last executing test programs: 2m8.419129722s ago: executing program 2 (id=5219): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 2m8.143689839s ago: executing program 2 (id=5220): madvise(&(0x7f000074a000/0x12000)=nil, 0x12000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2fc1, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4004743c, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x23, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r6], 0x90}}, 0x20000011) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="7d37262ef3ad66b9150900000f32dfd166b9750800000f320f3a0f73970066b80f0000000f23c80f21f86635000060000f23f80f01ca66b8e1e669c40f23d00f21f866351000000b0f23f8650fc7ae76a8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) move_pages(0x0, 0x4, &(0x7f00000000c0)=[&(0x7f0000756000/0x2000)=nil, &(0x7f000074b000/0x3000)=nil, &(0x7f0000754000/0x1000)=nil, &(0x7f0000751000/0x1000)=nil], &(0x7f0000000080)=[0x8c09, 0xffff, 0x1, 0x80000, 0x1, 0x4, 0xc73, 0x7, 0x0, 0x5], 0x0, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x20, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000100)) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a000000000000000000000000000000000000000000000109000800000000000200010000000000000007180000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 2m7.643604018s ago: executing program 2 (id=5223): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002680)={r2, 0x2}, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) read(r0, 0x0, 0xfffffea1) close(r0) 2m7.622938273s ago: executing program 2 (id=5224): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 2m7.291510077s ago: executing program 2 (id=5225): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20009044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0xfff6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200ff010000000000000000030000000001140003"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2m7.067633597s ago: executing program 2 (id=5226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000002000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e65766500001000028004000600060005004e24000008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m6.738570612s ago: executing program 32 (id=5226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000002000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e65766500001000028004000600060005004e24000008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.861921456s ago: executing program 5 (id=5725): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) rt_sigtimedwait(&(0x7f0000000040)={[0x3]}, 0x0, 0x0, 0x8) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) io_uring_setup(0x7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a8020000180140003000000000000000000000020000100000004000200040001"], 0x40}}, 0x0) socket$inet6(0xa, 0x5, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x2000000008, 0x8, 0x0, 0x1, 0x400000000000, 0x4, 0x9}, {}, 0x1, 0x0, 0x1, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0xa, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.871493953s ago: executing program 5 (id=5727): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x9, 0x2, 0x10, @empty, @empty, 0x80, 0x80, 0x4, 0x101}}) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f00000004c0)=[{{&(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="0f", 0x1}], 0x1}}], 0x1, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x19}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040020}, 0x20040010) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32=r11], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7.017520833s ago: executing program 0 (id=5731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x9, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080) 6.815089607s ago: executing program 0 (id=5732): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) r1 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002140, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="20050a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="40060200f0d1ad0f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000001300)=ANY=[@ANYBLOB="400701"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x11, 0xf5, {0xf5, 0x30, "f3849c59ad7a20e7d22ba0dd3706ca06ea78f46bc3f01f910f0b2a622b41d0b1e05ff7b787eada4dca13e3ea600403912692c6d42c1b63810e6817d6a728128582efeb72ffc9b9230ccd5d361920e4c7ba620a5acbb3381afbc1173088dbf7e6cb02022708e24097c23884670fdb4ca02af1ecd41809b64472581d970af0590a40c723c140a64b1fc223b4ceb557897dfa4da7cadb963c9a10e7c44af8ed3be0e181031829f3520f53806682eb20b5bbe6e20fb4287a21f37af63f58a2729c54a78b7500e26536e09c655a7827390c2619659f0a2cfc8f6d20638cec03b9b9a646da3a2f43374e51a384d509b1038187026372"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x20, 0x15, 0x5, "d600180a54"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x81, 0x1, "db"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "8246"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "583901"}, &(0x7f0000000580)={0x20, 0x84, 0x2, ')\''}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "44a343"}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt(r3, 0x84, 0x82, &(0x7f0000000000)="000007008d9d0000", 0x8) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.683068503s ago: executing program 5 (id=5734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = semget(0x1, 0x4, 0x39c) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r5, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000cc0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10010853}, 0x40) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x8, "d60055f085747eab"}, 0x0}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f00000002c0)={0x14, &(0x7f0000000380)={0x0, 0x4, 0xb0, {0xb0, 0x23, "129a2b0e47a549691a43d1bdd712186130168ff698457b90cc57e12ace5156636de88088052c7135accf2100000064c1372aa04cfa238ec84a3be043727d1bde57c0f1abaa2dc9cb52fb52901e6c6948e8213b88b1cc2114c043f81f8a6f419a5e26a2bf8f6e773a9c2f4531fcabd26da659630b73a67dccc26072d14109000000c9e718130aefd41f91dad130d6f5a5bff1e9637ae579fd16c8f82d290a48f035b47e602c294d8a45e93b1288b1"}}, &(0x7f0000000440)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "f4b6f239b945616988e82d87c97b63e1f6a278d0b7b18ac5c76ac0d88c1e8255314e1aca92b2ffd3c768f2aecd41742e64b389c8410e2da212d5ef9a14b5fba2a95e3abd34d11d8376cd70d8dbe0bd9f17882b81985be91a4462a3184cd9024ce68c983c7334975722a1e92aa153919c1ef302a0727c45dbb420c7782770d6cb70cf890f9450cfaa42c838dc08ff85dae8cd406be42459dec894550efaaf5523c995e80331da2b13f49bc4745db270d6c2e8a65a4c030f3f406294a90e79b2ebcc23142d62c39cc109988511a79377420b006aafe98473cad3bed4bd40c41e78d5a35a75ec987700"/243}}}, &(0x7f0000000800)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="9ce569188fb8aad6c587ef6e9330ba8be7d0f7a648a5b8e3c82c14d3f60c28a95dd85aa1ec8d0eda384d95c28c3edcbe43344efe88af00d9df954fef706474dcfce641a214d150dac8f1d85ac62c4215c705c3290948cf53dfd25243e0f13da4dc3eebb5dfdd26226b5fd11f4d4624cc6af2f85a42db7e399c0fce3f35a0a7825618b304a986d99997265eecf1397ff41c4aa3b1b3cc9e1ee9315c44de21427bc5f0d3f3150d16462cd6f32f2f0cc7031c4275d7fd972280"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000780), &(0x7f00000007c0)}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRESDEC=r8], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20040015) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) r10 = socket$netlink(0x10, 0x3, 0x0) connect$l2tp6(r1, &(0x7f0000000880)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x20) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x880) 5.459488177s ago: executing program 3 (id=5744): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x101, 0x2, 0x4ddf, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) clock_adjtime(0xffffffd5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7ff, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_open_dev$vim2m(0x0, 0x2c, 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 3.373168434s ago: executing program 3 (id=5751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181640, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000000c0)={'dvmrp1\x00', {0x2, 0x0, @local}}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2800008, 0x1010, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000080), 0x0, 0x4) 3.372591226s ago: executing program 0 (id=5752): r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_CARRIER={0x5, 0x21, 0x44}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}}, 0x884) 3.203697714s ago: executing program 3 (id=5753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d2861657329fcff00000000000000000000000000001f0000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140094"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 3.014458356s ago: executing program 5 (id=5754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0xa1ffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x2, 0x1, 0x6, 0x800, 0x6, 0x4, {0x0, 0x56541a3c, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x6}}, {0x4, 0x7, 0x2, 0x0, '.%'}}]}, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x4e21, 0x81, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x33}, {0x7, 0xaa7c, 0x5, 0x5, 0x1, 0x2990, 0x6, 0xbe3}, {0x8, 0x6, 0x1, 0x49e6}, 0x7ffffffe, 0x6e6bb0, 0x2, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d5, 0x32}, 0x2, @in=@private=0xa010100, 0x3500, 0x5, 0x0, 0x6, 0xb, 0x8001, 0x1}}, 0xe8) 2.958089302s ago: executing program 3 (id=5756): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x400079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0xa}, [@RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r8 = accept4(r6, 0x0, 0x0, 0x800) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x64, 0x1ce2, 0xd9, 0x2f, 0x80, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.9565464s ago: executing program 0 (id=5757): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002680)={r2, 0x2}, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000700)='\x00I;\xf6\xc8\x15\x94\xfa,\xc8\xb6\xac\x96\x90\x12H\xa34:~\xb3\xcaJT\xe2\xac\x1e\rXk\xe2k\x86\xe0\xaf\xf4\xb46!\x00\x83U\xd8\x02\xe5gn)\xa4\xfe\x00E\xf7\\jgN\xe0D/oj\xad\xd2\x00\x00\x00\xa6U$\xc4\a\x02\x96\x1c\xa1\x1d\xef5\xe8\x7f\xe3\x90\xfd!\xdeZ\x06\x11\x83\xf47\x01\xe1R2\xc1\xae!\xb7\xf6A\xa30\x94\xa3\x1dj$\x914z\x7f\xa20{\xfa)\xb2j\xba\x1f\x97q\x9bG\xc6\xc0u\x89\'\r\x96#6\x1f\f.m+\xa7~w\xc8+\x99\x12\x7f\xc9\x89\x0f\x05\v)\x9fO\x048\xf4bf\x18\x8b\x99\xb8\v\xeaY\xb6\xccSR\xa5\x86\xdf\xb3\x16}BN\x82\xfam\nx\x9f\xe0o\xc4*\xf0\x8d18\xd8\xf2\x1fr\xd7i,\xb0\xe9\x19\x9b[\xbe\x16\xe6\xc3N\xcb0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) (async, rerun: 64) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) (rerun: 64) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, r0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516e}, &(0x7f0000000180)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded"], 0x3c}}, 0x0) (async) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1.221319461s ago: executing program 3 (id=5765): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r2, 0xe9328000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x20}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r6, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x17) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000052000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1.220255857s ago: executing program 1 (id=5766): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000075590692f4e27ed6b9f6d0ecb9ae99c79f3e52f348db65901e82960183247dc2a3f338f67ce86f11a83943201c46b99637db"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c4a9feb051eb6a3af64994c6b000100626f6e640019515fc4a3fc8edcb3db43b7f348a071f64897eab800dfd83ea4f5a2681360d2332a58ca9c2bd0dc5787729a25130452dd4ce9e2d0339358a994db767066c8f415bb9c38da177355517b0d985084327feb808f6089d3a03557fc18945727a6a865e20dcb80c229bc8b008798223a4dd91e95ca8be9c5ab808b1b309cd25ee59a9e3e91e0f1c18f8f4676d201e42526bd712de417288c5baf9b27bb70358060"], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x24044c05}, 0xa3ce3b97f09805c6) socket$kcm(0x29, 0x2, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 955.38132ms ago: executing program 1 (id=5767): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0), &(0x7f0000000000)) (async) r4 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40108, 0x1, {0x0, r7}}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40108, 0x1, {0x0, r7}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4, 0x100000001, 0x0, 0x0, 0x7, 0x0, {0xffff, r7}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4, 0x100000001, 0x0, 0x0, 0x7, 0x0, {0xffff, r7}}) r8 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAW(r11, 0x5407, &(0x7f0000000000)={0xea95, 0x9, 0x5, 0x7687, 0x2, "5f51429ae5457268"}) write(r12, &(0x7f00000000c0)="6956eb1b33323072e471ac1a6bd6442b84414f040de4348acc34ca18c7b4934e01562efa0addbf2546f2f0a2953cde471cbf27de0e8e0be2e38bf907763842d7897b777572bfce398923767484c354d02f652d54f073e76d0a8acf4717f94b509528b7d16d6d5b41579528360605979060ea9eb112290c557decedde669789b90d89", 0x82) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) recvmmsg(r13, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x100, 0x0) shutdown(r13, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x1000, 0x1, {0x0, r7}}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x1a38, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@ipv4_delrule={0x6c, 0x21, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x20, 0x14, 0xe, 0x85, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xfffffff3}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan1\x00'}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e22}}, @FRA_FLOW={0x8, 0xb, 0xfffffffa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@ipv4_delrule={0x6c, 0x21, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x20, 0x14, 0xe, 0x85, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xfffffff3}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan1\x00'}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e22}}, @FRA_FLOW={0x8, 0xb, 0xfffffffa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 889.667487ms ago: executing program 4 (id=5768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000200000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 833.531936ms ago: executing program 1 (id=5769): mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) 746.135784ms ago: executing program 0 (id=5770): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 725.628241ms ago: executing program 1 (id=5771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0xffffffd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 709.91689ms ago: executing program 4 (id=5772): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="5a8d01000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 639.386637ms ago: executing program 1 (id=5773): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20009044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0xfff6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200ff010000000000000000000100000001140003"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 613.048777ms ago: executing program 4 (id=5774): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000000000fe", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 562.178727ms ago: executing program 1 (id=5775): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0xa}, [@RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r5 = accept4(r3, 0x0, 0x0, 0x800) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x64, 0x1ce2, 0xd9, 0x2f, 0x80, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r5, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) 363.979406ms ago: executing program 4 (id=5776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x10, 0x7, 0x160, &(0x7f0000000440)="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"}) 113.895421ms ago: executing program 3 (id=5777): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8cf, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x118}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=[{0x10, 0x1, 0x4}, {0x10, 0x111, 0xbe35}, {0x10, 0x117, 0x3}, {0x10, 0x109, 0xa}], 0x40}}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8a242) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000001240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000001280)={r4}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b01000009140007800800014000000006080002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) kernel console output (not intermixed with test programs): 29321][T12966] dvb-usb: error while querying for an remote control event. [ 1332.576363][ T30] audit: type=1326 audit(1774511918.517:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0f9c799 code=0x7ffc0000 [ 1332.664580][ T980] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1332.664589][ T796] m920x_read = error: -19 [ 1332.696495][T21330] usb 6-1: config 0 has no interfaces? [ 1332.703487][ T796] dvb-usb: error while querying for an remote control event. [ 1332.741395][T21330] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1332.756044][ T30] audit: type=1326 audit(1774511918.557:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03b0f9c799 code=0x7ffc0000 [ 1332.756510][T24937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5454'. [ 1332.799600][T21330] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1332.800595][ T30] audit: type=1326 audit(1774511918.557:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0f9c799 code=0x7ffc0000 [ 1332.809107][T21330] usb 6-1: Manufacturer: syz [ 1332.836463][ T796] m920x_read = error: -19 [ 1332.840835][ T796] dvb-usb: error while querying for an remote control event. [ 1332.856729][ T980] usb 2-1: config 0 has no interfaces? [ 1332.926743][T24937] tc_dump_action: action bad kind [ 1332.994722][ T796] m920x_read = error: -19 [ 1332.999146][ T796] dvb-usb: error while querying for an remote control event. [ 1333.033006][T21330] usb 6-1: config 0 descriptor?? [ 1333.042128][ T980] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1333.087830][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1333.115701][ T980] usb 2-1: SerialNumber: syz [ 1333.115775][ T796] m920x_read = error: -19 [ 1333.138660][T24942] nft_compat: unsupported protocol 1 [ 1333.144654][ T796] dvb-usb: error while querying for an remote control event. [ 1333.152216][ T980] usb 2-1: config 0 descriptor?? [ 1333.264748][ T796] m920x_read = error: -19 [ 1333.269155][ T796] dvb-usb: error while querying for an remote control event. [ 1333.473776][ T796] m920x_read = error: -19 [ 1333.509936][ T796] dvb-usb: error while querying for an remote control event. [ 1333.635539][ T796] m920x_read = error: -19 [ 1333.640021][ T796] dvb-usb: error while querying for an remote control event. [ 1333.750814][T24962] netlink: 'syz.4.5464': attribute type 1 has an invalid length. [ 1333.758819][ T796] m920x_read = error: -19 [ 1333.763189][ T796] dvb-usb: error while querying for an remote control event. [ 1333.870065][T24962] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1333.885299][ T796] m920x_read = error: -19 [ 1333.891018][ T796] dvb-usb: error while querying for an remote control event. [ 1334.014606][ T796] m920x_read = error: -19 [ 1334.021062][ T796] dvb-usb: error while querying for an remote control event. [ 1334.090365][T24970] xt_bpf: check failed: parse error [ 1334.134629][ T796] m920x_read = error: -19 [ 1334.199727][ T796] dvb-usb: error while querying for an remote control event. [ 1334.314654][ T796] m920x_read = error: -19 [ 1334.319187][ T796] dvb-usb: error while querying for an remote control event. [ 1334.334541][T21330] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1334.444928][ T796] m920x_read = error: -19 [ 1334.477857][ T796] dvb-usb: error while querying for an remote control event. [ 1334.486757][T21330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.500780][T21330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.685386][T21330] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1334.707087][T21330] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1334.717072][T21330] usb 4-1: Manufacturer: syz [ 1334.723640][T21330] usb 4-1: config 0 descriptor?? [ 1334.866015][ T796] m920x_read = error: -19 [ 1334.885741][ T796] dvb-usb: error while querying for an remote control event. [ 1335.004678][ T796] m920x_read = error: -19 [ 1335.009200][ T796] dvb-usb: error while querying for an remote control event. [ 1335.073972][ T796] usb 6-1: USB disconnect, device number 5 [ 1335.134281][T12966] m920x_read = error: -19 [ 1335.138833][T12966] dvb-usb: error while querying for an remote control event. [ 1335.289058][ T796] m920x_read = error: -19 [ 1335.296064][ T796] dvb-usb: error while querying for an remote control event. [ 1335.304927][T24980] nft_compat: unsupported protocol 1 [ 1335.480123][T24985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5467'. [ 1335.496421][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5472'. [ 1335.507412][ T796] m920x_read = error: -19 [ 1335.511779][ T796] dvb-usb: error while querying for an remote control event. [ 1335.528238][ T5956] usb 2-1: USB disconnect, device number 49 [ 1335.684962][ T796] m920x_read = error: -19 [ 1335.695514][ T796] dvb-usb: error while querying for an remote control event. [ 1336.030170][T24991] netlink: 'syz.4.5473': attribute type 27 has an invalid length. [ 1336.082525][T24996] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5475'. [ 1336.104940][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1336.134760][ T796] m920x_read = error: -19 [ 1336.135247][T24991] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1336.139139][ T796] dvb-usb: error while querying for an remote control event. [ 1336.744670][ T796] m920x_read = error: -19 [ 1336.753107][ T796] dvb-usb: error while querying for an remote control event. [ 1336.901705][ T796] m920x_read = error: -19 [ 1336.906201][ T796] dvb-usb: error while querying for an remote control event. [ 1337.034917][ T796] m920x_read = error: -19 [ 1337.041986][ T796] dvb-usb: error while querying for an remote control event. [ 1337.174603][ T796] m920x_read = error: -19 [ 1337.179035][ T796] dvb-usb: error while querying for an remote control event. [ 1337.334640][ T796] m920x_read = error: -19 [ 1337.339099][ T796] dvb-usb: error while querying for an remote control event. [ 1337.465114][ T796] m920x_read = error: -19 [ 1337.470658][ T796] dvb-usb: error while querying for an remote control event. [ 1337.486137][T25005] syzkaller0: entered promiscuous mode [ 1337.504638][T25005] syzkaller0: entered allmulticast mode [ 1337.532835][T25005] tipc: Started in network mode [ 1337.552437][T25005] tipc: Node identity a2c73f3d79b, cluster identity 4711 [ 1337.584657][ T796] m920x_read = error: -19 [ 1337.589114][ T796] dvb-usb: error while querying for an remote control event. [ 1337.598838][T25005] tipc: Enabled bearer , priority 0 [ 1337.629459][T25004] tipc: Resetting bearer [ 1337.704739][T25004] tipc: Disabling bearer [ 1337.715550][ T796] m920x_read = error: -19 [ 1337.720252][ T796] dvb-usb: error while querying for an remote control event. [ 1337.782396][T25009] kAFS: unable to lookup cell '' [ 1337.788532][T25009] kAFS: unable to lookup cell '(,c' [ 1337.834629][ T796] m920x_read = error: -19 [ 1337.842028][ T796] dvb-usb: error while querying for an remote control event. [ 1337.963877][T21330] usbhid 4-1:0.0: can't add hid device: -71 [ 1337.983910][T21330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1338.022985][T21330] usb 4-1: USB disconnect, device number 72 [ 1338.058601][ T796] m920x_read = error: -19 [ 1338.062996][ T796] dvb-usb: error while querying for an remote control event. [ 1338.193847][ T796] m920x_read = error: -19 [ 1338.220365][ T796] dvb-usb: error while querying for an remote control event. [ 1338.231051][T25020] SET target dimension over the limit! [ 1338.339452][T25019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.340909][T21330] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1338.357651][T25019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.374870][T21330] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1338.394545][T21331] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1338.514867][ T796] m920x_read = error: -19 [ 1338.522341][ T796] dvb-usb: error while querying for an remote control event. [ 1338.585461][T21331] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1338.594053][T21331] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1338.632466][T21331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.645339][ T796] m920x_read = error: -19 [ 1338.649113][T25021] fido_id[25021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1338.649712][ T796] dvb-usb: error while querying for an remote control event. [ 1338.666376][T21331] usb 1-1: config 0 has no interface number 0 [ 1338.678571][T21331] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 1338.701636][T21331] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1338.812491][T21331] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1338.833922][T21331] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1338.844747][T21331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.868624][ T796] m920x_read = error: -19 [ 1338.873250][ T796] dvb-usb: error while querying for an remote control event. [ 1338.887469][T21331] usb 1-1: config 0 descriptor?? [ 1338.906741][T21331] usb-storage 1-1:0.255: USB Mass Storage device detected [ 1339.035123][ T796] m920x_read = error: -19 [ 1339.044583][ T796] dvb-usb: error while querying for an remote control event. [ 1339.090074][T21331] usb-storage 1-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 1339.092369][T25026] nft_compat: unsupported protocol 1 [ 1339.152315][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.176416][ T5956] m920x_read = error: -19 [ 1339.180814][ T5956] dvb-usb: error while querying for an remote control event. [ 1339.200835][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.265665][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.300540][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.308499][ T5956] m920x_read = error: -19 [ 1339.316913][ T5956] dvb-usb: error while querying for an remote control event. [ 1339.390172][ T5956] usb 1-1: USB disconnect, device number 32 [ 1339.454584][ T796] m920x_read = error: -19 [ 1339.459246][ T796] dvb-usb: error while querying for an remote control event. [ 1339.594622][ T796] m920x_read = error: -19 [ 1339.602286][ T796] dvb-usb: error while querying for an remote control event. [ 1339.632649][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1339.632666][ T30] audit: type=1326 audit(1774511925.897:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.5.5489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x0 [ 1339.718841][ T30] audit: type=1326 audit(1774511925.997:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1339.776190][ T5956] m920x_read = error: -19 [ 1339.781543][ T5956] dvb-usb: error while querying for an remote control event. [ 1339.791032][ T30] audit: type=1326 audit(1774511926.037:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1339.816419][ T30] audit: type=1326 audit(1774511926.037:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1339.949042][ T5956] m920x_read = error: -19 [ 1339.974617][ T5956] dvb-usb: error while querying for an remote control event. [ 1339.994648][T21331] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1340.117227][ T5956] m920x_read = error: -19 [ 1340.123103][ T30] audit: type=1326 audit(1774511926.037:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1340.123111][ T5956] dvb-usb: error while querying for an remote control event. [ 1340.123148][ T30] audit: type=1326 audit(1774511926.037:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1340.177398][T25050] bond3: (slave macvlan5): Error -98 calling set_mac_address [ 1340.204538][T21331] usb 2-1: Using ep0 maxpacket: 32 [ 1340.234552][T21331] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1340.248119][T21331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.259885][T21331] usb 2-1: Product: syz [ 1340.264917][T21331] usb 2-1: Manufacturer: syz [ 1340.269784][T21331] usb 2-1: SerialNumber: syz [ 1340.276727][ T30] audit: type=1326 audit(1774511926.037:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1340.338392][ T5956] m920x_read = error: -19 [ 1340.342784][ T5956] dvb-usb: error while querying for an remote control event. [ 1340.356006][T21330] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 1340.384745][T21330] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1340.414892][ T30] audit: type=1326 audit(1774511926.037:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1340.459199][T25056] nft_compat: unsupported protocol 1 [ 1340.507208][ T30] audit: type=1326 audit(1774511926.037:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1340.582753][T12966] m920x_read = error: -19 [ 1340.592732][T12966] dvb-usb: error while querying for an remote control event. [ 1340.612465][T21331] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1340.624581][ T5956] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1340.636934][ T30] audit: type=1326 audit(1774511926.037:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25042 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1340.660690][T21331] usb 2-1: 2:1 : bogus bTerminalLink 23 [ 1340.668787][T21331] usb 2-1: unit 6 not found! [ 1340.683186][T21331] usb 2-1: unit 246 not found! [ 1340.807646][T21331] usb 2-1: USB disconnect, device number 50 [ 1340.824582][T12966] m920x_read = error: -19 [ 1340.828973][T12966] dvb-usb: error while querying for an remote control event. [ 1340.913291][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5497'. [ 1340.942455][ T5956] usb 6-1: config 0 has no interfaces? [ 1340.959742][ T5956] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.969675][T22366] udevd[22366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1341.000357][T25062] kvm: pic: single mode not supported [ 1341.000480][T25062] kvm: pic: level sensitive irq not supported [ 1341.006828][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1341.008235][T25062] kvm: pic: level sensitive irq not supported [ 1341.036970][ T5956] usb 6-1: SerialNumber: syz [ 1341.082005][ T5956] usb 6-1: config 0 descriptor?? [ 1341.134623][ T5956] m920x_read = error: -19 [ 1341.217128][ T5956] dvb-usb: error while querying for an remote control event. [ 1341.372303][ T5956] m920x_read = error: -19 [ 1341.377898][ T5956] dvb-usb: error while querying for an remote control event. [ 1341.391966][T25075] kAFS: unable to lookup cell '' [ 1341.545261][ T5956] m920x_read = error: -19 [ 1341.554524][ T5956] dvb-usb: error while querying for an remote control event. [ 1341.667121][ T5956] m920x_read = error: -19 [ 1341.671897][ T5956] dvb-usb: error while querying for an remote control event. [ 1341.797248][T25082] kAFS: unable to lookup cell '' [ 1341.804937][T25082] kAFS: unable to lookup cell '(,c' [ 1341.827886][ T5956] m920x_read = error: -19 [ 1341.835940][ T5956] dvb-usb: error while querying for an remote control event. [ 1341.945165][ T5956] m920x_read = error: -19 [ 1341.949950][ T5956] dvb-usb: error while querying for an remote control event. [ 1341.999814][T25085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1342.009246][T25085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1342.020442][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1342.030383][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5503'. [ 1342.108965][ T5956] m920x_read = error: -19 [ 1342.113346][ T5956] dvb-usb: error while querying for an remote control event. [ 1342.244587][ T5956] m920x_read = error: -19 [ 1342.249128][ T5956] dvb-usb: error while querying for an remote control event. [ 1342.374568][ T5956] m920x_read = error: -19 [ 1342.382085][ T5956] dvb-usb: error while querying for an remote control event. [ 1342.584581][ T5956] m920x_read = error: -19 [ 1342.595097][ T5956] dvb-usb: error while querying for an remote control event. [ 1342.716796][ T5956] m920x_read = error: -19 [ 1342.722375][ T5956] dvb-usb: error while querying for an remote control event. [ 1342.844842][ T5956] m920x_read = error: -19 [ 1342.849346][ T5956] dvb-usb: error while querying for an remote control event. [ 1342.966338][ T5956] m920x_read = error: -19 [ 1342.971062][ T5956] dvb-usb: error while querying for an remote control event. [ 1343.094818][ T5956] m920x_read = error: -19 [ 1343.103429][ T5956] dvb-usb: error while querying for an remote control event. [ 1343.322848][ T5956] m920x_read = error: -19 [ 1343.327863][ T5956] dvb-usb: error while querying for an remote control event. [ 1343.362219][T21338] usb 6-1: USB disconnect, device number 6 [ 1343.444773][ T5956] m920x_read = error: -19 [ 1343.466495][ T5956] dvb-usb: error while querying for an remote control event. [ 1343.483249][T25094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5506'. [ 1343.517527][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5505'. [ 1343.527412][T25096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5505'. [ 1343.604804][ T5956] m920x_read = error: -19 [ 1343.613503][ T5956] dvb-usb: error while querying for an remote control event. [ 1343.740965][ T5956] m920x_read = error: -19 [ 1343.765396][ T5956] dvb-usb: error while querying for an remote control event. [ 1343.904585][ T5956] m920x_read = error: -19 [ 1343.911734][ T5956] dvb-usb: error while querying for an remote control event. [ 1344.074891][ T5956] m920x_read = error: -19 [ 1344.079979][ T5956] dvb-usb: error while querying for an remote control event. [ 1344.371489][ T5956] m920x_read = error: -19 [ 1344.388909][ T5956] dvb-usb: error while querying for an remote control event. [ 1344.522746][ T5956] m920x_read = error: -19 [ 1344.530650][ T5956] dvb-usb: error while querying for an remote control event. [ 1344.684609][ T5956] m920x_read = error: -19 [ 1344.689058][ T5956] dvb-usb: error while querying for an remote control event. [ 1344.720074][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1344.720091][ T30] audit: type=1326 audit(1774511930.997:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1344.818755][ T5956] m920x_read = error: -19 [ 1344.833392][ T30] audit: type=1326 audit(1774511930.997:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1344.863300][ T5956] dvb-usb: error while querying for an remote control event. [ 1344.939835][ T30] audit: type=1326 audit(1774511930.997:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.117815][T12966] m920x_read = error: -19 [ 1345.122898][T12966] dvb-usb: error while querying for an remote control event. [ 1345.194553][ T30] audit: type=1326 audit(1774511930.997:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.246182][T12966] m920x_read = error: -19 [ 1345.257196][T12966] dvb-usb: error while querying for an remote control event. [ 1345.364291][ T30] audit: type=1326 audit(1774511930.997:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.494614][T12966] m920x_read = error: -19 [ 1345.532530][T12966] dvb-usb: error while querying for an remote control event. [ 1345.582275][ T30] audit: type=1326 audit(1774511930.997:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.646065][ T5956] m920x_read = error: -19 [ 1345.747044][ T5956] dvb-usb: error while querying for an remote control event. [ 1345.768092][T25130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.812655][T25130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.821246][ T30] audit: type=1326 audit(1774511930.997:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.889314][ T30] audit: type=1326 audit(1774511930.997:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.944013][ T30] audit: type=1326 audit(1774511930.997:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1345.950675][ T5956] m920x_read = error: -19 [ 1346.110076][ T5956] dvb-usb: error while querying for an remote control event. [ 1346.208542][ T30] audit: type=1326 audit(1774511930.997:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25118 comm="syz.3.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e799c799 code=0x7ffc0000 [ 1346.296400][ T5956] m920x_read = error: -19 [ 1346.301569][ T5956] dvb-usb: error while querying for an remote control event. [ 1346.405815][T25140] binder: 25139:25140 ioctl 8905 200000000000 returned -22 [ 1346.414587][ T5956] m920x_read = error: -19 [ 1346.418944][ T5956] dvb-usb: error while querying for an remote control event. [ 1346.544862][ T5956] m920x_read = error: -19 [ 1346.549268][ T5956] dvb-usb: error while querying for an remote control event. [ 1346.756414][ T5956] m920x_read = error: -19 [ 1346.766784][T21338] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1346.767637][ T5956] dvb-usb: error while querying for an remote control event. [ 1346.813301][T25152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5525'. [ 1346.948664][ T5956] m920x_read = error: -19 [ 1346.954832][ T5956] dvb-usb: error while querying for an remote control event. [ 1346.977599][T21338] usb 2-1: Using ep0 maxpacket: 16 [ 1346.999387][T21338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1347.016624][T21338] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1347.037524][T21338] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1347.047018][T21338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.060629][T21338] usb 2-1: Product: syz [ 1347.074744][ T5956] m920x_read = error: -19 [ 1347.079241][ T5956] dvb-usb: error while querying for an remote control event. [ 1347.090592][T21338] usb 2-1: Manufacturer: syz [ 1347.101420][T21338] usb 2-1: SerialNumber: syz [ 1347.204667][ T5956] m920x_read = error: -19 [ 1347.304608][ T5956] dvb-usb: error while querying for an remote control event. [ 1347.506687][ T5956] m920x_read = error: -19 [ 1347.511070][ T5956] dvb-usb: error while querying for an remote control event. [ 1347.634122][T25160] bond3: (slave macvlan5): Error -98 calling set_mac_address [ 1347.648229][ T5956] m920x_read = error: -19 [ 1347.652626][ T5956] dvb-usb: error while querying for an remote control event. [ 1347.715761][T25163] kAFS: unable to lookup cell '' [ 1347.722413][T25163] kAFS: unable to lookup cell '(,c' [ 1347.833748][ T5956] m920x_read = error: -19 [ 1347.864047][ T5956] dvb-usb: error while querying for an remote control event. [ 1347.994598][ T5956] m920x_read = error: -19 [ 1348.360624][ T5956] dvb-usb: error while querying for an remote control event. [ 1348.504581][ T5956] m920x_read = error: -19 [ 1348.510109][ T5956] dvb-usb: error while querying for an remote control event. [ 1348.645088][ T5956] m920x_read = error: -19 [ 1348.651614][ T5956] dvb-usb: error while querying for an remote control event. [ 1348.787084][ T5956] m920x_read = error: -19 [ 1348.812964][ T5956] dvb-usb: error while querying for an remote control event. [ 1348.945863][T25176] syzkaller0: entered promiscuous mode [ 1348.954595][ T5956] m920x_read = error: -19 [ 1348.969474][T25176] syzkaller0: entered allmulticast mode [ 1348.976130][ T5956] dvb-usb: error while querying for an remote control event. [ 1349.013200][T25179] tipc: Enabled bearer , priority 0 [ 1349.040635][T25177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.053204][T25177] batadv_slave_0: entered promiscuous mode [ 1349.090004][T25177] netlink: 'syz.0.5531': attribute type 61 has an invalid length. [ 1349.107239][T25177] netlink: 'syz.0.5531': attribute type 267 has an invalid length. [ 1349.116786][ T5956] m920x_read = error: -19 [ 1349.121140][ T5956] dvb-usb: error while querying for an remote control event. [ 1349.137154][T25173] tipc: Resetting bearer [ 1349.222009][T25173] tipc: Disabling bearer [ 1349.240934][ T5956] m920x_read = error: -19 [ 1349.255879][ T5956] dvb-usb: error while querying for an remote control event. [ 1349.374778][ T5956] m920x_read = error: -19 [ 1349.383451][ T5956] dvb-usb: error while querying for an remote control event. [ 1349.396006][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5535'. [ 1349.496003][ T5956] m920x_read = error: -19 [ 1349.510607][ T5956] dvb-usb: error while querying for an remote control event. [ 1349.518316][ T796] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1349.690174][T12966] m920x_read = error: -19 [ 1349.694685][T12966] dvb-usb: error while querying for an remote control event. [ 1349.774788][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 1349.806611][ T5956] m920x_read = error: -19 [ 1349.819951][ T5956] dvb-usb: error while querying for an remote control event. [ 1349.836416][ T796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1349.891591][ T796] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1349.974652][ T5956] m920x_read = error: -19 [ 1349.979779][ T5956] dvb-usb: error while querying for an remote control event. [ 1350.009865][ T796] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1350.080602][ T796] usb 6-1: Product: syz [ 1350.089899][T21338] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 1350.105774][ T796] usb 6-1: Manufacturer: syz [ 1350.124396][ T796] usb 6-1: SerialNumber: syz [ 1350.134545][T21338] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1350.136216][ T5956] m920x_read = error: -19 [ 1350.345376][ T796] usb 6-1: config 0 descriptor?? [ 1350.346765][T21338] usb 2-1: USB disconnect, device number 51 [ 1350.355203][T25183] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1350.410544][ T5956] dvb-usb: error while querying for an remote control event. [ 1350.544746][ T5956] m920x_read = error: -19 [ 1350.553313][ T796] hub 6-1:0.0: bad descriptor, ignoring hub [ 1350.560606][ T5956] dvb-usb: error while querying for an remote control event. [ 1350.569164][T22316] udevd[22316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1350.592713][ T796] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1350.665371][ T796] usb 6-1: USB disconnect, device number 7 [ 1350.716317][ T5956] m920x_read = error: -19 [ 1350.720719][ T5956] dvb-usb: error while querying for an remote control event. [ 1350.854622][ T5956] m920x_read = error: -19 [ 1350.862376][ T5956] dvb-usb: error while querying for an remote control event. [ 1350.985188][T21338] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1350.994749][ T796] m920x_read = error: -19 [ 1351.000675][ T796] dvb-usb: error while querying for an remote control event. [ 1351.184822][ T796] m920x_read = error: -19 [ 1351.216190][T21338] usb 2-1: Using ep0 maxpacket: 16 [ 1351.226214][T21338] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1351.235561][T21338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.243656][T21338] usb 2-1: Product: syz [ 1351.246509][ T796] dvb-usb: error while querying for an remote control event. [ 1351.249182][T21338] usb 2-1: Manufacturer: syz [ 1351.260887][T21338] usb 2-1: SerialNumber: syz [ 1351.341446][T21338] usb 2-1: config 0 descriptor?? [ 1351.372568][T21338] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1351.374616][ T5956] m920x_read = error: -19 [ 1351.382366][T21338] usb 2-1: Detected FT-X [ 1351.388922][ T5956] dvb-usb: error while querying for an remote control event. [ 1351.518746][ T5956] m920x_read = error: -19 [ 1351.531166][ T5956] dvb-usb: error while querying for an remote control event. [ 1351.574018][T21338] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1351.658255][ T796] m920x_read = error: -19 [ 1351.665636][ T796] dvb-usb: error while querying for an remote control event. [ 1351.695808][ T5956] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1351.815223][ T796] m920x_read = error: -19 [ 1351.822774][ T796] dvb-usb: error while querying for an remote control event. [ 1351.850399][T25229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5551'. [ 1351.905188][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 1351.927614][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.961915][ T5956] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1351.972502][ T796] m920x_read = error: -19 [ 1351.980082][ T796] dvb-usb: error while querying for an remote control event. [ 1352.005903][T21338] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1352.075011][ T5956] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1352.094698][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.118565][ T5956] usb 4-1: Product: syz [ 1352.122814][ T5956] usb 4-1: Manufacturer: syz [ 1352.128926][ T796] m920x_read = error: -19 [ 1352.133317][ T796] dvb-usb: error while querying for an remote control event. [ 1352.157401][ T5956] usb 4-1: SerialNumber: syz [ 1352.175567][ T5956] usb 4-1: config 0 descriptor?? [ 1352.210537][T25209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.227468][T25209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.264597][ T796] m920x_read = error: -19 [ 1352.270128][ T796] dvb-usb: error while querying for an remote control event. [ 1352.430746][ T796] m920x_read = error: -19 [ 1352.449076][ T796] dvb-usb: error while querying for an remote control event. [ 1352.594639][ T5956] m920x_read = error: -19 [ 1352.599203][ T5956] dvb-usb: error while querying for an remote control event. [ 1352.684620][T21338] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1352.725616][ T5956] m920x_read = error: -19 [ 1352.730911][ T5956] dvb-usb: error while querying for an remote control event. [ 1352.864914][ T5956] m920x_read = error: -19 [ 1352.869333][ T5956] dvb-usb: error while querying for an remote control event. [ 1352.953952][T21338] usb 6-1: Using ep0 maxpacket: 32 [ 1352.975372][T21338] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1352.987767][T21338] usb 6-1: config 0 has no interface number 0 [ 1353.000681][T21338] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.004578][ T5956] m920x_read = error: -19 [ 1353.019428][ T5956] dvb-usb: error while querying for an remote control event. [ 1353.034250][T21338] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.206161][T21331] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1353.211496][ T5956] m920x_read = error: -19 [ 1353.214013][T21338] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1353.231985][ T5956] dvb-usb: error while querying for an remote control event. [ 1353.240479][T21338] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1353.252979][T21338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.356322][ T5956] m920x_read = error: -19 [ 1353.365542][ T5956] dvb-usb: error while querying for an remote control event. [ 1353.386167][T21331] usb 1-1: Using ep0 maxpacket: 32 [ 1353.400009][T21331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1353.417647][T21331] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1353.427232][T21338] usb 6-1: config 0 descriptor?? [ 1353.435710][T21331] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1353.447796][T21331] usb 1-1: Product: syz [ 1353.452114][T21331] usb 1-1: Manufacturer: syz [ 1353.574232][ T5956] m920x_read = error: -19 [ 1353.579645][ T5956] dvb-usb: error while querying for an remote control event. [ 1353.617375][T21331] usb 1-1: SerialNumber: syz [ 1353.633051][T21331] usb 1-1: config 0 descriptor?? [ 1353.640083][T25248] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 1353.677384][T21331] hub 1-1:0.0: bad descriptor, ignoring hub [ 1353.679275][ T5956] usb 2-1: USB disconnect, device number 52 [ 1353.683804][T21331] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1353.706910][ T796] m920x_read = error: -19 [ 1353.715049][ T796] dvb-usb: error while querying for an remote control event. [ 1353.764638][ T5956] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1353.824037][ T5956] ftdi_sio 2-1:0.0: device disconnected [ 1353.832652][ T796] m920x_read = error: -19 [ 1353.842934][ T796] dvb-usb: error while querying for an remote control event. [ 1353.892227][T21338] usbhid 6-1:0.4: can't add hid device: -71 [ 1353.904616][T21338] usbhid 6-1:0.4: probe with driver usbhid failed with error -71 [ 1353.933679][T21338] usb 6-1: USB disconnect, device number 8 [ 1353.996168][ T796] m920x_read = error: -19 [ 1354.000940][ T796] dvb-usb: error while querying for an remote control event. [ 1354.008963][T12966] usb 1-1: USB disconnect, device number 33 [ 1354.147506][ T5956] m920x_read = error: -19 [ 1354.152016][ T5956] dvb-usb: error while querying for an remote control event. [ 1354.166855][T25255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1354.254779][T25262] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5558'. [ 1354.280397][ T5956] m920x_read = error: -19 [ 1354.303333][ T5956] dvb-usb: error while querying for an remote control event. [ 1354.324815][T25253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1354.347791][T25265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5562'. [ 1354.361726][T25265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.372589][T25265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.414736][ T5956] m920x_read = error: -19 [ 1354.439375][ T5956] dvb-usb: error while querying for an remote control event. [ 1354.534761][T25272] syzkaller0: entered promiscuous mode [ 1354.540458][T25272] syzkaller0: entered allmulticast mode [ 1354.551289][T25272] tipc: Enabled bearer , priority 0 [ 1354.565845][ T5956] m920x_read = error: -19 [ 1354.575011][ T5956] dvb-usb: error while querying for an remote control event. [ 1354.694766][ T5956] m920x_read = error: -19 [ 1354.709529][ T5956] dvb-usb: error while querying for an remote control event. [ 1354.714700][T25270] tipc: Resetting bearer [ 1354.834640][ T5956] m920x_read = error: -19 [ 1354.841233][ T5956] dvb-usb: error while querying for an remote control event. [ 1354.937075][T25270] tipc: Disabling bearer [ 1354.944600][T21331] usb 4-1: USB disconnect, device number 73 [ 1354.954650][ T5956] m920x_read = error: -19 [ 1354.959150][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.084681][ T5956] m920x_read = error: -19 [ 1355.091949][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.217319][ T5956] m920x_read = error: -19 [ 1355.225981][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.346550][ T5956] m920x_read = error: -19 [ 1355.351220][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.385188][T21331] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1355.464919][ T5956] m920x_read = error: -19 [ 1355.469394][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.484881][ T796] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1355.587341][ T5956] m920x_read = error: -19 [ 1355.591766][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.659958][T25288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.669398][T25288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.696504][T21331] usb 4-1: Using ep0 maxpacket: 32 [ 1355.709071][T21331] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1355.710533][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.717959][T21331] usb 4-1: config 0 has no interface number 0 [ 1355.806662][ T796] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1355.829713][T21331] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1355.851730][T21331] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1355.877246][T21331] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1355.894601][ T5956] m920x_read = error: -19 [ 1355.900028][ T5956] dvb-usb: error while querying for an remote control event. [ 1355.911937][ T796] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1355.926522][T21331] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1355.955460][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.955625][T21331] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.022978][T21331] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1356.032973][T21331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.034867][ T5956] m920x_read = error: -19 [ 1356.046009][ T5956] dvb-usb: error while querying for an remote control event. [ 1356.054128][T21331] usb 4-1: Product: syz [ 1356.073366][T21331] usb 4-1: Manufacturer: syz [ 1356.073893][ T796] usb 1-1: config 0 descriptor?? [ 1356.112639][T21331] usb 4-1: SerialNumber: syz [ 1356.165771][ T796] m920x_read = error: -19 [ 1356.170556][ T796] dvb-usb: error while querying for an remote control event. [ 1356.185980][T21331] usb 4-1: config 0 descriptor?? [ 1356.208289][T21331] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input63 [ 1356.295336][ T796] m920x_read = error: -19 [ 1356.301195][ T796] dvb-usb: error while querying for an remote control event. [ 1356.341931][T25290] team0: Port device dummy0 removed [ 1356.347914][T25290] veth0_to_bond: left allmulticast mode [ 1356.354020][T25290] veth0_to_bond: left promiscuous mode [ 1356.372076][T25290] bridge0: port 1(veth0_to_bond) entered disabled state [ 1356.415233][ T796] m920x_read = error: -19 [ 1356.415340][T25290] .`: (slave bond_slave_0): Releasing backup interface [ 1356.419615][ T796] dvb-usb: error while querying for an remote control event. [ 1356.459970][T25290] bond_slave_0: left promiscuous mode [ 1356.481848][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 1356.493973][T25290] .`: (slave bond_slave_1): Releasing backup interface [ 1356.514998][T25290] bond_slave_1: left promiscuous mode [ 1356.532985][T25290] team0: Port device team_slave_1 removed [ 1356.576632][ T796] m920x_read = error: -19 [ 1356.585060][ T796] dvb-usb: error while querying for an remote control event. [ 1356.611955][T25290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.636038][T25290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.651389][T25290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1356.704598][ T796] m920x_read = error: -19 [ 1356.709836][ T796] dvb-usb: error while querying for an remote control event. [ 1356.786606][ T796] usb 4-1: USB disconnect, device number 74 [ 1356.827425][ T5956] m920x_read = error: -19 [ 1356.831877][ T5956] dvb-usb: error while querying for an remote control event. [ 1356.955528][ T5956] m920x_read = error: -19 [ 1356.961216][ T5956] dvb-usb: error while querying for an remote control event. [ 1357.085165][ T796] m920x_read = error: -19 [ 1357.092881][ T796] dvb-usb: error while querying for an remote control event. [ 1357.214765][ T5956] m920x_read = error: -19 [ 1357.219342][ T5956] dvb-usb: error while querying for an remote control event. [ 1357.304617][ T796] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1357.334698][ T5956] m920x_read = error: -19 [ 1357.339161][ T5956] dvb-usb: error while querying for an remote control event. [ 1357.455206][ T5956] m920x_read = error: -19 [ 1357.467981][ T796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1357.485768][ T5956] dvb-usb: error while querying for an remote control event. [ 1357.505555][ T796] usb 2-1: not running at top speed; connect to a high speed hub [ 1357.531770][ T796] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 136, changing to 4 [ 1357.551834][ T796] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1357.569678][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.593566][ T796] usb 2-1: Product: 껑셣乳䋸꩐蹝硾벬﹘짳ᾮ鯷砈料팲樣搪牆俒⠼瀟롗㏛ꨆ屡앺椬۞껛감曬ﳇ돏䡁律㧖蜩澆⼺Ğᄼ毛⡾他稉딦ﲌ땐貮ċ㿻ꂧ猫泸识﯋쯸폻纻ዋ⤨ᓽ穾ቂ堞侗熮Űᵏ㾑鄎㌊蜴ᨳ崳 [ 1357.625859][T21331] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1357.637743][ T5956] m920x_read = error: -19 [ 1357.647857][ T5956] dvb-usb: error while querying for an remote control event. [ 1357.667654][ T796] usb 2-1: Manufacturer: 懙詊ࠔ鯻癳뇘䜊竽䍚灦츰㎧嶌䠠鱝⛪儋ᙄ䩋癇㖝娳椰玥懻ꗐᆱ甕Ὅԁ樶퐠뒡⩁ 융ⅴሸ簦室襶䰣餔숂ᛄ፯굚朹낗쭦㯶엞ಮ٭垇흣柦꾿ꯝꪅ婽溞ᘨ뽍 [ 1357.738602][ T796] usb 2-1: SerialNumber: syz [ 1357.774773][ T5956] m920x_read = error: -19 [ 1357.780063][ T5956] dvb-usb: error while querying for an remote control event. [ 1357.797607][T21331] usb 4-1: Using ep0 maxpacket: 16 [ 1357.813884][T21331] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.831363][T21331] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.846500][T21331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1357.853689][T21331] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1357.869444][T21331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.885942][T21331] usb 4-1: config 0 descriptor?? [ 1357.918081][ T5956] m920x_read = error: -19 [ 1357.926337][ T5956] dvb-usb: error while querying for an remote control event. [ 1358.017011][ T796] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1358.028626][ T796] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1358.045858][ T5956] m920x_read = error: -19 [ 1358.050617][ T5956] dvb-usb: error while querying for an remote control event. [ 1358.068122][T21338] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1358.135963][ T796] usb 2-1: USB disconnect, device number 53 [ 1358.175988][ T5956] m920x_read = error: -19 [ 1358.201141][ T5956] dvb-usb: error while querying for an remote control event. [ 1358.430925][ T5956] usb 1-1: USB disconnect, device number 34 [ 1358.440888][T25314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.449307][T21338] usb 6-1: Using ep0 maxpacket: 32 [ 1358.471588][T21338] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1358.508370][T25314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.524333][T21338] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1358.524967][T12966] m920x_read = error: -19 [ 1358.535853][T21338] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1358.555926][T21338] usb 6-1: Product: syz [ 1358.577005][T12966] dvb-usb: error while querying for an remote control event. [ 1358.578911][T21338] usb 6-1: Manufacturer: syz [ 1358.623565][T21338] usb 6-1: SerialNumber: syz [ 1358.639871][T21338] usb 6-1: config 0 descriptor?? [ 1358.663380][T25311] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1358.675153][T21338] hub 6-1:0.0: bad descriptor, ignoring hub [ 1358.704611][T21338] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1358.716627][ T796] m920x_read = error: -19 [ 1358.721024][ T796] dvb-usb: error while querying for an remote control event. [ 1358.735312][T25319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.746108][T25319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.782898][T21331] hid-corsair-void 0003:1B1C:1B25.0055: unknown main item tag 0x0 [ 1358.798959][T25321] netlink: 'syz.0.5577': attribute type 1 has an invalid length. [ 1358.820859][T21331] hid-corsair-void 0003:1B1C:1B25.0055: unknown main item tag 0x1 [ 1358.859092][ T796] m920x_read = error: -19 [ 1358.869954][ T796] dvb-usb: error while querying for an remote control event. [ 1358.878136][T21331] hid-corsair-void 0003:1B1C:1B25.0055: item fetching failed at offset 4/5 [ 1358.887984][T21331] hid-corsair-void 0003:1B1C:1B25.0055: parse failed (reason: -22) [ 1358.909274][T25321] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1358.916571][T21331] hid-corsair-void 0003:1B1C:1B25.0055: probe with driver hid-corsair-void failed with error -22 [ 1359.076360][ T796] m920x_read = error: -19 [ 1359.081946][ T796] dvb-usb: error while querying for an remote control event. [ 1359.095081][T21331] usb 6-1: USB disconnect, device number 9 [ 1359.128898][T25334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5581'. [ 1359.194584][ T796] m920x_read = error: -19 [ 1359.199920][ T796] dvb-usb: error while querying for an remote control event. [ 1359.331935][ T796] m920x_read = error: -19 [ 1359.338076][ T796] dvb-usb: error while querying for an remote control event. [ 1359.454767][ T796] m920x_read = error: -19 [ 1359.466209][ T796] dvb-usb: error while querying for an remote control event. [ 1359.580272][T25344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5584'. [ 1359.584909][ T796] m920x_read = error: -19 [ 1359.593629][ T796] dvb-usb: error while querying for an remote control event. [ 1359.604756][T21331] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1359.622022][T25342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5585'. [ 1359.715228][ T796] m920x_read = error: -19 [ 1359.720968][ T796] dvb-usb: error while querying for an remote control event. [ 1359.764505][T21331] usb 1-1: Using ep0 maxpacket: 32 [ 1359.773106][T21331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.786605][T21331] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1359.843664][T25349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5586'. [ 1359.853849][ T796] m920x_read = error: -19 [ 1359.858842][ T796] dvb-usb: error while querying for an remote control event. [ 1359.872410][T21331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.881906][T21331] usb 1-1: Product: syz [ 1359.887134][T21331] usb 1-1: Manufacturer: syz [ 1359.891734][T21331] usb 1-1: SerialNumber: syz [ 1359.929329][T25346] netlink: 'syz.4.5586': attribute type 4 has an invalid length. [ 1359.974597][ T796] m920x_read = error: -19 [ 1359.979032][ T796] dvb-usb: error while querying for an remote control event. [ 1360.014623][ T980] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1360.181409][ T796] m920x_read = error: -19 [ 1360.181507][ T980] usb 2-1: device descriptor read/64, error -71 [ 1360.202611][ T796] dvb-usb: error while querying for an remote control event. [ 1360.206097][T21331] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1360.241258][T21331] usb 1-1: USB disconnect, device number 35 [ 1360.424683][ T796] m920x_read = error: -19 [ 1360.431272][ T796] dvb-usb: error while querying for an remote control event. [ 1360.545300][ T796] m920x_read = error: -19 [ 1360.550367][ T796] dvb-usb: error while querying for an remote control event. [ 1360.564635][ T980] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1360.633958][T25360] netlink: 'syz.5.5589': attribute type 7 has an invalid length. [ 1360.669214][ T796] m920x_read = error: -19 [ 1360.673726][ T796] dvb-usb: error while querying for an remote control event. [ 1360.684882][T25360] netlink: 'syz.5.5589': attribute type 8 has an invalid length. [ 1360.775142][ T980] usb 2-1: device descriptor read/64, error -71 [ 1360.784670][ T796] m920x_read = error: -19 [ 1360.789087][ T796] dvb-usb: error while querying for an remote control event. [ 1360.885631][ T980] usb usb2-port1: attempt power cycle [ 1360.906926][ T796] m920x_read = error: -19 [ 1360.921671][ T796] dvb-usb: error while querying for an remote control event. [ 1361.015495][ T796] usb 4-1: USB disconnect, device number 75 [ 1361.034573][T12966] m920x_read = error: -19 [ 1361.039045][T12966] dvb-usb: error while querying for an remote control event. [ 1361.155659][T12966] m920x_read = error: -19 [ 1361.160061][T12966] dvb-usb: error while querying for an remote control event. [ 1361.201304][T25367] FAULT_INJECTION: forcing a failure. [ 1361.201304][T25367] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.268406][T25367] CPU: 1 UID: 0 PID: 25367 Comm: syz.0.5592 Tainted: G L syzkaller #0 PREEMPT(full) [ 1361.268445][T25367] Tainted: [L]=SOFTLOCKUP [ 1361.268453][T25367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1361.268464][T25367] Call Trace: [ 1361.268473][T25367] [ 1361.268483][T25367] dump_stack_lvl+0xe8/0x150 [ 1361.268517][T25367] should_fail_ex+0x412/0x560 [ 1361.268551][T25367] should_failslab+0xa8/0x100 [ 1361.268577][T25367] __kvmalloc_node_noprof+0x178/0x8a0 [ 1361.268599][T25367] ? __raw_spin_lock_init+0x45/0x100 [ 1361.268620][T25367] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 1361.268650][T25367] alloc_netdev_mqs+0xa4b/0x11b0 [ 1361.268678][T25367] rtnl_create_link+0x31f/0xd70 [ 1361.268708][T25367] rtnl_newlink_create+0x277/0xb70 [ 1361.268728][T25367] ? __pfx___nla_validate_parse+0x10/0x10 [ 1361.268758][T25367] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1361.268782][T25367] ? __pfx___mutex_lock+0x10/0x10 [ 1361.268816][T25367] ? ns_capable+0x89/0xe0 [ 1361.268844][T25367] rtnl_newlink+0x1666/0x1be0 [ 1361.268878][T25367] ? __pfx_rtnl_newlink+0x10/0x10 [ 1361.268893][T25367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.268940][T25367] ? kasan_quarantine_put+0xbb/0x1f0 [ 1361.268960][T25367] ? lockdep_hardirqs_on+0x7a/0x110 [ 1361.268986][T25367] ? kmem_cache_free+0x187/0x630 [ 1361.269006][T25367] ? nlmon_xmit+0xb0/0x100 [ 1361.269041][T25367] ? __lock_acquire+0x6b5/0x2cf0 [ 1361.269070][T25367] ? __local_bh_enable_ip+0xd0/0x130 [ 1361.269094][T25367] ? lockdep_hardirqs_on+0x7a/0x110 [ 1361.269114][T25367] ? __dev_queue_xmit+0x277/0x3890 [ 1361.269135][T25367] ? __local_bh_enable_ip+0xd0/0x130 [ 1361.269154][T25367] ? __dev_queue_xmit+0x277/0x3890 [ 1361.269193][T25367] ? __pfx_rtnl_newlink+0x10/0x10 [ 1361.269209][T25367] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1361.269240][T25367] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1361.269267][T25367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1361.269292][T25367] ? ref_tracker_free+0x693/0x840 [ 1361.269318][T25367] ? __copy_skb_header+0xa3/0x4a0 [ 1361.269343][T25367] ? __pfx_ref_tracker_free+0x10/0x10 [ 1361.269367][T25367] ? __skb_clone+0x63/0x7a0 [ 1361.269455][T25367] netlink_rcv_skb+0x232/0x4b0 [ 1361.269524][T25367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1361.269553][T25367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1361.269588][T25367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1361.269622][T25367] netlink_unicast+0x80f/0x9b0 [ 1361.269675][T25367] ? __pfx_netlink_unicast+0x10/0x10 [ 1361.269707][T25367] ? netlink_sendmsg+0x650/0xb40 [ 1361.269721][T25367] ? skb_put+0x11b/0x210 [ 1361.269743][T25367] netlink_sendmsg+0x813/0xb40 [ 1361.269766][T25367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.269788][T25367] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1361.269818][T25367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1361.269844][T25367] ____sys_sendmsg+0x972/0x9f0 [ 1361.269876][T25367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1361.269911][T25367] ? import_iovec+0x73/0xa0 [ 1361.269937][T25367] ___sys_sendmsg+0x2a5/0x360 [ 1361.269965][T25367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1361.270014][T25367] ? __fget_files+0x2a/0x420 [ 1361.270043][T25367] ? __fget_files+0x3a0/0x420 [ 1361.270081][T25367] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1361.270109][T25367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1361.270137][T25367] ? __pfx_ksys_write+0x10/0x10 [ 1361.270166][T25367] do_syscall_64+0x14d/0xf80 [ 1361.270185][T25367] ? trace_irq_disable+0x3b/0x150 [ 1361.270211][T25367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.270231][T25367] ? clear_bhb_loop+0x40/0x90 [ 1361.270255][T25367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.270274][T25367] RIP: 0033:0x7f8f0159c799 [ 1361.270304][T25367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.270319][T25367] RSP: 002b:00007f8f02400028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.270339][T25367] RAX: ffffffffffffffda RBX: 00007f8f01815fa0 RCX: 00007f8f0159c799 [ 1361.270352][T25367] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1361.270364][T25367] RBP: 00007f8f02400090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.270374][T25367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.270386][T25367] R13: 00007f8f01816038 R14: 00007f8f01815fa0 R15: 00007f8f0193fa48 [ 1361.270417][T25367] [ 1361.689778][ T980] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1361.715219][T12966] m920x_read = error: -19 [ 1361.719577][T12966] dvb-usb: error while querying for an remote control event. [ 1361.755247][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.761640][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.845957][ T796] m920x_read = error: -19 [ 1361.865410][ T980] usb 2-1: device descriptor read/8, error -71 [ 1361.873724][ T796] dvb-usb: error while querying for an remote control event. [ 1361.984983][ T796] m920x_read = error: -19 [ 1361.989385][ T796] dvb-usb: error while querying for an remote control event. [ 1362.039960][T25375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.049903][T25375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.054838][T21330] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1362.104654][T21331] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1362.104662][ T796] m920x_read = error: -19 [ 1362.116685][ T796] dvb-usb: error while querying for an remote control event. [ 1362.124721][ T980] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1362.164520][ T980] usb 2-1: device descriptor read/8, error -71 [ 1362.210847][T25377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.220194][T25377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.294866][ T796] m920x_read = error: -19 [ 1362.409831][T21331] usb 4-1: Using ep0 maxpacket: 32 [ 1362.410160][ T796] dvb-usb: error while querying for an remote control event. [ 1362.421379][ T980] usb usb2-port1: unable to enumerate USB device [ 1362.431887][T21331] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1362.474449][T21330] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1362.494894][T21330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.524517][T21331] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1362.543134][T21331] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1362.554886][ T796] m920x_read = error: -19 [ 1362.560796][ T796] dvb-usb: error while querying for an remote control event. [ 1362.572039][T21330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1362.592094][T21331] usb 4-1: Product: syz [ 1362.600659][T21331] usb 4-1: Manufacturer: syz [ 1362.612617][T21331] usb 4-1: SerialNumber: syz [ 1362.617887][T21330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1362.633661][T21330] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1362.649825][T21331] usb 4-1: config 0 descriptor?? [ 1362.656625][T21330] usb 1-1: Manufacturer: syz [ 1362.661752][T25373] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1362.673145][T21331] hub 4-1:0.0: bad descriptor, ignoring hub [ 1362.688986][T21330] usb 1-1: config 0 descriptor?? [ 1362.700105][T21331] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1362.739582][ T796] m920x_read = error: -19 [ 1362.742334][T21330] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1362.751512][ T796] dvb-usb: error while querying for an remote control event. [ 1362.858825][T25383] bridge0: entered promiscuous mode [ 1362.904737][ T796] m920x_read = error: -19 [ 1362.906407][T25383] macvtap1: entered promiscuous mode [ 1362.910647][ T796] dvb-usb: error while querying for an remote control event. [ 1362.931348][T25383] macvtap1: entered allmulticast mode [ 1362.955737][T25383] bridge0: entered allmulticast mode [ 1362.992759][T25383] bridge0: port 3(macvtap1) entered blocking state [ 1363.004634][T25383] bridge0: port 3(macvtap1) entered disabled state [ 1363.014793][T21331] usb 4-1: USB disconnect, device number 76 [ 1363.063382][T12966] m920x_read = error: -19 [ 1363.083040][T12966] dvb-usb: error while querying for an remote control event. [ 1363.189837][T25383] bridge0: left allmulticast mode [ 1363.195188][T25383] bridge0: left promiscuous mode [ 1363.268024][T12966] m920x_read = error: -19 [ 1363.308935][T12966] dvb-usb: error while querying for an remote control event. [ 1363.437132][T25386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1363.444761][ T796] m920x_read = error: -19 [ 1363.450416][ T796] dvb-usb: error while querying for an remote control event. [ 1363.485344][T25386] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1363.499994][T25386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1363.575324][ T796] m920x_read = error: -19 [ 1363.586384][ T796] dvb-usb: error while querying for an remote control event. [ 1363.726340][ T796] m920x_read = error: -19 [ 1363.741209][ T796] dvb-usb: error while querying for an remote control event. [ 1363.817266][T25394] kAFS: unable to lookup cell '' [ 1363.824009][T25394] kAFS: unable to lookup cell '(,c' [ 1363.856425][ T796] m920x_read = error: -19 [ 1363.875614][ T796] dvb-usb: error while querying for an remote control event. [ 1364.004671][ T796] m920x_read = error: -19 [ 1364.009086][ T796] dvb-usb: error while querying for an remote control event. [ 1364.124590][T12966] m920x_read = error: -19 [ 1364.128969][T12966] dvb-usb: error while querying for an remote control event. [ 1364.194824][ T796] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1364.244558][T12966] m920x_read = error: -19 [ 1364.249060][T12966] dvb-usb: error while querying for an remote control event. [ 1364.364747][T12966] m920x_read = error: -19 [ 1364.369226][T12966] dvb-usb: error while querying for an remote control event. [ 1364.380617][ T796] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1364.391162][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1364.399979][ T796] usb 6-1: Product: syz [ 1364.406908][ T796] usb 6-1: Manufacturer: syz [ 1364.418401][ T796] usb 6-1: SerialNumber: syz [ 1364.534324][T12966] m920x_read = error: -19 [ 1364.538899][T12966] dvb-usb: error while querying for an remote control event. [ 1364.593348][ T796] usb 6-1: config 0 descriptor?? [ 1364.635201][ T796] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1364.642880][ T796] dvb-usb: bulk message failed: -22 (2/0) [ 1364.654957][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1364.669333][ T796] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1364.680927][ T796] usb 6-1: media controller created [ 1364.686444][T12966] m920x_read = error: -19 [ 1364.690882][T12966] dvb-usb: error while querying for an remote control event. [ 1364.724916][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1364.805458][T12966] m920x_read = error: -19 [ 1364.809918][T12966] dvb-usb: error while querying for an remote control event. [ 1364.820834][T21330] usb 1-1: USB disconnect, device number 36 [ 1364.836146][T25396] cxusb: i2c wr: len=79 is too big! [ 1364.836146][T25396] [ 1364.867494][ T796] cxusb: set interface failed [ 1364.880217][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1364.944596][T12966] m920x_read = error: -19 [ 1364.949336][T12966] dvb-usb: error while querying for an remote control event. [ 1364.961546][ T796] DVB: Unable to find symbol mt352_attach() [ 1364.980782][ T796] dvb-usb: bulk message failed: -22 (5/0) [ 1364.988620][ T796] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1364.996254][ T796] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1365.085247][T12966] m920x_read = error: -19 [ 1365.085278][T12966] dvb-usb: error while querying for an remote control event. [ 1365.111931][T25413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1365.154533][ T796] rc_core: IR keymap rc-dvico-mce not found [ 1365.154558][ T796] Registered IR keymap rc-empty [ 1365.155600][ T796] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1365.156851][ T796] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input64 [ 1365.159916][ T796] dvb-usb: schedule remote query interval to 100 msecs. [ 1365.159942][ T796] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1365.182825][ T796] usb 6-1: USB disconnect, device number 10 [ 1365.197061][T12966] m920x_read = error: -19 [ 1365.197091][T12966] dvb-usb: error while querying for an remote control event. [ 1365.304878][T12966] m920x_read = error: -19 [ 1365.304900][T12966] dvb-usb: error while querying for an remote control event. [ 1365.464958][T12966] m920x_read = error: -19 [ 1365.465041][T12966] dvb-usb: error while querying for an remote control event. [ 1365.471815][ T796] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1365.575820][T12966] m920x_read = error: -19 [ 1365.575849][T12966] dvb-usb: error while querying for an remote control event. [ 1365.686894][T12966] m920x_read = error: -19 [ 1365.686924][T12966] dvb-usb: error while querying for an remote control event. [ 1365.815472][T25425] kAFS: unable to lookup cell '' [ 1365.821979][ T796] m920x_read = error: -19 [ 1365.842447][ T796] dvb-usb: error while querying for an remote control event. [ 1365.942649][T25438] kAFS: unable to lookup cell '(,c' [ 1366.061042][ T796] m920x_read = error: -19 [ 1366.081091][ T796] dvb-usb: error while querying for an remote control event. [ 1366.102534][T25443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.141678][T25443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.337370][ T796] m920x_read = error: -19 [ 1366.354585][ T796] dvb-usb: error while querying for an remote control event. [ 1366.484942][T12966] m920x_read = error: -19 [ 1366.489520][T12966] dvb-usb: error while querying for an remote control event. [ 1366.534668][ T796] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1366.604630][T12966] m920x_read = error: -19 [ 1366.610534][T12966] dvb-usb: error while querying for an remote control event. [ 1366.731638][T12966] m920x_read = error: -19 [ 1366.736154][T12966] dvb-usb: error while querying for an remote control event. [ 1366.807554][T25451] xt_bpf: check failed: parse error [ 1366.833729][ T796] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1366.847045][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.857176][T12966] m920x_read = error: -19 [ 1366.861717][ T796] usb 1-1: Product: syz [ 1366.910284][T12966] dvb-usb: error while querying for an remote control event. [ 1366.941692][ T796] usb 1-1: Manufacturer: syz [ 1366.958842][ T796] usb 1-1: SerialNumber: syz [ 1366.990736][ T796] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1367.018767][ T5956] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1367.151671][T12966] m920x_read = error: -19 [ 1367.284600][T12966] dvb-usb: error while querying for an remote control event. [ 1367.378432][T25453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.388015][T25453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.405384][ T796] m920x_read = error: -19 [ 1367.409856][ T796] dvb-usb: error while querying for an remote control event. [ 1367.539582][T12966] m920x_read = error: -19 [ 1367.547835][T12966] dvb-usb: error while querying for an remote control event. [ 1367.944852][ T796] m920x_read = error: -19 [ 1367.991075][ T796] dvb-usb: error while querying for an remote control event. [ 1368.073424][ T5956] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1368.138614][ T796] m920x_read = error: -19 [ 1368.167963][ T796] dvb-usb: error while querying for an remote control event. [ 1368.248814][ T5956] ath9k_htc: Failed to initialize the device [ 1368.303289][ T5956] usb 1-1: ath9k_htc: USB layer deinitialized [ 1368.354741][ T796] m920x_read = error: -19 [ 1368.359216][ T796] dvb-usb: error while querying for an remote control event. [ 1368.535856][ T796] m920x_read = error: -19 [ 1368.540674][ T796] dvb-usb: error while querying for an remote control event. [ 1368.676035][ T796] m920x_read = error: -19 [ 1368.680608][ T796] dvb-usb: error while querying for an remote control event. [ 1368.805706][ T796] m920x_read = error: -19 [ 1368.810576][ T796] dvb-usb: error while querying for an remote control event. [ 1368.934638][ T796] m920x_read = error: -19 [ 1368.951701][ T796] dvb-usb: error while querying for an remote control event. [ 1369.013966][T25465] FAULT_INJECTION: forcing a failure. [ 1369.013966][T25465] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.067443][T25465] CPU: 0 UID: 0 PID: 25465 Comm: syz.5.5624 Tainted: G L syzkaller #0 PREEMPT(full) [ 1369.067465][T25465] Tainted: [L]=SOFTLOCKUP [ 1369.067469][T25465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1369.067475][T25465] Call Trace: [ 1369.067488][T25465] [ 1369.067494][T25465] dump_stack_lvl+0xe8/0x150 [ 1369.067523][T25465] should_fail_ex+0x412/0x560 [ 1369.067555][T25465] should_failslab+0xa8/0x100 [ 1369.067580][T25465] __kvmalloc_node_noprof+0x178/0x8a0 [ 1369.067599][T25465] ? __raw_spin_lock_init+0x45/0x100 [ 1369.067610][T25465] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 1369.067633][T25465] alloc_netdev_mqs+0xa4b/0x11b0 [ 1369.067650][T25465] rtnl_create_link+0x31f/0xd70 [ 1369.067682][T25465] rtnl_newlink_create+0x277/0xb70 [ 1369.067703][T25465] ? __pfx___nla_validate_parse+0x10/0x10 [ 1369.067732][T25465] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1369.067750][T25465] ? __pfx___mutex_lock+0x10/0x10 [ 1369.067768][T25465] ? ns_capable+0x89/0xe0 [ 1369.067783][T25465] rtnl_newlink+0x1666/0x1be0 [ 1369.067815][T25465] ? __pfx_rtnl_newlink+0x10/0x10 [ 1369.067839][T25465] ? finish_task_switch+0x240/0x920 [ 1369.067882][T25465] ? lockdep_hardirqs_on+0x7a/0x110 [ 1369.067907][T25465] ? rcu_is_watching+0x15/0xb0 [ 1369.067921][T25465] ? trace_sched_exit_tp+0x3a/0x150 [ 1369.067933][T25465] ? __schedule+0x15f3/0x52d0 [ 1369.067950][T25465] ? __lock_acquire+0x6b5/0x2cf0 [ 1369.067978][T25465] ? __pfx___schedule+0x10/0x10 [ 1369.068021][T25465] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1369.068116][T25465] ? lockdep_hardirqs_on+0x7a/0x110 [ 1369.068138][T25465] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 1369.068177][T25465] ? __pfx_rtnl_newlink+0x10/0x10 [ 1369.068194][T25465] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1369.068215][T25465] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1369.068229][T25465] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1369.068249][T25465] ? ref_tracker_free+0x693/0x840 [ 1369.068265][T25465] ? __copy_skb_header+0xa3/0x4a0 [ 1369.068288][T25465] ? __pfx_ref_tracker_free+0x10/0x10 [ 1369.068313][T25465] ? __skb_clone+0x63/0x7a0 [ 1369.068343][T25465] netlink_rcv_skb+0x232/0x4b0 [ 1369.068363][T25465] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1369.068378][T25465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1369.068398][T25465] ? netlink_deliver_tap+0x2e/0x1b0 [ 1369.068422][T25465] netlink_unicast+0x80f/0x9b0 [ 1369.068456][T25465] ? __pfx_netlink_unicast+0x10/0x10 [ 1369.068482][T25465] ? netlink_sendmsg+0x650/0xb40 [ 1369.068498][T25465] ? skb_put+0x11b/0x210 [ 1369.068510][T25465] netlink_sendmsg+0x813/0xb40 [ 1369.068525][T25465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1369.068536][T25465] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1369.068551][T25465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1369.068569][T25465] ____sys_sendmsg+0x972/0x9f0 [ 1369.068605][T25465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1369.068635][T25465] ? import_iovec+0x73/0xa0 [ 1369.068654][T25465] ___sys_sendmsg+0x2a5/0x360 [ 1369.068668][T25465] ? __pfx____sys_sendmsg+0x10/0x10 [ 1369.068696][T25465] ? __fget_files+0x2a/0x420 [ 1369.068715][T25465] ? __fget_files+0x3a0/0x420 [ 1369.068751][T25465] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1369.068775][T25465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1369.068803][T25465] ? __pfx_ksys_write+0x10/0x10 [ 1369.068820][T25465] do_syscall_64+0x14d/0xf80 [ 1369.068831][T25465] ? trace_irq_disable+0x3b/0x150 [ 1369.068846][T25465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.068859][T25465] ? clear_bhb_loop+0x40/0x90 [ 1369.068896][T25465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.068915][T25465] RIP: 0033:0x7f945b79c799 [ 1369.068933][T25465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.068949][T25465] RSP: 002b:00007f945c698028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1369.068964][T25465] RAX: ffffffffffffffda RBX: 00007f945ba15fa0 RCX: 00007f945b79c799 [ 1369.068971][T25465] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1369.068978][T25465] RBP: 00007f945c698090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.068984][T25465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1369.068990][T25465] R13: 00007f945ba16038 R14: 00007f945ba15fa0 R15: 00007f945bb3fa48 [ 1369.069006][T25465] [ 1369.231671][ T796] m920x_read = error: -19 [ 1369.541143][ T796] dvb-usb: error while querying for an remote control event. [ 1369.665847][ T796] m920x_read = error: -19 [ 1369.673665][ T796] dvb-usb: error while querying for an remote control event. [ 1369.785307][ T796] m920x_read = error: -19 [ 1369.800271][ T796] dvb-usb: error while querying for an remote control event. [ 1369.841995][T25469] netlink: 'syz.5.5626': attribute type 4 has an invalid length. [ 1369.897287][T25471] dummy0: entered allmulticast mode [ 1369.934938][ T796] m920x_read = error: -19 [ 1369.943797][T25475] netlink: 'syz.5.5626': attribute type 4 has an invalid length. [ 1369.952360][ T796] dvb-usb: error while querying for an remote control event. [ 1369.985918][T25473] syzkaller0: entered promiscuous mode [ 1369.997001][T25473] syzkaller0: entered allmulticast mode [ 1370.042141][T21330] usb 1-1: USB disconnect, device number 37 [ 1370.065872][ T796] m920x_read = error: -19 [ 1370.070401][ T796] dvb-usb: error while querying for an remote control event. [ 1370.146220][T25473] tipc: Enabled bearer , priority 0 [ 1370.212823][T25472] tipc: Resetting bearer [ 1370.249247][T12966] m920x_read = error: -19 [ 1370.253694][T12966] dvb-usb: error while querying for an remote control event. [ 1370.263464][T25472] tipc: Disabling bearer [ 1370.382380][ T796] m920x_read = error: -19 [ 1370.390558][ T796] dvb-usb: error while querying for an remote control event. [ 1370.514706][ T796] m920x_read = error: -19 [ 1370.519333][ T796] dvb-usb: error while querying for an remote control event. [ 1370.639308][T25482] netlink: 'syz.3.5630': attribute type 1 has an invalid length. [ 1370.697854][ T796] m920x_read = error: -19 [ 1370.707789][ T796] dvb-usb: error while querying for an remote control event. [ 1370.719739][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1370.719752][ T30] audit: type=1326 audit(1774511956.967:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1370.764061][T25482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1370.884852][ T796] m920x_read = error: -19 [ 1370.928233][ T796] dvb-usb: error while querying for an remote control event. [ 1370.960004][T25490] bond5: (slave geneve2): making interface the new active one [ 1371.005879][ T30] audit: type=1326 audit(1774511956.967:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.015222][T25490] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1371.117882][T12966] m920x_read = error: -19 [ 1371.123355][T12966] dvb-usb: error while querying for an remote control event. [ 1371.143633][T25491] syzkaller1: entered promiscuous mode [ 1371.153293][T25491] syzkaller1: entered allmulticast mode [ 1371.174389][T25496] netlink: 'syz.5.5632': attribute type 4 has an invalid length. [ 1371.204330][ T30] audit: type=1326 audit(1774511956.967:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.254585][T12966] m920x_read = error: -19 [ 1371.259082][T12966] dvb-usb: error while querying for an remote control event. [ 1371.358472][ T30] audit: type=1326 audit(1774511957.027:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.386708][T12966] m920x_read = error: -19 [ 1371.400359][T12966] dvb-usb: error while querying for an remote control event. [ 1371.432790][ T30] audit: type=1326 audit(1774511957.027:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.492994][ T30] audit: type=1326 audit(1774511957.027:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.548819][T12966] m920x_read = error: -19 [ 1371.557166][T12966] dvb-usb: error while querying for an remote control event. [ 1371.626847][ T30] audit: type=1326 audit(1774511957.027:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.684589][T12966] m920x_read = error: -19 [ 1371.688995][T12966] dvb-usb: error while querying for an remote control event. [ 1371.773360][ T30] audit: type=1326 audit(1774511957.027:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.804574][T12966] m920x_read = error: -19 [ 1371.809053][T12966] dvb-usb: error while querying for an remote control event. [ 1371.834242][ T30] audit: type=1326 audit(1774511957.027:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.902206][ T30] audit: type=1326 audit(1774511957.027:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.1.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1dd9c799 code=0x7ffc0000 [ 1371.941257][T25503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5636'. [ 1371.980377][T12966] m920x_read = error: -19 [ 1372.004631][T12966] dvb-usb: error while querying for an remote control event. [ 1372.072736][T25506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.094914][T25506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.125177][T12966] m920x_read = error: -19 [ 1372.131542][T12966] dvb-usb: error while querying for an remote control event. [ 1372.379613][T25513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.391737][T25513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.414640][T12966] m920x_read = error: -19 [ 1372.419489][T12966] dvb-usb: error while querying for an remote control event. [ 1372.545055][T12966] m920x_read = error: -19 [ 1372.554719][T12966] dvb-usb: error while querying for an remote control event. [ 1372.574207][T25510] team0: entered allmulticast mode [ 1372.581995][T25510] team_slave_0: entered allmulticast mode [ 1372.589188][T25510] team_slave_1: entered allmulticast mode [ 1372.697080][T12966] m920x_read = error: -19 [ 1372.715643][T12966] dvb-usb: error while querying for an remote control event. [ 1372.737627][T25517] syzkaller0: entered promiscuous mode [ 1372.743222][T25517] syzkaller0: entered allmulticast mode [ 1372.925027][T12966] m920x_read = error: -19 [ 1372.929439][T12966] dvb-usb: error while querying for an remote control event. [ 1373.054605][T12966] m920x_read = error: -19 [ 1373.060501][T12966] dvb-usb: error while querying for an remote control event. [ 1373.205983][T12966] m920x_read = error: -19 [ 1373.210435][T12966] dvb-usb: error while querying for an remote control event. [ 1373.334612][T12966] m920x_read = error: -19 [ 1373.339009][T12966] dvb-usb: error while querying for an remote control event. [ 1373.494668][T12966] m920x_read = error: -19 [ 1373.501571][T12966] dvb-usb: error while querying for an remote control event. [ 1373.580393][T25534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5646'. [ 1373.625711][T12966] m920x_read = error: -19 [ 1373.630160][T12966] dvb-usb: error while querying for an remote control event. [ 1373.744807][T12966] m920x_read = error: -19 [ 1373.749329][T12966] dvb-usb: error while querying for an remote control event. [ 1373.865396][T12966] m920x_read = error: -19 [ 1373.869959][T12966] dvb-usb: error while querying for an remote control event. [ 1374.013104][T12966] m920x_read = error: -19 [ 1374.017923][T12966] dvb-usb: error while querying for an remote control event. [ 1374.159580][ T796] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1374.170573][T12966] m920x_read = error: -19 [ 1374.175046][T12966] dvb-usb: error while querying for an remote control event. [ 1374.303379][T12966] m920x_read = error: -19 [ 1374.317888][T12966] dvb-usb: error while querying for an remote control event. [ 1374.328154][ T796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.347742][ T796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.370868][ T796] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1374.381165][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.393500][ T796] usb 2-1: Product: syz [ 1374.401798][ T796] usb 2-1: Manufacturer: syz [ 1374.417056][ T796] usb 2-1: SerialNumber: syz [ 1374.467310][T12966] m920x_read = error: -19 [ 1374.472172][T12966] dvb-usb: error while querying for an remote control event. [ 1374.584632][T12966] m920x_read = error: -19 [ 1374.589255][T12966] dvb-usb: error while querying for an remote control event. [ 1374.705095][T12966] m920x_read = error: -19 [ 1374.711960][T12966] dvb-usb: error while querying for an remote control event. [ 1374.856772][T12965] m920x_read = error: -19 [ 1374.861306][T12965] dvb-usb: error while querying for an remote control event. [ 1374.994898][T12965] m920x_read = error: -19 [ 1375.005322][T12965] dvb-usb: error while querying for an remote control event. [ 1375.079616][T25548] vivid-002: disconnect [ 1375.114575][T12965] m920x_read = error: -19 [ 1375.124074][T12965] dvb-usb: error while querying for an remote control event. [ 1375.260399][T25538] vivid-002: reconnect [ 1375.264741][T12965] m920x_read = error: -19 [ 1375.289127][T12965] dvb-usb: error while querying for an remote control event. [ 1375.419975][ T796] usb 2-1: cannot find UAC_HEADER [ 1375.425380][T12965] m920x_read = error: -19 [ 1375.429775][T12965] dvb-usb: error while querying for an remote control event. [ 1375.554712][T12965] m920x_read = error: -19 [ 1375.559188][T12965] dvb-usb: error while querying for an remote control event. [ 1375.780716][T12965] m920x_read = error: -19 [ 1375.786583][ T796] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1375.799829][T12965] dvb-usb: error while querying for an remote control event. [ 1375.860462][ T796] usb 2-1: USB disconnect, device number 58 [ 1375.893479][T22316] udevd[22316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1375.964701][T12965] m920x_read = error: -19 [ 1375.985629][T12965] dvb-usb: error while querying for an remote control event. [ 1376.114819][ T796] m920x_read = error: -19 [ 1376.132475][ T796] dvb-usb: error while querying for an remote control event. [ 1376.162670][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1376.273302][T25558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1376.311314][ T796] m920x_read = error: -19 [ 1376.315978][ T796] dvb-usb: error while querying for an remote control event. [ 1376.316000][T25560] netlink: 'syz.1.5656': attribute type 1 has an invalid length. [ 1376.402365][T25564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.465432][ T796] m920x_read = error: -19 [ 1376.490805][T25560] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1376.504794][ T796] dvb-usb: error while querying for an remote control event. [ 1376.513116][T25564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.580632][T25570] kAFS: unable to lookup cell '' [ 1376.616387][ T796] m920x_read = error: -19 [ 1376.620748][ T796] dvb-usb: error while querying for an remote control event. [ 1376.768811][T25576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5659'. [ 1376.842061][T25578] syzkaller1: entered promiscuous mode [ 1376.848053][T25578] syzkaller1: entered allmulticast mode [ 1376.902334][T25570] kAFS: unable to lookup cell '(,c' [ 1376.974567][ T796] m920x_read = error: -19 [ 1377.018375][ T796] dvb-usb: error while querying for an remote control event. [ 1377.024572][T21330] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1377.110103][T25585] netlink: 'syz.5.5663': attribute type 1 has an invalid length. [ 1377.271616][ T796] m920x_read = error: -19 [ 1377.284577][T21330] usb 2-1: Using ep0 maxpacket: 32 [ 1377.291617][T21330] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1377.294785][ T796] dvb-usb: error while querying for an remote control event. [ 1377.300842][T21330] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1377.317950][T21330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1377.334800][T21330] usb 2-1: config 1 has no interface number 0 [ 1377.377493][T21330] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1377.394875][T25590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5663'. [ 1377.405351][T25589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.437080][T21330] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1377.454705][ T796] m920x_read = error: -19 [ 1377.459250][ T796] dvb-usb: error while querying for an remote control event. [ 1377.478712][T21330] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1377.500558][T25585] bond1: (slave gretap1): making interface the new active one [ 1377.523152][T21330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.619749][T25585] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1377.629203][ T796] m920x_read = error: -19 [ 1377.633648][ T796] dvb-usb: error while querying for an remote control event. [ 1377.649722][T25589] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5662'. [ 1377.712543][T21330] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1377.775375][T25590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1377.798493][ T796] m920x_read = error: -19 [ 1377.803111][ T796] dvb-usb: error while querying for an remote control event. [ 1377.925288][ T796] m920x_read = error: -19 [ 1377.930945][ T796] dvb-usb: error while querying for an remote control event. [ 1377.933382][T21330] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1378.045571][ T796] m920x_read = error: -19 [ 1378.050163][ T796] dvb-usb: error while querying for an remote control event. [ 1378.173495][ T796] m920x_read = error: -19 [ 1378.178115][ T796] dvb-usb: error while querying for an remote control event. [ 1378.294673][ T796] m920x_read = error: -19 [ 1378.299090][ T796] dvb-usb: error while querying for an remote control event. [ 1378.385366][T21330] usb 2-1: USB disconnect, device number 59 [ 1378.397097][T21330] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1378.414734][ T796] m920x_read = error: -19 [ 1378.421205][ T796] dvb-usb: error while querying for an remote control event. [ 1378.524574][ T980] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1378.534884][ T796] m920x_read = error: -19 [ 1378.539548][ T796] dvb-usb: error while querying for an remote control event. [ 1378.622910][T25610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1378.654587][T12965] m920x_read = error: -19 [ 1378.658965][T12965] dvb-usb: error while querying for an remote control event. [ 1378.678341][ T980] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1378.690839][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.719016][T25610] netlink: 'syz.5.5669': attribute type 5 has an invalid length. [ 1378.739167][ T980] usb 4-1: Product: syz [ 1378.751246][ T980] usb 4-1: Manufacturer: syz [ 1378.764390][ T980] usb 4-1: SerialNumber: syz [ 1378.774549][T12965] m920x_read = error: -19 [ 1378.779134][T12965] dvb-usb: error while querying for an remote control event. [ 1378.806154][ T980] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1378.824848][T21330] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1378.954975][T12965] m920x_read = error: -19 [ 1378.959460][T12965] dvb-usb: error while querying for an remote control event. [ 1379.075690][T12965] m920x_read = error: -19 [ 1379.080102][T12965] dvb-usb: error while querying for an remote control event. [ 1379.146127][T25619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.155299][T25619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.205967][T25620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5671'. [ 1379.306675][T12965] m920x_read = error: -19 [ 1379.314077][T12965] dvb-usb: error while querying for an remote control event. [ 1379.470318][T12965] m920x_read = error: -19 [ 1379.475609][T12965] dvb-usb: error while querying for an remote control event. [ 1379.594157][T25625] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5673'. [ 1379.605830][T12965] m920x_read = error: -19 [ 1379.610307][T12965] dvb-usb: error while querying for an remote control event. [ 1379.611638][T25625] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5673'. [ 1379.633088][T25625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.640429][T25625] bridge0: port 2(bridge_slave_1) entered listening state [ 1379.647726][T25625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.654828][T25625] bridge0: port 1(bridge_slave_0) entered listening state [ 1379.758092][T25625] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5673'. [ 1379.833261][T12965] m920x_read = error: -19 [ 1379.838466][T12965] dvb-usb: error while querying for an remote control event. [ 1379.858754][T25625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.866104][T25625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.993093][T21330] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1380.000874][T21330] ath9k_htc: Failed to initialize the device [ 1380.007811][ T796] m920x_read = error: -19 [ 1380.053117][ T796] dvb-usb: error while querying for an remote control event. [ 1380.079733][T21330] usb 4-1: ath9k_htc: USB layer deinitialized [ 1380.164646][T12965] m920x_read = error: -19 [ 1380.174373][T12965] dvb-usb: error while querying for an remote control event. [ 1380.294903][T12965] m920x_read = error: -19 [ 1380.308112][T12965] dvb-usb: error while querying for an remote control event. [ 1380.440739][T12965] m920x_read = error: -19 [ 1380.457184][T12965] dvb-usb: error while querying for an remote control event. [ 1380.534628][T21331] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1380.595095][T12965] m920x_read = error: -19 [ 1380.601514][T12965] dvb-usb: error while querying for an remote control event. [ 1380.714809][T12965] m920x_read = error: -19 [ 1380.722134][T12965] dvb-usb: error while querying for an remote control event. [ 1380.859285][T12965] m920x_read = error: -19 [ 1380.878682][T12965] dvb-usb: error while querying for an remote control event. [ 1380.894651][T21331] usb 6-1: Using ep0 maxpacket: 16 [ 1380.906811][T21331] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1380.917671][T25644] netlink: 'syz.4.5680': attribute type 3 has an invalid length. [ 1380.937093][T21331] usb 6-1: config 127 has an invalid interface number: 16 but max is 0 [ 1380.964915][T21331] usb 6-1: config 127 has no interface number 0 [ 1380.998965][T21331] usb 6-1: config 127 interface 16 has no altsetting 0 [ 1381.015309][T25644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.019272][T12965] m920x_read = error: -19 [ 1381.024323][T25644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.031729][T12965] dvb-usb: error while querying for an remote control event. [ 1381.047609][T25644] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5680'. [ 1381.069485][T21331] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a [ 1381.079345][T21331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.089554][T21331] usb 6-1: Product: syz [ 1381.093964][T21331] usb 6-1: Manufacturer: syz [ 1381.113984][T21331] usb 6-1: SerialNumber: syz [ 1381.224629][T12965] m920x_read = error: -19 [ 1381.229273][T12965] dvb-usb: error while querying for an remote control event. [ 1381.344804][T12965] m920x_read = error: -19 [ 1381.349214][T12965] dvb-usb: error while querying for an remote control event. [ 1381.367866][T25635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1381.461012][T25635] bond_slave_0: entered promiscuous mode [ 1381.466827][T25635] bond_slave_1: entered promiscuous mode [ 1381.505686][T25655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5683'. [ 1381.572022][T12965] m920x_read = error: -19 [ 1381.584928][T12965] dvb-usb: error while querying for an remote control event. [ 1381.604987][T25635] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1381.627196][T25635] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 1381.688546][T21331] usb_ehset_test 6-1:127.16: probe with driver usb_ehset_test failed with error -32 [ 1381.714809][ T796] m920x_read = error: -19 [ 1381.719639][ T796] dvb-usb: error while querying for an remote control event. [ 1381.727603][T12965] usb 4-1: USB disconnect, device number 77 [ 1381.847559][T21331] usb 6-1: USB disconnect, device number 11 [ 1381.855574][ T796] m920x_read = error: -19 [ 1381.861178][ T796] dvb-usb: error while querying for an remote control event. [ 1381.892072][T25662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.918142][T25665] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 1381.926518][T25662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.015449][ T796] m920x_read = error: -19 [ 1382.024262][ T796] dvb-usb: error while querying for an remote control event. [ 1382.152087][ T796] m920x_read = error: -19 [ 1382.163046][T25665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1382.242014][ T796] dvb-usb: error while querying for an remote control event. [ 1382.288674][T25666] bond6: (slave geneve3): making interface the new active one [ 1382.303876][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1382.303889][ T30] audit: type=1326 audit(1774511968.577:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1382.435565][ T796] m920x_read = error: -19 [ 1382.440252][ T796] dvb-usb: error while querying for an remote control event. [ 1382.456197][T25666] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1382.478047][ T30] audit: type=1326 audit(1774511968.617:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1382.621828][ T796] m920x_read = error: -19 [ 1382.626456][ T796] dvb-usb: error while querying for an remote control event. [ 1382.666827][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1382.763657][ T796] m920x_read = error: -19 [ 1382.784087][ T796] dvb-usb: error while querying for an remote control event. [ 1382.806869][ T30] audit: type=1326 audit(1774511968.617:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1382.829874][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1382.844234][T25676] netlink: 'syz.3.5688': attribute type 1 has an invalid length. [ 1382.858030][ T30] audit: type=1326 audit(1774511968.727:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1382.885422][ T30] audit: type=1326 audit(1774511968.727:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1382.914627][ T796] m920x_read = error: -19 [ 1382.962068][ T796] dvb-usb: error while querying for an remote control event. [ 1382.963186][T25678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5688'. [ 1383.018218][ T30] audit: type=1326 audit(1774511968.727:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1383.084582][ T30] audit: type=1326 audit(1774511968.727:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1383.189363][ T30] audit: type=1326 audit(1774511968.727:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1383.194563][ T796] m920x_read = error: -19 [ 1383.260318][ T30] audit: type=1326 audit(1774511968.727:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1383.324510][ T796] dvb-usb: error while querying for an remote control event. [ 1383.330118][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 1383.362877][ T30] audit: type=1326 audit(1774511968.727:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25669 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945b79c799 code=0x7ffc0000 [ 1383.469805][ T796] m920x_read = error: -19 [ 1383.474338][ T796] dvb-usb: error while querying for an remote control event. [ 1383.594275][T25676] bond7: entered allmulticast mode [ 1383.604578][ T796] m920x_read = error: -19 [ 1383.609960][ T796] dvb-usb: error while querying for an remote control event. [ 1383.631024][T25676] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1383.647333][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1383.656915][ T49] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1383.683962][T25678] bond7 (unregistering): Released all slaves [ 1383.734939][ T796] m920x_read = error: -19 [ 1383.739344][ T796] dvb-usb: error while querying for an remote control event. [ 1383.832276][T25687] netlink: 'syz.4.5691': attribute type 10 has an invalid length. [ 1383.846801][T25687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5691'. [ 1383.865810][ T796] m920x_read = error: -19 [ 1383.870240][ T796] dvb-usb: error while querying for an remote control event. [ 1384.048105][ T796] m920x_read = error: -19 [ 1384.052627][ T796] dvb-usb: error while querying for an remote control event. [ 1384.415215][T12965] m920x_read = error: -19 [ 1384.423601][T12965] dvb-usb: error while querying for an remote control event. [ 1384.546960][T12965] m920x_read = error: -19 [ 1384.552073][T12965] dvb-usb: error while querying for an remote control event. [ 1384.744583][T12965] m920x_read = error: -19 [ 1384.748979][T12965] dvb-usb: error while querying for an remote control event. [ 1384.790886][T25716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5700'. [ 1384.816900][T25716] netlink: 'syz.4.5700': attribute type 4 has an invalid length. [ 1384.884561][T12965] m920x_read = error: -19 [ 1384.889238][T12965] dvb-usb: error while querying for an remote control event. [ 1385.024570][T12965] m920x_read = error: -19 [ 1385.029306][T12965] dvb-usb: error while querying for an remote control event. [ 1385.181177][T25727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5701'. [ 1385.191920][T12965] m920x_read = error: -19 [ 1385.196466][T12965] dvb-usb: error while querying for an remote control event. [ 1385.332017][T12965] m920x_read = error: -19 [ 1385.338869][T12965] dvb-usb: error while querying for an remote control event. [ 1385.491432][T25735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1385.517748][T12965] m920x_read = error: -19 [ 1385.522432][T12965] dvb-usb: error while querying for an remote control event. [ 1385.533770][T25739] kAFS: unable to lookup cell '' [ 1385.581807][T25741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.601886][T25739] kAFS: unable to lookup cell '(,c' [ 1385.615029][T25741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.648149][T12965] m920x_read = error: -19 [ 1385.678456][T12965] dvb-usb: error while querying for an remote control event. [ 1385.805469][T12965] m920x_read = error: -19 [ 1385.810153][T12965] dvb-usb: error while querying for an remote control event. [ 1385.975257][T12965] m920x_read = error: -19 [ 1385.979653][T12965] dvb-usb: error while querying for an remote control event. [ 1386.096288][T12965] m920x_read = error: -19 [ 1386.133087][T12965] dvb-usb: error while querying for an remote control event. [ 1386.161572][T25768] syzkaller0: entered promiscuous mode [ 1386.170267][T25768] syzkaller0: entered allmulticast mode [ 1386.304873][T12965] m920x_read = error: -19 [ 1386.310013][T12965] dvb-usb: error while querying for an remote control event. [ 1386.320708][T25768] tipc: Enabled bearer , priority 0 [ 1386.361777][T25784] netlink: 'syz.1.5710': attribute type 27 has an invalid length. [ 1386.373815][T25767] tipc: Resetting bearer [ 1386.388126][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1386.444843][T12965] m920x_read = error: -19 [ 1386.449263][T12965] dvb-usb: error while querying for an remote control event. [ 1386.464323][T25767] tipc: Disabling bearer [ 1386.491306][T25784] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1386.574166][T25786] syzkaller0: entered promiscuous mode [ 1386.596184][T12965] m920x_read = error: -19 [ 1386.597800][T25786] syzkaller0: entered allmulticast mode [ 1386.600945][T12965] dvb-usb: error while querying for an remote control event. [ 1386.630167][T25786] tipc: Enabled bearer , priority 0 [ 1386.714629][T12965] m920x_read = error: -19 [ 1386.719197][T12965] dvb-usb: error while querying for an remote control event. [ 1386.729718][T25795] netlink: 'syz.4.5712': attribute type 5 has an invalid length. [ 1386.744770][T25785] tipc: Resetting bearer [ 1386.792270][T25785] tipc: Disabling bearer [ 1386.826766][T12965] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1386.875000][T12965] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1386.885588][T12966] m920x_read = error: -19 [ 1386.890101][T12966] dvb-usb: error while querying for an remote control event. [ 1386.894620][T21330] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1387.021771][T12965] m920x_read = error: -19 [ 1387.031922][T12965] dvb-usb: error while querying for an remote control event. [ 1387.075565][T21330] usb 2-1: Using ep0 maxpacket: 16 [ 1387.086603][T21330] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 1387.102466][T21330] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 1387.121778][T21330] usb 2-1: config 166 has no interface number 0 [ 1387.132866][T21330] usb 2-1: config 166 has no interface number 1 [ 1387.146465][T21330] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1387.165237][T21330] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1387.165268][T12965] m920x_read = error: -19 [ 1387.188685][T12965] dvb-usb: error while querying for an remote control event. [ 1387.194536][T21330] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1387.211380][T21330] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1387.232949][T21330] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1387.254999][T21330] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1387.266607][T21330] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1387.278693][T21330] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1387.283146][T25806] bond2: (slave macvlan1): Error -98 calling set_mac_address [ 1387.289553][T21330] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1387.312621][T21330] usb 2-1: config 166 interface 177 has no altsetting 0 [ 1387.319898][T21330] usb 2-1: config 166 interface 34 has no altsetting 0 [ 1387.328181][T12965] m920x_read = error: -19 [ 1387.329347][T21330] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1387.332729][T12965] dvb-usb: error while querying for an remote control event. [ 1387.342228][T21330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.360736][T21330] usb 2-1: Product: syz [ 1387.365463][T21330] usb 2-1: Manufacturer: syz [ 1387.370091][T21330] usb 2-1: SerialNumber: syz [ 1387.493354][T12965] m920x_read = error: -19 [ 1387.504906][T12965] dvb-usb: error while querying for an remote control event. [ 1387.596494][T21330] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 1387.648258][T12965] m920x_read = error: -19 [ 1387.652701][T12965] dvb-usb: error while querying for an remote control event. [ 1387.785538][T21330] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 1387.794576][T12965] m920x_read = error: -19 [ 1387.799231][T12965] dvb-usb: error while querying for an remote control event. [ 1387.964656][T12965] m920x_read = error: -19 [ 1387.969143][T12965] dvb-usb: error while querying for an remote control event. [ 1388.014733][T21330] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 1388.062612][T21330] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1388.088270][T12965] m920x_read = error: -19 [ 1388.093732][T12965] dvb-usb: error while querying for an remote control event. [ 1388.096016][T21330] uvcvideo 2-1:166.34: No valid video chain found. [ 1388.355450][T12965] m920x_read = error: -19 [ 1388.486485][T25838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5724'. [ 1388.526351][T21330] usb 2-1: USB disconnect, device number 60 [ 1388.532692][T12965] dvb-usb: error while querying for an remote control event. [ 1388.535120][T25838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1388.644721][T12965] m920x_read = error: -19 [ 1388.649143][T12965] dvb-usb: error while querying for an remote control event. [ 1388.795373][T12965] m920x_read = error: -19 [ 1388.800027][T12965] dvb-usb: error while querying for an remote control event. [ 1389.104614][T12966] m920x_read = error: -19 [ 1389.108987][T12966] dvb-usb: error while querying for an remote control event. [ 1389.177433][T25851] kAFS: unable to lookup cell '' [ 1389.183204][T25851] kAFS: unable to lookup cell '(,c' [ 1389.239720][T12966] m920x_read = error: -19 [ 1389.258884][T12966] dvb-usb: error while querying for an remote control event. [ 1389.395742][T12966] m920x_read = error: -19 [ 1389.444389][T12966] dvb-usb: error while querying for an remote control event. [ 1389.671042][T12966] m920x_read = error: -19 [ 1389.675988][T12966] dvb-usb: error while querying for an remote control event. [ 1389.850503][T12966] m920x_read = error: -19 [ 1389.863087][T12966] dvb-usb: error while querying for an remote control event. [ 1390.098120][T12966] m920x_read = error: -19 [ 1390.154898][T12966] dvb-usb: error while querying for an remote control event. [ 1390.295042][T12966] m920x_read = error: -19 [ 1390.393120][T25869] vlan3: entered promiscuous mode [ 1390.452892][T12966] dvb-usb: error while querying for an remote control event. [ 1390.636314][T12966] m920x_read = error: -19 [ 1390.640776][T12966] dvb-usb: error while querying for an remote control event. [ 1390.755279][T12966] m920x_read = error: -19 [ 1390.759856][T12966] dvb-usb: error while querying for an remote control event. [ 1390.874576][T12965] m920x_read = error: -19 [ 1390.880106][T12965] dvb-usb: error while querying for an remote control event. [ 1390.955424][T12966] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1390.994629][ T796] m920x_read = error: -19 [ 1390.999041][ T796] dvb-usb: error while querying for an remote control event. [ 1391.044586][T12965] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1391.123529][ T796] m920x_read = error: -19 [ 1391.128005][ T796] dvb-usb: error while querying for an remote control event. [ 1391.137613][T12966] usb 1-1: Using ep0 maxpacket: 32 [ 1391.148127][T12966] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1391.173647][T12966] usb 1-1: config 0 has no interface number 0 [ 1391.304877][ T796] m920x_read = error: -19 [ 1391.309685][ T796] dvb-usb: error while querying for an remote control event. [ 1391.326470][T12965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.345288][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1391.355058][T25893] kAFS: unable to lookup cell '' [ 1391.361927][T25893] kAFS: unable to lookup cell '(,c' [ 1391.391567][T12965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.410464][T12966] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1391.427765][T12965] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1391.445197][ T5956] m920x_read = error: -19 [ 1391.455938][ T5956] dvb-usb: error while querying for an remote control event. [ 1391.471117][T12965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.485357][T12966] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1391.498730][T12965] usb 6-1: config 0 descriptor?? [ 1391.507178][T12966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.530621][T12966] usb 1-1: Product: syz [ 1391.537581][T12966] usb 1-1: Manufacturer: syz [ 1391.544837][T12966] usb 1-1: SerialNumber: syz [ 1391.574948][ T5956] m920x_read = error: -19 [ 1391.579518][ T5956] dvb-usb: error while querying for an remote control event. [ 1391.604222][T12966] usb 1-1: config 0 descriptor?? [ 1391.615842][T25873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1391.716103][ T5956] m920x_read = error: -19 [ 1391.720664][ T5956] dvb-usb: error while querying for an remote control event. [ 1391.788518][T25903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5743'. [ 1391.805846][T25903] netlink: 'syz.3.5743': attribute type 4 has an invalid length. [ 1391.834707][ T5956] m920x_read = error: -19 [ 1391.838603][T25873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1391.839164][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.024573][ T5956] m920x_read = error: -19 [ 1392.028979][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.045850][T12965] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1392.074980][T12965] cp2112 0003:10C4:EA90.0057: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1392.146722][T12965] cp2112 0003:10C4:EA90.0057: Part Number: 0x82 Device Version: 0xFE [ 1392.164623][ T5956] m920x_read = error: -19 [ 1392.169056][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.284617][T12967] m920x_read = error: -19 [ 1392.289092][T12967] dvb-usb: error while querying for an remote control event. [ 1392.412685][ T5956] m920x_read = error: -19 [ 1392.424575][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.554643][ T5956] m920x_read = error: -19 [ 1392.565734][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.661771][T25911] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 1392.685023][ T5956] m920x_read = error: -19 [ 1392.695099][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.709752][T12966] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1392.742033][T12966] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1392.783292][T12966] asix 1-1:0.188: probe with driver asix failed with error -61 [ 1392.804674][ T5956] m920x_read = error: -19 [ 1392.809112][ T5956] dvb-usb: error while querying for an remote control event. [ 1392.954672][T12965] m920x_read = error: -19 [ 1392.959447][T12965] dvb-usb: error while querying for an remote control event. [ 1393.081343][T12965] m920x_read = error: -19 [ 1393.084601][T25919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.094203][T12965] dvb-usb: error while querying for an remote control event. [ 1393.094647][T25919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.204782][T12966] m920x_read = error: -19 [ 1393.209491][T12966] dvb-usb: error while querying for an remote control event. [ 1393.229992][T25930] kAFS: unable to lookup cell '' [ 1393.235884][ T5956] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1393.246806][T25930] kAFS: unable to lookup cell '(,c' [ 1393.324735][T12965] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 1393.361301][T12967] m920x_read = error: -19 [ 1393.366479][T12967] dvb-usb: error while querying for an remote control event. [ 1393.394605][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 1393.401561][ T5956] usb 2-1: config 2 has an invalid interface number: 194 but max is 0 [ 1393.414327][ T5956] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.425402][ T5956] usb 2-1: config 2 has no interface number 0 [ 1393.431963][ T5956] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1393.444974][ T5956] usb 2-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1393.474687][T12967] m920x_read = error: -19 [ 1393.479112][T12967] dvb-usb: error while querying for an remote control event. [ 1393.538257][ T5956] usb 2-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1393.578104][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.645086][T12967] m920x_read = error: -19 [ 1393.649648][T12967] dvb-usb: error while querying for an remote control event. [ 1393.774591][T12967] m920x_read = error: -19 [ 1393.779026][T12967] dvb-usb: error while querying for an remote control event. [ 1393.842364][ T5956] usb 2-1: string descriptor 0 read error: -71 [ 1393.882153][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1393.905114][T12967] m920x_read = error: -19 [ 1393.909553][T12967] dvb-usb: error while querying for an remote control event. [ 1393.980460][T12967] usb 1-1: USB disconnect, device number 38 [ 1394.064577][ T796] m920x_read = error: -19 [ 1394.069094][ T796] dvb-usb: error while querying for an remote control event. [ 1394.163912][ T5956] usb 2-1: USB disconnect, device number 61 [ 1394.204579][ T796] m920x_read = error: -19 [ 1394.213604][ T796] dvb-usb: error while querying for an remote control event. [ 1394.270907][T25937] bond12: entered promiscuous mode [ 1394.331291][ T796] m920x_read = error: -19 [ 1394.336232][ T796] dvb-usb: error while querying for an remote control event. [ 1394.444692][ T796] m920x_read = error: -19 [ 1394.449163][ T796] dvb-usb: error while querying for an remote control event. [ 1394.476156][T25943] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1394.490341][T25943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.497772][T25943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.634704][ T796] m920x_read = error: -19 [ 1394.639096][ T796] dvb-usb: error while querying for an remote control event. [ 1394.784977][ T796] m920x_read = error: -19 [ 1394.790119][ T796] dvb-usb: error while querying for an remote control event. [ 1394.934636][ T5956] m920x_read = error: -19 [ 1394.939997][ T5956] dvb-usb: error while querying for an remote control event. [ 1395.015179][ T796] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1395.064594][ T5956] m920x_read = error: -19 [ 1395.069099][ T5956] dvb-usb: error while querying for an remote control event. [ 1395.071799][T25969] netlink: 'syz.4.5763': attribute type 1 has an invalid length. [ 1395.206660][T25969] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1395.231999][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.243182][ T5956] m920x_read = error: -19 [ 1395.251898][ T5956] dvb-usb: error while querying for an remote control event. [ 1395.271010][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.302377][ T796] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1395.339004][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.394156][T12965] usb 6-1: device descriptor read/64, error -71 [ 1395.402581][ T5956] m920x_read = error: -19 [ 1395.407781][ T5956] dvb-usb: error while querying for an remote control event. [ 1395.423885][ T796] usb 1-1: config 0 descriptor?? [ 1395.534617][ T5956] m920x_read = error: -19 [ 1395.541066][ T5956] dvb-usb: error while querying for an remote control event. [ 1395.634610][T12965] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 1395.645586][T12965] usb 6-1: device reset changed ep0 maxpacket size! [ 1395.660646][T12966] usb 6-1: USB disconnect, device number 12 [ 1395.680033][T12965] m920x_read = error: -19 [ 1395.691807][T12965] dvb-usb: error while querying for an remote control event. [ 1395.829672][T12965] m920x_read = error: -19 [ 1395.848129][ T796] hkems 0003:2006:0118.0058: unknown main item tag 0x0 [ 1395.875573][T12965] dvb-usb: error while querying for an remote control event. [ 1395.903549][ T796] hkems 0003:2006:0118.0058: unknown main item tag 0x0 [ 1395.921105][ T796] hkems 0003:2006:0118.0058: reserved main item tag 0xe [ 1395.950314][ T796] hkems 0003:2006:0118.0058: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 1395.974555][T12966] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1395.984631][ T796] hkems 0003:2006:0118.0058: no inputs found [ 1395.990659][ T796] hkems 0003:2006:0118.0058: force feedback init failed [ 1396.024809][T12965] m920x_read = error: -19 [ 1396.054974][T12965] dvb-usb: error while querying for an remote control event. [ 1396.076183][ T796] usb 1-1: USB disconnect, device number 39 [ 1396.167157][T25977] fido_id[25977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1396.184542][T12966] usb 6-1: Using ep0 maxpacket: 32 [ 1396.200141][T12965] m920x_read = error: -19 [ 1396.210323][T12965] dvb-usb: error while querying for an remote control event. [ 1396.225315][T12966] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1396.243879][T12966] usb 6-1: config 0 has no interface number 0 [ 1396.264193][T12966] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1396.290898][T12966] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1396.297833][T25981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5766'. [ 1396.329871][T12966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.336007][T25981] netlink: 'syz.1.5766': attribute type 4 has an invalid length. [ 1396.362564][ T796] m920x_read = error: -19 [ 1396.367070][T12966] usb 6-1: Product: syz [ 1396.371249][T12966] usb 6-1: Manufacturer: syz [ 1396.387159][ T796] dvb-usb: error while querying for an remote control event. [ 1396.404532][T12966] usb 6-1: SerialNumber: syz [ 1396.416654][T12966] usb 6-1: config 0 descriptor?? [ 1396.446399][T12966] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1396.464475][T12966] em28xx 6-1:0.132: Video interface 132 found: [ 1396.514648][ T796] m920x_read = error: -19 [ 1396.519117][ T796] dvb-usb: error while querying for an remote control event. [ 1396.536187][T25990] syzkaller0: entered promiscuous mode [ 1396.541799][T25990] syzkaller0: entered allmulticast mode [ 1396.554175][T25990] tipc: Enabled bearer , priority 0 [ 1396.562750][T25988] tipc: Resetting bearer [ 1396.596796][T25988] tipc: Disabling bearer [ 1396.634784][ T796] m920x_read = error: -19 [ 1396.639988][ T796] dvb-usb: error while querying for an remote control event. [ 1396.754922][ T796] m920x_read = error: -19 [ 1396.759406][ T796] dvb-usb: error while querying for an remote control event. [ 1396.775892][T26002] kAFS: unable to lookup cell '' [ 1396.858274][T25967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.868232][T12966] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1396.877015][T25967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.885097][ T796] m920x_read = error: -19 [ 1396.890039][ T796] dvb-usb: error while querying for an remote control event. [ 1396.920652][T26007] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5774'. [ 1396.944242][T26007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1397.004628][ T796] m920x_read = error: -19 [ 1397.009567][ T796] dvb-usb: error while querying for an remote control event. [ 1397.137046][ T796] m920x_read = error: -19 [ 1397.141461][ T796] dvb-usb: error while querying for an remote control event. [ 1397.274675][ T796] m920x_read = error: -19 [ 1397.315581][T12966] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1397.339209][ T796] dvb-usb: error while querying for an remote control event. [ 1397.377812][T12966] em28xx 6-1:0.132: board has no eeprom [ 1397.488574][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1397.497640][T12966] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1397.497671][T12966] em28xx 6-1:0.132: analog set to bulk mode. [ 1397.540175][ T796] m920x_read = error: -19 [ 1397.597273][ T796] dvb-usb: error while querying for an remote control event. [ 1397.612244][T12966] em28xx 6-1:0.132: Registering V4L2 extension [ 1397.632170][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1397.681453][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1397.865967][ T796] m920x_read = error: -19 [ 1397.893630][ T796] dvb-usb: error while querying for an remote control event. [ 1398.055575][ T796] usb 6-1: USB disconnect, device number 13 [ 1398.061676][T12966] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1398.073404][ T796] em28xx 6-1:0.132: Disconnecting em28xx [ 1398.085245][T12965] m920x_read = error: -19 [ 1398.090127][T12965] dvb-usb: error while querying for an remote control event. [ 1398.146644][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1398.261659][T12966] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1398.274808][T12966] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1398.282448][T12966] em28xx 6-1:0.132: No AC97 audio processor [ 1398.290143][T12965] m920x_read = error: -19 [ 1398.340768][T12966] usb 6-1: Decoder not found [ 1398.354617][T12965] dvb-usb: error while querying for an remote control event. [ 1398.364523][T12966] em28xx 6-1:0.132: failed to create media graph [ 1398.370970][T12966] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1398.484629][T12965] m920x_read = error: -19 [ 1398.502486][T12965] dvb-usb: error while querying for an remote control event. [ 1398.561537][T12966] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1398.592334][ T796] em28xx 6-1:0.132: Closing input extension [ 1398.598578][ T796] ================================================================== [ 1398.606654][ T796] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x450 [ 1398.615247][ T796] Read of size 8 at addr ffff888079bc0218 by task kworker/1:2/796 [ 1398.623145][ T796] [ 1398.625542][ T796] CPU: 1 UID: 0 PID: 796 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.625583][ T796] Tainted: [L]=SOFTLOCKUP [ 1398.625591][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1398.625603][ T796] Workqueue: usb_hub_wq hub_event [ 1398.625741][ T796] Call Trace: [ 1398.625748][ T796] [ 1398.625757][ T796] dump_stack_lvl+0xe8/0x150 [ 1398.625812][ T796] print_report+0xba/0x230 [ 1398.625836][ T796] ? media_device_unregister+0x141/0x450 [ 1398.625852][ T796] kasan_report+0x117/0x150 [ 1398.625906][ T796] ? media_device_unregister+0x141/0x450 [ 1398.625924][ T796] media_device_unregister+0x141/0x450 [ 1398.625942][ T796] em28xx_release_resources+0xac/0x240 [ 1398.626041][ T796] em28xx_usb_disconnect+0x19f/0x2f0 [ 1398.626066][ T796] usb_unbind_interface+0x26e/0x910 [ 1398.626090][ T796] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1398.626113][ T796] device_release_driver_internal+0x4d9/0x870 [ 1398.626193][ T796] bus_remove_device+0x455/0x570 [ 1398.626211][ T796] ? __pfx_bus_remove_device+0x10/0x10 [ 1398.626237][ T796] device_del+0x527/0x8f0 [ 1398.626258][ T796] ? __pfx_device_del+0x10/0x10 [ 1398.626278][ T796] ? kobject_put+0x51d/0x560 [ 1398.626308][ T796] usb_disable_device+0x3d4/0x8d0 [ 1398.626330][ T796] usb_disconnect+0x32f/0x990 [ 1398.626348][ T796] hub_event+0x1cc9/0x4f30 [ 1398.626376][ T796] ? __lock_acquire+0x6b5/0x2cf0 [ 1398.626415][ T796] ? __pfx_hub_event+0x10/0x10 [ 1398.626436][ T796] ? process_scheduled_works+0xa8d/0x18c0 [ 1398.626463][ T796] ? process_scheduled_works+0xa8d/0x18c0 [ 1398.626482][ T796] process_scheduled_works+0xb6e/0x18c0 [ 1398.626512][ T796] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.626534][ T796] ? assign_work+0x3d5/0x5e0 [ 1398.626555][ T796] worker_thread+0xa53/0xfc0 [ 1398.626584][ T796] kthread+0x388/0x470 [ 1398.626604][ T796] ? __pfx_worker_thread+0x10/0x10 [ 1398.626624][ T796] ? __pfx_kthread+0x10/0x10 [ 1398.626638][ T796] ret_from_fork+0x51e/0xb90 [ 1398.626667][ T796] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.626686][ T796] ? __switch_to+0xc7d/0x1450 [ 1398.626712][ T796] ? __pfx_kthread+0x10/0x10 [ 1398.626728][ T796] ret_from_fork_asm+0x1a/0x30 [ 1398.626758][ T796] [ 1398.626765][ T796] [ 1398.844835][ T796] Allocated by task 12966: [ 1398.849346][ T796] kasan_save_track+0x3e/0x80 [ 1398.854023][ T796] __kasan_kmalloc+0x93/0xb0 [ 1398.858607][ T796] __kmalloc_cache_noprof+0x31c/0x660 [ 1398.863987][ T796] em28xx_v4l2_init+0x10b/0x2e70 [ 1398.868928][ T796] em28xx_init_extension+0x120/0x1c0 [ 1398.874219][ T796] process_scheduled_works+0xb6e/0x18c0 [ 1398.879774][ T796] worker_thread+0xa53/0xfc0 [ 1398.884376][ T796] kthread+0x388/0x470 [ 1398.888443][ T796] ret_from_fork+0x51e/0xb90 [ 1398.893172][ T796] ret_from_fork_asm+0x1a/0x30 [ 1398.898156][ T796] [ 1398.900485][ T796] Freed by task 12966: [ 1398.904548][ T796] kasan_save_track+0x3e/0x80 [ 1398.909260][ T796] kasan_save_free_info+0x46/0x50 [ 1398.914325][ T796] __kasan_slab_free+0x5c/0x80 [ 1398.919107][ T796] kfree+0x1c1/0x630 [ 1398.923004][ T796] em28xx_v4l2_init+0x1683/0x2e70 [ 1398.928051][ T796] em28xx_init_extension+0x120/0x1c0 [ 1398.933611][ T796] process_scheduled_works+0xb6e/0x18c0 [ 1398.939211][ T796] worker_thread+0xa53/0xfc0 [ 1398.943817][ T796] kthread+0x388/0x470 [ 1398.947880][ T796] ret_from_fork+0x51e/0xb90 [ 1398.952482][ T796] ret_from_fork_asm+0x1a/0x30 [ 1398.957244][ T796] [ 1398.959915][ T796] The buggy address belongs to the object at ffff888079bc0000 [ 1398.959915][ T796] which belongs to the cache kmalloc-8k of size 8192 [ 1398.974064][ T796] The buggy address is located 536 bytes inside of [ 1398.974064][ T796] freed 8192-byte region [ffff888079bc0000, ffff888079bc2000) [ 1398.987950][ T796] [ 1398.990267][ T796] The buggy address belongs to the physical page: [ 1398.996682][ T796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79bc0 [ 1399.005468][ T796] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1399.013955][ T796] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1399.021512][ T796] page_type: f5(slab) [ 1399.025499][ T796] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 1399.034071][ T796] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1399.042649][ T796] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 1399.051409][ T796] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1399.060095][ T796] head: 00fff00000000003 ffffea0001e6f001 00000000ffffffff 00000000ffffffff [ 1399.068860][ T796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1399.077695][ T796] page dumped because: kasan: bad access detected [ 1399.084110][ T796] page_owner tracks the page as allocated [ 1399.089848][ T796] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24196, tgid 24196 (syz.3.5266), ts 1285867502984, free_ts 1285832524595 [ 1399.111911][ T796] post_alloc_hook+0x231/0x280 [ 1399.116696][ T796] get_page_from_freelist+0x24dc/0x2580 [ 1399.122246][ T796] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1399.128085][ T796] allocate_slab+0x77/0x660 [ 1399.132585][ T796] refill_objects+0x331/0x3c0 [ 1399.139361][ T796] __pcs_replace_empty_main+0x2e6/0x730 [ 1399.145503][ T796] __kvmalloc_node_noprof+0x657/0x8a0 [ 1399.150912][ T796] snd_pcm_plugin_alloc+0x19a/0x780 [ 1399.157993][ T796] snd_pcm_plug_alloc+0x1d7/0x280 [ 1399.163660][ T796] snd_pcm_oss_change_params_locked+0x27f7/0x3e00 [ 1399.171522][ T796] snd_pcm_oss_sync+0x570/0xfc0 [ 1399.176991][ T796] snd_pcm_oss_release+0xff/0x250 [ 1399.182048][ T796] __fput+0x44f/0xa70 [ 1399.186070][ T796] task_work_run+0x1d9/0x270 [ 1399.190677][ T796] exit_to_user_mode_loop+0xed/0x480 [ 1399.195999][ T796] do_syscall_64+0x32d/0xf80 [ 1399.200589][ T796] page last free pid 24203 tgid 24203 stack trace: [ 1399.207705][ T796] __free_frozen_pages+0xc2b/0xdb0 [ 1399.212917][ T796] __slab_free+0x263/0x2b0 [ 1399.217366][ T796] qlist_free_all+0x97/0x100 [ 1399.222219][ T796] kasan_quarantine_reduce+0x148/0x160 [ 1399.227672][ T796] __kasan_slab_alloc+0x22/0x80 [ 1399.232730][ T796] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1399.238179][ T796] mas_alloc_nodes+0x291/0x350 [ 1399.242935][ T796] mas_preallocate+0x2d6/0x640 [ 1399.247688][ T796] mmap_region+0x125d/0x2240 [ 1399.252383][ T796] do_mmap+0xc39/0x10c0 [ 1399.256538][ T796] vm_mmap_pgoff+0x2c9/0x4f0 [ 1399.261146][ T796] elf_load+0x248/0x6a0 [ 1399.265416][ T796] load_elf_interp+0x4ce/0xb60 [ 1399.270172][ T796] load_elf_binary+0x1b2f/0x2980 [ 1399.275113][ T796] bprm_execve+0x93d/0x1460 [ 1399.279619][ T796] do_execveat_common+0x50d/0x690 [ 1399.284635][ T796] [ 1399.286960][ T796] Memory state around the buggy address: [ 1399.292593][ T796] ffff888079bc0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1399.300648][ T796] ffff888079bc0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1399.308955][ T796] >ffff888079bc0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1399.316999][ T796] ^ [ 1399.321834][ T796] ffff888079bc0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1399.329966][ T796] ffff888079bc0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1399.338025][ T796] ================================================================== [ 1399.348876][T12966] m920x_read = error: -19 [ 1399.353275][T12966] dvb-usb: error while querying for an remote control event. [ 1399.514149][T12965] m920x_read = error: -19 [ 1399.518873][T12965] dvb-usb: error while querying for an remote control event. [ 1399.646162][T12966] m920x_read = error: -19 [ 1399.650703][T12966] dvb-usb: error while querying for an remote control event. [ 1399.763015][ T796] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1399.770251][ T796] CPU: 1 UID: 0 PID: 796 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.781093][ T796] Tainted: [L]=SOFTLOCKUP [ 1399.785412][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1399.795466][ T796] Workqueue: usb_hub_wq hub_event [ 1399.800516][ T796] Call Trace: [ 1399.803829][ T796] [ 1399.806770][ T796] vpanic+0x56c/0xa60 [ 1399.811417][ T796] ? __pfx_vpanic+0x10/0x10 [ 1399.816036][ T796] panic+0xc5/0xd0 [ 1399.819855][ T796] ? __pfx_panic+0x10/0x10 [ 1399.824290][ T796] ? preempt_schedule_thunk+0x16/0x30 [ 1399.830892][ T796] ? media_device_unregister+0x141/0x450 [ 1399.836733][ T796] ? preempt_schedule_thunk+0x16/0x30 [ 1399.842301][ T796] ? media_device_unregister+0x141/0x450 [ 1399.848190][ T796] check_panic_on_warn+0x89/0xb0 [ 1399.853170][ T796] ? media_device_unregister+0x141/0x450 [ 1399.858910][ T796] end_report+0x73/0x180 [ 1399.863172][ T796] ? media_device_unregister+0x141/0x450 [ 1399.868995][ T796] kasan_report+0x128/0x150 [ 1399.873496][ T796] ? media_device_unregister+0x141/0x450 [ 1399.879120][ T796] media_device_unregister+0x141/0x450 [ 1399.884571][ T796] em28xx_release_resources+0xac/0x240 [ 1399.890036][ T796] em28xx_usb_disconnect+0x19f/0x2f0 [ 1399.895322][ T796] usb_unbind_interface+0x26e/0x910 [ 1399.900524][ T796] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1399.906500][ T796] device_release_driver_internal+0x4d9/0x870 [ 1399.912574][ T796] bus_remove_device+0x455/0x570 [ 1399.917513][ T796] ? __pfx_bus_remove_device+0x10/0x10 [ 1399.922993][ T796] device_del+0x527/0x8f0 [ 1399.927348][ T796] ? __pfx_device_del+0x10/0x10 [ 1399.932399][ T796] ? kobject_put+0x51d/0x560 [ 1399.937100][ T796] usb_disable_device+0x3d4/0x8d0 [ 1399.942224][ T796] usb_disconnect+0x32f/0x990 [ 1399.946905][ T796] hub_event+0x1cc9/0x4f30 [ 1399.951521][ T796] ? __lock_acquire+0x6b5/0x2cf0 [ 1399.956778][ T796] ? __pfx_hub_event+0x10/0x10 [ 1399.961558][ T796] ? process_scheduled_works+0xa8d/0x18c0 [ 1399.967479][ T796] ? process_scheduled_works+0xa8d/0x18c0 [ 1399.973226][ T796] process_scheduled_works+0xb6e/0x18c0 [ 1399.978801][ T796] ? __pfx_process_scheduled_works+0x10/0x10 [ 1399.984792][ T796] ? assign_work+0x3d5/0x5e0 [ 1399.989510][ T796] worker_thread+0xa53/0xfc0 [ 1399.994193][ T796] kthread+0x388/0x470 [ 1399.998270][ T796] ? __pfx_worker_thread+0x10/0x10 [ 1400.003391][ T796] ? __pfx_kthread+0x10/0x10 [ 1400.008078][ T796] ret_from_fork+0x51e/0xb90 [ 1400.012672][ T796] ? __pfx_ret_from_fork+0x10/0x10 [ 1400.017779][ T796] ? __switch_to+0xc7d/0x1450 [ 1400.022470][ T796] ? __pfx_kthread+0x10/0x10 [ 1400.027078][ T796] ret_from_fork_asm+0x1a/0x30 [ 1400.031872][ T796] [ 1400.035196][ T796] Kernel Offset: disabled [ 1400.039510][ T796] Rebooting in 86400 seconds..