @remote, 0x80, 0x10, 0x18, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x1, 0x700, 0x5, 0x3}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000c40)={0x888, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3a}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x6, 0x8b, 0x2}, {0x6, 0x5, 0x2, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd796}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x98d, 0x14, 0x7, 0x356f}, {0x400, 0xb, 0xfe, 0x80}, {0x5, 0x8, 0x6, 0xfffffffb}, {0x7, 0x6, 0x1, 0x6e}, {0x4, 0x81, 0xf2, 0x8}]}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5b6bc315}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x85}, 0x90) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9b, 0x2}}, './file0\x00'}) r14 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r14, 0xc100565c, 0x0) r15 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r16 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r15) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r16, 0x20}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r17, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3.144184369s ago: executing program 2 (id=5599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x61c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5f0, 0x2, [@TCA_BPF_ACT={0x5ec, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9e, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x164, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x129, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x28c, 0x13, 0x0, 0x0, {{0x7}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb1, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x51, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af753"}}]}, {0x12d, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8917bc6a1b7ffa0d4bbddada56c96a3f61363e90cdb6db84cab4aff681e54e5af5ebafd066309a6e03c9bdba1eb03c25e75d04d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0xffa1}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.085378313s ago: executing program 4 (id=5600): add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000a00)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) request_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='logon\x00', r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x62, 0x63, 0x30, 0x66, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x31, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x32, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x55, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabb0400eeff00112233445566778899aabbccddeeff00112233445566318599aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x33, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x31, 0x55, 0x30, 0x30, 0x34, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="200010000000025b801657547f59"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x0, @remote}}, 0x3, 0x1}, 0x90) 2.585084567s ago: executing program 2 (id=5601): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death], 0x50, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca759998db7d21fa758c9d4ff1aacf225ba306e06340a1cae55575c631a1370c97db32005d3df9fd37cd9187"}) r5 = fsmount(r2, 0x0, 0x1) unlinkat(r5, &(0x7f0000000700)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x679ac2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r11, &(0x7f0000000040)='1\x00', 0x1) 2.573191541s ago: executing program 6 (id=5602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x2}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2000000000000021, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28c5}, 0x24004045) r3 = io_uring_setup(0x5cfb, &(0x7f0000000040)={0x0, 0x7a22, 0x4, 0x3, 0x29c}) membarrier(0x10, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x67b, 0x2303, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) setresuid(0x0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) read$FUSE(r8, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="020000000000000002000040e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e471a27100030000000200"], 0x210) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$uac3(r5, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x1b, {0x1b, 0x11, "19b7e3d082ff0715d6be3127230cafe754c81023f3807e11dc"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c38}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x5, 0x80, "724c7986f6f0d75309350da76e327fff877b518a7d2ce4d56271e1ba4b9393d920d1b38978858ee13c4f2365432842198a6806a89d4b25b92013cea7284e1456e902ec4ec14e6213f439f81bca8fe4d84c80324cad6233aeb54546343f4bdd6981ad2f566222b8b7a4da04bd7c06b1a46685d1364f0f365c678dbaa95b51b891"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x1, "a0"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="698cd6739096e56cf26c4c4c13c72675a8974b77a6c71de48b2185a0d5fd49ce6658bf532a32abe265e12c81b45651b80ef38a44470f3e3f0e460df1bfa06c6003058693876d72cbd09665dd1f53e4757084ef80a36f3c68c1a295a3173af2d8380ed4b0fffc58e33e81a1be12e3ae7b80eceedec58c4a7bb796a5a1"], &(0x7f0000000480)={0x20, 0x83, 0x2, 'Ny'}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "225213"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "451827"}}) socket$inet(0x2, 0x80001, 0x84) 1.458521826s ago: executing program 5 (id=5603): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000c00)={0x10002, 0xc0, 0x0, &(0x7f0000000800)=[0x2, 0xce5, 0xa, 0x6, 0xffffffffffffff7f, 0x9, 0xe, 0x3, 0x0, 0x10001, 0x5, 0x82d0, 0x5, 0x0, 0x80000001, 0x7491, 0x942, 0xc, 0x23, 0x8, 0x5, 0x3, 0xfffffffffffffff5, 0xfffd, 0xfffffffffffffff8, 0x4, 0x8, 0x9, 0x5, 0x4, 0x7fffffffffffffff, 0xfffffffffffff000, 0xfffffffffffffffe, 0x7, 0x0, 0x8, 0x6, 0x0, 0x74a9, 0x4, 0x2, 0x8d, 0x9ea5, 0x8, 0x2, 0x2, 0x8d5, 0x7fffffff, 0x1000, 0x6, 0x2ce, 0xa1, 0x44a8, 0xffffffffffffff81, 0x8, 0x100, 0x5, 0x1, 0x5, 0x589e, 0x8000000000000000, 0xbb4, 0x1, 0x800000000000, 0xae, 0x0, 0x6, 0x7, 0x0, 0x2, 0x0, 0x8, 0x0, 0x387, 0x785a, 0xfffffffffffffff7, 0x3, 0x8, 0x4, 0x3, 0x7, 0x2, 0x7fff, 0x4, 0x1, 0x6, 0x82, 0xfffffffffffff000, 0x8, 0xffffffffffffffff, 0x3, 0x6187, 0x3, 0x0, 0x7, 0x0, 0x9, 0x531, 0xf, 0xf37, 0x11, 0x7, 0xfff, 0x80, 0x6, 0x1, 0xa3, 0x9, 0x8, 0x8, 0x8, 0x8000, 0x1000, 0x7, 0x14df, 0xfffffffffffffff8, 0x1, 0xf, 0x100000000, 0x8, 0x2, 0x8, 0x100, 0x9, 0x4, 0x8, 0x1000000000000, 0x3]}) sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) recvmmsg(r1, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 930.077221ms ago: executing program 2 (id=5604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x12e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) sendto(r0, &(0x7f00000002c0)=' ', 0x1, 0x404c801, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 914.351934ms ago: executing program 2 (id=5605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r0, 0x80207509, &(0x7f0000000200)={0x0, 0xffff, 0x70, &(0x7f0000000140)={0x70}}) syz_open_dev$ublk_chdev(&(0x7f0000000040), r1, 0x400) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) (async) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 460.052198ms ago: executing program 5 (id=5606): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r4, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x24000080) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x6001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000040)=0x50007) 25.450038ms ago: executing program 5 (id=5607): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a"], 0x44}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x4, 0xd0, 0xb, 0x0, 0x4}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 0s ago: executing program 4 (id=5608): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r0 = fanotify_init(0x200, 0x8000) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x3) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000046, r2, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000538000/0x3000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f0000000080), 0x0, 0x1a6, 0x22, 0x0, 0x0, 0x8}) kernel console output (not intermixed with test programs): try lower: 268435456/134217728 [ 1218.058507][ T5683] m920x_read = error: -19 [ 1218.062973][ T5683] dvb-usb: error while querying for an remote control event. [ 1218.118479][T24586] loop4: detected capacity change from 0 to 7 [ 1218.133345][T24586] Dev loop4: unable to read RDB block 7 [ 1218.148408][T24586] loop4: AHDI p3 [ 1218.156227][T24586] loop4: partition table partially beyond EOD, truncated [ 1218.178483][ T5683] m920x_read = error: -19 [ 1218.182901][ T5683] dvb-usb: error while querying for an remote control event. [ 1218.294127][ T9336] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1218.306771][ T5683] m920x_read = error: -19 [ 1218.319670][ T5683] dvb-usb: error while querying for an remote control event. [ 1218.413804][ T9336] usb 2-1: USB disconnect, device number 102 [ 1218.455833][T10125] m920x_read = error: -19 [ 1218.468965][T10125] dvb-usb: error while querying for an remote control event. [ 1218.483799][T19035] udevd[19035]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.608432][T10125] m920x_read = error: -19 [ 1218.614535][T10125] dvb-usb: error while querying for an remote control event. [ 1218.728958][T10125] m920x_read = error: -19 [ 1218.734376][T10125] dvb-usb: error while querying for an remote control event. [ 1218.858855][T10125] m920x_read = error: -19 [ 1218.890052][T10125] dvb-usb: error while querying for an remote control event. [ 1219.039035][T10125] m920x_read = error: -19 [ 1219.063901][T10125] dvb-usb: error while querying for an remote control event. [ 1219.113378][T24609] syzkaller1: entered promiscuous mode [ 1219.122050][T24609] syzkaller1: entered allmulticast mode [ 1219.209565][T10125] m920x_read = error: -19 [ 1219.222946][T10125] dvb-usb: error while querying for an remote control event. [ 1219.340033][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5320'. [ 1219.382362][T10125] m920x_read = error: -19 [ 1219.398969][T10125] dvb-usb: error while querying for an remote control event. [ 1219.518577][T10125] m920x_read = error: -19 [ 1219.533740][T10125] dvb-usb: error while querying for an remote control event. [ 1219.647885][T24623] bridge0: port 3(syz_tun) entered disabled state [ 1219.654580][T24623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.661811][T24623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.682740][ T5683] m920x_read = error: -19 [ 1219.691842][ T5683] dvb-usb: error while querying for an remote control event. [ 1219.781962][T24631] bridge0: port 3(syz_tun) entered blocking state [ 1219.788594][T24631] bridge0: port 3(syz_tun) entered listening state [ 1219.795329][T24631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.802501][T24631] bridge0: port 2(bridge_slave_1) entered listening state [ 1219.809825][T24631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.816931][T24631] bridge0: port 1(bridge_slave_0) entered listening state [ 1219.899458][ T5683] m920x_read = error: -19 [ 1219.911165][T24631] bridge0: entered allmulticast mode [ 1219.941211][T24623] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1219.956131][ T5683] dvb-usb: error while querying for an remote control event. [ 1219.972825][T24623] tipc: Enabling of bearer rejected, media not registered [ 1220.083423][ T5683] m920x_read = error: -19 [ 1220.109389][ T5683] dvb-usb: error while querying for an remote control event. [ 1220.171883][ T9326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1220.249043][ T5683] m920x_read = error: -19 [ 1220.266422][ T5683] dvb-usb: error while querying for an remote control event. [ 1220.320484][ T9326] usb 3-1: device descriptor read/64, error -71 [ 1220.418493][T10125] m920x_read = error: -19 [ 1220.422923][T10125] dvb-usb: error while querying for an remote control event. [ 1220.538475][T10125] m920x_read = error: -19 [ 1220.547290][T10125] dvb-usb: error while querying for an remote control event. [ 1220.588789][ T9326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1220.598416][ T5683] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1220.678465][T10125] m920x_read = error: -19 [ 1220.684779][T10125] dvb-usb: error while querying for an remote control event. [ 1220.738956][ T9326] usb 3-1: device descriptor read/64, error -71 [ 1220.778376][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 1220.806794][ T5683] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1220.830407][ T5683] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1220.842559][T10125] m920x_read = error: -19 [ 1220.853790][T10125] dvb-usb: error while querying for an remote control event. [ 1220.868482][ T5683] usb 5-1: config 0 has no interface number 0 [ 1220.880208][ T9326] usb usb3-port1: attempt power cycle [ 1220.894056][ T5683] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.947903][ T5683] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1220.998745][T10125] m920x_read = error: -19 [ 1221.003307][T10125] dvb-usb: error while querying for an remote control event. [ 1221.011744][ T5683] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1221.033267][ T5683] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1221.069872][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.122613][ T5683] usb 5-1: config 0 descriptor?? [ 1221.141118][T10125] m920x_read = error: -19 [ 1221.157567][T24646] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1221.169413][T10125] dvb-usb: error while querying for an remote control event. [ 1221.247702][T10125] hid_parser_main: 11 callbacks suppressed [ 1221.247718][T10125] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 1221.308845][ T985] m920x_read = error: -19 [ 1221.316047][ T985] dvb-usb: error while querying for an remote control event. [ 1221.328121][T10125] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1221.340235][ T9326] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1221.419223][ T9326] usb 3-1: device descriptor read/8, error -71 [ 1221.478850][ T985] m920x_read = error: -19 [ 1221.493988][ T985] dvb-usb: error while querying for an remote control event. [ 1221.648935][ T985] m920x_read = error: -19 [ 1221.666911][ T985] dvb-usb: error while querying for an remote control event. [ 1221.681172][ T9326] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1221.744069][ T9326] usb 3-1: device descriptor read/8, error -71 [ 1221.860019][ T985] m920x_read = error: -19 [ 1221.892757][ T985] dvb-usb: error while querying for an remote control event. [ 1221.894002][ T9326] usb usb3-port1: unable to enumerate USB device [ 1222.039042][ T985] m920x_read = error: -19 [ 1222.066571][ T985] dvb-usb: error while querying for an remote control event. [ 1222.199559][ T985] m920x_read = error: -19 [ 1222.216024][ T985] dvb-usb: error while querying for an remote control event. [ 1222.289014][ T5683] usb 5-1: USB disconnect, device number 101 [ 1222.388087][ T985] m920x_read = error: -19 [ 1222.436320][ T985] dvb-usb: error while querying for an remote control event. [ 1222.608830][ T5683] m920x_read = error: -19 [ 1222.622255][ T5683] dvb-usb: error while querying for an remote control event. [ 1222.792423][ T5683] m920x_read = error: -19 [ 1222.804673][ T5683] dvb-usb: error while querying for an remote control event. [ 1222.851455][T24683] loop4: detected capacity change from 0 to 7 [ 1222.892520][T24683] Dev loop4: unable to read RDB block 7 [ 1222.920147][T24683] loop4: AHDI p3 [ 1222.955652][ T5683] m920x_read = error: -19 [ 1222.963792][T24683] loop4: partition table partially beyond EOD, truncated [ 1222.976937][ T5683] dvb-usb: error while querying for an remote control event. [ 1223.138439][ T5683] m920x_read = error: -19 [ 1223.157558][ T5683] dvb-usb: error while querying for an remote control event. [ 1223.221864][T24686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.318434][ T5683] m920x_read = error: -19 [ 1223.345463][ T5683] dvb-usb: error while querying for an remote control event. [ 1223.439334][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5346'. [ 1223.518581][ T985] m920x_read = error: -19 [ 1223.532348][ T985] dvb-usb: error while querying for an remote control event. [ 1223.731166][ T985] m920x_read = error: -19 [ 1223.764848][ T985] dvb-usb: error while querying for an remote control event. [ 1223.918664][ T985] m920x_read = error: -19 [ 1223.932024][ T985] dvb-usb: error while querying for an remote control event. [ 1224.028689][ T9326] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1224.068532][T10125] m920x_read = error: -19 [ 1224.073162][T10125] dvb-usb: error while querying for an remote control event. [ 1224.188465][ T9326] usb 5-1: Using ep0 maxpacket: 16 [ 1224.195401][ T9326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1224.200483][T10125] m920x_read = error: -19 [ 1224.212282][T10125] dvb-usb: error while querying for an remote control event. [ 1224.215038][ T9326] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1224.232456][ T9326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.242058][ T9326] usb 5-1: Product: syz [ 1224.246349][ T9326] usb 5-1: Manufacturer: syz [ 1224.251165][ T9326] usb 5-1: SerialNumber: syz [ 1224.258495][ T985] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1224.273568][ T9326] usb 5-1: config 0 descriptor?? [ 1224.288023][ T9326] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1224.299013][ T9326] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1224.339092][T10125] m920x_read = error: -19 [ 1224.347524][T10125] dvb-usb: error while querying for an remote control event. [ 1224.431150][ T985] usb 3-1: config 2 has an invalid interface number: 228 but max is 0 [ 1224.439973][ T985] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.450522][ T985] usb 3-1: config 2 has no interface number 0 [ 1224.456752][ T985] usb 3-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1224.470358][ T985] usb 3-1: config 2 interface 228 has no altsetting 0 [ 1224.479294][T10125] m920x_read = error: -19 [ 1224.485832][T10125] dvb-usb: error while querying for an remote control event. [ 1224.496462][ T985] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1224.505825][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.515016][ T985] usb 3-1: Product: syz [ 1224.521230][ T985] usb 3-1: Manufacturer: syz [ 1224.525872][ T985] usb 3-1: SerialNumber: syz [ 1224.591471][T24720] syzkaller0: entered promiscuous mode [ 1224.597237][T24720] syzkaller0: entered allmulticast mode [ 1224.603637][T10125] m920x_read = error: -19 [ 1224.609129][T10125] dvb-usb: error while querying for an remote control event. [ 1224.718630][T10125] m920x_read = error: -19 [ 1224.724705][T10125] dvb-usb: error while querying for an remote control event. [ 1224.848723][T10125] m920x_read = error: -19 [ 1224.867058][T10125] dvb-usb: error while querying for an remote control event. [ 1224.900686][ T9326] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1224.913176][ T985] ims_pcu 3-1:2.228: probe with driver ims_pcu failed with error -22 [ 1224.950257][ T985] usb 3-1: USB disconnect, device number 7 [ 1225.000496][T24722] loop4: detected capacity change from 0 to 7 [ 1225.021720][ T9336] m920x_read = error: -19 [ 1225.031150][ T9336] dvb-usb: error while querying for an remote control event. [ 1225.038842][T24722] Dev loop4: unable to read RDB block 7 [ 1225.060013][T24722] loop4: AHDI p3 [ 1225.074023][T24722] loop4: partition table partially beyond EOD, truncated [ 1225.190364][ T9336] m920x_read = error: -19 [ 1225.209559][ T9336] dvb-usb: error while querying for an remote control event. [ 1225.338632][ T985] m920x_read = error: -19 [ 1225.347395][ T985] dvb-usb: error while querying for an remote control event. [ 1225.427101][T24728] FAULT_INJECTION: forcing a failure. [ 1225.427101][T24728] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.465474][T24728] CPU: 1 UID: 0 PID: 24728 Comm: syz.1.5356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.465515][T24728] Tainted: [L]=SOFTLOCKUP [ 1225.465522][T24728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1225.465533][T24728] Call Trace: [ 1225.465541][T24728] [ 1225.465549][T24728] dump_stack_lvl+0xe8/0x150 [ 1225.465581][T24728] should_fail_ex+0x40c/0x560 [ 1225.465607][T24728] should_failslab+0xa8/0x100 [ 1225.465636][T24728] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1225.465657][T24728] ? local_lock_release+0x9c/0x160 [ 1225.465705][T24728] ? __alloc_skb+0x1d7/0x7a0 [ 1225.465733][T24728] ? __alloc_skb+0x1d7/0x7a0 [ 1225.465778][T24728] __alloc_skb+0x1d7/0x7a0 [ 1225.465813][T24728] __netdev_alloc_skb+0xc1/0x810 [ 1225.465836][T24728] ieee80211_mesh_build_beacon+0xd8/0x1b90 [ 1225.465926][T24728] ? ieee80211_mps_local_status_update+0x48f/0x600 [ 1225.465955][T24728] ? ieee80211_mps_local_status_update+0x27/0x600 [ 1225.465985][T24728] ieee80211_start_mesh+0x23d/0x380 [ 1225.466008][T24728] ieee80211_join_mesh+0xb0a/0x1360 [ 1225.466149][T24728] ? __pfx_ieee80211_join_mesh+0x10/0x10 [ 1225.466188][T24728] ? rcu_is_watching+0x15/0xb0 [ 1225.466217][T24728] ? cfg80211_reg_check_beaconing+0xcf3/0x11d0 [ 1225.466290][T24728] rdev_join_mesh+0xfc/0x290 [ 1225.466322][T24728] __cfg80211_join_mesh+0xf40/0x1410 [ 1225.466362][T24728] ? __pfx___cfg80211_join_mesh+0x10/0x10 [ 1225.466393][T24728] ? nl80211_join_mesh+0x19f/0x1040 [ 1225.466423][T24728] nl80211_join_mesh+0xd0b/0x1040 [ 1225.466454][T24728] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1225.466485][T24728] ? __lock_acquire+0x683/0x2cf0 [ 1225.466513][T24728] ? __lock_acquire+0x683/0x2cf0 [ 1225.466609][T24728] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 1225.466632][T24728] ? __nla_parse+0x40/0x60 [ 1225.466662][T24728] ? nl80211_pre_doit+0x53d/0x890 [ 1225.466695][T24728] genl_family_rcv_msg_doit+0x233/0x340 [ 1225.466730][T24728] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1225.466768][T24728] ? bpf_lsm_capable+0x9/0x20 [ 1225.466790][T24728] ? security_capable+0x7e/0x2c0 [ 1225.466823][T24728] genl_rcv_msg+0x614/0x7a0 [ 1225.466855][T24728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.466879][T24728] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1225.466906][T24728] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1225.466928][T24728] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1225.466956][T24728] ? __pfx_ref_tracker_free+0x10/0x10 [ 1225.466988][T24728] netlink_rcv_skb+0x226/0x4a0 [ 1225.467009][T24728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.467036][T24728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1225.467071][T24728] ? down_read+0x2be/0x330 [ 1225.467101][T24728] genl_rcv+0x28/0x40 [ 1225.467124][T24728] netlink_unicast+0x7bb/0x940 [ 1225.467153][T24728] netlink_sendmsg+0x813/0xb40 [ 1225.467183][T24728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.467208][T24728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1225.467241][T24728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.467261][T24728] sock_sendmsg_nosec+0x13a/0x180 [ 1225.467289][T24728] ____sys_sendmsg+0x54e/0x850 [ 1225.467315][T24728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.467344][T24728] ? import_iovec+0x73/0xa0 [ 1225.467373][T24728] ___sys_sendmsg+0x2a5/0x360 [ 1225.467392][T24728] ? __lock_acquire+0x683/0x2cf0 [ 1225.467420][T24728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.467472][T24728] ? __fget_files+0x2a/0x420 [ 1225.467503][T24728] ? __fget_files+0x3a2/0x420 [ 1225.467535][T24728] __x64_sys_sendmsg+0x1b1/0x290 [ 1225.467558][T24728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1225.467595][T24728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.467615][T24728] do_syscall_64+0x174/0x580 [ 1225.467637][T24728] ? trace_irq_disable+0x3b/0x140 [ 1225.467662][T24728] ? clear_bhb_loop+0x70/0xc0 [ 1225.467680][T24728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.467711][T24728] RIP: 0033:0x7f01fa19e0d9 [ 1225.467729][T24728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.467744][T24728] RSP: 002b:00007f01f83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.467763][T24728] RAX: ffffffffffffffda RBX: 00007f01fa426180 RCX: 00007f01fa19e0d9 [ 1225.467776][T24728] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1225.467789][T24728] RBP: 00007f01f83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.467802][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.467810][T24728] R13: 00007f01fa426218 R14: 00007f01fa426180 R15: 00007f01fa54fa48 [ 1225.467830][T24728] [ 1225.905899][ T985] m920x_read = error: -19 [ 1225.910434][ T985] dvb-usb: error while querying for an remote control event. [ 1226.018693][ T985] m920x_read = error: -19 [ 1226.023127][ T985] dvb-usb: error while querying for an remote control event. [ 1226.139803][ T985] m920x_read = error: -19 [ 1226.144282][ T985] dvb-usb: error while querying for an remote control event. [ 1226.259202][ T985] m920x_read = error: -19 [ 1226.263878][ T985] dvb-usb: error while querying for an remote control event. [ 1226.339241][ T9326] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1226.357165][ T9326] em28xx 5-1:0.0: board has no eeprom [ 1226.382268][ T985] m920x_read = error: -19 [ 1226.387051][ T985] dvb-usb: error while querying for an remote control event. [ 1226.415265][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5364'. [ 1226.442752][T24746] syzkaller1: entered promiscuous mode [ 1226.448679][T24746] syzkaller1: entered allmulticast mode [ 1226.476309][T24747] syzkaller1: entered promiscuous mode [ 1226.482192][ T9326] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1226.490557][T24747] syzkaller1: entered allmulticast mode [ 1226.496854][T24746] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1226.508420][ T985] m920x_read = error: -19 [ 1226.513357][ T9326] em28xx 5-1:0.0: dvb set to bulk mode. [ 1226.521702][ T985] dvb-usb: error while querying for an remote control event. [ 1226.533587][ T9325] em28xx 5-1:0.0: Binding DVB extension [ 1226.567202][ T9326] usb 5-1: USB disconnect, device number 102 [ 1226.617643][ T9326] em28xx 5-1:0.0: Disconnecting em28xx [ 1226.647344][ T9325] em28xx 5-1:0.0: Registering input extension [ 1226.660040][ T985] m920x_read = error: -19 [ 1226.664592][ T985] dvb-usb: error while querying for an remote control event. [ 1226.683285][ T9326] em28xx 5-1:0.0: Closing input extension [ 1226.706214][ T9326] em28xx 5-1:0.0: Freeing device [ 1226.768508][ T985] m920x_read = error: -19 [ 1226.772936][ T985] dvb-usb: error while querying for an remote control event. [ 1226.808445][ T5697] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1226.853719][ T9323] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1226.891470][ T985] m920x_read = error: -19 [ 1226.896208][ T985] dvb-usb: error while querying for an remote control event. [ 1226.939656][ T5697] usb 6-1: device descriptor read/64, error -71 [ 1227.008749][ T985] m920x_read = error: -19 [ 1227.013446][ T9323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.013467][ T985] dvb-usb: error while querying for an remote control event. [ 1227.035371][ T9323] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1227.053692][ T9323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1227.066822][ T9323] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1227.076035][ T9323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.084238][ T9323] usb 3-1: Product: syz [ 1227.088571][ T9323] usb 3-1: Manufacturer: syz [ 1227.093355][ T9323] usb 3-1: SerialNumber: syz [ 1227.102039][T24767] FAULT_INJECTION: forcing a failure. [ 1227.102039][T24767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.116437][ T9323] usb 3-1: config 0 descriptor?? [ 1227.125024][T24767] CPU: 0 UID: 0 PID: 24767 Comm: syz.4.5369 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.125046][T24767] Tainted: [L]=SOFTLOCKUP [ 1227.125052][T24767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1227.125061][T24767] Call Trace: [ 1227.125067][T24767] [ 1227.125073][T24767] dump_stack_lvl+0xe8/0x150 [ 1227.125104][T24767] should_fail_ex+0x40c/0x560 [ 1227.125129][T24767] _copy_to_user+0x31/0xb0 [ 1227.125154][T24767] simple_read_from_buffer+0xe1/0x170 [ 1227.125178][T24767] proc_fail_nth_read+0x1bb/0x230 [ 1227.125202][T24767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1227.125230][T24767] ? rw_verify_area+0x24a/0x4c0 [ 1227.125254][T24767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1227.125274][T24767] vfs_read+0x213/0xa80 [ 1227.125300][T24767] ? __pfx___mutex_lock+0x10/0x10 [ 1227.125321][T24767] ? __pfx_vfs_read+0x10/0x10 [ 1227.125344][T24767] ? __fget_files+0x2a/0x420 [ 1227.125367][T24767] ? __fget_files+0x3a2/0x420 [ 1227.125384][T24767] ? __fget_files+0x2a/0x420 [ 1227.125409][T24767] ksys_read+0x150/0x270 [ 1227.125433][T24767] ? __pfx_ksys_read+0x10/0x10 [ 1227.125461][T24767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.125477][T24767] do_syscall_64+0x174/0x580 [ 1227.125496][T24767] ? trace_irq_disable+0x3b/0x140 [ 1227.125515][T24767] ? clear_bhb_loop+0x70/0xc0 [ 1227.125533][T24767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.125547][T24767] RIP: 0033:0x7f7bfab5e90e [ 1227.125561][T24767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1227.125573][T24767] RSP: 002b:00007f7bfba38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1227.125588][T24767] RAX: ffffffffffffffda RBX: 00007f7bfba396c0 RCX: 00007f7bfab5e90e [ 1227.125599][T24767] RDX: 000000000000000f RSI: 00007f7bfba390a0 RDI: 0000000000000005 [ 1227.125608][T24767] RBP: 00007f7bfba39090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.125617][T24767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.125626][T24767] R13: 00007f7bfae26218 R14: 00007f7bfae26180 R15: 00007f7bfaf4fa48 [ 1227.125649][T24767] [ 1227.338961][ T9336] m920x_read = error: -19 [ 1227.343462][ T9336] dvb-usb: error while querying for an remote control event. [ 1227.351027][ T5697] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1227.362809][ T9323] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1227.458810][ T985] m920x_read = error: -19 [ 1227.463290][ T985] dvb-usb: error while querying for an remote control event. [ 1227.488477][ T9336] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1227.518772][ T5697] usb 6-1: device descriptor read/64, error -71 [ 1227.545696][T24771] lo: Caught tx_queue_len zero misconfig [ 1227.578815][ T985] m920x_read = error: -19 [ 1227.589278][ T985] dvb-usb: error while querying for an remote control event. [ 1227.630940][ T5697] usb usb6-port1: attempt power cycle [ 1227.691674][ T9336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.710615][ T985] m920x_read = error: -19 [ 1227.719009][ T985] dvb-usb: error while querying for an remote control event. [ 1227.726627][ T9336] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1227.736673][ T9336] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1227.746400][ T9336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.772406][ T9336] usb 2-1: config 0 descriptor?? [ 1227.838467][ T9336] m920x_read = error: -19 [ 1227.843099][ T9336] dvb-usb: error while querying for an remote control event. [ 1227.958483][ T9336] m920x_read = error: -19 [ 1227.963352][ T9336] dvb-usb: error while querying for an remote control event. [ 1227.990671][ T5697] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1228.022861][ T5706] usb 2-1: USB disconnect, device number 103 [ 1228.049011][ T5697] usb 6-1: device descriptor read/8, error -71 [ 1228.078428][ T9336] m920x_read = error: -19 [ 1228.082968][ T9336] dvb-usb: error while querying for an remote control event. [ 1228.208576][ T9336] m920x_read = error: -19 [ 1228.214054][ T9336] dvb-usb: error while querying for an remote control event. [ 1228.308515][ T5697] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1228.339311][ T5697] usb 6-1: device descriptor read/8, error -71 [ 1228.348765][ T9336] m920x_read = error: -19 [ 1228.357293][ T9336] dvb-usb: error while querying for an remote control event. [ 1228.448834][ T5697] usb usb6-port1: unable to enumerate USB device [ 1228.488643][ T9336] m920x_read = error: -19 [ 1228.493575][ T9336] dvb-usb: error while querying for an remote control event. [ 1228.589121][T24773] loop9: detected capacity change from 7 to 0 [ 1228.619346][ T9336] m920x_read = error: -19 [ 1228.630079][ T9336] dvb-usb: error while querying for an remote control event. [ 1228.758620][ T9336] m920x_read = error: -19 [ 1228.763294][ T9336] dvb-usb: error while querying for an remote control event. [ 1228.784675][ T9323] snd_usb_toneport 3-1:0.0: set_interface failed [ 1228.798627][ T9323] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1228.820650][ T9323] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1228.853408][ T9323] usb 3-1: USB disconnect, device number 8 [ 1228.878930][ T985] m920x_read = error: -19 [ 1228.888470][ T985] dvb-usb: error while querying for an remote control event. [ 1228.918402][ T5697] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1229.025626][T10125] m920x_read = error: -19 [ 1229.032133][T10125] dvb-usb: error while querying for an remote control event. [ 1229.094332][T24789] syzkaller1: entered promiscuous mode [ 1229.100033][T24789] syzkaller1: entered allmulticast mode [ 1229.107500][T24789] FAULT_INJECTION: forcing a failure. [ 1229.107500][T24789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.121570][T24789] CPU: 0 UID: 0 PID: 24789 Comm: syz.2.5376 Tainted: G L syzkaller #0 PREEMPT(full) [ 1229.121601][T24789] Tainted: [L]=SOFTLOCKUP [ 1229.121609][T24789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1229.121621][T24789] Call Trace: [ 1229.121629][T24789] [ 1229.121638][T24789] dump_stack_lvl+0xe8/0x150 [ 1229.121671][T24789] should_fail_ex+0x40c/0x560 [ 1229.121704][T24789] _copy_to_user+0x31/0xb0 [ 1229.121748][T24789] simple_read_from_buffer+0xe1/0x170 [ 1229.121772][T24789] proc_fail_nth_read+0x1bb/0x230 [ 1229.121794][T24789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1229.121817][T24789] ? rw_verify_area+0x24a/0x4c0 [ 1229.121843][T24789] ? tun_chr_write_iter+0x18a/0x200 [ 1229.121864][T24789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1229.121884][T24789] vfs_read+0x213/0xa80 [ 1229.121908][T24789] ? __pfx___mutex_lock+0x10/0x10 [ 1229.121952][T24789] ? __pfx_vfs_read+0x10/0x10 [ 1229.121975][T24789] ? __fget_files+0x2a/0x420 [ 1229.121998][T24789] ? __fget_files+0x3a2/0x420 [ 1229.122016][T24789] ? __fget_files+0x2a/0x420 [ 1229.122041][T24789] ksys_read+0x150/0x270 [ 1229.122064][T24789] ? __pfx_ksys_read+0x10/0x10 [ 1229.122092][T24789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.122109][T24789] do_syscall_64+0x174/0x580 [ 1229.122128][T24789] ? trace_irq_disable+0x3b/0x140 [ 1229.122147][T24789] ? clear_bhb_loop+0x70/0xc0 [ 1229.122165][T24789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.122180][T24789] RIP: 0033:0x7f0996f5e90e [ 1229.122194][T24789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1229.122207][T24789] RSP: 002b:00007f0997e3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1229.122225][T24789] RAX: ffffffffffffffda RBX: 00007f0997e3e6c0 RCX: 00007f0996f5e90e [ 1229.122237][T24789] RDX: 000000000000000f RSI: 00007f0997e3e0a0 RDI: 0000000000000005 [ 1229.122246][T24789] RBP: 00007f0997e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.122257][T24789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.122266][T24789] R13: 00007f0997226038 R14: 00007f0997225fa0 R15: 00007f099734fa48 [ 1229.122289][T24789] [ 1229.123670][ T5697] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1229.180251][ T9336] m920x_read = error: -19 [ 1229.186224][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.191151][ T985] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1229.235791][ T5697] usb 5-1: config 0 descriptor?? [ 1229.248544][ T9336] dvb-usb: error while querying for an remote control event. [ 1229.384363][ T5697] cp210x 5-1:0.0: cp210x converter detected [ 1229.488892][ T9336] m920x_read = error: -19 [ 1229.493443][ T9336] dvb-usb: error while querying for an remote control event. [ 1229.567050][ T5697] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1229.578484][ T5697] cp210x 5-1:0.0: querying part number failed [ 1229.611291][ T5697] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1229.620906][ T9336] m920x_read = error: -19 [ 1229.636454][ T9336] dvb-usb: error while querying for an remote control event. [ 1229.745502][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1229.778718][ T9336] m920x_read = error: -19 [ 1229.783414][ T9336] dvb-usb: error while querying for an remote control event. [ 1229.899226][ T9336] m920x_read = error: -19 [ 1229.915055][ T9336] dvb-usb: error while querying for an remote control event. [ 1229.932068][T24810] xt_hashlimit: max too large, truncated to 1048576 [ 1229.995251][ T9336] usb 5-1: USB disconnect, device number 103 [ 1230.026812][ T9336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1230.059748][ T9336] cp210x 5-1:0.0: device disconnected [ 1230.086989][T10125] m920x_read = error: -19 [ 1230.091563][T10125] dvb-usb: error while querying for an remote control event. [ 1230.124448][T24817] syzkaller0: entered promiscuous mode [ 1230.130109][T24817] syzkaller0: entered allmulticast mode [ 1230.208584][T16230] m920x_read = error: -19 [ 1230.213136][T16230] dvb-usb: error while querying for an remote control event. [ 1230.228593][ T5683] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1230.328936][ T9336] m920x_read = error: -19 [ 1230.335220][ T9336] dvb-usb: error while querying for an remote control event. [ 1230.401677][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1230.420615][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.442043][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1230.464533][ T5683] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1230.473770][ T985] usb 2-1: device descriptor read/64, error -71 [ 1230.480291][ T9336] m920x_read = error: -19 [ 1230.485299][ T9336] dvb-usb: error while querying for an remote control event. [ 1230.499916][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.520212][ T5683] usb 3-1: Product: syz [ 1230.529196][ T5683] usb 3-1: Manufacturer: syz [ 1230.540529][ T5683] usb 3-1: SerialNumber: syz [ 1230.566371][ T5683] usb 3-1: selecting invalid altsetting 1 [ 1230.585000][ T5683] usb 3-1: unit 6 not found! [ 1230.618509][ T9336] m920x_read = error: -19 [ 1230.623018][ T9336] dvb-usb: error while querying for an remote control event. [ 1230.738738][ T985] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1230.759097][ T9336] m920x_read = error: -19 [ 1230.763610][ T9336] dvb-usb: error while querying for an remote control event. [ 1230.898851][ T5705] m920x_read = error: -19 [ 1230.904369][ T985] usb 2-1: device descriptor read/64, error -71 [ 1230.916203][ T5705] dvb-usb: error while querying for an remote control event. [ 1230.927685][T24823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5385'. [ 1231.039017][ T985] usb usb2-port1: attempt power cycle [ 1231.044766][ T5705] m920x_read = error: -19 [ 1231.060589][ T5705] dvb-usb: error while querying for an remote control event. [ 1231.198543][ T5705] m920x_read = error: -19 [ 1231.225910][ T5705] dvb-usb: error while querying for an remote control event. [ 1231.379156][ T5705] m920x_read = error: -19 [ 1231.400486][ T985] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1231.408731][ T5705] dvb-usb: error while querying for an remote control event. [ 1231.439292][ T985] usb 2-1: device descriptor read/8, error -71 [ 1231.520018][ T5705] m920x_read = error: -19 [ 1231.532083][ T5705] dvb-usb: error while querying for an remote control event. [ 1231.661268][ T5705] m920x_read = error: -19 [ 1231.666003][ T5705] dvb-usb: error while querying for an remote control event. [ 1231.708532][ T985] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1231.740945][ T985] usb 2-1: device descriptor read/8, error -71 [ 1231.788632][ T5705] m920x_read = error: -19 [ 1231.797926][ T5705] dvb-usb: error while querying for an remote control event. [ 1231.818947][ T5683] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1231.859722][ T985] usb usb2-port1: unable to enumerate USB device [ 1231.875304][ T5683] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1231.889140][ T5683] usb 3-1: USB disconnect, device number 9 [ 1231.918527][ T985] m920x_read = error: -19 [ 1231.928830][ T985] dvb-usb: error while querying for an remote control event. [ 1231.937106][T19035] udevd[19035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1232.059435][ T985] m920x_read = error: -19 [ 1232.063929][ T985] dvb-usb: error while querying for an remote control event. [ 1232.178438][ T985] m920x_read = error: -19 [ 1232.182860][ T985] dvb-usb: error while querying for an remote control event. [ 1232.269391][ T5697] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1232.298490][ T985] m920x_read = error: -19 [ 1232.302914][ T985] dvb-usb: error while querying for an remote control event. [ 1232.418603][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 1232.418805][ T985] m920x_read = error: -19 [ 1232.429467][ T985] dvb-usb: error while querying for an remote control event. [ 1232.438279][ T5697] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1232.468388][ T5697] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1232.485133][ T5697] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1232.494524][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1232.506128][ T5697] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1232.524147][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1232.537682][ T5697] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1232.547206][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.560756][ T985] m920x_read = error: -19 [ 1232.570784][ T985] dvb-usb: error while querying for an remote control event. [ 1232.575290][ T5697] usb 6-1: config 0 descriptor?? [ 1232.698462][ T985] m920x_read = error: -19 [ 1232.708071][ T985] dvb-usb: error while querying for an remote control event. [ 1232.827583][ T5697] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1232.840591][ T985] m920x_read = error: -19 [ 1232.863169][ T985] dvb-usb: error while querying for an remote control event. [ 1232.894407][ T5697] usb 6-1: USB disconnect, device number 76 [ 1232.916182][ T5697] usblp0: removed [ 1232.934233][T24864] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1232.961747][T24864] tipc: Enabling of bearer rejected, media not registered [ 1232.980596][ T985] m920x_read = error: -19 [ 1233.004638][ T985] dvb-usb: error while querying for an remote control event. [ 1233.048627][T24870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.058156][T24870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.116635][T24872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.123839][T24872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.131400][T24872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.138586][T24872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.169476][ T9336] m920x_read = error: -19 [ 1233.186110][ T9336] dvb-usb: error while querying for an remote control event. [ 1233.204383][T24872] bridge0: entered promiscuous mode [ 1233.215318][T24872] bridge0: entered allmulticast mode [ 1233.263718][T24870] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5399'. [ 1233.276168][T24870] tipc: Enabling of bearer rejected, media not registered [ 1233.311925][ T9336] m920x_read = error: -19 [ 1233.321425][ T9336] dvb-usb: error while querying for an remote control event. [ 1233.341549][T24875] loop4: detected capacity change from 0 to 7 [ 1233.373130][T24875] Dev loop4: unable to read RDB block 7 [ 1233.392380][T24875] loop4: AHDI p3 [ 1233.398534][ T5697] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1233.410794][T24875] loop4: partition table partially beyond EOD, truncated [ 1233.459154][ T9336] m920x_read = error: -19 [ 1233.474637][ T9336] dvb-usb: error while querying for an remote control event. [ 1233.568603][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 1233.597471][ T5697] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1233.648139][ T5697] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1233.668474][ T9336] m920x_read = error: -19 [ 1233.683601][ T9336] dvb-usb: error while querying for an remote control event. [ 1233.698820][ T5697] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1233.748614][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1233.796278][ T5697] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1233.823060][T24879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1233.831937][ T9336] m920x_read = error: -19 [ 1233.840838][ T9336] dvb-usb: error while querying for an remote control event. [ 1233.888442][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1233.941968][ T5697] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1233.988191][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.999386][ T9336] m920x_read = error: -19 [ 1234.014896][ T9336] dvb-usb: error while querying for an remote control event. [ 1234.050206][ T5697] usb 6-1: config 0 descriptor?? [ 1234.179344][ T9336] m920x_read = error: -19 [ 1234.192123][ T9336] dvb-usb: error while querying for an remote control event. [ 1234.296936][ T5697] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1234.348920][ T9336] m920x_read = error: -19 [ 1234.375970][ T9336] dvb-usb: error while querying for an remote control event. [ 1234.521079][T24888] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1234.548573][ T9336] m920x_read = error: -19 [ 1234.590063][ T9336] dvb-usb: error while querying for an remote control event. [ 1234.748826][ T9336] m920x_read = error: -19 [ 1234.781632][ T9336] dvb-usb: error while querying for an remote control event. [ 1234.814964][T24894] syzkaller1: entered promiscuous mode [ 1234.822865][T24894] syzkaller1: entered allmulticast mode [ 1234.948674][ T9336] m920x_read = error: -19 [ 1234.954850][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.068483][ T9323] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1235.098590][ T9336] m920x_read = error: -19 [ 1235.120186][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.249464][ T9323] usb 3-1: not running at top speed; connect to a high speed hub [ 1235.258650][ T9336] m920x_read = error: -19 [ 1235.281505][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.320691][ T9323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.363113][ T9323] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 1235.402257][ T9323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.420865][ T9336] m920x_read = error: -19 [ 1235.432210][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.466391][ T9323] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1235.598533][ T9336] m920x_read = error: -19 [ 1235.604011][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.743128][ T9336] m920x_read = error: -19 [ 1235.756976][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.808943][T24902] bridge0: port 3(macvlan3) entered blocking state [ 1235.835983][T24902] bridge0: port 3(macvlan3) entered disabled state [ 1235.866529][T24902] macvlan3: entered allmulticast mode [ 1235.879349][T24902] ip6gretap0: entered allmulticast mode [ 1235.888582][ T9336] m920x_read = error: -19 [ 1235.896561][T24902] macvlan3: entered promiscuous mode [ 1235.920303][ T9336] dvb-usb: error while querying for an remote control event. [ 1235.923617][T24902] bridge0: port 3(macvlan3) entered blocking state [ 1235.934338][T24902] bridge0: port 3(macvlan3) entered forwarding state [ 1236.088699][ T5705] m920x_read = error: -19 [ 1236.110477][ T5705] dvb-usb: error while querying for an remote control event. [ 1236.279100][ T985] m920x_read = error: -19 [ 1236.288429][ T985] dvb-usb: error while querying for an remote control event. [ 1236.310309][ T9336] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1236.370014][ T9323] gspca_vc032x: reg_w err -71 [ 1236.404249][ T9323] vc032x 3-1:1.0: probe with driver vc032x failed with error -71 [ 1236.441151][ T985] m920x_read = error: -19 [ 1236.456523][ T985] dvb-usb: error while querying for an remote control event. [ 1236.499970][ T9323] usb 3-1: USB disconnect, device number 10 [ 1236.500993][ T9336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.520533][T24916] bridge0: left promiscuous mode [ 1236.525498][T24916] bridge0: left allmulticast mode [ 1236.588756][ T5705] m920x_read = error: -19 [ 1236.594460][ T5705] dvb-usb: error while querying for an remote control event. [ 1236.609428][ T9336] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1236.705397][ T9336] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1236.741780][ T5697] usb 6-1: USB disconnect, device number 77 [ 1236.784280][ T9336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.798590][ T5697] usblp0: removed [ 1236.808534][ T5705] m920x_read = error: -19 [ 1236.845089][ T5705] dvb-usb: error while querying for an remote control event. [ 1236.864110][T24916] veth0_to_team: entered promiscuous mode [ 1236.882587][ T9336] usb 2-1: config 0 descriptor?? [ 1237.019459][ T9336] m920x_read = error: -19 [ 1237.035086][ T9336] dvb-usb: error while querying for an remote control event. [ 1237.141611][T24925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.174932][T24925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.197236][ T9336] usb 2-1: USB disconnect, device number 108 [ 1237.248844][ T5705] m920x_read = error: -19 [ 1237.272070][ T5705] dvb-usb: error while querying for an remote control event. [ 1237.379303][ T9323] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1237.419299][ T5705] m920x_read = error: -19 [ 1237.432337][ T5705] dvb-usb: error while querying for an remote control event. [ 1237.549596][ T9323] usb 6-1: Using ep0 maxpacket: 8 [ 1237.559426][ T5705] m920x_read = error: -19 [ 1237.567703][ T9323] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1237.578123][ T5705] dvb-usb: error while querying for an remote control event. [ 1237.615752][ T9323] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1237.641434][ T9323] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1237.668238][ T9323] usb 6-1: Product: syz [ 1237.685311][ T9323] usb 6-1: Manufacturer: syz [ 1237.702863][ T9323] usb 6-1: SerialNumber: syz [ 1237.718591][ T5705] m920x_read = error: -19 [ 1237.727850][ T5705] dvb-usb: error while querying for an remote control event. [ 1237.782838][T24936] blktrace: Concurrent blktraces are not allowed on loop4 [ 1237.859578][ T9336] m920x_read = error: -19 [ 1237.864479][ T9336] dvb-usb: error while querying for an remote control event. [ 1237.890044][T24936] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1237.932784][ T9323] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 1237.961103][ T9323] visor 6-1:1.0: probe with driver visor failed with error -71 [ 1237.998755][ T9336] m920x_read = error: -19 [ 1238.016152][ T9336] dvb-usb: error while querying for an remote control event. [ 1238.052166][ T9323] usb 6-1: USB disconnect, device number 78 [ 1238.148701][ T9336] m920x_read = error: -19 [ 1238.174949][ T9336] dvb-usb: error while querying for an remote control event. [ 1238.242363][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1238.318417][ T5705] m920x_read = error: -19 [ 1238.328728][ T5705] dvb-usb: error while querying for an remote control event. [ 1238.434863][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.443881][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.460194][ T9336] m920x_read = error: -19 [ 1238.479740][ T9336] dvb-usb: error while querying for an remote control event. [ 1238.628693][ T9336] m920x_read = error: -19 [ 1238.644610][ T9336] dvb-usb: error while querying for an remote control event. [ 1238.768610][ T9336] m920x_read = error: -19 [ 1238.786970][ T9336] dvb-usb: error while querying for an remote control event. [ 1238.790721][ T5697] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1238.833156][T24965] syzkaller1: entered promiscuous mode [ 1238.851171][T24965] syzkaller1: entered allmulticast mode [ 1238.968670][ T5705] m920x_read = error: -19 [ 1238.976728][ T5705] dvb-usb: error while querying for an remote control event. [ 1239.000203][ T5697] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1239.012799][ T5697] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1239.021216][ T5697] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1239.030734][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.048126][ T5697] usb 2-1: config 0 descriptor?? [ 1239.063513][T24957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1239.118435][ T5705] m920x_read = error: -19 [ 1239.129001][ T5705] dvb-usb: error while querying for an remote control event. [ 1239.168440][ T9336] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1239.268584][ T5705] m920x_read = error: -19 [ 1239.287504][ T5705] dvb-usb: error while querying for an remote control event. [ 1239.358671][ T9336] usb 5-1: Using ep0 maxpacket: 16 [ 1239.373874][ T9336] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.398498][ T5705] m920x_read = error: -19 [ 1239.404727][ T9336] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1239.414691][ T5705] dvb-usb: error while querying for an remote control event. [ 1239.422889][ T9336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.431991][ T9336] usb 5-1: Product: syz [ 1239.436503][ T9336] usb 5-1: Manufacturer: syz [ 1239.443520][ T9336] usb 5-1: SerialNumber: syz [ 1239.517892][ T5697] uclogic 0003:2179:0053.004E: interface is invalid, ignoring [ 1239.530865][ T5705] m920x_read = error: -19 [ 1239.554872][ T5705] dvb-usb: error while querying for an remote control event. [ 1239.678433][ T5705] m920x_read = error: -19 [ 1239.696206][ T5705] dvb-usb: error while querying for an remote control event. [ 1239.838451][ T5683] m920x_read = error: -19 [ 1239.838469][ T5683] dvb-usb: error while querying for an remote control event. [ 1239.941592][ T5697] usb 2-1: USB disconnect, device number 109 [ 1239.950065][ T5683] m920x_read = error: -19 [ 1239.989681][ T5683] dvb-usb: error while querying for an remote control event. [ 1239.991708][ T5705] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1240.054726][T24989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.099026][ T5683] m920x_read = error: -19 [ 1240.104930][ T5683] dvb-usb: error while querying for an remote control event. [ 1240.140719][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.174519][ T5705] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1240.208297][ T5705] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.90 [ 1240.223885][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.232463][ T985] m920x_read = error: -19 [ 1240.237008][ T985] dvb-usb: error while querying for an remote control event. [ 1240.258164][ T5705] usb 3-1: config 0 descriptor?? [ 1240.358626][ T5705] m920x_read = error: -19 [ 1240.364938][ T5705] dvb-usb: error while querying for an remote control event. [ 1240.459200][ T5683] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1240.488941][ T5705] m920x_read = error: -19 [ 1240.495697][ T5705] dvb-usb: error while querying for an remote control event. [ 1240.512989][ T985] usb 3-1: USB disconnect, device number 11 [ 1240.583660][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1240.583675][ T29] audit: type=1326 audit(1786181381.964:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1240.640112][ T5705] m920x_read = error: -19 [ 1240.652347][ T5705] dvb-usb: error while querying for an remote control event. [ 1240.678477][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.702781][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.718560][ T29] audit: type=1326 audit(1786181381.974:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1240.752475][ T5683] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1240.774745][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.791582][ T29] audit: type=1326 audit(1786181381.994:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1240.816136][ T985] m920x_read = error: -19 [ 1240.825190][ T985] dvb-usb: error while querying for an remote control event. [ 1240.835922][ T5683] usb 6-1: config 0 descriptor?? [ 1240.872770][ T29] audit: type=1326 audit(1786181381.994:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1240.948970][ T985] m920x_read = error: -19 [ 1240.953564][ T985] dvb-usb: error while querying for an remote control event. [ 1240.963827][ T29] audit: type=1326 audit(1786181381.994:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1241.036602][ T29] audit: type=1326 audit(1786181381.994:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1241.118490][ T5705] m920x_read = error: -19 [ 1241.122963][ T5705] dvb-usb: error while querying for an remote control event. [ 1241.139279][ T29] audit: type=1326 audit(1786181381.994:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1241.284127][ T5683] cm6533_jd 0003:0D8C:0022.004F: unknown main item tag 0x0 [ 1241.291967][ T5705] m920x_read = error: -19 [ 1241.297989][ T5705] dvb-usb: error while querying for an remote control event. [ 1241.309612][ T29] audit: type=1326 audit(1786181381.994:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1241.336428][ T5683] cm6533_jd 0003:0D8C:0022.004F: unknown main item tag 0x0 [ 1241.357153][ T5683] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.004F/input/input88 [ 1241.435841][ T29] audit: type=1326 audit(1786181381.994:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1241.461458][ T985] m920x_read = error: -19 [ 1241.475910][ T985] dvb-usb: error while querying for an remote control event. [ 1241.498364][ T5683] cm6533_jd 0003:0D8C:0022.004F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1241.546716][ T29] audit: type=1326 audit(1786181381.994:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.6.5436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9e0d9 code=0x7ffc0000 [ 1241.590941][ T985] usb 6-1: USB disconnect, device number 79 [ 1241.630772][ T5683] m920x_read = error: -19 [ 1241.640079][ T5683] dvb-usb: error while querying for an remote control event. [ 1241.798644][ T5683] m920x_read = error: -19 [ 1241.806586][ T5683] dvb-usb: error while querying for an remote control event. [ 1241.838421][ T5697] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1241.886804][T25007] fido_id[25007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1241.958608][ T985] m920x_read = error: -19 [ 1241.966339][ T985] dvb-usb: error while querying for an remote control event. [ 1241.989183][T25014] loop4: detected capacity change from 0 to 7 [ 1242.020584][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 1242.033395][T25014] Dev loop4: unable to read RDB block 7 [ 1242.054588][T25014] loop4: AHDI p3 [ 1242.067613][T25014] loop4: partition table partially beyond EOD, truncated [ 1242.080573][ T5697] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1242.108651][ T985] m920x_read = error: -19 [ 1242.113128][ T985] dvb-usb: error while querying for an remote control event. [ 1242.129688][ T5697] usb 3-1: config 2 has no interface number 0 [ 1242.157572][ T5697] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1242.213771][ T5697] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1242.238537][ T5697] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1242.260637][ T985] m920x_read = error: -19 [ 1242.273533][ T9336] powermate 5-1:251.0: probe with driver powermate failed with error -22 [ 1242.285297][ T985] dvb-usb: error while querying for an remote control event. [ 1242.302209][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1242.318840][ T9336] usb 5-1: USB disconnect, device number 104 [ 1242.345291][ T5697] usb 3-1: Product: syz [ 1242.365215][ T5697] usb 3-1: Manufacturer: syz [ 1242.384375][ T5697] usb 3-1: SerialNumber: syz [ 1242.411092][T25006] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1242.429295][ T985] m920x_read = error: -19 [ 1242.439558][ T985] dvb-usb: error while querying for an remote control event. [ 1242.568435][ T9336] m920x_read = error: -19 [ 1242.573007][ T9336] dvb-usb: error while querying for an remote control event. [ 1242.629832][T25019] syzkaller1: entered promiscuous mode [ 1242.647120][T25019] syzkaller1: entered allmulticast mode [ 1242.655314][T25006] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1242.688609][ T985] m920x_read = error: -19 [ 1242.694827][ T985] dvb-usb: error while querying for an remote control event. [ 1242.829608][ T985] m920x_read = error: -19 [ 1242.837864][ T985] dvb-usb: error while querying for an remote control event. [ 1242.968614][ T985] m920x_read = error: -19 [ 1242.986738][ T985] dvb-usb: error while querying for an remote control event. [ 1243.088639][T25006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.113705][T25006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.148465][ T985] m920x_read = error: -19 [ 1243.158034][ T985] dvb-usb: error while querying for an remote control event. [ 1243.299288][ T985] m920x_read = error: -19 [ 1243.317651][ T985] dvb-usb: error while querying for an remote control event. [ 1243.336759][T25038] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1243.376779][T25038] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1243.384056][T25038] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 1243.420680][T25038] bridge0: entered promiscuous mode [ 1243.448923][T25038] bridge0: entered allmulticast mode [ 1243.460446][ T985] m920x_read = error: -19 [ 1243.476791][T25048] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1243.489665][ T985] dvb-usb: error while querying for an remote control event. [ 1243.520117][T25049] loop4: detected capacity change from 0 to 7 [ 1243.530501][T25048] tipc: Enabling of bearer rejected, media not registered [ 1243.559188][T25049] Dev loop4: unable to read RDB block 7 [ 1243.582845][T25049] loop4: AHDI p3 [ 1243.604125][T25049] loop4: partition table partially beyond EOD, truncated [ 1243.658766][ T9336] m920x_read = error: -19 [ 1243.663523][ T9336] dvb-usb: error while querying for an remote control event. [ 1243.746986][ T5697] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1243.788138][ T5697] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1243.809343][ T9336] m920x_read = error: -19 [ 1243.837234][ T9336] dvb-usb: error while querying for an remote control event. [ 1243.847642][ T5697] asix 3-1:2.88: probe with driver asix failed with error -71 [ 1243.906191][ T5697] usb 3-1: USB disconnect, device number 12 [ 1243.978744][ T9336] m920x_read = error: -19 [ 1243.997536][ T9336] dvb-usb: error while querying for an remote control event. [ 1244.138445][ T9336] m920x_read = error: -19 [ 1244.168141][ T9336] dvb-usb: error while querying for an remote control event. [ 1244.358521][ T9336] m920x_read = error: -19 [ 1244.383949][ T9336] dvb-usb: error while querying for an remote control event. [ 1244.478383][ T5697] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1244.528634][ T9336] m920x_read = error: -19 [ 1244.546994][ T9336] dvb-usb: error while querying for an remote control event. [ 1244.628442][ T5697] usb 2-1: device descriptor read/64, error -71 [ 1244.688422][ T985] m920x_read = error: -19 [ 1244.700355][ T985] dvb-usb: error while querying for an remote control event. [ 1244.839369][ T985] m920x_read = error: -19 [ 1244.859010][ T985] dvb-usb: error while querying for an remote control event. [ 1244.888483][ T5697] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1244.990455][ T985] m920x_read = error: -19 [ 1244.997188][ T985] dvb-usb: error while querying for an remote control event. [ 1245.068942][ T5697] usb 2-1: device descriptor read/64, error -71 [ 1245.129451][ T985] m920x_read = error: -19 [ 1245.138811][ T985] dvb-usb: error while querying for an remote control event. [ 1245.193245][ T5697] usb usb2-port1: attempt power cycle [ 1245.271823][ T985] m920x_read = error: -19 [ 1245.278357][ T985] dvb-usb: error while querying for an remote control event. [ 1245.418495][ T985] m920x_read = error: -19 [ 1245.443814][ T985] dvb-usb: error while querying for an remote control event. [ 1245.615361][ T985] m920x_read = error: -19 [ 1245.629792][ T5697] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1245.640424][ T985] dvb-usb: error while querying for an remote control event. [ 1245.798755][ T9336] m920x_read = error: -19 [ 1245.814245][ T9336] dvb-usb: error while querying for an remote control event. [ 1245.864163][T25078] syzkaller0: entered promiscuous mode [ 1245.884011][T25078] syzkaller0: entered allmulticast mode [ 1245.920274][T25078] tipc: Started in network mode [ 1245.946200][T25078] tipc: Node identity de9d9898088f, cluster identity 4711 [ 1245.959144][ T9336] m920x_read = error: -19 [ 1245.972807][ T9336] dvb-usb: error while querying for an remote control event. [ 1245.989204][T25078] tipc: Enabled bearer , priority 0 [ 1246.031529][ T5697] usb 2-1: device descriptor read/8, error -71 [ 1246.122403][ T9336] m920x_read = error: -19 [ 1246.127226][T25081] tipc: Resetting bearer [ 1246.140081][ T9336] dvb-usb: error while querying for an remote control event. [ 1246.259313][T25081] tipc: Disabling bearer [ 1246.278794][ T9336] m920x_read = error: -19 [ 1246.284288][ T9336] dvb-usb: error while querying for an remote control event. [ 1246.301661][ T5697] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1246.408518][ T9336] m920x_read = error: -19 [ 1246.422928][ T9336] dvb-usb: error while querying for an remote control event. [ 1246.528798][ T5697] usb 2-1: device not accepting address 113, error -71 [ 1246.558453][ T5683] m920x_read = error: -19 [ 1246.562320][ T5697] usb usb2-port1: unable to enumerate USB device [ 1246.563054][ T5683] dvb-usb: error while querying for an remote control event. [ 1246.718820][ T5683] m920x_read = error: -19 [ 1246.745830][ T5683] dvb-usb: error while querying for an remote control event. [ 1246.919346][ T5683] m920x_read = error: -19 [ 1246.943920][ T5683] dvb-usb: error while querying for an remote control event. [ 1246.956282][T25098] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5463'. [ 1247.109658][ T5683] m920x_read = error: -19 [ 1247.130227][ T5683] dvb-usb: error while querying for an remote control event. [ 1247.254732][T25104] hub 1-0:1.0: USB hub found [ 1247.262840][T25104] hub 1-0:1.0: 1 port detected [ 1247.268481][ T985] m920x_read = error: -19 [ 1247.277416][ T985] dvb-usb: error while querying for an remote control event. [ 1247.398953][ T9336] m920x_read = error: -19 [ 1247.405680][ T9336] dvb-usb: error while querying for an remote control event. [ 1247.448407][ T5683] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1247.518659][ T985] m920x_read = error: -19 [ 1247.527538][ T985] dvb-usb: error while querying for an remote control event. [ 1247.630612][ T5683] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.645768][ T5683] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1247.660761][ T5683] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1247.670521][ T985] m920x_read = error: -19 [ 1247.680116][ T985] dvb-usb: error while querying for an remote control event. [ 1247.694069][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.711148][ T5683] usb 6-1: Product: syz [ 1247.725761][ T5683] usb 6-1: Manufacturer: syz [ 1247.731405][ T5683] usb 6-1: SerialNumber: syz [ 1247.767328][ T5683] usb 6-1: 0:2 : does not exist [ 1247.808535][ T5705] m920x_read = error: -19 [ 1247.812976][ T5705] dvb-usb: error while querying for an remote control event. [ 1247.858752][ T9336] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1247.940880][ T5705] m920x_read = error: -19 [ 1247.950671][ T5705] dvb-usb: error while querying for an remote control event. [ 1247.983825][ T5683] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1248.030585][ T9336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1248.064716][ T9336] usb 3-1: not running at top speed; connect to a high speed hub [ 1248.086697][ T9336] usb 3-1: config 2 has an invalid interface number: 77 but max is 0 [ 1248.105629][ T9336] usb 3-1: config 2 has no interface number 0 [ 1248.112042][ T985] m920x_read = error: -19 [ 1248.118362][ T985] dvb-usb: error while querying for an remote control event. [ 1248.127836][ T5683] usb 6-1: USB disconnect, device number 80 [ 1248.135592][ T9336] usb 3-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=67.12 [ 1248.147480][ T9336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.164914][ T9336] usb 3-1: Product: syz [ 1248.186112][ T9336] usb 3-1: Manufacturer: syz [ 1248.198107][ T9336] usb 3-1: SerialNumber: syz [ 1248.217977][T19035] udevd[19035]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.228846][ T5705] m920x_read = error: -19 [ 1248.244154][ T5705] dvb-usb: error while querying for an remote control event. [ 1248.360576][T25128] FAULT_INJECTION: forcing a failure. [ 1248.360576][T25128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.376698][T25128] CPU: 1 UID: 0 PID: 25128 Comm: syz.4.5476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.376726][T25128] Tainted: [L]=SOFTLOCKUP [ 1248.376734][T25128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1248.376745][T25128] Call Trace: [ 1248.376753][T25128] [ 1248.376765][T25128] dump_stack_lvl+0xe8/0x150 [ 1248.376816][T25128] should_fail_ex+0x40c/0x560 [ 1248.376842][T25128] _copy_to_user+0x31/0xb0 [ 1248.376870][T25128] simple_read_from_buffer+0xe1/0x170 [ 1248.376899][T25128] proc_fail_nth_read+0x1bb/0x230 [ 1248.376927][T25128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.376956][T25128] ? rw_verify_area+0x24a/0x4c0 [ 1248.376984][T25128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.377008][T25128] vfs_read+0x213/0xa80 [ 1248.377038][T25128] ? __pfx___mutex_lock+0x10/0x10 [ 1248.377064][T25128] ? __pfx_vfs_read+0x10/0x10 [ 1248.377091][T25128] ? __fget_files+0x2a/0x420 [ 1248.377118][T25128] ? __fget_files+0x3a2/0x420 [ 1248.377140][T25128] ? __fget_files+0x2a/0x420 [ 1248.377170][T25128] ksys_read+0x150/0x270 [ 1248.377199][T25128] ? __pfx_ksys_read+0x10/0x10 [ 1248.377232][T25128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.377253][T25128] do_syscall_64+0x174/0x580 [ 1248.377276][T25128] ? trace_irq_disable+0x3b/0x140 [ 1248.377299][T25128] ? clear_bhb_loop+0x70/0xc0 [ 1248.377321][T25128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.377339][T25128] RIP: 0033:0x7f7bfab5e90e [ 1248.377357][T25128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1248.377373][T25128] RSP: 002b:00007f7bfba7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1248.377392][T25128] RAX: ffffffffffffffda RBX: 00007f7bfba7b6c0 RCX: 00007f7bfab5e90e [ 1248.377406][T25128] RDX: 000000000000000f RSI: 00007f7bfba7b0a0 RDI: 0000000000000004 [ 1248.377418][T25128] RBP: 00007f7bfba7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.377430][T25128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.377441][T25128] R13: 00007f7bfae26038 R14: 00007f7bfae25fa0 R15: 00007f7bfaf4fa48 [ 1248.377469][T25128] [ 1248.659373][ T5683] m920x_read = error: -19 [ 1248.663882][ T5683] dvb-usb: error while querying for an remote control event. [ 1248.681492][ T9336] rndis_host 3-1:2.77: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1248.818361][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1248.818378][ T29] audit: type=1326 audit(1786181390.164:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25131 comm="syz.1.5478" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01fa19e0d9 code=0x0 [ 1248.819104][ T5683] m920x_read = error: -19 [ 1248.874444][ T9336] usb 3-1: USB disconnect, device number 13 [ 1248.885191][ T5683] dvb-usb: error while querying for an remote control event. [ 1248.952133][T25136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5480'. [ 1248.981462][T25138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5480'. [ 1249.009097][ T5683] m920x_read = error: -19 [ 1249.018189][ T5683] dvb-usb: error while querying for an remote control event. [ 1249.139227][ T5683] m920x_read = error: -19 [ 1249.143667][ T5683] dvb-usb: error while querying for an remote control event. [ 1249.201698][T25146] bridge0: port 3(macvlan3) entered disabled state [ 1249.208539][T25146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.216014][T25146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.258720][ T985] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1249.288565][ T5683] m920x_read = error: -19 [ 1249.293217][ T5683] dvb-usb: error while querying for an remote control event. [ 1249.329200][T25151] bridge0: port 3(macvlan3) entered blocking state [ 1249.329311][T25151] bridge0: port 3(macvlan3) entered forwarding state [ 1249.329514][T25151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.329588][T25151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.329751][T25151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.329866][T25151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.330626][T25151] bridge0: entered promiscuous mode [ 1249.330662][T25151] bridge0: entered allmulticast mode [ 1249.423773][ T985] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.423806][ T985] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1249.423835][ T985] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1249.426091][ T985] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1249.426116][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.426136][ T985] usb 6-1: Product: syz [ 1249.426153][ T985] usb 6-1: Manufacturer: syz [ 1249.426163][ T985] usb 6-1: SerialNumber: syz [ 1249.431636][ T5683] m920x_read = error: -19 [ 1249.431652][ T5683] dvb-usb: error while querying for an remote control event. [ 1249.488882][ T985] cdc_ncm 6-1:1.0: skipping garbage [ 1249.488905][ T985] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1249.488943][ T985] cdc_ncm 6-1:1.0: bind() failure [ 1249.539312][ T985] m920x_read = error: -19 [ 1249.539339][ T985] dvb-usb: error while querying for an remote control event. [ 1249.648575][ T985] m920x_read = error: -19 [ 1249.648609][ T985] dvb-usb: error while querying for an remote control event. [ 1249.651310][ T5697] usb 6-1: USB disconnect, device number 81 [ 1249.758562][ T985] m920x_read = error: -19 [ 1249.758579][ T985] dvb-usb: error while querying for an remote control event. [ 1249.868679][ T985] m920x_read = error: -19 [ 1249.868706][ T985] dvb-usb: error while querying for an remote control event. [ 1249.958832][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1249.958972][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1249.959093][ C0] bridge0: port 3(syz_tun) entered learning state [ 1249.978446][ T985] m920x_read = error: -19 [ 1249.978470][ T985] dvb-usb: error while querying for an remote control event. [ 1250.088515][ T985] m920x_read = error: -19 [ 1250.088545][ T985] dvb-usb: error while querying for an remote control event. [ 1250.097574][T25164] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1250.099245][T25164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1250.198696][ T5683] m920x_read = error: -19 [ 1250.198727][ T5683] dvb-usb: error while querying for an remote control event. [ 1250.204108][T25166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1250.206660][T25166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1250.238140][T25164] netlink: 548 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1250.308709][ T5683] m920x_read = error: -19 [ 1250.308726][ T5683] dvb-usb: error while querying for an remote control event. [ 1250.419140][ T5683] m920x_read = error: -19 [ 1250.419164][ T5683] dvb-usb: error while querying for an remote control event. [ 1250.528723][ T5683] m920x_read = error: -19 [ 1250.529591][ T5697] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1250.538619][ T5683] dvb-usb: error while querying for an remote control event. [ 1250.678457][ T985] m920x_read = error: -19 [ 1250.681677][ T5706] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1250.697078][ T985] dvb-usb: error while querying for an remote control event. [ 1250.721740][T25178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5493'. [ 1250.753784][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 1250.770063][ T5697] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1250.779035][ T5697] usb 6-1: config 0 has no interface number 0 [ 1250.785206][ T5697] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1250.794731][ T5697] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1250.808463][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.825734][ T5697] usb 6-1: Product: syz [ 1250.830764][ T5697] usb 6-1: Manufacturer: syz [ 1250.836146][ T5697] usb 6-1: SerialNumber: syz [ 1250.839507][ T985] m920x_read = error: -19 [ 1250.845661][ T5683] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1250.854164][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 1250.863031][ T985] dvb-usb: error while querying for an remote control event. [ 1250.870843][ T5706] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1250.882650][ T5697] usb 6-1: config 0 descriptor?? [ 1250.898991][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1250.912699][ T5706] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1250.924149][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.950922][ T5706] usb 3-1: config 0 descriptor?? [ 1250.989117][ T9323] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1250.998876][ T985] m920x_read = error: -19 [ 1251.003276][ T985] dvb-usb: error while querying for an remote control event. [ 1251.030849][ T5683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1251.045953][ T5683] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 1251.057173][ T5683] usb 2-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 1251.066340][ T5683] usb 2-1: Product: syz [ 1251.071570][ T5683] usb 2-1: Manufacturer: syz [ 1251.076592][ T5683] usb 2-1: SerialNumber: syz [ 1251.096575][ T5683] em28xx 2-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 1251.116341][ T5683] em28xx 2-1:1.0: DVB interface 0 found: bulk [ 1251.122623][ T985] m920x_read = error: -19 [ 1251.127696][ T985] dvb-usb: error while querying for an remote control event. [ 1251.155422][T25183] bridge0: port 3(macvlan3) entered disabled state [ 1251.162219][T25183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.169763][T25183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.177692][ T9323] usb 5-1: Using ep0 maxpacket: 32 [ 1251.191100][ T9323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.205143][ T9323] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1251.215970][ T9323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.224409][ T9323] usb 5-1: Product: syz [ 1251.229977][ T9323] usb 5-1: Manufacturer: syz [ 1251.234693][ T9323] usb 5-1: SerialNumber: syz [ 1251.239117][ T985] m920x_read = error: -19 [ 1251.243888][ T985] dvb-usb: error while querying for an remote control event. [ 1251.255529][ T9323] usb 5-1: config 0 descriptor?? [ 1251.283289][ T9323] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1251.359211][ T985] m920x_read = error: -19 [ 1251.363720][ T985] dvb-usb: error while querying for an remote control event. [ 1251.388212][T25172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.401750][T25172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.426215][ T5706] uclogic 0003:5543:0005.0050: unknown main item tag 0x3 [ 1251.438185][ T5706] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 1251.446689][ T5706] uclogic 0003:5543:0005.0050: item fetching failed at offset 38/40 [ 1251.456031][ T5706] uclogic 0003:5543:0005.0050: parse failed [ 1251.462505][ T5706] uclogic 0003:5543:0005.0050: probe with driver uclogic failed with error -22 [ 1251.478440][ T985] m920x_read = error: -19 [ 1251.645608][ T5706] usb 3-1: USB disconnect, device number 14 [ 1251.704680][ T985] dvb-usb: error while querying for an remote control event. [ 1251.737604][T25178] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5493'. [ 1251.760936][ T9323] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 1251.771086][ T9323] quatech2 5-1:0.0: probe with driver quatech2 failed with error -8 [ 1251.818570][ T9336] m920x_read = error: -19 [ 1251.822993][ T9336] dvb-usb: error while querying for an remote control event. [ 1251.918123][ T5683] em28xx 2-1:1.0: unknown em28xx chip ID (0) [ 1251.938580][ T9336] m920x_read = error: -19 [ 1251.943044][ T9336] dvb-usb: error while querying for an remote control event. [ 1251.999702][ T9336] usb 5-1: USB disconnect, device number 105 [ 1252.058580][ T5705] m920x_read = error: -19 [ 1252.063004][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.184671][ T5705] m920x_read = error: -19 [ 1252.197930][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.272731][T25196] tipc: Enabling of bearer rejected, already enabled [ 1252.319208][ T5705] m920x_read = error: -19 [ 1252.324876][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.439168][ T5705] m920x_read = error: -19 [ 1252.443673][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.559061][ T5705] m920x_read = error: -19 [ 1252.563471][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.681660][ T5705] m920x_read = error: -19 [ 1252.692965][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.765235][T25200] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1252.819510][ T5705] m920x_read = error: -19 [ 1252.827469][ T5705] dvb-usb: error while querying for an remote control event. [ 1252.949385][ T5705] m920x_read = error: -19 [ 1252.967037][ T5705] dvb-usb: error while querying for an remote control event. [ 1253.104069][ T5705] m920x_read = error: -19 [ 1253.115575][ T5705] dvb-usb: error while querying for an remote control event. [ 1253.242132][ T9336] m920x_read = error: -19 [ 1253.251009][ T9336] dvb-usb: error while querying for an remote control event. [ 1253.278582][T25214] syzkaller1: entered promiscuous mode [ 1253.284299][T25214] syzkaller1: entered allmulticast mode [ 1253.378547][ T9336] m920x_read = error: -19 [ 1253.389443][ T9336] dvb-usb: error while querying for an remote control event. [ 1253.518870][ T9336] m920x_read = error: -19 [ 1253.526798][ T9336] dvb-usb: error while querying for an remote control event. [ 1253.648582][ T9336] m920x_read = error: -19 [ 1253.653165][ T9336] dvb-usb: error while querying for an remote control event. [ 1253.770335][ T9336] m920x_read = error: -19 [ 1253.774811][ T5683] em28xx 2-1:1.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 1253.784376][ T9336] dvb-usb: error while querying for an remote control event. [ 1253.794828][ T5683] em28xx 2-1:1.0: failed to read eeprom (err=-5) [ 1253.802184][ T5683] em28xx 2-1:1.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1253.877911][T25231] netlink: 'syz.4.5508': attribute type 10 has an invalid length. [ 1253.908452][ T9336] m920x_read = error: -19 [ 1253.912998][ T9336] dvb-usb: error while querying for an remote control event. [ 1254.028907][ T9336] m920x_read = error: -19 [ 1254.038159][ T9336] dvb-usb: error while querying for an remote control event. [ 1254.113625][ T5697] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1254.135579][ T5697] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1254.148453][ T5697] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1254.167858][ T5697] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1254.169270][ T9336] m920x_read = error: -19 [ 1254.185122][ T9336] dvb-usb: error while querying for an remote control event. [ 1254.214060][ T5697] usb 6-1: USB disconnect, device number 82 [ 1254.308498][ T9336] m920x_read = error: -19 [ 1254.320326][ T9336] dvb-usb: error while querying for an remote control event. [ 1254.442634][T25235] bridge0: entered promiscuous mode [ 1254.448883][ T9336] m920x_read = error: -19 [ 1254.453343][T25235] bridge0: entered allmulticast mode [ 1254.468571][ T9336] dvb-usb: error while querying for an remote control event. [ 1254.504666][T25235] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5509'. [ 1254.546384][T25235] tipc: Enabling of bearer rejected, media not registered [ 1254.610348][ T9336] m920x_read = error: -19 [ 1254.626557][ T9336] dvb-usb: error while querying for an remote control event. [ 1254.648128][ T5683] em28xx 2-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 1254.674258][ T5683] em28xx 2-1:1.0: dvb set to bulk mode. [ 1254.694192][ T9336] em28xx 2-1:1.0: Binding DVB extension [ 1254.725593][ T5683] usb 2-1: USB disconnect, device number 114 [ 1254.753122][ T9336] em28xx 2-1:1.0: writing to i2c device at 0x1e failed (error=-5) [ 1254.767018][T25244] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1254.789241][ T5683] em28xx 2-1:1.0: Disconnecting em28xx [ 1254.810105][ T985] m920x_read = error: -19 [ 1254.815069][ T9336] zl10353_read_register: readreg error (reg=127, ret==-5) [ 1254.826391][ T985] dvb-usb: error while querying for an remote control event. [ 1254.853042][ T9336] em28xx 2-1:1.0: frontend initialization failed [ 1254.872815][ T9336] em28xx 2-1:1.0: Remote control support is not available for this card. [ 1254.906483][ T5683] em28xx 2-1:1.0: Closing input extension [ 1254.917885][T25249] syzkaller0: entered promiscuous mode [ 1254.925758][T25249] syzkaller0: entered allmulticast mode [ 1254.989285][ T9336] m920x_read = error: -19 [ 1255.012090][ T9336] dvb-usb: error while querying for an remote control event. [ 1255.035462][ T5683] em28xx 2-1:1.0: Freeing device [ 1255.168641][ T9336] m920x_read = error: -19 [ 1255.184649][ T9336] dvb-usb: error while querying for an remote control event. [ 1255.320274][ T5683] m920x_read = error: -19 [ 1255.338438][ T5683] dvb-usb: error while querying for an remote control event. [ 1255.478614][ T5683] m920x_read = error: -19 [ 1255.487331][ T5683] dvb-usb: error while querying for an remote control event. [ 1255.618442][ T5683] m920x_read = error: -19 [ 1255.627967][ T5683] dvb-usb: error while querying for an remote control event. [ 1255.641726][T25253] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1255.768418][ T5683] m920x_read = error: -19 [ 1255.777901][ T5683] dvb-usb: error while querying for an remote control event. [ 1255.898419][ T5683] m920x_read = error: -19 [ 1255.914982][ T5683] dvb-usb: error while querying for an remote control event. [ 1256.068854][ T5683] m920x_read = error: -19 [ 1256.088098][ T5683] dvb-usb: error while querying for an remote control event. [ 1256.095643][T25263] FAULT_INJECTION: forcing a failure. [ 1256.095643][T25263] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.095746][T25263] CPU: 0 UID: 0 PID: 25263 Comm: syz.6.5516 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.095772][T25263] Tainted: [L]=SOFTLOCKUP [ 1256.095779][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1256.095790][T25263] Call Trace: [ 1256.095797][T25263] [ 1256.095805][T25263] dump_stack_lvl+0xe8/0x150 [ 1256.095836][T25263] should_fail_ex+0x40c/0x560 [ 1256.095862][T25263] should_failslab+0xa8/0x100 [ 1256.095889][T25263] __kmalloc_cache_noprof+0xa8/0x660 [ 1256.095915][T25263] ? tipc_net+0x45/0x270 [ 1256.096080][T25263] ? tipc_nametbl_lookup_mcast_sockets+0x6bf/0xd50 [ 1256.096155][T25263] ? tipc_nametbl_lookup_mcast_sockets+0x6bf/0xd50 [ 1256.096253][T25263] tipc_nametbl_lookup_mcast_sockets+0x6bf/0xd50 [ 1256.096319][T25263] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd50 [ 1256.096416][T25263] tipc_sk_mcast_rcv+0x58b/0xf20 [ 1256.096508][T25263] ? __lock_acquire+0x683/0x2cf0 [ 1256.096591][T25263] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 1256.096680][T25263] ? tipc_mcast_xmit+0x11f3/0x19e0 [ 1256.096746][T25263] ? tipc_mcast_xmit+0x11f3/0x19e0 [ 1256.096804][T25263] tipc_mcast_xmit+0x1384/0x19e0 [ 1256.096864][T25263] ? __might_fault+0xaf/0x130 [ 1256.096907][T25263] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1256.096959][T25263] ? _copy_from_iter+0x2d3/0x1660 [ 1256.097011][T25263] ? kmem_cache_alloc_node_noprof+0x181/0x610 [ 1256.097055][T25263] ? rcu_is_watching+0x15/0xb0 [ 1256.097123][T25263] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1256.097177][T25263] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1256.097239][T25263] ? __pfx__copy_from_iter+0x10/0x10 [ 1256.097292][T25263] ? __lock_acquire+0x683/0x2cf0 [ 1256.097346][T25263] ? __alloc_skb+0x276/0x7a0 [ 1256.097415][T25263] ? __alloc_skb+0x276/0x7a0 [ 1256.097531][T25263] ? tipc_msg_build+0x439/0xf50 [ 1256.097601][T25263] ? tipc_msg_build+0x4af/0xf50 [ 1256.097709][T25263] ? trace_tipc_sk_sendmcast+0x93/0x230 [ 1256.097803][T25263] __tipc_sendmsg+0x2074/0x2b60 [ 1256.097893][T25263] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1256.098000][T25263] ? process_measurement+0x443/0x1c10 [ 1256.098062][T25263] ? __pfx_woken_wake_function+0x10/0x10 [ 1256.098142][T25263] ? process_measurement+0x7b2/0x1c10 [ 1256.098213][T25263] ? up_write+0x19f/0x4a0 [ 1256.098271][T25263] ? process_measurement+0x14fb/0x1c10 [ 1256.098348][T25263] ? aa_label_sk_perm+0x532/0x6e0 [ 1256.098420][T25263] ? __lock_acquire+0x683/0x2cf0 [ 1256.098507][T25263] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1256.098569][T25263] ? look_up_lock_class+0x57/0x110 [ 1256.098631][T25263] ? register_lock_class+0x31/0x2e0 [ 1256.098697][T25263] __tipc_sendstream+0x105f/0x12a0 [ 1256.098766][T25263] ? __lock_acquire+0x683/0x2cf0 [ 1256.098839][T25263] ? unwind_next_frame+0x8f/0x2550 [ 1256.098938][T25263] ? do_raw_spin_lock+0x12b/0x2f0 [ 1256.098992][T25263] ? __pfx___tipc_sendstream+0x10/0x10 [ 1256.099051][T25263] ? tipc_send_packet+0x6e/0xa0 [ 1256.099111][T25263] ? __local_bh_enable_ip+0xd0/0x130 [ 1256.099167][T25263] tipc_send_packet+0x7c/0xa0 [ 1256.099231][T25263] ? __pfx_tipc_send_packet+0x10/0x10 [ 1256.099284][T25263] sock_sendmsg_nosec+0x13a/0x180 [ 1256.099353][T25263] ____sys_sendmsg+0x54e/0x850 [ 1256.099410][T25263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.099480][T25263] ? import_iovec+0x73/0xa0 [ 1256.099550][T25263] ___sys_sendmsg+0x2a5/0x360 [ 1256.099595][T25263] ? __lock_acquire+0x683/0x2cf0 [ 1256.099659][T25263] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.099778][T25263] ? __fget_files+0x2a/0x420 [ 1256.099834][T25263] ? __fget_files+0x3a2/0x420 [ 1256.099912][T25263] __x64_sys_sendmsg+0x1b1/0x290 [ 1256.099971][T25263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.100061][T25263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.100108][T25263] do_syscall_64+0x174/0x580 [ 1256.100167][T25263] ? trace_irq_disable+0x3b/0x140 [ 1256.100246][T25263] ? clear_bhb_loop+0x70/0xc0 [ 1256.100317][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.100363][T25263] RIP: 0033:0x7f73d4b9e0d9 [ 1256.100406][T25263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.100449][T25263] RSP: 002b:00007f73d59f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.100494][T25263] RAX: ffffffffffffffda RBX: 00007f73d4e25fa0 RCX: 00007f73d4b9e0d9 [ 1256.100530][T25263] RDX: 0000000024000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1256.100558][T25263] RBP: 00007f73d59f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.100598][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.100625][T25263] R13: 00007f73d4e26038 R14: 00007f73d4e25fa0 R15: 00007f73d4f4fa48 [ 1256.100697][T25263] [ 1256.759176][ T985] m920x_read = error: -19 [ 1256.763747][ T985] dvb-usb: error while querying for an remote control event. [ 1256.878677][ T985] m920x_read = error: -19 [ 1256.884879][ T985] dvb-usb: error while querying for an remote control event. [ 1257.009127][ T985] m920x_read = error: -19 [ 1257.018730][ T985] dvb-usb: error while querying for an remote control event. [ 1257.059347][T25278] input: syz0 as /devices/virtual/input/input89 [ 1257.150301][ T985] m920x_read = error: -19 [ 1257.158365][ T985] dvb-usb: error while querying for an remote control event. [ 1257.278445][ T985] m920x_read = error: -19 [ 1257.284761][ T985] dvb-usb: error while querying for an remote control event. [ 1257.418433][ T5683] m920x_read = error: -19 [ 1257.424379][ T5683] dvb-usb: error while querying for an remote control event. [ 1257.558498][ T5683] m920x_read = error: -19 [ 1257.569762][ T5683] dvb-usb: error while querying for an remote control event. [ 1257.590228][ T9323] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1257.720980][ T5683] m920x_read = error: -19 [ 1257.732452][ T5683] dvb-usb: error while querying for an remote control event. [ 1257.760275][ T9323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.810728][ T9323] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1257.853063][ T9323] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1257.868850][ T5683] m920x_read = error: -19 [ 1257.875184][ T5683] dvb-usb: error while querying for an remote control event. [ 1257.894012][ T9323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.945096][ T9323] usb 3-1: config 0 descriptor?? [ 1258.034177][ T5683] m920x_read = error: -19 [ 1258.060914][ T5683] dvb-usb: error while querying for an remote control event. [ 1258.177931][ T9326] usb 3-1: USB disconnect, device number 15 [ 1258.205232][ T5683] m920x_read = error: -19 [ 1258.229330][ T5683] dvb-usb: error while querying for an remote control event. [ 1258.388542][ T985] m920x_read = error: -19 [ 1258.413833][T25309] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5527'. [ 1258.424644][ T985] dvb-usb: error while querying for an remote control event. [ 1258.534043][T25316] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 1258.568496][ T985] m920x_read = error: -19 [ 1258.576580][ T985] dvb-usb: error while querying for an remote control event. [ 1258.718598][ T5683] m920x_read = error: -19 [ 1258.732784][ T5683] dvb-usb: error while querying for an remote control event. [ 1258.878857][ T5683] m920x_read = error: -19 [ 1258.902744][ T5683] dvb-usb: error while querying for an remote control event. [ 1259.098674][ T5683] m920x_read = error: -19 [ 1259.119107][ T5683] dvb-usb: error while querying for an remote control event. [ 1259.269006][ T5683] m920x_read = error: -19 [ 1259.281244][ T5683] dvb-usb: error while querying for an remote control event. [ 1259.410385][ T5683] m920x_read = error: -19 [ 1259.434799][ T5683] dvb-usb: error while querying for an remote control event. [ 1259.578482][ T985] m920x_read = error: -19 [ 1259.619646][ T985] dvb-usb: error while querying for an remote control event. [ 1259.749318][ T5683] m920x_read = error: -19 [ 1259.762883][ T5683] dvb-usb: error while querying for an remote control event. [ 1259.910233][ T5683] m920x_read = error: -19 [ 1259.928618][ T5683] dvb-usb: error while querying for an remote control event. [ 1259.964324][T25354] tunl0: Caught tx_queue_len zero misconfig [ 1260.028893][T25354] ip6tnl0: Caught tx_queue_len zero misconfig [ 1260.078488][ T5683] m920x_read = error: -19 [ 1260.088583][ T5683] dvb-usb: error while querying for an remote control event. [ 1260.208827][ T5683] m920x_read = error: -19 [ 1260.219251][ T5683] dvb-usb: error while querying for an remote control event. [ 1260.358656][ T5683] m920x_read = error: -19 [ 1260.374446][ T5683] dvb-usb: error while querying for an remote control event. [ 1260.499040][ T985] m920x_read = error: -19 [ 1260.506605][ T985] dvb-usb: error while querying for an remote control event. [ 1260.639128][ T985] m920x_read = error: -19 [ 1260.660789][ T985] dvb-usb: error while querying for an remote control event. [ 1260.698458][ T5683] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1260.788438][ T5705] m920x_read = error: -19 [ 1260.792845][ T5705] dvb-usb: error while querying for an remote control event. [ 1260.891721][ T5683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.918472][ T985] m920x_read = error: -19 [ 1260.922887][ T5683] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1260.931966][ T985] dvb-usb: error while querying for an remote control event. [ 1260.940881][ T5683] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1260.968378][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.978903][ T5683] usb 6-1: config 0 descriptor?? [ 1261.058469][ T5683] m920x_read = error: -19 [ 1261.068404][ T5683] dvb-usb: error while querying for an remote control event. [ 1261.198461][ T5683] m920x_read = error: -19 [ 1261.202870][ T5683] dvb-usb: error while querying for an remote control event. [ 1261.331998][ T5683] m920x_read = error: -19 [ 1261.349546][ T5683] dvb-usb: error while querying for an remote control event. [ 1261.488541][ T5683] m920x_read = error: -19 [ 1261.497837][ T5683] dvb-usb: error while querying for an remote control event. [ 1261.629100][ T5683] m920x_read = error: -19 [ 1261.642760][ T5683] dvb-usb: error while querying for an remote control event. [ 1261.778985][ T985] m920x_read = error: -19 [ 1261.785658][ T985] dvb-usb: error while querying for an remote control event. [ 1261.918683][ T985] m920x_read = error: -19 [ 1261.933480][ T985] dvb-usb: error while querying for an remote control event. [ 1261.978414][ T5683] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1262.060118][ T985] m920x_read = error: -19 [ 1262.072400][ T985] dvb-usb: error while querying for an remote control event. [ 1262.150016][ T5683] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1262.175442][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.199016][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.213298][ T985] m920x_read = error: -19 [ 1262.224431][ T985] dvb-usb: error while querying for an remote control event. [ 1262.238093][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.270118][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.304763][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.341133][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.371539][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.382238][ T985] m920x_read = error: -19 [ 1262.390611][ T985] dvb-usb: error while querying for an remote control event. [ 1262.403176][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.439555][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.458853][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.487046][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.518538][ T985] m920x_read = error: -19 [ 1262.525420][ T985] dvb-usb: error while querying for an remote control event. [ 1262.533498][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.553664][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.588704][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.633023][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.658457][ T985] m920x_read = error: -19 [ 1262.664573][ T985] dvb-usb: error while querying for an remote control event. [ 1262.682169][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.708381][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.724170][T25394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1262.745590][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.773427][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.807580][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.860401][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.875650][ T985] m920x_read = error: -19 [ 1262.886495][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1262.897154][ T985] dvb-usb: error while querying for an remote control event. [ 1262.925627][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1262.951752][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.975434][ T5683] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1262.993458][ T5683] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1263.015556][ T5683] usb 3-1: Product: syz [ 1263.025243][ T5683] usb 3-1: Manufacturer: syz [ 1263.035513][ T5683] usb 3-1: SerialNumber: syz [ 1263.040272][ T985] m920x_read = error: -19 [ 1263.047046][ T985] dvb-usb: error while querying for an remote control event. [ 1263.072012][ T5683] usb 3-1: config 0 descriptor?? [ 1263.108169][ T5683] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1263.179093][ T5683] m920x_read = error: -19 [ 1263.188231][ T5683] dvb-usb: error while querying for an remote control event. [ 1263.203672][T25409] loop4: detected capacity change from 0 to 7 [ 1263.211718][T25409] Dev loop4: unable to read RDB block 7 [ 1263.217391][T25409] loop4: AHDI p3 [ 1263.222530][T25409] loop4: partition table partially beyond EOD, truncated [ 1263.318823][ T5683] m920x_read = error: -19 [ 1263.323359][ T5683] dvb-usb: error while querying for an remote control event. [ 1263.369505][ T5683] usb 6-1: USB disconnect, device number 83 [ 1263.378052][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1263.379852][ T9326] usb 3-1: USB disconnect, device number 16 [ 1263.413181][ T9326] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1263.448994][ T985] m920x_read = error: -19 [ 1263.453513][ T985] dvb-usb: error while querying for an remote control event. [ 1263.568518][ T985] m920x_read = error: -19 [ 1263.573343][ T985] dvb-usb: error while querying for an remote control event. [ 1263.688411][ T985] m920x_read = error: -19 [ 1263.692929][ T985] dvb-usb: error while querying for an remote control event. [ 1263.808513][ T985] m920x_read = error: -19 [ 1263.813850][ T985] dvb-usb: error while querying for an remote control event. [ 1263.918590][ T985] m920x_read = error: -19 [ 1263.923509][ T985] dvb-usb: error while querying for an remote control event. [ 1264.039427][ T985] m920x_read = error: -19 [ 1264.043911][ T985] dvb-usb: error while querying for an remote control event. [ 1264.168983][ T5683] m920x_read = error: -19 [ 1264.188477][ T5683] dvb-usb: error while querying for an remote control event. [ 1264.308722][ T5683] m920x_read = error: -19 [ 1264.313287][ T5683] dvb-usb: error while querying for an remote control event. [ 1264.428690][ T5683] m920x_read = error: -19 [ 1264.438657][ T5683] dvb-usb: error while querying for an remote control event. [ 1264.468521][ T985] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1264.568499][ T5683] m920x_read = error: -19 [ 1264.578378][ T5683] dvb-usb: error while querying for an remote control event. [ 1264.649970][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 1264.675548][ T985] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1264.695060][ T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1264.706481][ T5683] m920x_read = error: -19 [ 1264.711212][ T5683] dvb-usb: error while querying for an remote control event. [ 1264.727710][ T985] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1264.753877][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.762548][ T985] usb 2-1: Product: syz [ 1264.767980][ T985] usb 2-1: Manufacturer: syz [ 1264.773903][ T985] usb 2-1: SerialNumber: syz [ 1264.784017][ T985] usb 2-1: config 0 descriptor?? [ 1264.829187][ T985] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1264.848427][ T9336] m920x_read = error: -19 [ 1264.857504][ T9336] dvb-usb: error while querying for an remote control event. [ 1264.877590][ T985] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1265.011130][T25455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1265.020518][ T9336] m920x_read = error: -19 [ 1265.029573][T25455] tipc: Enabling of bearer rejected, media not registered [ 1265.033966][ T9336] dvb-usb: error while querying for an remote control event. [ 1265.225934][ T9336] m920x_read = error: -19 [ 1265.269475][ T9336] dvb-usb: error while querying for an remote control event. [ 1265.433631][ T9336] m920x_read = error: -19 [ 1265.464613][ T9336] dvb-usb: error while querying for an remote control event. [ 1265.505067][ T985] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1265.538066][ T985] em28xx 2-1:0.0: Config register raw data: 0x41 [ 1265.643979][ T985] m920x_read = error: -19 [ 1265.676325][ T985] dvb-usb: error while querying for an remote control event. [ 1265.819416][T25434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.856475][T25434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.878579][ T985] m920x_read = error: -19 [ 1265.901018][ T985] dvb-usb: error while querying for an remote control event. [ 1266.048428][ T9336] m920x_read = error: -19 [ 1266.052980][ T9336] dvb-usb: error while querying for an remote control event. [ 1266.194106][ T9336] m920x_read = error: -19 [ 1266.214890][ T9336] dvb-usb: error while querying for an remote control event. [ 1266.370892][ T9336] m920x_read = error: -19 [ 1266.384713][ T9336] dvb-usb: error while querying for an remote control event. [ 1266.538428][ T9336] m920x_read = error: -19 [ 1266.548195][ T9336] dvb-usb: error while querying for an remote control event. [ 1266.589492][ T9323] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1266.678450][ T985] m920x_read = error: -19 [ 1266.682897][ T985] dvb-usb: error while querying for an remote control event. [ 1266.750301][ T9323] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1266.777762][ T9323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.820979][ T985] m920x_read = error: -19 [ 1266.833022][ T985] dvb-usb: error while querying for an remote control event. [ 1266.959170][ T985] m920x_read = error: -19 [ 1266.972680][ T985] dvb-usb: error while querying for an remote control event. [ 1267.098480][ T5683] m920x_read = error: -19 [ 1267.107788][ T5683] dvb-usb: error while querying for an remote control event. [ 1267.167289][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1267.228500][ T985] m920x_read = error: -19 [ 1267.237711][ T985] dvb-usb: error while querying for an remote control event. [ 1267.302497][ T9326] usb 2-1: USB disconnect, device number 115 [ 1267.313563][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1267.338135][ T9326] em28xx 2-1:0.0: Disconnecting em28xx [ 1267.360723][ T985] m920x_read = error: -19 [ 1267.367465][ T985] dvb-usb: error while querying for an remote control event. [ 1267.402607][ T9326] em28xx 2-1:0.0: Freeing device [ 1267.499325][ T985] m920x_read = error: -19 [ 1267.505845][ T985] dvb-usb: error while querying for an remote control event. [ 1267.526626][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'. [ 1267.628808][ T985] m920x_read = error: -19 [ 1267.634139][ T985] dvb-usb: error while querying for an remote control event. [ 1267.748393][ T9326] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1267.748788][ T985] m920x_read = error: -19 [ 1267.760691][ T985] dvb-usb: error while querying for an remote control event. [ 1267.778527][ T5697] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1267.858727][ T985] m920x_read = error: -19 [ 1267.863187][ T985] dvb-usb: error while querying for an remote control event. [ 1267.908462][ T5697] usb 3-1: device descriptor read/64, error -71 [ 1267.915233][ T9326] usb 2-1: device descriptor read/64, error -71 [ 1267.978506][ T985] m920x_read = error: -19 [ 1267.982978][ T985] dvb-usb: error while querying for an remote control event. [ 1268.098497][ T985] m920x_read = error: -19 [ 1268.102889][ T985] dvb-usb: error while querying for an remote control event. [ 1268.168524][ T5697] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1268.176141][ T9326] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1268.218549][ T985] m920x_read = error: -19 [ 1268.223349][ T985] dvb-usb: error while querying for an remote control event. [ 1268.308412][ T9326] usb 2-1: device descriptor read/64, error -71 [ 1268.314825][ T5697] usb 3-1: device descriptor read/64, error -71 [ 1268.338534][ T5683] m920x_read = error: -19 [ 1268.343159][ T5683] dvb-usb: error while querying for an remote control event. [ 1268.428606][ T9326] usb usb2-port1: attempt power cycle [ 1268.434314][ T5697] usb usb3-port1: attempt power cycle [ 1268.458590][ T5683] m920x_read = error: -19 [ 1268.463975][ T5683] dvb-usb: error while querying for an remote control event. [ 1268.478401][ T985] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1268.578812][ T5683] m920x_read = error: -19 [ 1268.583334][ T5683] dvb-usb: error while querying for an remote control event. [ 1268.608392][ T985] usb 6-1: device descriptor read/64, error -71 [ 1268.698512][ T5683] m920x_read = error: -19 [ 1268.702940][ T5683] dvb-usb: error while querying for an remote control event. [ 1268.778505][ T5697] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1268.786202][ T9326] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1268.809131][ T5697] usb 3-1: device descriptor read/8, error -71 [ 1268.815618][ T9326] usb 2-1: device descriptor read/8, error -71 [ 1268.828749][ T5683] m920x_read = error: -19 [ 1268.833963][ T5683] dvb-usb: error while querying for an remote control event. [ 1268.858373][ T985] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1268.948543][ T5683] m920x_read = error: -19 [ 1268.952965][ T5683] dvb-usb: error while querying for an remote control event. [ 1268.988377][ T985] usb 6-1: device descriptor read/64, error -71 [ 1269.048478][ T5697] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1269.058598][ T9326] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1269.069730][ T5697] usb 3-1: device descriptor read/8, error -71 [ 1269.070844][ T5683] m920x_read = error: -19 [ 1269.080229][ T9326] usb 2-1: device descriptor read/8, error -71 [ 1269.087163][ T5683] dvb-usb: error while querying for an remote control event. [ 1269.098587][ T985] usb usb6-port1: attempt power cycle [ 1269.179075][ T5697] usb usb3-port1: unable to enumerate USB device [ 1269.188878][ T9326] usb usb2-port1: unable to enumerate USB device [ 1269.198636][ T5705] m920x_read = error: -19 [ 1269.203062][ T5705] dvb-usb: error while querying for an remote control event. [ 1269.228639][ T9323] cxacru 5-1:1.0: receive of cm 0x91 failed (-104) [ 1269.239539][ T9323] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 1269.247390][ T9323] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 1269.273815][ T9323] cxacru 5-1:1.0: probe with driver cxacru failed with error -104 [ 1269.289120][ T9323] usb 5-1: USB disconnect, device number 106 [ 1269.320542][ T5705] m920x_read = error: -19 [ 1269.332849][ T5705] dvb-usb: error while querying for an remote control event. [ 1269.439292][ T985] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1269.448827][ T5683] m920x_read = error: -19 [ 1269.453221][ T5683] dvb-usb: error while querying for an remote control event. [ 1269.461904][ T985] usb 6-1: device descriptor read/8, error -71 [ 1269.569641][ T5683] m920x_read = error: -19 [ 1269.574174][ T5683] dvb-usb: error while querying for an remote control event. [ 1269.689381][ T5683] m920x_read = error: -19 [ 1269.693816][ T5683] dvb-usb: error while querying for an remote control event. [ 1269.702729][ T985] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1269.718560][ T9323] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1269.728971][ T985] usb 6-1: device descriptor read/8, error -71 [ 1269.818836][ T5683] m920x_read = error: -19 [ 1269.823885][ T5683] dvb-usb: error while querying for an remote control event. [ 1269.838602][ T985] usb usb6-port1: unable to enumerate USB device [ 1269.870759][ T9323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1269.879520][ T9323] usb 5-1: config 1 has an invalid interface number: 16 but max is 0 [ 1269.887608][ T9323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.897887][ T9323] usb 5-1: config 1 has no interface number 0 [ 1269.904172][ T9323] usb 5-1: config 1 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1269.921518][ T9323] usb 5-1: string descriptor 0 read error: -22 [ 1269.927896][ T9323] usb 5-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 1269.937136][ T9323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.949246][ T985] m920x_read = error: -19 [ 1269.953789][ T985] dvb-usb: error while querying for an remote control event. [ 1269.962479][ T9323] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.971781][ T9323] usb 5-1: MIDIStreaming interface descriptor not found [ 1270.068639][ T985] m920x_read = error: -19 [ 1270.073060][ T985] dvb-usb: error while querying for an remote control event. [ 1270.162641][ T9323] usb 5-1: USB disconnect, device number 107 [ 1270.189556][ T5683] m920x_read = error: -19 [ 1270.195916][ T5683] dvb-usb: error while querying for an remote control event. [ 1270.308439][ T5683] m920x_read = error: -19 [ 1270.312840][ T5683] dvb-usb: error while querying for an remote control event. [ 1270.438514][ T5683] m920x_read = error: -19 [ 1270.448168][ T5683] dvb-usb: error while querying for an remote control event. [ 1270.512608][T25512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1270.560262][ T5683] m920x_read = error: -19 [ 1270.570102][ T5683] dvb-usb: error while querying for an remote control event. [ 1270.688718][ T5683] m920x_read = error: -19 [ 1270.700704][ T5683] dvb-usb: error while querying for an remote control event. [ 1270.743282][T25517] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1270.767652][T25517] tipc: Enabling of bearer rejected, media not registered [ 1270.806876][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1270.833290][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1270.840371][ T985] m920x_read = error: -19 [ 1270.845507][ T985] dvb-usb: error while querying for an remote control event. [ 1270.853090][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1270.873218][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1270.885346][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1270.970015][ T985] m920x_read = error: -19 [ 1270.974556][ T985] dvb-usb: error while querying for an remote control event. [ 1271.003514][T25522] loop5: detected capacity change from 0 to 7 [ 1271.061619][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5588'. [ 1271.084157][T25522] loop5: p1 < > p3 p4 [ 1271.103467][ T5683] m920x_read = error: -19 [ 1271.122103][ T5683] dvb-usb: error while querying for an remote control event. [ 1271.126098][T25522] loop5: partition table partially beyond EOD, [ 1271.146947][T25525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5588'. [ 1271.180914][T25522] truncated [ 1271.222672][T25522] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1271.280275][ T5683] m920x_read = error: -19 [ 1271.290411][ T5683] dvb-usb: error while querying for an remote control event. [ 1271.438945][ T985] m920x_read = error: -19 [ 1271.490089][ T985] dvb-usb: error while querying for an remote control event. [ 1271.658565][ T985] m920x_read = error: -19 [ 1271.672176][ T985] dvb-usb: error while querying for an remote control event. [ 1271.808451][ T985] m920x_read = error: -19 [ 1271.818660][ T985] dvb-usb: error while querying for an remote control event. [ 1271.928473][ T985] m920x_read = error: -19 [ 1271.942545][ T985] dvb-usb: error while querying for an remote control event. [ 1271.978803][T21170] bridge0: port 3(syz_tun) entered disabled state [ 1272.078534][ T985] m920x_read = error: -19 [ 1272.086951][ T985] dvb-usb: error while querying for an remote control event. [ 1272.099540][T21170] syz_tun (unregistering): left allmulticast mode [ 1272.115036][T21170] syz_tun (unregistering): left promiscuous mode [ 1272.128061][T21170] bridge0: port 3(syz_tun) entered disabled state [ 1272.209968][ T985] m920x_read = error: -19 [ 1272.222351][ T985] dvb-usb: error while querying for an remote control event. [ 1272.349006][ T985] m920x_read = error: -19 [ 1272.360683][ T985] dvb-usb: error while querying for an remote control event. [ 1272.469438][ T985] m920x_read = error: -19 [ 1272.475381][ T985] dvb-usb: error while querying for an remote control event. [ 1272.528767][ T9323] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1272.588850][ T985] m920x_read = error: -19 [ 1272.597518][ T985] dvb-usb: error while querying for an remote control event. [ 1272.615139][T25552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5594'. [ 1272.634523][T10061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.646272][T10061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.678610][ T9323] usb 6-1: device descriptor read/64, error -71 [ 1272.722897][T25552] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1272.733201][ T985] m920x_read = error: -19 [ 1272.737830][ T985] dvb-usb: error while querying for an remote control event. [ 1272.752750][T25552] bond1 (unregistering): Released all slaves [ 1272.848423][ T985] m920x_read = error: -19 [ 1272.855592][ T985] dvb-usb: error while querying for an remote control event. [ 1272.922205][ T9323] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1272.989415][ T5616] Bluetooth: hci1: command tx timeout [ 1273.001386][ T985] m920x_read = error: -19 [ 1273.005794][ T985] dvb-usb: error while querying for an remote control event. [ 1273.060060][T10061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.071843][T10061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.085048][ T9323] usb 6-1: device descriptor read/64, error -71 [ 1273.108487][ T985] m920x_read = error: -19 [ 1273.112557][T25524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.113443][ T985] dvb-usb: error while querying for an remote control event. [ 1273.120498][T25524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.135147][T25524] bridge_slave_0: entered allmulticast mode [ 1273.143701][T25524] bridge_slave_0: entered promiscuous mode [ 1273.162378][T25564] syzkaller1: entered promiscuous mode [ 1273.167907][T25564] syzkaller1: entered allmulticast mode [ 1273.176341][T25524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.185971][T25524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.193426][T25524] bridge_slave_1: entered allmulticast mode [ 1273.201822][ T9323] usb usb6-port1: attempt power cycle [ 1273.209912][T25524] bridge_slave_1: entered promiscuous mode [ 1273.228650][ T985] m920x_read = error: -19 [ 1273.233103][ T985] dvb-usb: error while querying for an remote control event. [ 1273.348598][ T985] m920x_read = error: -19 [ 1273.353703][ T985] dvb-usb: error while querying for an remote control event. [ 1273.474554][ T985] m920x_read = error: -19 [ 1273.480712][ T985] dvb-usb: error while querying for an remote control event. [ 1273.538536][ T9323] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1273.558980][ T9323] usb 6-1: device descriptor read/8, error -71 [ 1273.569806][T10061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.580348][T10061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.599368][ T985] m920x_read = error: -19 [ 1273.603900][ T985] dvb-usb: error while querying for an remote control event. [ 1273.646039][T25524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.674886][T25524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.718410][ T985] m920x_read = error: -19 [ 1273.726879][ T985] dvb-usb: error while querying for an remote control event. [ 1273.798452][ T9323] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1273.820479][ T9323] usb 6-1: device descriptor read/8, error -71 [ 1273.848450][ T5683] m920x_read = error: -19 [ 1273.852916][ T5683] dvb-usb: error while querying for an remote control event. [ 1273.901334][T25524] team0: Port device team_slave_0 added [ 1273.928814][ T9323] usb usb6-port1: unable to enumerate USB device [ 1273.960593][T25524] team0: Port device team_slave_1 added [ 1273.978686][ T5683] m920x_read = error: -19 [ 1273.988350][ T5683] dvb-usb: error while querying for an remote control event. [ 1273.998970][T25524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.006190][ T985] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1274.014026][T25524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.042938][T25524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.060745][T25524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.067767][T25524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.095068][T25524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.118602][ T5683] m920x_read = error: -19 [ 1274.123001][ T5683] dvb-usb: error while querying for an remote control event. [ 1274.200682][ T985] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1274.209865][ T985] usb 5-1: config 0 has no interface number 0 [ 1274.230787][ T985] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1274.242206][ T5683] m920x_read = error: -19 [ 1274.247034][ T5683] dvb-usb: error while querying for an remote control event. [ 1274.264129][ T985] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1274.277827][ T985] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1274.286043][ T985] usb 5-1: Manufacturer: syz [ 1274.291978][ T985] usb 5-1: SerialNumber: syz [ 1274.306490][ T985] usb 5-1: config 0 descriptor?? [ 1274.369353][ T985] m920x_read = error: -19 [ 1274.381987][ T985] dvb-usb: error while querying for an remote control event. [ 1274.392012][T25524] hsr_slave_0: entered promiscuous mode [ 1274.403520][T25524] hsr_slave_1: entered promiscuous mode [ 1274.412037][T25524] debugfs: 'hsr0' already exists in 'hsr' [ 1274.417845][T25524] Cannot create hsr debugfs directory [ 1274.518603][ T985] m920x_read = error: -19 [ 1274.523821][ T985] dvb-usb: error while querying for an remote control event. [ 1274.678463][ T985] m920x_read = error: -19 [ 1274.689498][ T985] dvb-usb: error while querying for an remote control event. [ 1274.762177][T10061] bridge_slave_1: left allmulticast mode [ 1274.780652][T10061] bridge_slave_1: left promiscuous mode [ 1274.797448][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.828648][ T985] m920x_read = error: -19 [ 1274.840825][ T985] dvb-usb: error while querying for an remote control event. [ 1274.899653][T10061] bridge_slave_0: left allmulticast mode [ 1274.925950][T10061] bridge_slave_0: left promiscuous mode [ 1274.948132][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.980417][ T985] m920x_read = error: -19 [ 1274.990491][ T985] dvb-usb: error while querying for an remote control event. [ 1275.078610][ T5616] Bluetooth: hci1: command tx timeout [ 1275.158400][ T985] m920x_read = error: -19 [ 1275.175538][ T985] dvb-usb: error while querying for an remote control event. [ 1275.288419][ T985] m920x_read = error: -19 [ 1275.346086][ T985] dvb-usb: error while querying for an remote control event. [ 1275.508434][ T985] m920x_read = error: -19 [ 1275.516511][ T985] dvb-usb: error while querying for an remote control event. [ 1275.678488][ T985] m920x_read = error: -19 [ 1275.682922][ T985] dvb-usb: error while querying for an remote control event. [ 1275.798586][ T985] m920x_read = error: -19 [ 1275.803015][ T985] dvb-usb: error while querying for an remote control event. [ 1275.938456][ T985] m920x_read = error: -19 [ 1275.947452][ T985] dvb-usb: error while querying for an remote control event. [ 1275.982925][T25608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.991710][T25608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.068686][ T5683] m920x_read = error: -19 [ 1276.077763][ T5683] dvb-usb: error while querying for an remote control event. [ 1276.087450][T10061] bond1 (unregistering): Released all slaves [ 1276.102820][T10061] bond0 (unregistering): Released all slaves [ 1276.118098][T10061] bond2 (unregistering): Released all slaves [ 1276.198616][ T5683] m920x_read = error: -19 [ 1276.214709][ T5683] dvb-usb: error while querying for an remote control event. [ 1276.222270][ T985] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1276.230731][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1276.247727][T10061] tipc: Left network mode [ 1276.356984][ T5683] m920x_read = error: -19 [ 1276.365484][ T5683] dvb-usb: error while querying for an remote control event. [ 1276.407302][ T985] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1276.415673][ T985] usb 3-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 1276.438104][T25612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.463304][T25612] loop8: detected capacity change from 0 to 7 [ 1276.478695][ T985] usb 3-1: config 0 has no interface number 0 [ 1276.485292][T25612] Dev loop8: unable to read RDB block 7 [ 1276.494091][ T985] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1276.498583][T25612] loop8: unable to read partition table [ 1276.509499][ T5705] m920x_read = error: -19 [ 1276.530852][ T5705] dvb-usb: error while querying for an remote control event. [ 1276.543865][T25612] loop8: partition table beyond EOD, truncated [ 1276.558581][T25612] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1276.573144][ T985] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1276.590638][ T985] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1276.607551][ T985] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1276.642367][ T985] usb 3-1: Manufacturer: syz [ 1276.653982][ T985] usb 3-1: config 0 descriptor?? [ 1276.678024][ T985] hub 3-1:0.52: bad descriptor, ignoring hub [ 1276.684289][ T5705] m920x_read = error: -19 [ 1276.694799][ T5705] dvb-usb: error while querying for an remote control event. [ 1276.704335][ T985] hub 3-1:0.52: probe with driver hub failed with error -5 [ 1276.790853][ T9323] usb 5-1: USB disconnect, device number 108 [ 1276.802566][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5607'. [ 1276.829234][ T5705] m920x_read = error: -19 [ 1276.835300][ T5705] dvb-usb: error while querying for an remote control event. [ 1276.852139][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5607'. [ 1276.883843][ T985] usb 3-1: Can not set alternate setting to 1, error: -71 [ 1276.917384][ T985] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1276.949345][ T5705] m920x_read = error: -19 [ 1276.956544][ T5705] dvb-usb: error while querying for an remote control event. [ 1276.967515][ T985] usb 3-1: USB disconnect, device number 21 [ 1277.011462][T25618] veth0_to_bond: entered allmulticast mode [ 1277.074518][T10061] ------------[ cut here ]------------ [ 1277.080915][T10061] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 1277.088809][T10061] WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx+0x498/0x7d0, CPU#1: kworker/u8:33/10061 [ 1277.100531][T10061] Modules linked in: [ 1277.104880][T10061] CPU: 1 UID: 0 PID: 10061 Comm: kworker/u8:33 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.116255][T10061] Tainted: [L]=SOFTLOCKUP [ 1277.120647][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1277.130950][T10061] Workqueue: netns cleanup_net [ 1277.136884][T10061] RIP: 0010:drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 1277.143309][T10061] Code: 8d 78 0a 00 00 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 04 fd ff ff e8 6c 20 8d f6 90 0f 0b 90 e9 3d fe [ 1277.163306][T10061] RSP: 0018:ffffc9000d7ff090 EFLAGS: 00010246 [ 1277.169564][T10061] RAX: 0000000000000000 RBX: ffffffff90695800 RCX: ffff888037171938 [ 1277.177558][T10061] RDX: 0000000000000000 RSI: ffff888037170120 RDI: ffffffff90695800 [ 1277.185947][T10061] RBP: 1ffff11006e2e325 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 1277.192570][ T5616] Bluetooth: hci1: command tx timeout [ 1277.194343][T10061] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: ffff888037172c70 [ 1277.207593][T10061] R13: ffff888037170ec0 R14: ffff888037171928 R15: dffffc0000000000 [ 1277.215649][T10061] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 1277.224689][T10061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1277.231338][T10061] CR2: 0000557e0c475950 CR3: 0000000051358000 CR4: 00000000003526f0 [ 1277.239375][T10061] Call Trace: [ 1277.242685][T10061] [ 1277.245670][T10061] ieee80211_assign_link_chanctx+0x234/0xcd0 [ 1277.251851][T10061] ? __pfx_ieee80211_assign_link_chanctx+0x10/0x10 [ 1277.258445][T10061] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.263500][T10061] __ieee80211_link_release_channel+0x3c6/0x610 [ 1277.269777][T10061] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 1277.276558][T10061] ieee80211_teardown_sdata+0xc1/0x240 [ 1277.282103][T10061] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1277.287479][T10061] unregister_netdevice_many_notify+0x1acd/0x2140 [ 1277.294001][T10061] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1277.300826][T10061] ? call_rcu+0x64b/0x8b0 [ 1277.305195][T10061] ? rcu_is_watching+0x15/0xb0 [ 1277.310100][T10061] ? __up_read+0x29c/0x930 [ 1277.314560][T10061] unregister_netdevice_queue+0x2f5/0x340 [ 1277.320372][T10061] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1277.326661][T10061] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1277.332475][T10061] _cfg80211_unregister_wdev+0x156/0x5a0 [ 1277.338235][T10061] ieee80211_remove_interfaces+0x49c/0x6a0 [ 1277.344220][T10061] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1277.350656][T10061] ieee80211_unregister_hw+0x5d/0x2c0 [ 1277.356073][T10061] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 1277.361752][T10061] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1277.367855][T10061] ? hwsim_exit_net+0xcbd/0xf50 [ 1277.372826][T10061] ? __local_bh_enable_ip+0xd0/0x130 [ 1277.378234][T10061] hwsim_exit_net+0xe8e/0xf50 [ 1277.383014][T10061] ? hwsim_exit_net+0x326/0xf50 [ 1277.387911][T10061] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1277.393484][T10061] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1277.399498][T10061] ops_undo_list+0x43d/0x8d0 [ 1277.404156][T10061] ? __pfx_ops_undo_list+0x10/0x10 [ 1277.409400][T10061] ? idr_destroy+0x218/0x290 [ 1277.414109][T10061] ? do_raw_spin_unlock+0xf5/0x210 [ 1277.419318][T10061] cleanup_net+0x572/0x810 [ 1277.423783][T10061] ? __pfx_cleanup_net+0x10/0x10 [ 1277.428805][T10061] ? rcu_is_watching+0x15/0xb0 [ 1277.433622][T10061] ? process_scheduled_works+0xa20/0x14e0 [ 1277.439463][T10061] process_scheduled_works+0xa8e/0x14e0 [ 1277.445076][T10061] ? __pfx_process_scheduled_works+0x10/0x10 [ 1277.451135][T10061] ? assign_work+0x3cf/0x5d0 [ 1277.455758][T10061] worker_thread+0xa47/0xfb0 [ 1277.460446][T10061] ? __kthread_parkme+0x71/0x1f0 [ 1277.465434][T10061] kthread+0x388/0x470 [ 1277.470235][T10061] ? __pfx_worker_thread+0x10/0x10 [ 1277.475377][T10061] ? __pfx_kthread+0x10/0x10 [ 1277.480069][T10061] ret_from_fork+0x514/0xb70 [ 1277.484754][T10061] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.489995][T10061] ? __switch_to+0xc89/0x1420 [ 1277.494727][T10061] ? __pfx_kthread+0x10/0x10 [ 1277.499371][T10061] ret_from_fork_asm+0x1a/0x30 [ 1277.504183][T10061] [ 1277.507235][T10061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1277.514563][T10061] CPU: 1 UID: 0 PID: 10061 Comm: kworker/u8:33 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.525778][T10061] Tainted: [L]=SOFTLOCKUP [ 1277.530120][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1277.540191][T10061] Workqueue: netns cleanup_net [ 1277.544996][T10061] Call Trace: [ 1277.548297][T10061] [ 1277.551255][T10061] vpanic+0x56c/0xa60 [ 1277.555305][T10061] ? __pfx__printk+0x10/0x10 [ 1277.559926][T10061] ? __pfx_vpanic+0x10/0x10 [ 1277.564472][T10061] ? is_bpf_text_address+0x292/0x2b0 [ 1277.569793][T10061] ? is_bpf_text_address+0x26/0x2b0 [ 1277.575040][T10061] panic+0xc5/0xd0 [ 1277.578807][T10061] ? __pfx_panic+0x10/0x10 [ 1277.583272][T10061] ? ret_from_fork_asm+0x1a/0x30 [ 1277.588259][T10061] __warn+0x315/0x4c0 [ 1277.592286][T10061] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 1277.598052][T10061] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 1277.603807][T10061] __report_bug+0x276/0x570 [ 1277.608433][T10061] ? drv_unassign_vif_chanctx+0x498/0x7d0 [ 1277.614205][T10061] ? __pfx___report_bug+0x10/0x10 [ 1277.619288][T10061] ? rcu_is_watching+0x15/0xb0 [ 1277.624085][T10061] report_bug_entry+0x19a/0x290 [ 1277.628969][T10061] ? drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 1277.634724][T10061] ? drv_unassign_vif_chanctx+0x4ea/0x7d0 [ 1277.640483][T10061] handle_bug+0xce/0x200 [ 1277.644762][T10061] exc_invalid_op+0x1a/0x50 [ 1277.649309][T10061] asm_exc_invalid_op+0x1a/0x20 [ 1277.654173][T10061] RIP: 0010:drv_unassign_vif_chanctx+0x4e5/0x7d0 [ 1277.660533][T10061] Code: 8d 78 0a 00 00 48 8b 02 48 8d b0 20 01 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 04 fd ff ff e8 6c 20 8d f6 90 0f 0b 90 e9 3d fe [ 1277.680162][T10061] RSP: 0018:ffffc9000d7ff090 EFLAGS: 00010246 [ 1277.686245][T10061] RAX: 0000000000000000 RBX: ffffffff90695800 RCX: ffff888037171938 [ 1277.694220][T10061] RDX: 0000000000000000 RSI: ffff888037170120 RDI: ffffffff90695800 [ 1277.702227][T10061] RBP: 1ffff11006e2e325 R08: ffffffff90574637 R09: 1ffffffff20ae8c6 [ 1277.710218][T10061] R10: dffffc0000000000 R11: fffffbfff20ae8c7 R12: ffff888037172c70 [ 1277.718207][T10061] R13: ffff888037170ec0 R14: ffff888037171928 R15: dffffc0000000000 [ 1277.726204][T10061] ieee80211_assign_link_chanctx+0x234/0xcd0 [ 1277.732215][T10061] ? __pfx_ieee80211_assign_link_chanctx+0x10/0x10 [ 1277.738743][T10061] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.743805][T10061] __ieee80211_link_release_channel+0x3c6/0x610 [ 1277.750065][T10061] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 1277.756864][T10061] ieee80211_teardown_sdata+0xc1/0x240 [ 1277.762348][T10061] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1277.767737][T10061] unregister_netdevice_many_notify+0x1acd/0x2140 [ 1277.774181][T10061] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1277.780962][T10061] ? call_rcu+0x64b/0x8b0 [ 1277.785312][T10061] ? rcu_is_watching+0x15/0xb0 [ 1277.790094][T10061] ? __up_read+0x29c/0x930 [ 1277.794529][T10061] unregister_netdevice_queue+0x2f5/0x340 [ 1277.800266][T10061] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1277.806558][T10061] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1277.812302][T10061] _cfg80211_unregister_wdev+0x156/0x5a0 [ 1277.817958][T10061] ieee80211_remove_interfaces+0x49c/0x6a0 [ 1277.823788][T10061] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1277.830139][T10061] ieee80211_unregister_hw+0x5d/0x2c0 [ 1277.835528][T10061] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 1277.841088][T10061] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1277.847177][T10061] ? hwsim_exit_net+0xcbd/0xf50 [ 1277.852044][T10061] ? __local_bh_enable_ip+0xd0/0x130 [ 1277.857345][T10061] hwsim_exit_net+0xe8e/0xf50 [ 1277.862041][T10061] ? hwsim_exit_net+0x326/0xf50 [ 1277.866933][T10061] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1277.872148][T10061] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1277.877984][T10061] ops_undo_list+0x43d/0x8d0 [ 1277.882606][T10061] ? __pfx_ops_undo_list+0x10/0x10 [ 1277.887751][T10061] ? idr_destroy+0x218/0x290 [ 1277.892361][T10061] ? do_raw_spin_unlock+0xf5/0x210 [ 1277.897496][T10061] cleanup_net+0x572/0x810 [ 1277.901940][T10061] ? __pfx_cleanup_net+0x10/0x10 [ 1277.906900][T10061] ? rcu_is_watching+0x15/0xb0 [ 1277.911688][T10061] ? process_scheduled_works+0xa20/0x14e0 [ 1277.917463][T10061] process_scheduled_works+0xa8e/0x14e0 [ 1277.923037][T10061] ? __pfx_process_scheduled_works+0x10/0x10 [ 1277.929032][T10061] ? assign_work+0x3cf/0x5d0 [ 1277.933653][T10061] worker_thread+0xa47/0xfb0 [ 1277.938279][T10061] ? __kthread_parkme+0x71/0x1f0 [ 1277.943238][T10061] kthread+0x388/0x470 [ 1277.947323][T10061] ? __pfx_worker_thread+0x10/0x10 [ 1277.952444][T10061] ? __pfx_kthread+0x10/0x10 [ 1277.957051][T10061] ret_from_fork+0x514/0xb70 [ 1277.961677][T10061] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.966797][T10061] ? __switch_to+0xc89/0x1420 [ 1277.971497][T10061] ? __pfx_kthread+0x10/0x10 [ 1277.976119][T10061] ret_from_fork_asm+0x1a/0x30 [ 1277.980915][T10061] [ 1277.984518][T10061] Kernel Offset: disabled [ 1277.988850][T10061] Rebooting in 86400 seconds..