last executing test programs: 9.725789407s ago: executing program 3 (id=2806): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8", 0x21}], 0x1}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7b, 0x3}}}}}]}}]}}, 0x0) 9.024713253s ago: executing program 0 (id=2809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000440)="2501d73ce0861f01000000de1232c1d6b6a5329a30ae62000000001fd25da9cd618b94faf65ab84b77749e3dd1df850b6f0abac357d84ac7b213059417c7d0bba34718ca9c30ed8867a6b78ac6392ff87d25cd3148c6b1f8297f49839d4f17e3cf8481e1662928d6cd7fa6097fa212c201cea894d9bda5a38e65d31d3a9ff763b3bdd4fd4b2cba3276edf437036cd7c2b9a269d4d5146f5dff48b141c2d1ce5db717ec8ec1bd945389527f08ba21e1181ff389235dc336515b2fb120262eda2aae9ddbf56414313a71a5aa67904233e8d4be19a40bbf18d2d22d2d603639f8", 0xdf, 0x40004, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3a, 0x0, &(0x7f00000007c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) map_shadow_stack(&(0x7f0000339000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000240)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x9}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x2}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xfffffffffffffdfa, 0x1e, 0x5}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6324, 0x1, 0xce55, 0x4000, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0xb}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="fb06fb"], 0x8) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) r8 = syz_clone(0xa0001900, &(0x7f0000000100), 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2d02b65cb80f3491570c9507fb7b5c98c18c925930cfc7b9ca1094a94e784fb6879cf929bcf6f02e3b5d3449421bae9e03849df002ae") sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x800) 8.645157013s ago: executing program 4 (id=2811): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) read$alg(r0, &(0x7f0000000680)=""/142, 0x8e) r1 = socket$kcm(0x2, 0x4, 0x2) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x10, 0x480, 0x0, 0x20c200a2, r6}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x310}, 0x2000c004) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0xfffffe99}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) read$FUSE(r10, &(0x7f0000000500)={0x2020}, 0xffffff84) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000071b"], 0x30}, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4000) ioctl$BLKGETZONESZ(r11, 0x80041284, &(0x7f0000001240)=0x7) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.234913146s ago: executing program 3 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, 0x0, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2dec, 0x4800, 0x2, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000001090400000000000000000a00000a3c0002802c00018014000300fe800000000000000000000000001aa200aa14000400fe8800000000000000000000000202010c000280050001003a00"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) 7.238945809s ago: executing program 3 (id=2813): r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000001580)}) (fail_nth: 5) 6.612884857s ago: executing program 3 (id=2814): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000000c0)) 5.880549452s ago: executing program 1 (id=2817): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f0000004000/0x4000)=nil, 0x4000) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r1, 0x8d, 0x41, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd") 5.784648104s ago: executing program 0 (id=2818): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/meminfo\x00', 0x0, 0x0) userfaultfd(0xad2c32362101395f) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001400010324bd7000fcffffff2e000000"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="2edff4435595", 0x0, 0x0, 0x26, 0x3, 0x0}) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x400) 5.624413106s ago: executing program 3 (id=2819): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, r2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 5.439960012s ago: executing program 4 (id=2820): socket(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x6686, 0x80, 0x2, 0x8a}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000500)={0x0, 0xaee3, 0x800, 0xffffffff, 0xbfe00000, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./cgroup\x00'}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.521532934s ago: executing program 0 (id=2821): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0xfe, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643de5f40280547152d9168567a5f9f6425dd35ba3e2135ba7cf42956beec4060000000f8bbef9460ef7f9c17d0c476cdb26fa6d88b429b6cbd9964760d67777d99db6aaa94ac2a72106eb29c13a3820f592b38f418e8d6f989dc09eee43a36f5b0e2e8e9b74b3d47d3a70bc20fbcd4a6294d045035c0e0c4a490d1298cc00"/184, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(r7, &(0x7f0000000200)='$', 0x1, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.931320655s ago: executing program 1 (id=2823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x88, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00011900ac1e01010000000000000000a01c0ede8329a675000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0732376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d315d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11ee9afb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e75c40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 3.766735857s ago: executing program 0 (id=2824): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000cc0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x28cb, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000010c0)={0x0, 0x0, 0x10000}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000063c0), 0x40, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a000006"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f040000000000005504000001ed0aff2400000017ffffffcc40000000000000730a00fe0000000077040000000000f1c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d900000000caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000e5129722a6e1593a52ae80d4d800000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba690200937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2053c3c280acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f018720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455bc3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e37a1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 3.548401345s ago: executing program 2 (id=2825): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000100)={0xdddd0000, 0x1000, 0x8}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0xbd2f, 0x3, 0x8, 0x7ffffffe, 0x2, "48b4299abf3991c75ba90fb7ee13ed2ee2f419"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000026c0)=0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f00000000c0)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b7ee0fae7a6a53200386ce51def6a4effb", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)={0xffffffff, 0x6e3, 0x6, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r9 = syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffffff, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x6, @raw_data="c40ae39425306a0a67b15f79b1c60dd14108367ec756831619ec1b48fd6817ff4ce23fe352c1867d27dabfcb4ed7b991f859a5f1a622ef0d8c6c744d089ddd61265106e7495583cdd515ff84059c62ad9868ce0f3c786fe85aa36ca3012c865e9df71a0bc6cb315e7ce48a36af0786c918ef6b823f7024882ad619cee3b83d2eb4f0aa94c5252d3eeca914d10c4d5a339797d16e17223fac4fcf4e8ea5f1c1b34b410baaa32857f818d5fcc558503f40a1b2082e9b31c736bb7592367dea565df13fa4fe3fd253dd"}) 3.49793901s ago: executing program 1 (id=2826): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) 3.109984885s ago: executing program 1 (id=2827): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000002000000000000000008001f0012"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x4e, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x9, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x5, 0x6, 0x3f, {0x8, 0x25, 0x1, 0x3, 0x0, 0x0, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x6, 0x2, {0x8, 0x25, 0x1, 0x2, 0xc, 0xd, 0x6}}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f00001d2000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) (async) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) (async) syz_usb_connect(0x0, 0x42c, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0xcb, 0xd, 0xa4, 0xff, 0x19d2, 0x1283, 0xf068, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41a, 0x3, 0x1, 0xd, 0x40, 0x80, "", [{{0x9, 0x4, 0x9f, 0x3, 0x0, 0xff, 0xff, 0xff, 0x81}}, {{0x9, 0x4, 0x30, 0xe1, 0x3, 0x6d, 0x97, 0x55, 0x8, [@generic={0x46, 0xc, "1ff49fb4a67d70fd73c16fcba3534760b940269b15d3fb5bd0f2a44ef7aec32ababee2bf7e7151f23f5fdaae2d803e183045145dac7280a18221ecd5bada396ee67c12d1"}, @hid_hid={0x9, 0x21, 0x3, 0xc5, 0x1, {0x22, 0x135}}], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0x4f, 0x3c, 0x7, [@generic={0xbd, 0x22, "a6c181087ab9ca59a9bf05abe2d82f4432f43f6367c18b00b7adcb0a7d16d9b72cfbd9e380b6bb315a8d1ec0db1301d092913268b5eb168629166efd651d30439ac62e383aa0d30a039355aabc5da345615326fa9ccda27ae66b2ed700853f3c6ba0b7ebd0ef8174248b7a4db7f34cd5547823dabadb36792da5b6baf21e2e1d9e14b201ac97932f90134a3555e53d5329b8425d3309c8e39bad785c9b0811e2dca55ca85e949781ebcd779c19b3e466cb2b6efe2401c824429df1"}]}}, {{0x9, 0x5, 0xa, 0x18, 0x10, 0xc8, 0xe, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}, @generic={0x20, 0x11, "1c48f53a527ff36a8574943a747bb0f700c4943b29861d7626b490dc0a32"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xd, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x40}, @generic={0x5d, 0x7, "189b6cb4c028fbdd27b7736aba975328f2e422c9c7479c94197cde1b6577cd09ddc9cc5b687671952546f5b2bfb197e8bca2d5b781e4c5d3316e7eb00e244c339c03e8f83633bcc2f8213afd37584295a81cd1709cf18a5a2fb958"}]}}]}}, {{0x9, 0x4, 0x91, 0x1, 0x8, 0x93, 0x3b, 0x5, 0x7, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x39, 0x4, 0x80, [@generic={0xb1, 0x21, "085c433545874be10e88551401ac74a89da5d94ed2282377a147b527fe40f7af959a0deedc3c176fbbd71bc9b3a6516364168d23353ae97c4671eb3ee5eac7ab50b73cd12033c47e8ac355ec8487b9a2249e5e5e6348e5c6c889aa589aca7794127642307697f1101c29bf423601212855bd07aa0456a57d95c830824b20b680f856415af14ce077503fdd7273fcbd726848b34c7bbe48f5a8c67c21b150cc4782be646cf662cb2c3e908d03fff34b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4f, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0xe1, 0x9, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x0, 0x9}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x9, [@generic={0x72, 0x30, "b272a561122acd303e5506a939078a82695c4a084e8360c14e75e69571c490c86931a33d46abb04f0d74c416d4e0ee0c2e365e13da0e5a48aa5a04b2307610f12b25ee8174c6d7cffdb2da8b1be09f7b17ee9ad17aca509bf2fd44cecbdda3647ccd089e39c8b18138f9969482e9e846"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x7, 0x5f, 0x1, [@generic={0x8c, 0x6, "7be68a8dcdd671a7ed3977ff2f84e62a00eaea71a9c9f83fabe870ab2cf0d0d6a39185d183c92d3717e68cc22cd666afff76449cdd4418febde4979e383a0e75581585a9f3388b7f551207ee16248e1a7c1925c9350a6f3d61a093b4872abe8ac054f86fbe46d68928f8b49957cc8d2955dcbde32f21d9fcc046f999a9be3a95579425b786a483602b06"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0x7f, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8, 0x80, 0x7}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x6, 0x2, 0x9, [@generic={0x38, 0x3, "2466adaa219cb6c93956d46b691b832fcf6d326b041d164f1a6035357297cd9a767ba93267519074615d383cf2afaf35439af450fdc1"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9f02}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1c, 0xa, 0x81, 0x40, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002183b9220b11342"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) 2.964047286s ago: executing program 2 (id=2828): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0xd3, &(0x7f0000000000)="19e159f17070ec626739824fe1bae782624a467c0009d40c48b0d53fbff8d61f2b0342db731c0f8b4ba97b9ad030b477432d57c560f99e9213df65370a5bd552a219d89a67682766785b886c5cff9ae1b8d9fb59756ad661e32192714f5d8a63ebad7f4d635a433695ab3b2886ff692147ed7b2cb6e42b9a66cc049bb1b5665a012babeb9b12b7ed2fa06ba8c5c6a24e04b3905fcf1fa80d528db7ec944516837bf05d921142b40099a34662b20687fc13c290f58cee6d2ada03de3dc7cde048db25b88fdd6b7f10c40bffada83f199badd879", 0x10, 0x0, &(0x7f0000000100)="0a6a07d5cac4cd7e55d983b8428d8237"}) socket$inet6(0xa, 0x1, 0x400) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5ae9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c884) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000340)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000, 0x2) mknodat$null(r5, &(0x7f00000003c0)='./file0\x00', 0x8000, 0x103) r6 = accept4(r4, 0x0, &(0x7f0000000400), 0x80800) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000004c0)={0x0, @loopback, @broadcast}, &(0x7f0000000500)=0xc) r10 = syz_clone(0x400, &(0x7f0000000600)="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", 0x1000, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)="11f74406c8a30f3e27e162c44618f16c01da5179f932e38d4d2ba0431778c6168036abfface4947f51f5811f17e99681a83af7d658d42f4e5147c93cf896eb9e3c26536aab3c6cc555d60c988c07dbee72754b7a44470bfca1b847db28731dd32dd9fb6fdbe32e945a2b6d3e8ff7af3a1670b01b3a520d72afc0004700c8bbb44e3ae5f2f4babe201a5d24fe53d6c99e8ef22fea2e6dc9d7b88e520997b3213a8bdfc15c777795afeae1639afc8916b743b13337ee3c3ecb29f68340658036") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001740)={r8, r9, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=[0x8001, 0x508b, 0x9, 0x5, 0x8001, 0xfffffffffffffffe, 0x100], &(0x7f00000005c0)=[0x5, 0x4, 0x3, 0x0], 0x9, 0x7, 0x0, r10}}, 0x40) socketpair(0x2b, 0x80000, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f00000017c0)={0x6, 0x0, [{0x4f73d080507979c5, 0xb6e00000, 0x1, 0x8, 0x7072, 0x2, 0x9}, {0x80000007, 0x9, 0x4, 0x8000, 0x3, 0x5, 0x8000}, {0xb, 0x6, 0x4, 0x9, 0x1, 0x5, 0x3}, {0xd, 0x6, 0x1, 0x1800, 0x764, 0x0, 0x800}, {0x2, 0x7, 0x2, 0x10001, 0x7, 0x4, 0x9}, {0xc0000000, 0x65, 0x2, 0x6, 0x3, 0xb, 0x101}]}) fstat(r0, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000003d40)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000003e40)=0xe8) stat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004080)='./file0\x00', &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r5, &(0x7f00000041c0)='./file0\x00', 0x400, 0x8, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getuid() lstat(&(0x7f0000004480)='./file0\x00', &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000018c0)="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", 0x2000, &(0x7f0000004800)={&(0x7f00000038c0)={0x50, 0x0, 0xfffffffffffffffc, {0x7, 0x2d, 0x1, 0x240e00, 0x0, 0xc, 0x6ee, 0xfffffffc, 0x0, 0x0, 0x10, 0xff}}, &(0x7f0000003940)={0x18, 0x0, 0x7, {0x7}}, &(0x7f0000003980)={0x18, 0x0, 0x6, {0x3}}, &(0x7f00000039c0)={0x18, 0x0, 0x4, {0x7}}, &(0x7f0000003a00)={0x18, 0x0, 0xb20f, {0xf2b}}, &(0x7f0000003a40)={0x28, 0x0, 0x5, {{0x3, 0x68, 0x2, r10}}}, &(0x7f0000003a80)={0x60, 0x0, 0x7f, {{0x40a4, 0x2, 0x6, 0xffff, 0xae, 0x4, 0x1000, 0x167}}}, &(0x7f0000003b00)={0x18, 0x0, 0xfffffffffffff001, {0xa8}}, &(0x7f0000003b40)={0x11, 0x0, 0x8, {'\x00'}}, &(0x7f0000003b80)={0x20, 0x0, 0x3, {0x0, 0xc}}, &(0x7f0000003cc0)={0x78, 0x0, 0x24a, {0x80, 0xfffffff7, 0x0, {0x6, 0x14f1, 0x5, 0xfffffffffffffffa, 0x4, 0xfff, 0x5, 0x6, 0x9, 0x2000, 0xc5a6, r12, r13, 0x1000, 0x1}}}, &(0x7f0000003f40)={0x90, 0x0, 0xffffffffffffffff, {0x3, 0x3, 0x10000, 0x0, 0x8, 0x80000000, {0x1, 0xfffffffffffffffc, 0x9, 0xf, 0x1000, 0x9, 0x1, 0x100000, 0x1ff, 0x8000, 0x8, r14, r15, 0xc217, 0x2}}}, &(0x7f0000004000)={0x48, 0xfffffffffffffff5, 0xad7, [{0x5, 0x4}, {0x3, 0x806, 0x1, 0x7, '\x00'}]}, &(0x7f0000004300)={0x158, 0x0, 0x8, [{{0x0, 0x3, 0x1ff, 0x8000000000000000, 0x2, 0x4, {0x5, 0x5, 0x5, 0xffffffff, 0x72, 0x4, 0x9, 0xe, 0x4, 0xc000, 0x3, 0x0, r16, 0x1, 0x3}}, {0x2, 0xfffff00000000000, 0x1, 0x2, '\x00'}}, {{0x5, 0x3, 0x4, 0x4, 0x9, 0x2, {0x3, 0x3, 0x100, 0xffff, 0x3, 0x6, 0x5, 0x8, 0x6, 0x2000, 0x6, r17, r18, 0x0, 0x3}}, {0x5, 0xffffffff80000001, 0xa, 0x9, '/dev/cuse\x00'}}]}, &(0x7f0000004540)={0xa0, 0x2f, 0x81, {{0x0, 0x0, 0xff, 0x7fff, 0x37c0, 0xe, {0x5, 0xffffffff, 0xffff, 0x800, 0x1, 0x3, 0x3, 0x2, 0x9, 0xc000, 0x8001, r19, r20, 0x8, 0x9}}, {0x0, 0x1}}}, &(0x7f0000004600)={0x20, 0xffffffffffffffda, 0x1, {0x1, 0x4, 0x6, 0x1}}, &(0x7f00000046c0)={0x130, 0x0, 0xfffffffffffffffd, {0x1ede, 0x1ff, 0x0, '\x00', {0x200, 0x2, 0x4, 0xfa9, 0xffffffffffffffff, 0x0, 0x4000, '\x00', 0xffffffffffffff9c, 0x2, 0x8, 0x3, {0x0, 0x3b}, {0x0, 0x5}, {0x9, 0x9}, {0x2, 0x80000000}, 0xfffffff7, 0x3, 0x9, 0x4}}}}) 2.913576862s ago: executing program 2 (id=2829): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) fstatfs(r0, &(0x7f0000000040)=""/146) 2.495769067s ago: executing program 3 (id=2830): rt_sigreturn() rt_sigreturn() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) utimes(&(0x7f0000000000)='./cgroup\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000003400)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x2376f80fb19dcdf, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x0, 0x6, {0x8, 'raw\x00', 0x7, 0x925, "af40c1aa43b11deabc0d258890de79f6fbb9089df9173da2ec2cb2f817d9dc071894876cd5559cd4c4922621fe2603abaa693a69f6b2e3cde7628a369347d92b722511635e10a8daa1c81594f195b0459538d28e854236b6b35d77f237e33157fc1d2b836b255a7018ead4c3d69a1495fb80e307b111e417058f181acbe1da95f1"}}, @TCA_IPT_INDEX={0x0, 0x3, 0xa}, @TCA_IPT_TABLE={0x0, 0x1, 'mangle\x00'}]}, {0x4, 0x6, "d6c695f07f01ea681c9ba58b35ada3e2fdea15bb7a1df9e65497e3f698998bf7cfa7705d6be7a04782d9a76f4837568964d53f45af521c10ac02e0a4a13b26cd6378f0cea69f6b8f9820ada1c9b75c96140a05659a87ec05215045860b108de0a3d46f9efe8f60bec78c87d4752881826681603fe7beb4523ddbc57ff4e020197cc45f1ba243979d0cf0d925a09929af055835d7bef3ee30183bb0877fd4f96ab25a4d0fc504cbe5"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='P') 2.254589901s ago: executing program 4 (id=2831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) symlink(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup/file0\x00') (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0), 0x4) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) (rerun: 32) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0xd, r0, 0x1}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) close(r1) 1.936612984s ago: executing program 1 (id=2832): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x278, 0xa8, 0xffffffff, 0x0, 0xa8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @gre_key=0xb4b7, @port=0x4e20}}}}, {{@ip={@multicast1, @multicast2, 0x0, 0xff, 'batadv_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0xc, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @private=0xa010102, @remote, @port=0x4e20, @icmp_id=0x68}}}}, {{@ip={@private=0xa010102, @remote, 0xffffff00, 0x0, 'team_slave_1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x62, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x80, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @gre_key=0x9, @gre_key=0x33}}}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0x5d8b4b6d1d911544, '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x4}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x5, 0x1}, {0x0, 0x100}, {0x4e, 0x4}, 0x3}}, @common=@icmp={{0x28}, {0x11, "cff6"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x17, @ipv6=@mcast1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @gre_key=0x4, @gre_key=0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x10000, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0x20000013}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.936323078s ago: executing program 2 (id=2833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="66b99b0000400f32b895008ee80fc2ce2c0fa4b92100000d0b000f35660f2dd2b800018ec0b82f000f00d00f942c", 0x2e}], 0x1, 0x64, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r1}) r4 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x2, 0x1cd}, &(0x7f0000000040), &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x82}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000000)={0xffff, 0x6}, 0x1) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000000c0)=0x7fff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.700203641s ago: executing program 0 (id=2834): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0xfe, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643de5f40280547152d9168567a5f9f6425dd35ba3e2135ba7cf42956beec4060000000f8bbef9460ef7f9c17d0c476cdb26fa6d88b429b6cbd9964760d67777d99db6aaa94ac2a72106eb29c13a3820f592b38f418e8d6f989dc09eee43a36f5b0e2e8e9b74b3d47d3a70bc20fbcd4a6294d045035c0e0c4a490d1298cc00"/184, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(r7, &(0x7f0000000200)='$', 0x1, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.663272535s ago: executing program 4 (id=2835): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x188}}], 0x1, 0x810) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="f7790066baa00066b86b4266ba2100ed66ba420066ef0f29902cbb0000c4e2b1ba8c88d90000000f83001000000f7842280f07b801000000c4033921820f47a753fd", 0x42}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="0f2003b8010000000f01d99aa4270000ae00f30fa7d0660f8d01003e650f22db0ffecec4c28dbed9c744240000000000c744240200000100c7442406000000000f011424", 0x44}], 0x1, 0x71, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb953b7ddf6fe250ead7aa0091e4679f3c41016ea"], 0xd4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000500)}, 0x20) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000700)=""/202, 0xca}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, 0x5f08, 0xfffffffd) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2024) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="1a00000008000000060000008b00000000020000", @ANYRES32=0x1, @ANYBLOB="ffffff8085d985b56bb12379510cb75a6eeacacab98a4c0000004d58c413fe23d40572", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000500"/28], 0x50) r9 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x10, 0xf, &(0x7f0000000680)=@raw=[@ldst={0x1, 0x3, 0x6, 0x3, 0x0, 0x30, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000580)='syzkaller\x00', 0x10000, 0x46, &(0x7f0000000780)=""/70, 0x86534d35b25401e2, 0x1a, '\x00', 0x0, @fallback=0x2a, r5, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x9, 0x10000, 0x5}, 0x10, r6, r7, 0x3, &(0x7f0000000c40)=[r8, r9], &(0x7f0000000c80)=[{0x0, 0x4, 0xd, 0xc}, {0x0, 0x5, 0x4, 0x5}, {0x0, 0x4, 0x9, 0xc}], 0x10, 0xdd000}, 0x94) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.556382056s ago: executing program 2 (id=2836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/99], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0x1, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) bind$tipc(r2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="183f000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000160000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.529935253s ago: executing program 4 (id=2837): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) 1.374983181s ago: executing program 0 (id=2838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00020000002069a8868c8f366e3ce21f202a40ae80a78666a5c5de95b9c0cc0e1e9b1907d746537cebb08c021303827c8fc37401400c8c998a73d31c82c8cfe417d23cffd398aefba95e3f714dcdeb288712aa53b37f6cf57838988cdd87d0"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080080001400000000008"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.304906563s ago: executing program 4 (id=2839): socket$packet(0x11, 0x2, 0x300) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) lseek(r0, 0xffffffffffffc22f, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x1a, &(0x7f0000937fed)=""/3, &(0x7f0000000040)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80801) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0) 114.377139ms ago: executing program 2 (id=2840): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, r2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=2841): socket(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x6686, 0x80, 0x2, 0x8a}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000500)={0x0, 0xaee3, 0x800, 0xffffffff, 0xbfe00000, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./cgroup\x00'}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 7][ T5915] dvb-usb: error while querying for an remote control event. [ 855.508391][ T5915] m920x_read = error: -19 [ 855.516386][ T5915] dvb-usb: error while querying for an remote control event. [ 855.580160][ T29] usb 5-1: config 0 has no interfaces? [ 855.591203][ T29] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 855.628446][ T5915] m920x_read = error: -19 [ 855.637439][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.670747][ T5915] dvb-usb: error while querying for an remote control event. [ 855.716697][ T29] usb 5-1: config 0 descriptor?? [ 855.808236][ T29] m920x_read = error: -19 [ 855.812691][ T29] dvb-usb: error while querying for an remote control event. [ 855.958517][ T29] m920x_read = error: -19 [ 855.963184][ T29] dvb-usb: error while querying for an remote control event. [ 856.125551][T16020] input: syz1 as /devices/virtual/input/input58 [ 856.134331][ T29] m920x_read = error: -19 [ 856.138793][ T29] dvb-usb: error while querying for an remote control event. [ 856.315850][ T5915] m920x_read = error: -19 [ 856.321648][ T5915] dvb-usb: error while querying for an remote control event. [ 856.375663][ T5892] usb 5-1: USB disconnect, device number 30 [ 856.448302][ T5915] m920x_read = error: -19 [ 856.457081][ T5915] dvb-usb: error while querying for an remote control event. [ 856.475668][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.487613][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.678492][ T5915] m920x_read = error: -19 [ 856.682903][ T5915] dvb-usb: error while querying for an remote control event. [ 856.762531][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.784661][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.818511][ T5915] m920x_read = error: -19 [ 856.823008][ T5915] dvb-usb: error while querying for an remote control event. [ 856.844702][ T5196] Dev loop3: unable to read RDB block 7 [ 856.851226][ T5196] loop3: unable to read partition table [ 856.857127][ T5196] loop3: partition table beyond EOD, truncated [ 856.949447][ T29] m920x_read = error: -19 [ 857.055855][ T29] dvb-usb: error while querying for an remote control event. [ 857.186277][ T29] m920x_read = error: -19 [ 857.193919][ T29] dvb-usb: error while querying for an remote control event. [ 857.322393][ T5915] m920x_read = error: -19 [ 857.329257][ T5915] dvb-usb: error while querying for an remote control event. [ 857.381305][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 857.508961][ T5915] m920x_read = error: -19 [ 857.513412][ T5915] dvb-usb: error while querying for an remote control event. [ 857.608147][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 857.630886][ T29] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.659180][ T5915] m920x_read = error: -19 [ 857.663592][ T5915] dvb-usb: error while querying for an remote control event. [ 857.678121][ T29] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.716147][ T29] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 857.759734][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 857.766425][ T29] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 857.788267][ T5942] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 857.798217][ T5915] m920x_read = error: -19 [ 857.802614][ T5915] dvb-usb: error while querying for an remote control event. [ 857.847798][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.874709][ T29] usb 4-1: config 0 descriptor?? [ 857.930667][T14324] usb 2-1: USB disconnect, device number 17 [ 857.958484][ T5915] m920x_read = error: -19 [ 857.963023][ T5915] dvb-usb: error while querying for an remote control event. [ 858.078671][ T5915] m920x_read = error: -19 [ 858.097026][ T5915] dvb-usb: error while querying for an remote control event. [ 858.105099][T16031] syz.3.2625 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 858.137197][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 858.147914][T16046] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.156196][T16046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.164809][T16046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.173094][T16046] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.182579][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 858.189357][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 858.238503][ T29] usb 4-1: USB disconnect, device number 29 [ 858.253317][T16048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2630'. [ 858.288839][ T5915] m920x_read = error: -19 [ 858.293296][ T5915] dvb-usb: error while querying for an remote control event. [ 858.408396][T16051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2631'. [ 858.428846][ T29] m920x_read = error: -19 [ 858.433270][ T29] dvb-usb: error while querying for an remote control event. [ 858.529108][T16048] fuse: Unknown parameter 'grou00000000000000000000' [ 858.630322][ T796] m920x_read = error: -19 [ 858.634736][ T796] dvb-usb: error while querying for an remote control event. [ 858.798546][ T796] m920x_read = error: -19 [ 858.802967][ T796] dvb-usb: error while querying for an remote control event. [ 858.825133][ T5196] Dev loop3: unable to read RDB block 7 [ 858.830811][ T5196] loop3: unable to read partition table [ 858.836626][ T5196] loop3: partition table beyond EOD, truncated [ 859.040414][ T29] m920x_read = error: -19 [ 859.044834][ T29] dvb-usb: error while querying for an remote control event. [ 859.099911][T16049] chnl_net:caif_netlink_parms(): no params data found [ 859.184597][T16067] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2633'. [ 859.199384][ T5907] usb usb34-port1: attempt power cycle [ 859.262831][ T29] m920x_read = error: -19 [ 859.285593][ T29] dvb-usb: error while querying for an remote control event. [ 859.356463][T16067] fuse: Unknown parameter 'group_i00000000000000000000' [ 859.431922][ T29] m920x_read = error: -19 [ 859.444859][ T29] dvb-usb: error while querying for an remote control event. [ 859.579136][ T29] m920x_read = error: -19 [ 859.584662][ T29] dvb-usb: error while querying for an remote control event. [ 859.709184][T13176] syz_tun (unregistering): left promiscuous mode [ 859.759423][ T29] m920x_read = error: -19 [ 859.763853][ T29] dvb-usb: error while querying for an remote control event. [ 859.889198][ T5907] usb usb34-port1: unable to enumerate USB device [ 859.898497][ T5907] m920x_read = error: -19 [ 859.925110][ T5907] dvb-usb: error while querying for an remote control event. [ 860.078352][ T5907] m920x_read = error: -19 [ 860.082739][ T5907] dvb-usb: error while querying for an remote control event. [ 860.230798][ T5907] m920x_read = error: -19 [ 860.235213][ T5907] dvb-usb: error while querying for an remote control event. [ 860.278223][ T5842] Bluetooth: hci5: command tx timeout [ 860.316585][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.354921][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.362357][ T796] m920x_read = error: -19 [ 860.366740][ T796] dvb-usb: error while querying for an remote control event. [ 860.408451][T16049] bridge_slave_0: entered allmulticast mode [ 860.415787][T16049] bridge_slave_0: entered promiscuous mode [ 860.460525][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.467691][T16049] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.498241][ T796] m920x_read = error: -19 [ 860.502643][ T796] dvb-usb: error while querying for an remote control event. [ 860.528436][T16049] bridge_slave_1: entered allmulticast mode [ 860.536051][T16049] bridge_slave_1: entered promiscuous mode [ 860.649164][ T5907] m920x_read = error: -19 [ 860.653584][ T5907] dvb-usb: error while querying for an remote control event. [ 860.778267][ T5907] m920x_read = error: -19 [ 860.782697][ T5907] dvb-usb: error while querying for an remote control event. [ 860.900344][ T5907] m920x_read = error: -19 [ 860.929030][ T5907] dvb-usb: error while querying for an remote control event. [ 860.989714][T16049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.021625][T16049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.068418][ T5907] m920x_read = error: -19 [ 861.072902][ T5907] dvb-usb: error while querying for an remote control event. [ 861.188306][ T5907] m920x_read = error: -19 [ 861.192822][ T5907] dvb-usb: error while querying for an remote control event. [ 861.319917][ T5907] m920x_read = error: -19 [ 861.324384][ T5907] dvb-usb: error while querying for an remote control event. [ 861.338336][ T5196] Dev loop3: unable to read RDB block 7 [ 861.367087][ T5196] loop3: unable to read partition table [ 861.378548][ T5196] loop3: partition table beyond EOD, truncated [ 861.489634][ T796] m920x_read = error: -19 [ 861.494102][ T796] dvb-usb: error while querying for an remote control event. [ 861.513900][T16049] team0: Port device team_slave_0 added [ 861.577605][T16049] team0: Port device team_slave_1 added [ 861.628371][T14324] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 861.630878][ T796] m920x_read = error: -19 [ 861.682116][ T796] dvb-usb: error while querying for an remote control event. [ 861.856263][T14324] usb 1-1: Using ep0 maxpacket: 32 [ 861.869902][T14324] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 861.945961][ T5907] m920x_read = error: -19 [ 861.951049][ T5907] dvb-usb: error while querying for an remote control event. [ 861.966917][T14324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 861.978207][T14324] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 861.998601][ T5892] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 862.033338][T14324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.078250][ T5907] m920x_read = error: -19 [ 862.096625][ T5907] dvb-usb: error while querying for an remote control event. [ 862.115492][T16049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.133224][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.179195][T14324] usb 1-1: config 0 descriptor?? [ 862.198554][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 862.228546][ T5907] m920x_read = error: -19 [ 862.228919][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.233034][ T5907] dvb-usb: error while querying for an remote control event. [ 862.233596][T16049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.333315][ T1335] bridge_slave_1: left allmulticast mode [ 862.339737][ T5907] m920x_read = error: -19 [ 862.344582][ T5907] dvb-usb: error while querying for an remote control event. [ 862.406084][ T5842] Bluetooth: hci5: command tx timeout [ 862.435461][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'. [ 862.487364][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.505164][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 862.505181][ T30] audit: type=1326 audit(1774699156.484:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 862.549158][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 862.588276][ T5907] m920x_read = error: -19 [ 862.592892][ T5907] dvb-usb: error while querying for an remote control event. [ 862.612932][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 862.635015][ T1335] bridge_slave_0: left allmulticast mode [ 862.646383][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.697265][ T30] audit: type=1326 audit(1774699156.484:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 862.722531][ T5907] m920x_read = error: -19 [ 862.727132][ T5907] dvb-usb: error while querying for an remote control event. [ 862.799102][ T5892] usb 4-1: Product: syz [ 862.799350][ T1335] bridge_slave_0: left promiscuous mode [ 862.820213][ T5892] usb 4-1: Manufacturer: syz [ 862.829387][ T5892] usb 4-1: SerialNumber: syz [ 862.847769][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.878409][ T30] audit: type=1326 audit(1774699156.494:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 862.908534][ T5907] m920x_read = error: -19 [ 862.913169][ T5907] dvb-usb: error while querying for an remote control event. [ 862.938617][ T1335] veth3: left allmulticast mode [ 862.957459][ T1335] veth3: left promiscuous mode [ 862.980533][ T1335] bridge1: port 1(veth3) entered disabled state [ 863.050944][T14324] corsair-cpro 0003:1B1C:0C10.0023: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 863.058730][ T5907] m920x_read = error: -19 [ 863.067497][ T5907] dvb-usb: error while querying for an remote control event. [ 863.075765][ T30] audit: type=1326 audit(1774699156.494:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 863.229776][T14324] corsair-cpro 0003:1B1C:0C10.0023: probe with driver corsair-cpro failed with error -71 [ 863.248233][ T30] audit: type=1326 audit(1774699156.494:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 863.278190][ T5907] m920x_read = error: -19 [ 863.282748][ T5907] dvb-usb: error while querying for an remote control event. [ 863.333974][ T30] audit: type=1326 audit(1774699156.494:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 863.409264][ T30] audit: type=1326 audit(1774699156.494:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df79c799 code=0x7ffc0000 [ 863.428507][ T5907] m920x_read = error: -19 [ 863.461755][ T5907] dvb-usb: error while querying for an remote control event. [ 863.474078][T14324] usb 1-1: USB disconnect, device number 24 [ 863.563044][ T30] audit: type=1326 audit(1774699156.494:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66df79e007 code=0x7ffc0000 [ 863.629357][ T5907] m920x_read = error: -19 [ 863.633943][ T5907] dvb-usb: error while querying for an remote control event. [ 863.859349][ T5907] m920x_read = error: -19 [ 863.912371][ T30] audit: type=1326 audit(1774699156.494:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f66df75cfce code=0x7ffc0000 [ 863.988360][ T5907] dvb-usb: error while querying for an remote control event. [ 864.049554][ T30] audit: type=1326 audit(1774699156.494:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16096 comm="syz.2.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f66df75cfce code=0x7ffc0000 [ 864.228730][ T5907] m920x_read = error: -19 [ 864.247630][ T5907] dvb-usb: error while querying for an remote control event. [ 864.428222][ T5907] m920x_read = error: -19 [ 864.433711][ T5907] dvb-usb: error while querying for an remote control event. [ 864.519816][ T5842] Bluetooth: hci5: command tx timeout [ 864.578272][ T5907] m920x_read = error: -19 [ 864.582678][ T5907] dvb-usb: error while querying for an remote control event. [ 864.591923][ T1335] bond2 (unregistering): (slave ip6gretap3): Releasing backup interface [ 864.675455][ T1335] ip6gretap3 (unregistering): left promiscuous mode [ 864.690787][ T1335] ip6gretap3 (unregistering): left allmulticast mode [ 864.728231][ T5915] m920x_read = error: -19 [ 864.732674][ T5915] dvb-usb: error while querying for an remote control event. [ 864.902938][ T5915] m920x_read = error: -19 [ 864.907351][ T5915] dvb-usb: error while querying for an remote control event. [ 865.059325][ T5915] m920x_read = error: -19 [ 865.063745][ T5915] dvb-usb: error while querying for an remote control event. [ 865.228234][ T5915] m920x_read = error: -19 [ 865.232642][ T5915] dvb-usb: error while querying for an remote control event. [ 865.377117][ T1335] dvmrp6 (unregistering): left allmulticast mode [ 865.407553][ T5892] usb 4-1: 0:2 : does not exist [ 865.409952][ T5915] m920x_read = error: -19 [ 865.416826][ T5915] dvb-usb: error while querying for an remote control event. [ 865.478258][ T5196] Dev loop3: unable to read RDB block 7 [ 865.483910][ T5196] loop3: unable to read partition table [ 865.538298][ T5196] loop3: partition table beyond EOD, truncated [ 865.568916][ T5915] m920x_read = error: -19 [ 865.573341][ T5915] dvb-usb: error while querying for an remote control event. [ 865.633558][T16116] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 865.661070][ T5892] usb 4-1: USB disconnect, device number 30 [ 865.708005][T14065] udevd[14065]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.709093][ T5915] m920x_read = error: -19 [ 865.764463][ T5915] dvb-usb: error while querying for an remote control event. [ 865.815274][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.826538][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.837457][T16120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2642'. [ 865.853964][ T1335] bond0 (unregistering): Released all slaves [ 865.874185][ T1335] bond1 (unregistering): Released all slaves [ 865.878573][ T5915] m920x_read = error: -19 [ 865.884669][ T5915] dvb-usb: error while querying for an remote control event. [ 865.897860][ T1335] team0: Port device bond2 removed [ 865.904906][ T1335] bond2 (unregistering): Released all slaves [ 865.924643][ T1335] bond3 (unregistering): Released all slaves [ 865.965018][ T1335] bond4 (unregistering): (slave veth5): Releasing active interface [ 865.974954][ T1335] bond4 (unregistering): Released all slaves [ 865.992393][T16049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.011164][ T5915] m920x_read = error: -19 [ 866.015647][ T5915] dvb-usb: error while querying for an remote control event. [ 866.015787][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.051302][ T5892] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 866.105226][T16049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.128757][ T5915] m920x_read = error: -19 [ 866.133242][ T5915] dvb-usb: error while querying for an remote control event. [ 866.186504][ T1335] tipc: Left network mode [ 866.242408][ T5892] usb 4-1: unable to get BOS descriptor set [ 866.250072][ T5892] usb 4-1: not running at top speed; connect to a high speed hub [ 866.259360][ T5892] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 866.267379][ T5892] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 866.278745][ T5915] m920x_read = error: -19 [ 866.287390][ T5915] dvb-usb: error while querying for an remote control event. [ 866.309164][ T5892] usb 4-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 866.379942][ T5892] usb 4-1: config 1 has no interface number 0 [ 866.408272][ T5915] m920x_read = error: -19 [ 866.412851][ T5915] dvb-usb: error while querying for an remote control event. [ 866.428741][ T5892] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 866.445118][T16049] hsr_slave_0: entered promiscuous mode [ 866.456490][T16049] hsr_slave_1: entered promiscuous mode [ 866.475242][ T5892] usb 4-1: config 1 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 866.539030][ T5892] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 8.40 [ 866.550736][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.558851][ T5915] m920x_read = error: -19 [ 866.558877][ T5915] dvb-usb: error while querying for an remote control event. [ 866.666456][ T5842] Bluetooth: hci5: command tx timeout [ 866.728216][ T5915] m920x_read = error: -19 [ 866.732637][ T5915] dvb-usb: error while querying for an remote control event. [ 866.806113][ T5892] usb 4-1: Product: ﮷꓏뷱孚픤尫섞橠ﴎ匥ꋺ᛿兵玮᫩햗䠀貝煬飬쵼쨈獓讹茝臑◖劜扼㶩廃몌똮忔ૠ匸훘倹庺摓溲履䈚⺺ [ 866.825203][ T5892] usb 4-1: Manufacturer: ь [ 866.849123][ T796] m920x_read = error: -19 [ 866.853536][ T796] dvb-usb: error while querying for an remote control event. [ 866.858207][ T5892] usb 4-1: SerialNumber: syz [ 866.878265][ T2158] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 866.968888][ T796] m920x_read = error: -19 [ 866.977206][ T796] dvb-usb: error while querying for an remote control event. [ 867.019094][ T2158] usb 5-1: device descriptor read/64, error -71 [ 867.098205][ T796] m920x_read = error: -19 [ 867.102765][ T796] dvb-usb: error while querying for an remote control event. [ 867.120394][ T5892] usb 4-1: USB disconnect, device number 31 [ 867.219866][T16140] syzkaller0: entered promiscuous mode [ 867.225481][T16140] syzkaller0: entered allmulticast mode [ 867.238472][ T796] m920x_read = error: -19 [ 867.252079][ T796] dvb-usb: error while querying for an remote control event. [ 867.278419][ T2158] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 867.389493][ T796] m920x_read = error: -19 [ 867.393908][ T796] dvb-usb: error while querying for an remote control event. [ 867.430033][ T2158] usb 5-1: device descriptor read/64, error -71 [ 867.508291][ T796] m920x_read = error: -19 [ 867.512707][ T796] dvb-usb: error while querying for an remote control event. [ 867.540573][ T2158] usb usb5-port1: attempt power cycle [ 867.638258][ T796] m920x_read = error: -19 [ 867.642675][ T796] dvb-usb: error while querying for an remote control event. [ 867.702474][ T5196] Dev loop3: unable to read RDB block 7 [ 867.722307][ T5196] loop3: unable to read partition table [ 867.748578][ T5196] loop3: partition table beyond EOD, truncated [ 867.780374][ T796] m920x_read = error: -19 [ 867.784756][ T796] dvb-usb: error while querying for an remote control event. [ 867.892761][ T2158] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 867.928204][ T796] m920x_read = error: -19 [ 867.932575][ T796] dvb-usb: error while querying for an remote control event. [ 867.947739][ T2158] usb 5-1: device descriptor read/8, error -71 [ 868.053450][ T796] m920x_read = error: -19 [ 868.057977][ T796] dvb-usb: error while querying for an remote control event. [ 868.169867][ T796] m920x_read = error: -19 [ 868.174648][ T796] dvb-usb: error while querying for an remote control event. [ 868.245658][ T2158] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 868.291330][ T796] m920x_read = error: -19 [ 868.296080][ T796] dvb-usb: error while querying for an remote control event. [ 868.296329][ T2158] usb 5-1: device descriptor read/8, error -71 [ 868.408303][ T796] m920x_read = error: -19 [ 868.412718][ T796] dvb-usb: error while querying for an remote control event. [ 868.460529][ T2158] usb usb5-port1: unable to enumerate USB device [ 868.539221][ T796] m920x_read = error: -19 [ 868.544102][ T796] dvb-usb: error while querying for an remote control event. [ 868.668229][ T796] m920x_read = error: -19 [ 868.683286][ T796] dvb-usb: error while querying for an remote control event. [ 868.770570][ T5196] Dev loop3: unable to read RDB block 7 [ 868.776395][ T5196] loop3: unable to read partition table [ 868.782606][ T5196] loop3: partition table beyond EOD, truncated [ 868.808469][ T796] m920x_read = error: -19 [ 868.813023][ T796] dvb-usb: error while querying for an remote control event. [ 868.943845][ T796] m920x_read = error: -19 [ 868.949976][ T796] dvb-usb: error while querying for an remote control event. [ 869.059276][ T5907] m920x_read = error: -19 [ 869.063754][ T5907] dvb-usb: error while querying for an remote control event. [ 869.094090][ T796] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 869.188383][ T5907] m920x_read = error: -19 [ 869.192888][ T5907] dvb-usb: error while querying for an remote control event. [ 869.250085][ T796] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 869.263480][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 869.274089][ T796] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 869.283495][ T796] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 869.294266][ T796] usb 4-1: Product: syz [ 869.299220][ T796] usb 4-1: Manufacturer: syz [ 869.304007][ T796] usb 4-1: SerialNumber: syz [ 869.309003][ T5907] m920x_read = error: -19 [ 869.313352][ T5907] dvb-usb: error while querying for an remote control event. [ 869.324682][ T796] usb 4-1: config 0 descriptor?? [ 869.342678][ T796] usb 4-1: selecting invalid altsetting 0 [ 869.443429][ T796] m920x_read = error: -19 [ 869.450474][ T796] dvb-usb: error while querying for an remote control event. [ 869.559437][ T796] m920x_read = error: -19 [ 869.563967][ T796] dvb-usb: error while querying for an remote control event. [ 869.650416][T16155] binder: 16154:16155 ioctl c0306201 2000000004c0 returned -14 [ 869.659863][T16155] binder: 16154:16155 ioctl c0306201 2000000001c0 returned -14 [ 869.671963][ T5892] usb 4-1: USB disconnect, device number 32 [ 869.710665][T16159] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2648'. [ 869.761451][ T796] m920x_read = error: -19 [ 869.765860][ T796] dvb-usb: error while querying for an remote control event. [ 869.814169][T16160] fuse: Unknown parameter 'group_id00000000000000000000' [ 869.914359][ T796] m920x_read = error: -19 [ 869.937917][ T796] dvb-usb: error while querying for an remote control event. [ 870.051674][ T796] m920x_read = error: -19 [ 870.056507][ T796] dvb-usb: error while querying for an remote control event. [ 870.169411][ T796] m920x_read = error: -19 [ 870.173942][ T796] dvb-usb: error while querying for an remote control event. [ 870.271245][ T5196] Dev loop3: unable to read RDB block 7 [ 870.283122][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.290039][ T796] m920x_read = error: -19 [ 870.294577][ T796] dvb-usb: error while querying for an remote control event. [ 870.302497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.322388][ T5196] loop3: unable to read partition table [ 870.328519][ T5196] loop3: partition table beyond EOD, truncated [ 870.418517][ T796] m920x_read = error: -19 [ 870.428135][ T796] dvb-usb: error while querying for an remote control event. [ 870.538356][ T796] m920x_read = error: -19 [ 870.542736][ T796] dvb-usb: error while querying for an remote control event. [ 870.680193][ T796] m920x_read = error: -19 [ 870.684576][ T796] dvb-usb: error while querying for an remote control event. [ 870.798268][ T796] m920x_read = error: -19 [ 870.802654][ T796] dvb-usb: error while querying for an remote control event. [ 870.941447][ T796] m920x_read = error: -19 [ 870.951046][ T796] dvb-usb: error while querying for an remote control event. [ 871.088461][ T5915] m920x_read = error: -19 [ 871.092990][ T5915] dvb-usb: error while querying for an remote control event. [ 871.133467][T16170] syzkaller0: entered promiscuous mode [ 871.139588][T16170] syzkaller0: entered allmulticast mode [ 871.211953][ T5915] m920x_read = error: -19 [ 871.216706][ T5915] dvb-usb: error while querying for an remote control event. [ 871.287816][ T5196] Dev loop3: unable to read RDB block 7 [ 871.293655][ T5196] loop3: unable to read partition table [ 871.299759][ T5196] loop3: partition table beyond EOD, truncated [ 871.348884][ T5915] m920x_read = error: -19 [ 871.356473][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.360294][ T5915] dvb-usb: error while querying for an remote control event. [ 871.420952][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.521939][ T5915] m920x_read = error: -19 [ 871.552561][ T5915] dvb-usb: error while querying for an remote control event. [ 871.692799][ T5915] m920x_read = error: -19 [ 871.697315][ T5915] dvb-usb: error while querying for an remote control event. [ 871.888220][ T5915] m920x_read = error: -19 [ 871.892640][ T5915] dvb-usb: error while querying for an remote control event. [ 872.028348][ T5915] m920x_read = error: -19 [ 872.040688][ T5915] dvb-usb: error while querying for an remote control event. [ 872.194040][ T5196] Dev loop3: unable to read RDB block 7 [ 872.218185][ T5196] loop3: unable to read partition table [ 872.233113][ T5196] loop3: partition table beyond EOD, truncated [ 872.258866][ T1335] batadv0: left promiscuous mode [ 872.282927][ T5915] m920x_read = error: -19 [ 872.303453][ T1335] hsr_slave_0: left promiscuous mode [ 872.309930][ T5915] dvb-usb: error while querying for an remote control event. [ 872.325249][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2657'. [ 872.341297][ T1335] hsr_slave_1: left promiscuous mode [ 872.448203][ T5915] m920x_read = error: -19 [ 872.453332][ T5915] dvb-usb: error while querying for an remote control event. [ 872.568518][ T5915] m920x_read = error: -19 [ 872.574184][ T5915] dvb-usb: error while querying for an remote control event. [ 872.698541][ T5915] m920x_read = error: -19 [ 872.703410][ T5915] dvb-usb: error while querying for an remote control event. [ 872.842484][ T5915] m920x_read = error: -19 [ 872.847000][ T5915] dvb-usb: error while querying for an remote control event. [ 872.878657][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 872.912752][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 872.960309][ T5915] m920x_read = error: -19 [ 872.964941][ T5915] dvb-usb: error while querying for an remote control event. [ 873.080850][ T796] m920x_read = error: -19 [ 873.085309][ T796] dvb-usb: error while querying for an remote control event. [ 873.147084][T16197] FAULT_INJECTION: forcing a failure. [ 873.147084][T16197] name failslab, interval 1, probability 0, space 0, times 0 [ 873.164735][T16197] CPU: 0 UID: 0 PID: 16197 Comm: syz.4.2656 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.164779][T16197] Tainted: [L]=SOFTLOCKUP [ 873.164788][T16197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.164800][T16197] Call Trace: [ 873.164809][T16197] [ 873.164818][T16197] dump_stack_lvl+0xe8/0x150 [ 873.164853][T16197] should_fail_ex+0x412/0x560 [ 873.164889][T16197] should_failslab+0xa8/0x100 [ 873.164915][T16197] ? skb_clone+0x212/0x3a0 [ 873.164941][T16197] kmem_cache_alloc_noprof+0x87/0x650 [ 873.164972][T16197] skb_clone+0x212/0x3a0 [ 873.165001][T16197] __netlink_deliver_tap+0x404/0x850 [ 873.165035][T16197] ? netlink_deliver_tap+0x2e/0x1b0 [ 873.165056][T16197] netlink_deliver_tap+0x19c/0x1b0 [ 873.165080][T16197] netlink_sendskb+0x68/0x140 [ 873.165114][T16197] netlink_unicast+0x3a3/0x9b0 [ 873.165152][T16197] ? __pfx_netlink_unicast+0x10/0x10 [ 873.165191][T16197] netlink_rcv_skb+0x2b6/0x4b0 [ 873.165212][T16197] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 873.165237][T16197] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.165271][T16197] ? netlink_deliver_tap+0x2e/0x1b0 [ 873.165301][T16197] netlink_unicast+0x80f/0x9b0 [ 873.165342][T16197] ? __pfx_netlink_unicast+0x10/0x10 [ 873.165375][T16197] ? netlink_sendmsg+0x650/0xb40 [ 873.165395][T16197] ? skb_put+0x11b/0x210 [ 873.165423][T16197] netlink_sendmsg+0x813/0xb40 [ 873.165467][T16197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.165492][T16197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 873.165525][T16197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.165553][T16197] ____sys_sendmsg+0x972/0x9f0 [ 873.165587][T16197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.165623][T16197] ? import_iovec+0x73/0xa0 [ 873.165651][T16197] ___sys_sendmsg+0x2a5/0x360 [ 873.165682][T16197] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.165744][T16197] ? __fget_files+0x2a/0x420 [ 873.165802][T16197] ? __fget_files+0x3a0/0x420 [ 873.165845][T16197] __x64_sys_sendmsg+0x1bd/0x2a0 [ 873.165875][T16197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 873.165912][T16197] ? __pfx_ksys_write+0x10/0x10 [ 873.165949][T16197] do_syscall_64+0x14d/0xf80 [ 873.165976][T16197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.165998][T16197] ? clear_bhb_loop+0x40/0x90 [ 873.166026][T16197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.166048][T16197] RIP: 0033:0x7f279d99c799 [ 873.166069][T16197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.166088][T16197] RSP: 002b:00007f279e821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.166111][T16197] RAX: ffffffffffffffda RBX: 00007f279dc15fa0 RCX: 00007f279d99c799 [ 873.166128][T16197] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 873.166142][T16197] RBP: 00007f279e821090 R08: 0000000000000000 R09: 0000000000000000 [ 873.166156][T16197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.166170][T16197] R13: 00007f279dc16038 R14: 00007f279dc15fa0 R15: 00007f279dd3fa48 [ 873.166203][T16197] [ 873.216911][ T796] m920x_read = error: -19 [ 873.543265][ T5196] Dev loop3: unable to read RDB block 7 [ 873.558575][ T5196] loop3: unable to read partition table [ 873.587856][ T5196] loop3: partition table beyond EOD, truncated [ 873.664437][ T796] dvb-usb: error while querying for an remote control event. [ 873.763170][T16222] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2660'. [ 873.792390][ T796] m920x_read = error: -19 [ 873.796894][ T796] dvb-usb: error while querying for an remote control event. [ 873.826453][T16222] fuse: Unknown parameter 'group_id00000000000000000000' [ 873.978891][ T796] m920x_read = error: -19 [ 873.983404][ T796] dvb-usb: error while querying for an remote control event. [ 874.138250][ T5915] m920x_read = error: -19 [ 874.142673][ T5915] dvb-usb: error while querying for an remote control event. [ 874.265960][ T5915] m920x_read = error: -19 [ 874.273769][ T5915] dvb-usb: error while querying for an remote control event. [ 874.418866][ T5915] m920x_read = error: -19 [ 874.435819][ T5915] dvb-usb: error while querying for an remote control event. [ 874.638846][ T5915] m920x_read = error: -19 [ 874.645675][ T5915] dvb-usb: error while querying for an remote control event. [ 874.719616][ T1335] IPVS: stop unused estimator thread 0... [ 874.761563][T16049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 874.783676][ T5915] m920x_read = error: -19 [ 874.804917][ T5915] dvb-usb: error while querying for an remote control event. [ 874.837624][T16238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2468411724 (4936823448 ns) > initial count (3121632370 ns). Using initial count to start timer. [ 874.859353][T16049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 874.935421][T16049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 874.988272][ T5915] m920x_read = error: -19 [ 874.992697][ T5915] dvb-usb: error while querying for an remote control event. [ 875.032778][T16049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 875.108682][ T796] m920x_read = error: -19 [ 875.113095][ T796] dvb-usb: error while querying for an remote control event. [ 875.178297][ T5915] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 875.228337][ T796] m920x_read = error: -19 [ 875.232780][ T796] dvb-usb: error while querying for an remote control event. [ 875.458336][ T5907] m920x_read = error: -19 [ 875.462747][ T5907] dvb-usb: error while querying for an remote control event. [ 875.500814][ T5915] usb 1-1: config 0 has no interfaces? [ 875.506383][ T5915] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 875.528141][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.609367][ T5907] m920x_read = error: -19 [ 875.618144][ T5907] dvb-usb: error while querying for an remote control event. [ 875.656699][ T5915] usb 1-1: config 0 descriptor?? [ 875.804487][ T5915] m920x_read = error: -19 [ 875.809118][ T5915] dvb-usb: error while querying for an remote control event. [ 875.981630][ T5915] m920x_read = error: -19 [ 876.008139][ T5915] dvb-usb: error while querying for an remote control event. [ 876.133116][ T5915] m920x_read = error: -19 [ 876.137772][ T5915] dvb-usb: error while querying for an remote control event. [ 876.197426][T16238] kvm: kvm [16237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 876.228609][T16238] kvm: kvm [16237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 876.268174][ T5907] m920x_read = error: -19 [ 876.272592][ T5907] dvb-usb: error while querying for an remote control event. [ 876.377635][ T5196] Dev loop3: unable to read RDB block 7 [ 876.400198][T16049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.406953][ T5196] loop3: unable to read partition table [ 876.414982][ T5892] usb 1-1: USB disconnect, device number 25 [ 876.418656][ T5907] m920x_read = error: -19 [ 876.424040][ T5196] loop3: partition table beyond EOD, truncated [ 876.425273][ T5907] dvb-usb: error while querying for an remote control event. [ 876.510669][T16049] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.618228][ T5907] m920x_read = error: -19 [ 876.628682][ T5907] dvb-usb: error while querying for an remote control event. [ 876.771517][ T5907] m920x_read = error: -19 [ 876.775934][ T5907] dvb-usb: error while querying for an remote control event. [ 876.919177][ T5907] m920x_read = error: -19 [ 876.923593][ T5907] dvb-usb: error while querying for an remote control event. [ 876.943914][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.951189][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.013583][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.020937][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.068712][ T5915] m920x_read = error: -19 [ 877.073182][ T5915] dvb-usb: error while querying for an remote control event. [ 877.188286][ T5915] m920x_read = error: -19 [ 877.195725][ T5915] dvb-usb: error while querying for an remote control event. [ 877.359099][T16298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 877.367108][T16298] batadv1: entered promiscuous mode [ 877.374900][T16298] team0: Port device batadv1 added [ 877.441127][ T5915] m920x_read = error: -19 [ 877.445574][ T5915] dvb-usb: error while querying for an remote control event. [ 877.575139][T16298] hub 9-0:1.0: USB hub found [ 877.601509][T16298] hub 9-0:1.0: 1 port detected [ 877.630309][ T29] m920x_read = error: -19 [ 877.636610][ T29] dvb-usb: error while querying for an remote control event. [ 877.659725][ T5196] Dev loop3: unable to read RDB block 7 [ 877.665376][ T5196] loop3: unable to read partition table [ 877.674927][ T5196] loop3: partition table beyond EOD, truncated [ 877.713749][T16049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.722230][T16295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.739080][T16295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.792933][ T5915] m920x_read = error: -19 [ 877.798900][ T5915] dvb-usb: error while querying for an remote control event. [ 877.919055][ T5915] m920x_read = error: -19 [ 877.919085][ T5915] dvb-usb: error while querying for an remote control event. [ 878.011317][T16049] veth0_vlan: entered promiscuous mode [ 878.030587][ T5915] m920x_read = error: -19 [ 878.040626][ T5915] dvb-usb: error while querying for an remote control event. [ 878.044074][T16049] veth1_vlan: entered promiscuous mode [ 878.148237][ T5915] m920x_read = error: -19 [ 878.148275][ T5915] dvb-usb: error while querying for an remote control event. [ 878.150911][T16049] veth0_macvtap: entered promiscuous mode [ 878.168086][T16049] veth1_macvtap: entered promiscuous mode [ 878.221377][T16301] netlink: 'syz.0.2672': attribute type 4 has an invalid length. [ 878.223947][T16301] netlink: 'syz.0.2672': attribute type 4 has an invalid length. [ 878.258241][ T5915] m920x_read = error: -19 [ 878.258263][ T5915] dvb-usb: error while querying for an remote control event. [ 878.347797][T16049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.363916][T16049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.368357][ T5915] m920x_read = error: -19 [ 878.368385][ T5915] dvb-usb: error while querying for an remote control event. [ 878.385095][ T1335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.385143][ T1335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.385179][ T1335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.385213][ T1335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.478302][ T5915] m920x_read = error: -19 [ 878.478328][ T5915] dvb-usb: error while querying for an remote control event. [ 878.588531][ T5907] m920x_read = error: -19 [ 878.589098][ T5907] dvb-usb: error while querying for an remote control event. [ 878.698240][ T5915] m920x_read = error: -19 [ 878.698262][ T5915] dvb-usb: error while querying for an remote control event. [ 878.754228][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.754289][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.808253][ T5915] m920x_read = error: -19 [ 878.808286][ T5915] dvb-usb: error while querying for an remote control event. [ 878.848241][ T5196] Dev loop3: unable to read RDB block 7 [ 878.848290][ T5196] loop3: unable to read partition table [ 878.848519][ T5196] loop3: partition table beyond EOD, truncated [ 878.912353][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.912378][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.918992][ T5915] m920x_read = error: -19 [ 878.919020][ T5915] dvb-usb: error while querying for an remote control event. [ 879.004310][T16327] fuse: Bad value for 'group_id' [ 879.004335][T16327] fuse: Bad value for 'group_id' [ 879.028220][ T5915] m920x_read = error: -19 [ 879.028249][ T5915] dvb-usb: error while querying for an remote control event. [ 879.029637][T16327] netlink: 'syz.3.2675': attribute type 21 has an invalid length. [ 879.142136][ T5915] m920x_read = error: -19 [ 879.142187][ T5915] dvb-usb: error while querying for an remote control event. [ 879.248574][ T5915] m920x_read = error: -19 [ 879.248604][ T5915] dvb-usb: error while querying for an remote control event. [ 879.358276][ T5915] m920x_read = error: -19 [ 879.358305][ T5915] dvb-usb: error while querying for an remote control event. [ 879.377185][T16342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2676'. [ 879.387313][T16342] fuse: Unknown parameter 'group_id00000000000000000000' [ 879.423743][ T5196] Dev loop3: unable to read RDB block 7 [ 879.423790][ T5196] loop3: unable to read partition table [ 879.423998][ T5196] loop3: partition table beyond EOD, truncated [ 879.468527][ T5915] m920x_read = error: -19 [ 879.468560][ T5915] dvb-usb: error while querying for an remote control event. [ 879.594899][ T5907] m920x_read = error: -19 [ 879.594924][ T5907] dvb-usb: error while querying for an remote control event. [ 879.698308][ T5907] m920x_read = error: -19 [ 879.698330][ T5907] dvb-usb: error while querying for an remote control event. [ 879.808685][ T5915] m920x_read = error: -19 [ 879.808717][ T5915] dvb-usb: error while querying for an remote control event. [ 879.924901][ T5915] m920x_read = error: -19 [ 879.924932][ T5915] dvb-usb: error while querying for an remote control event. [ 880.028280][ T5907] m920x_read = error: -19 [ 880.028319][ T5907] dvb-usb: error while querying for an remote control event. [ 880.052405][T16355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.052692][T16355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.138782][ T5907] m920x_read = error: -19 [ 880.138803][ T5907] dvb-usb: error while querying for an remote control event. [ 880.249034][ T5907] m920x_read = error: -19 [ 880.249058][ T5907] dvb-usb: error while querying for an remote control event. [ 880.365026][ T5907] m920x_read = error: -19 [ 880.365059][ T5907] dvb-usb: error while querying for an remote control event. [ 880.468600][ T5907] m920x_read = error: -19 [ 880.468630][ T5907] dvb-usb: error while querying for an remote control event. [ 880.583264][ T5907] m920x_read = error: -19 [ 880.583288][ T5907] dvb-usb: error while querying for an remote control event. [ 880.688646][ T5907] m920x_read = error: -19 [ 880.764097][ T5196] Dev loop3: unable to read RDB block 7 [ 880.777491][ T5196] loop3: unable to read partition table [ 880.777724][ T5196] loop3: partition table beyond EOD, truncated [ 880.841887][ T5907] dvb-usb: error while querying for an remote control event. [ 880.948353][ T5915] m920x_read = error: -19 [ 880.948375][ T5915] dvb-usb: error while querying for an remote control event. [ 881.058216][ T5915] m920x_read = error: -19 [ 881.062703][ T5915] dvb-usb: error while querying for an remote control event. [ 881.070776][ T5196] Dev loop3: unable to read RDB block 7 [ 881.096802][ T5196] loop3: unable to read partition table [ 881.118412][ T5196] loop3: partition table beyond EOD, truncated [ 881.228652][ T5915] m920x_read = error: -19 [ 881.233238][ T5915] dvb-usb: error while querying for an remote control event. [ 881.378503][ T5915] m920x_read = error: -19 [ 881.382913][ T5915] dvb-usb: error while querying for an remote control event. [ 881.508477][ T5915] m920x_read = error: -19 [ 881.514143][ T5915] dvb-usb: error while querying for an remote control event. [ 881.918433][ T5907] m920x_read = error: -19 [ 881.922881][ T5907] dvb-usb: error while querying for an remote control event. [ 881.996718][T16385] netlink: 'syz.0.2684': attribute type 10 has an invalid length. [ 882.004962][T16385] dummy0: left allmulticast mode [ 882.015648][T16382] IPVS: set_ctl: invalid protocol: 77 100.1.1.2:20000 [ 882.025175][T16382] IPVS: sh: FWM 3 0x00000003 - no destination available [ 882.044604][T16385] netlink: 'syz.0.2684': attribute type 10 has an invalid length. [ 882.108958][T16385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 882.122058][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2685'. [ 882.155271][ T5915] m920x_read = error: -19 [ 882.162248][ T5915] dvb-usb: error while querying for an remote control event. [ 882.286889][T16389] kAFS: unable to lookup cell '(' [ 882.308333][ T5915] m920x_read = error: -19 [ 882.319280][ T5915] dvb-usb: error while querying for an remote control event. [ 882.428580][ T5915] m920x_read = error: -19 [ 882.433003][ T5915] dvb-usb: error while querying for an remote control event. [ 882.588876][ T5196] Dev loop3: unable to read RDB block 7 [ 882.602925][ T5196] loop3: unable to read partition table [ 882.716571][ T5907] m920x_read = error: -19 [ 882.729107][ T5907] dvb-usb: error while querying for an remote control event. [ 882.763989][ T5196] loop3: partition table beyond EOD, truncated [ 882.848255][ T5907] m920x_read = error: -19 [ 882.852766][ T5907] dvb-usb: error while querying for an remote control event. [ 882.978458][ T5907] m920x_read = error: -19 [ 882.982987][ T5907] dvb-usb: error while querying for an remote control event. [ 883.012514][ T5196] Dev loop3: unable to read RDB block 7 [ 883.025382][ T5196] loop3: unable to read partition table [ 883.047947][ T5196] loop3: partition table beyond EOD, truncated [ 883.124918][ T5907] m920x_read = error: -19 [ 883.134232][ T5907] dvb-usb: error while querying for an remote control event. [ 883.152301][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.165447][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.205417][ T5942] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 883.271170][ T5907] m920x_read = error: -19 [ 883.275665][ T5907] dvb-usb: error while querying for an remote control event. [ 883.337018][ T5196] Dev loop3: unable to read RDB block 7 [ 883.348267][ T5196] loop3: unable to read partition table [ 883.368497][ T5196] loop3: partition table beyond EOD, truncated [ 883.378392][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 883.399398][ T5942] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 883.419198][ T5942] usb 2-1: config 0 has no interface number 0 [ 883.425404][ T5942] usb 2-1: config 0 interface 12 has no altsetting 0 [ 883.429443][ T5907] m920x_read = error: -19 [ 883.436576][ T5907] dvb-usb: error while querying for an remote control event. [ 883.480350][ T5942] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 883.505338][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.518751][ T5942] usb 2-1: Product: syz [ 883.523029][ T5942] usb 2-1: Manufacturer: syz [ 883.529757][ T5942] usb 2-1: SerialNumber: syz [ 883.575864][ T5196] Dev loop3: unable to read RDB block 7 [ 883.581882][ T5907] m920x_read = error: -19 [ 883.584932][ T5942] usb 2-1: config 0 descriptor?? [ 883.595227][ T5907] dvb-usb: error while querying for an remote control event. [ 883.606113][T16417] fuse: Bad value for 'user_id' [ 883.611224][ T5196] loop3: unable to read partition table [ 883.624531][T16417] fuse: Bad value for 'user_id' [ 883.634172][ T5196] loop3: partition table beyond EOD, truncated [ 883.895190][ T5907] m920x_read = error: -19 [ 883.910283][T16421] ip6t_srh: unknown srh invflags 4000 [ 883.918636][ T5907] dvb-usb: error while querying for an remote control event. [ 884.020249][ T5892] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 884.113371][ T5907] m920x_read = error: -19 [ 884.141462][ T5907] dvb-usb: error while querying for an remote control event. [ 884.200274][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.215384][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.229739][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 884.326624][ T5907] m920x_read = error: -19 [ 884.339644][ T5907] dvb-usb: error while querying for an remote control event. [ 884.607337][ T5907] m920x_read = error: -19 [ 884.611841][ T5907] dvb-usb: error while querying for an remote control event. [ 884.632095][ T5892] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.646109][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.696488][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 884.710759][ T5892] usb 1-1: config 0 descriptor?? [ 884.733565][ T5907] m920x_read = error: -19 [ 884.755449][ T5907] dvb-usb: error while querying for an remote control event. [ 884.768255][T14324] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 884.796764][T16427] vlan4: entered promiscuous mode [ 884.811441][T16427] erspan0: entered promiscuous mode [ 884.888284][ T5907] m920x_read = error: -19 [ 884.896844][ T5907] dvb-usb: error while querying for an remote control event. [ 884.955905][ T5196] Dev loop3: unable to read RDB block 7 [ 884.962908][T14324] usb 5-1: Using ep0 maxpacket: 16 [ 884.977259][T14324] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 884.988449][ T5196] loop3: unable to read partition table [ 884.994071][T14324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 885.010712][ T5196] loop3: partition table beyond EOD, truncated [ 885.018266][T14324] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 885.028209][ T5907] m920x_read = error: -19 [ 885.040087][ T5907] dvb-usb: error while querying for an remote control event. [ 885.063022][T14324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.099172][T14324] usb 5-1: Product: syz [ 885.103445][T14324] usb 5-1: Manufacturer: syz [ 885.134857][T14324] usb 5-1: SerialNumber: syz [ 885.175913][T14324] usb 5-1: config 0 descriptor?? [ 885.197705][ T29] m920x_read = error: -19 [ 885.206501][T14324] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 885.208385][ T29] dvb-usb: error while querying for an remote control event. [ 885.219269][T14324] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 885.237466][ T5892] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 885.291979][T16434] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 885.338256][ T29] m920x_read = error: -19 [ 885.342718][ T29] dvb-usb: error while querying for an remote control event. [ 885.391343][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.422555][ T5942] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 885.448514][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.458563][ T5942] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 885.466008][ T5942] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 885.469676][ T29] m920x_read = error: -19 [ 885.509184][T16437] netlink: 'syz.0.2695': attribute type 8 has an invalid length. [ 885.559197][ T5942] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 885.563339][ T29] dvb-usb: error while querying for an remote control event. [ 885.698153][ T5942] usb 2-1: USB disconnect, device number 18 [ 885.700392][ T29] m920x_read = error: -19 [ 885.723784][ T29] dvb-usb: error while querying for an remote control event. [ 885.808176][T14324] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 885.815578][T14324] em28xx 5-1:0.0: Config register raw data: 0x41 [ 885.838608][ T29] m920x_read = error: -19 [ 885.848719][ T29] dvb-usb: error while querying for an remote control event. [ 886.015830][ T29] m920x_read = error: -19 [ 886.024631][ T29] dvb-usb: error while querying for an remote control event. [ 886.110581][T16438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.119666][T16438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.168237][ T5915] m920x_read = error: -19 [ 886.172688][ T5915] dvb-usb: error while querying for an remote control event. [ 886.192924][T16439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.215845][T16439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.288251][ T5915] m920x_read = error: -19 [ 886.292745][ T5915] dvb-usb: error while querying for an remote control event. [ 886.418505][ T5915] m920x_read = error: -19 [ 886.434782][ T5915] dvb-usb: error while querying for an remote control event. [ 886.568302][ T29] m920x_read = error: -19 [ 886.574050][ T29] dvb-usb: error while querying for an remote control event. [ 886.688945][ T29] m920x_read = error: -19 [ 886.697498][ T29] dvb-usb: error while querying for an remote control event. [ 886.832035][ T29] m920x_read = error: -19 [ 886.836423][ T29] dvb-usb: error while querying for an remote control event. [ 886.958274][ T29] m920x_read = error: -19 [ 886.962742][ T29] dvb-usb: error while querying for an remote control event. [ 887.088630][ T29] m920x_read = error: -19 [ 887.094253][ T29] dvb-usb: error while querying for an remote control event. [ 887.150413][ T5196] Dev loop3: unable to read RDB block 7 [ 887.161521][ T5196] loop3: unable to read partition table [ 887.171508][ T5196] loop3: partition table beyond EOD, truncated [ 887.218268][ T5907] m920x_read = error: -19 [ 887.222743][ T5907] dvb-usb: error while querying for an remote control event. [ 887.348280][ T5907] m920x_read = error: -19 [ 887.352790][ T5907] dvb-usb: error while querying for an remote control event. [ 887.384589][T14324] usb 5-1: USB disconnect, device number 35 [ 887.473784][ T5907] m920x_read = error: -19 [ 887.503743][ T5907] dvb-usb: error while querying for an remote control event. [ 887.541336][ T5915] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 887.564716][T14324] em28xx 5-1:0.0: Disconnecting em28xx [ 887.573021][ T5942] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 887.593948][T14324] em28xx 5-1:0.0: Freeing device [ 887.748870][ T5907] m920x_read = error: -19 [ 887.753286][ T5907] dvb-usb: error while querying for an remote control event. [ 887.771170][ T5915] usb 1-1: device firmware changed [ 887.821972][ T5892] usb 1-1: USB disconnect, device number 26 [ 887.841830][ T5942] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 887.855062][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.890891][ T5942] usb 4-1: Product: syz [ 887.902888][ T5942] usb 4-1: Manufacturer: syz [ 887.913098][ T5942] usb 4-1: SerialNumber: syz [ 887.933268][ T5942] usb 4-1: config 0 descriptor?? [ 888.018202][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 888.029411][ T5907] m920x_read = error: -19 [ 888.036045][ T5907] dvb-usb: error while querying for an remote control event. [ 888.192253][ T5907] m920x_read = error: -19 [ 888.196663][ T5907] dvb-usb: error while querying for an remote control event. [ 888.215255][ T5892] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 888.228406][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.247011][ T5892] usb 1-1: config 0 descriptor?? [ 888.273436][ T5892] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 888.324003][ T5907] m920x_read = error: -19 [ 888.330814][ T5907] dvb-usb: error while querying for an remote control event. [ 888.354164][T16459] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 888.409483][T16479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 888.449308][ T5907] m920x_read = error: -19 [ 888.461718][ T5907] dvb-usb: error while querying for an remote control event. [ 888.588660][ T5907] m920x_read = error: -19 [ 888.596878][ T5907] dvb-usb: error while querying for an remote control event. [ 888.677408][ T5892] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 888.722319][ T5907] m920x_read = error: -19 [ 888.726886][ T5907] dvb-usb: error while querying for an remote control event. [ 888.831741][T16490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2713'. [ 888.842100][ T5942] usb 4-1: Firmware version (0.0) predates our first public release. [ 888.859075][T16490] fuse: Bad value for 'user_id' [ 888.864034][T16490] fuse: Bad value for 'user_id' [ 888.870681][ T5907] m920x_read = error: -19 [ 888.875274][ T5907] dvb-usb: error while querying for an remote control event. [ 888.906506][ T5892] gspca_cpia1: usb_control_msg 01, error -32 [ 888.915485][ T5942] usb 4-1: Please update to version 0.2 or newer [ 888.934140][ T5892] gspca_cpia1: usb_control_msg 01, error -71 [ 888.942472][ T5892] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 888.961144][ T5942] usb 4-1: USB disconnect, device number 33 [ 889.000592][ T29] m920x_read = error: -19 [ 889.008220][ T29] dvb-usb: error while querying for an remote control event. [ 889.057038][ T5892] usb 1-1: USB disconnect, device number 27 [ 889.138518][ T29] m920x_read = error: -19 [ 889.146512][ T29] dvb-usb: error while querying for an remote control event. [ 889.289763][ T5907] m920x_read = error: -19 [ 889.294389][ T5907] dvb-usb: error while querying for an remote control event. [ 889.365532][ T5196] Dev loop3: unable to read RDB block 7 [ 889.383513][ T5196] loop3: unable to read partition table [ 889.432453][ T5907] m920x_read = error: -19 [ 889.515501][ T5907] dvb-usb: error while querying for an remote control event. [ 889.534909][ T5196] loop3: partition table beyond EOD, truncated [ 889.638273][ T5907] m920x_read = error: -19 [ 889.645497][ T5907] dvb-usb: error while querying for an remote control event. [ 889.790704][ T5907] m920x_read = error: -19 [ 889.800431][ T5907] dvb-usb: error while querying for an remote control event. [ 889.915712][T16508] netlink: 'syz.0.2719': attribute type 10 has an invalid length. [ 889.923814][T16508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2719'. [ 889.933015][ T5907] m920x_read = error: -19 [ 889.941253][ T5907] dvb-usb: error while querying for an remote control event. [ 889.990190][ T5196] Dev loop3: unable to read RDB block 7 [ 889.997966][ T5196] loop3: unable to read partition table [ 890.012844][ T5196] loop3: partition table beyond EOD, truncated [ 890.068586][ T5907] m920x_read = error: -19 [ 890.078935][ T5907] dvb-usb: error while querying for an remote control event. [ 890.208908][ T5907] m920x_read = error: -19 [ 890.218365][T16518] syzkaller0: entered promiscuous mode [ 890.225867][ T5907] dvb-usb: error while querying for an remote control event. [ 890.239713][T16518] syzkaller0: entered allmulticast mode [ 890.368507][ T5907] m920x_read = error: -19 [ 890.419377][ T5907] dvb-usb: error while querying for an remote control event. [ 890.678817][ T5907] m920x_read = error: -19 [ 890.683237][ T5907] dvb-usb: error while querying for an remote control event. [ 890.695797][ T5196] Dev loop3: unable to read RDB block 7 [ 890.713896][ T5196] loop3: unable to read partition table [ 890.743958][ T5196] loop3: partition table beyond EOD, truncated [ 890.825157][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 890.825187][ T30] audit: type=1326 audit(1774699184.894:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 890.876105][ T5907] m920x_read = error: -19 [ 890.885786][T16537] fuse: Bad value for 'fd' [ 890.927598][T16535] veth1_to_batadv: entered promiscuous mode [ 890.962215][ T30] audit: type=1326 audit(1774699184.894:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.062987][ T30] audit: type=1326 audit(1774699184.954:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.157009][T16541] x_tables: duplicate underflow at hook 1 [ 891.163006][ T30] audit: type=1326 audit(1774699184.954:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.191940][ T5907] dvb-usb: error while querying for an remote control event. [ 891.200049][ T30] audit: type=1326 audit(1774699184.954:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.346471][ T30] audit: type=1326 audit(1774699184.954:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.378285][ T5915] m920x_read = error: -19 [ 891.382727][ T5915] dvb-usb: error while querying for an remote control event. [ 891.418262][ T30] audit: type=1326 audit(1774699184.954:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.508343][ T29] m920x_read = error: -19 [ 891.512916][ T29] dvb-usb: error while querying for an remote control event. [ 891.531264][ T30] audit: type=1326 audit(1774699184.954:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.629443][ T29] m920x_read = error: -19 [ 891.633883][ T29] dvb-usb: error while querying for an remote control event. [ 891.657234][ T30] audit: type=1326 audit(1774699184.964:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.738119][ T30] audit: type=1326 audit(1774699184.964:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16533 comm="syz.4.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279d99c799 code=0x7ffc0000 [ 891.777148][ T5915] m920x_read = error: -19 [ 891.787260][ T5915] dvb-usb: error while querying for an remote control event. [ 891.868286][ T29] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 891.929597][ T5915] m920x_read = error: -19 [ 891.933993][ T5915] dvb-usb: error while querying for an remote control event. [ 892.020410][ T29] usb 2-1: device descriptor read/64, error -71 [ 892.068482][ T5907] m920x_read = error: -19 [ 892.074746][ T5907] dvb-usb: error while querying for an remote control event. [ 892.106121][T16559] syzkaller0: entered promiscuous mode [ 892.112185][T16559] syzkaller0: entered allmulticast mode [ 892.208456][ T5907] m920x_read = error: -19 [ 892.212879][ T5907] dvb-usb: error while querying for an remote control event. [ 892.289383][ T29] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 892.309882][ T5196] Dev loop3: unable to read RDB block 7 [ 892.317582][ T5196] loop3: unable to read partition table [ 892.323767][ T5196] loop3: partition table beyond EOD, truncated [ 892.368235][ T5915] m920x_read = error: -19 [ 892.372817][ T5915] dvb-usb: error while querying for an remote control event. [ 892.443647][T16576] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2738'. [ 892.461739][ T29] usb 2-1: device descriptor read/64, error -71 [ 892.472421][T16576] fuse: Bad value for 'user_id' [ 892.472445][T16576] fuse: Bad value for 'user_id' [ 892.510194][ T5915] m920x_read = error: -19 [ 892.510226][ T5915] dvb-usb: error while querying for an remote control event. [ 892.565077][T16575] fuse: Unknown parameter ' [ 892.565077][T16575] TracerPid: 0 [ 892.565077][T16575] Uid: 0 0 0 0 [ 892.565077][T16575] Gid: 0 0 0 0 [ 892.565077][T16575] FDSize: 256 [ 892.565077][T16575] Groups: 0 65534 [ 892.565077][T16575] NStgid: 1872 [ 892.565077][T16575] NSpid: 1874 [ 892.565077][T16575] NSpgid: 1872 [ 892.565077][T16575] NSsid: 0 [ 892.565077][T16575] Kthread: 0 [ 892.565077][T16575] VmPeak: 104408 kB [ 892.565077][T16575] VmSize: 104408 kB [ 892.565077][T16575] VmLck: 0 kB [ 892.565077][T16575] VmPin: 0 kB [ 892.565077][T16575] VmHWM: 24480 kB [ 892.565077][T16575] VmRSS: 24480 kB [ 892.565077][T16575] RssAnon: 1436 kB [ 892.565077][T16575] RssFile: 23044 kB [ 892.565077][T16575] RssShmem: 0 kB [ 892.565077][T16575] VmData: 36708 kB [ 892.565077][T16575] VmStk: 132 kB [ 892.565077][T16575] VmExe: 1772 kB [ 892.565077][T16575] VmLib: 8 kB [ 892.565077][T16575] VmPTE: 136 kB [ 892.565077][T16575] VmSwap: 0 kB [ 892.565077][T16575] HugetlbPages: 0 kB [ 892.565077][T16575] CoreDumping: 0 [ 892.565077][T16575] THP_enabled: 1 [ 892.565077][T16575] untag_mask: 0xffffffffffffffff [ 892.565077][T16575] Threads: 3 [ 892.565077][T16575] SigQ: 0/12993 [ 892.565077][T16575] SigPnd: 0000000000000000 [ 892.565077][T16575] ShdPnd: 0000000000000000 [ 892.565077][T16575] SigBlk: 0000000000000000 [ 892.565077][T16575] SigIgn: fffffffefffaba35 [ 892.565077][T16575] SigCgt: 0000000100010440 [ 892.565077][T16575] CapInh: 0000000000000000 [ 892.565077][T16575] CapPrm: 000001ffff77ffff [ 892.565077][T16575] CapEff: 000001ffff77ffff [ 892.565077][T16575] CapBnd: 000001ffffffffff [ 892.565077][T16575] CapAmb: 0000000000000000 [ 892.565077][T16575] NoNewPrivs: 0 [ 892.565077][T16575] Seccomp: 0 [ 892.565077][T16575] Seccomp_filters: 0 [ 892.565077][T16575] Speculation_Store_Bypass: thread vulnerable [ 892.565077][T16575] SpeculationIndirectBranch: conditional enabled [ 892.577338][ T29] usb usb2-port1: attempt power cycle [ 892.770694][ T5915] m920x_read = error: -19 [ 892.770718][ T5915] dvb-usb: error while querying for an remote control event. [ 892.932890][ T5915] m920x_read = error: -19 [ 892.932930][ T5915] dvb-usb: error while querying for an remote control event. [ 892.988946][T16580] syzkaller0: entered promiscuous mode [ 892.988965][T16580] syzkaller0: entered allmulticast mode [ 893.039664][ T5915] m920x_read = error: -19 [ 893.039697][ T5915] dvb-usb: error while querying for an remote control event. [ 893.058771][ T29] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 893.119742][ T29] usb 2-1: device descriptor read/8, error -71 [ 893.173615][ T5915] m920x_read = error: -19 [ 893.173645][ T5915] dvb-usb: error while querying for an remote control event. [ 893.278391][ T5915] m920x_read = error: -19 [ 893.278421][ T5915] dvb-usb: error while querying for an remote control event. [ 893.388394][ T5907] m920x_read = error: -19 [ 893.388417][ T5907] dvb-usb: error while querying for an remote control event. [ 893.389128][ T29] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 893.498395][ T5915] m920x_read = error: -19 [ 893.498427][ T5915] dvb-usb: error while querying for an remote control event. [ 893.603486][ T29] usb 2-1: device descriptor read/8, error -71 [ 893.612525][ T5915] m920x_read = error: -19 [ 893.612554][ T5915] dvb-usb: error while querying for an remote control event. [ 893.709494][ T29] usb usb2-port1: unable to enumerate USB device [ 893.718377][ T29] m920x_read = error: -19 [ 893.718408][ T29] dvb-usb: error while querying for an remote control event. [ 893.828470][ T5915] m920x_read = error: -19 [ 893.832987][ T5915] dvb-usb: error while querying for an remote control event. [ 893.872203][ T5196] Dev loop3: unable to read RDB block 7 [ 893.877856][ T5196] loop3: unable to read partition table [ 893.900726][ T5196] loop3: partition table beyond EOD, truncated [ 893.919430][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 893.949712][ T5915] m920x_read = error: -19 [ 893.954142][ T5915] dvb-usb: error while querying for an remote control event. [ 894.039281][ T5196] Dev loop3: unable to read RDB block 7 [ 894.058261][ T5196] loop3: unable to read partition table [ 894.064212][ T5196] loop3: partition table beyond EOD, truncated [ 894.083368][ T796] m920x_read = error: -19 [ 894.087775][ T796] dvb-usb: error while querying for an remote control event. [ 894.168535][ T5915] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 894.240735][ T29] m920x_read = error: -19 [ 894.245149][ T29] dvb-usb: error while querying for an remote control event. [ 894.368427][ T29] m920x_read = error: -19 [ 894.372843][ T29] dvb-usb: error while querying for an remote control event. [ 894.380386][ T796] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 894.406825][T16598] syzkaller0: entered promiscuous mode [ 894.413877][T16598] syzkaller0: entered allmulticast mode [ 894.431711][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 894.447701][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 894.459360][ T5915] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 894.483798][ T5915] usb 5-1: config 1 interface 0 has no altsetting 0 [ 894.511544][ T29] m920x_read = error: -19 [ 894.520270][ T5915] usb 5-1: string descriptor 0 read error: -22 [ 894.526621][ T5915] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 894.538552][ T29] dvb-usb: error while querying for an remote control event. [ 894.548397][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 894.564941][ T796] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 894.582630][ T796] usb 4-1: config 179 has no interface number 0 [ 894.608546][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.630169][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 894.657643][T16588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 894.670504][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 894.682273][ T29] m920x_read = error: -19 [ 894.690568][ T29] dvb-usb: error while querying for an remote control event. [ 894.707589][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 894.744181][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 894.795486][ T796] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 894.830660][ T29] m920x_read = error: -19 [ 894.836109][ T29] dvb-usb: error while querying for an remote control event. [ 894.878102][ T796] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 894.887208][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.919981][T16595] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 894.998309][ T796] m920x_read = error: -19 [ 895.002816][ T796] dvb-usb: error while querying for an remote control event. [ 895.014748][ T5915] usbhid 5-1:1.0: can't add hid device: -71 [ 895.021124][ T5915] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 895.074104][ T5915] usb 5-1: USB disconnect, device number 36 [ 895.189847][ T796] m920x_read = error: -19 [ 895.194386][ T796] dvb-usb: error while querying for an remote control event. [ 895.237198][ T5942] usb 4-1: USB disconnect, device number 34 [ 895.237420][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 895.251796][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 895.314423][T16613] syzkaller0: entered promiscuous mode [ 895.325559][T16613] syzkaller0: entered allmulticast mode [ 895.338318][ T5915] m920x_read = error: -19 [ 895.342693][ T5915] dvb-usb: error while querying for an remote control event. [ 895.424844][T16617] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2753'. [ 895.459813][T16617] fuse: Bad value for 'fd' [ 895.488350][ T796] m920x_read = error: -19 [ 895.493183][ T796] dvb-usb: error while querying for an remote control event. [ 895.620918][ T796] m920x_read = error: -19 [ 895.625582][ T796] dvb-usb: error while querying for an remote control event. [ 895.748394][ T5915] m920x_read = error: -19 [ 895.753348][ T5915] dvb-usb: error while querying for an remote control event. [ 895.805217][ T5196] Dev loop3: unable to read RDB block 7 [ 895.869037][ T5915] m920x_read = error: -19 [ 895.873476][ T5915] dvb-usb: error while querying for an remote control event. [ 895.956757][ T5196] loop3: unable to read partition table [ 895.998228][ T5915] m920x_read = error: -19 [ 896.002651][ T5915] dvb-usb: error while querying for an remote control event. [ 896.010841][ T5196] loop3: partition table beyond EOD, truncated [ 896.094457][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 896.168612][ T5915] m920x_read = error: -19 [ 896.197360][ T5915] dvb-usb: error while querying for an remote control event. [ 896.293226][ T5196] Dev loop3: unable to read RDB block 7 [ 896.306978][ T5196] loop3: unable to read partition table [ 896.328308][ T5915] m920x_read = error: -19 [ 896.332795][ T5915] dvb-usb: error while querying for an remote control event. [ 896.356456][ T5196] loop3: partition table beyond EOD, truncated [ 896.448675][ T5915] m920x_read = error: -19 [ 896.453085][ T5915] dvb-usb: error while querying for an remote control event. [ 896.640086][ T5915] m920x_read = error: -19 [ 896.649573][ T5915] dvb-usb: error while querying for an remote control event. [ 896.788314][ T5915] m920x_read = error: -19 [ 896.796233][ T5915] dvb-usb: error while querying for an remote control event. [ 896.918300][ T5915] m920x_read = error: -19 [ 896.922865][ T5915] dvb-usb: error while querying for an remote control event. [ 896.996669][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.012785][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.048265][ T796] m920x_read = error: -19 [ 897.052847][ T796] dvb-usb: error while querying for an remote control event. [ 897.062261][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 897.138164][ T5915] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 897.168903][ T796] m920x_read = error: -19 [ 897.173319][ T796] dvb-usb: error while querying for an remote control event. [ 897.268298][ T5915] usb 5-1: device descriptor read/64, error -71 [ 897.288370][ T796] m920x_read = error: -19 [ 897.292790][ T796] dvb-usb: error while querying for an remote control event. [ 897.378913][ T5196] Dev loop3: unable to read RDB block 7 [ 897.384576][ T5196] loop3: unable to read partition table [ 897.398801][ T5196] loop3: partition table beyond EOD, truncated [ 897.418267][ T796] m920x_read = error: -19 [ 897.422672][ T796] dvb-usb: error while querying for an remote control event. [ 897.489248][T16658] bond3: entered promiscuous mode [ 897.518243][ T5915] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 897.538272][ T796] m920x_read = error: -19 [ 897.542682][ T796] dvb-usb: error while querying for an remote control event. [ 897.563151][ T5196] Dev loop3: unable to read RDB block 7 [ 897.578773][ T5196] loop3: unable to read partition table [ 897.584737][ T5196] loop3: partition table beyond EOD, truncated [ 897.658201][ T5915] usb 5-1: device descriptor read/64, error -71 [ 897.668394][ T796] m920x_read = error: -19 [ 897.672991][ T796] dvb-usb: error while querying for an remote control event. [ 897.687878][T16664] netlink: 'syz.2.2769': attribute type 58 has an invalid length. [ 897.722665][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.735513][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.798749][ T5915] usb usb5-port1: attempt power cycle [ 897.808663][ T796] m920x_read = error: -19 [ 897.813217][ T796] dvb-usb: error while querying for an remote control event. [ 897.928200][ T796] m920x_read = error: -19 [ 897.932707][ T796] dvb-usb: error while querying for an remote control event. [ 898.068391][ T796] m920x_read = error: -19 [ 898.075193][ T796] dvb-usb: error while querying for an remote control event. [ 898.168825][ T5915] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 898.190565][ T5915] usb 5-1: device descriptor read/8, error -71 [ 898.198304][ T796] m920x_read = error: -19 [ 898.202701][ T796] dvb-usb: error while querying for an remote control event. [ 898.318204][ T5907] m920x_read = error: -19 [ 898.322616][ T5907] dvb-usb: error while querying for an remote control event. [ 898.428139][ T5915] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 898.740808][ T5907] m920x_read = error: -19 [ 898.750334][ T5907] dvb-usb: error while querying for an remote control event. [ 898.764773][ T5915] usb 5-1: device descriptor read/8, error -71 [ 898.898599][ T796] m920x_read = error: -19 [ 898.908479][ T5915] usb usb5-port1: unable to enumerate USB device [ 898.925315][ T796] dvb-usb: error while querying for an remote control event. [ 899.078187][ T796] m920x_read = error: -19 [ 899.082609][ T796] dvb-usb: error while querying for an remote control event. [ 899.141854][T16683] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2773'. [ 899.181392][T16683] fuse: Bad value for 'fd' [ 899.206038][ T796] m920x_read = error: -19 [ 899.211503][ T796] dvb-usb: error while querying for an remote control event. [ 899.398899][ T796] m920x_read = error: -19 [ 899.403544][ T796] dvb-usb: error while querying for an remote control event. [ 899.518709][ T796] m920x_read = error: -19 [ 899.525830][ T796] dvb-usb: error while querying for an remote control event. [ 899.639525][ T796] m920x_read = error: -19 [ 899.643923][ T796] dvb-usb: error while querying for an remote control event. [ 899.758337][ T796] m920x_read = error: -19 [ 899.763415][ T796] dvb-usb: error while querying for an remote control event. [ 899.895400][ T796] m920x_read = error: -19 [ 899.906404][ T796] dvb-usb: error while querying for an remote control event. [ 899.955437][ T5196] Dev loop3: unable to read RDB block 7 [ 899.961277][ T5196] loop3: unable to read partition table [ 899.967401][ T5196] loop3: partition table beyond EOD, truncated [ 900.032724][ T5915] m920x_read = error: -19 [ 900.037142][ T5915] dvb-usb: error while querying for an remote control event. [ 900.083528][ T5196] Dev loop3: unable to read RDB block 7 [ 900.099947][T16693] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 900.113922][ T5196] loop3: unable to read partition table [ 900.120556][ T5196] loop3: partition table beyond EOD, truncated [ 900.167928][ T796] m920x_read = error: -19 [ 900.169753][ T5892] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 900.172531][ T796] dvb-usb: error while querying for an remote control event. [ 900.348415][ T796] m920x_read = error: -19 [ 900.352830][ T796] dvb-usb: error while querying for an remote control event. [ 900.397242][T16705] netlink: 'syz.2.2781': attribute type 8 has an invalid length. [ 900.479520][ T796] m920x_read = error: -19 [ 900.483930][ T796] dvb-usb: error while querying for an remote control event. [ 900.517795][T16705] IPVS: sh: FWM 3 0x00000003 - no destination available [ 900.525937][ T5892] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 900.608180][ T796] m920x_read = error: -19 [ 900.612603][ T796] dvb-usb: error while querying for an remote control event. [ 900.703662][ T5892] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 900.723155][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.732325][ T796] m920x_read = error: -19 [ 900.733648][ T5892] usb 4-1: Product: syz [ 900.736712][ T796] dvb-usb: error while querying for an remote control event. [ 900.749475][ T5892] usb 4-1: Manufacturer: syz [ 900.757028][ T5892] usb 4-1: SerialNumber: syz [ 900.818511][T14324] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 900.826469][ T5942] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 900.848567][ T6852] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 900.858249][T16715] syzkaller0: entered promiscuous mode [ 900.863768][T16715] syzkaller0: entered allmulticast mode [ 900.869674][ T796] m920x_read = error: -19 [ 900.874068][ T796] dvb-usb: error while querying for an remote control event. [ 900.988367][ T796] m920x_read = error: -19 [ 900.993391][ T796] dvb-usb: error while querying for an remote control event. [ 900.998505][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.021536][ T5942] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 901.032328][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.041619][ T5942] usb 5-1: Product: syz [ 901.045878][ T5942] usb 5-1: Manufacturer: syz [ 901.050601][ T5942] usb 5-1: SerialNumber: syz [ 901.059963][ T5942] usb 5-1: config 0 descriptor?? [ 901.118799][ T796] m920x_read = error: -19 [ 901.123409][ T796] dvb-usb: error while querying for an remote control event. [ 901.175641][ T2158] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 901.193008][ T5892] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 901.212881][ T5892] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 901.238324][ T796] m920x_read = error: -19 [ 901.239920][ T5892] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 901.257750][ T5892] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 901.262855][ T796] dvb-usb: error while querying for an remote control event. [ 901.269383][ T5892] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 901.360961][ T5915] usb 5-1: USB disconnect, device number 41 [ 901.388830][ T2158] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 901.411340][ T5892] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 901.422778][ T2158] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.438169][ T2158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 901.448523][ T5892] usb 4-1: USB disconnect, device number 35 [ 901.473173][ T2158] usb 2-1: SerialNumber: syz [ 901.498570][ T796] m920x_read = error: -19 [ 901.510983][ T796] dvb-usb: error while querying for an remote control event. [ 901.628178][ T5915] m920x_read = error: -19 [ 901.632943][ T5915] dvb-usb: error while querying for an remote control event. [ 901.755032][ T5915] m920x_read = error: -19 [ 901.763551][ T5915] dvb-usb: error while querying for an remote control event. [ 901.828269][ T5196] Dev loop3: unable to read RDB block 7 [ 901.844071][ T5196] loop3: unable to read partition table [ 901.863927][ T5196] loop3: partition table beyond EOD, truncated [ 901.878448][ T796] m920x_read = error: -19 [ 901.882880][ T796] dvb-usb: error while querying for an remote control event. [ 901.891081][ T3506] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 901.922003][ T3506] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 902.091984][ T5915] m920x_read = error: -19 [ 902.134876][T16717] netlink: 'syz.1.2786': attribute type 1 has an invalid length. [ 902.148470][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 902.156024][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 902.164910][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 902.172999][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 902.184873][ T2158] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 902.218665][ T2158] usb 2-1: USB disconnect, device number 23 [ 902.231077][ T5915] dvb-usb: error while querying for an remote control event. [ 902.339484][T16733] netlink: 'syz.4.2791': attribute type 10 has an invalid length. [ 902.378318][ T5915] m920x_read = error: -19 [ 902.382738][ T5915] dvb-usb: error while querying for an remote control event. [ 902.448789][ T5196] Dev loop3: unable to read RDB block 7 [ 902.461647][T16733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 902.470424][ T5196] loop3: unable to read partition table [ 902.470790][ T796] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 902.508896][ T5196] loop3: partition table beyond EOD, truncated [ 902.509626][ T5915] m920x_read = error: -19 [ 902.527245][ T5915] dvb-usb: error while querying for an remote control event. [ 902.629158][T16046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 902.639774][T16046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 902.651461][T16046] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 902.659802][T16046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 902.667628][T16046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.674880][ T5915] m920x_read = error: -19 [ 902.680097][ T5915] dvb-usb: error while querying for an remote control event. [ 902.788283][ T5915] m920x_read = error: -19 [ 902.792705][ T5915] dvb-usb: error while querying for an remote control event. [ 902.923775][T16743] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2793'. [ 902.950372][ T796] m920x_read = error: -19 [ 902.973113][ T796] dvb-usb: error while querying for an remote control event. [ 902.992802][T16746] fuse: Bad value for 'fd' [ 903.088263][ T796] m920x_read = error: -19 [ 903.092697][ T796] dvb-usb: error while querying for an remote control event. [ 903.120716][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2794'. [ 903.235284][ T796] m920x_read = error: -19 [ 903.248902][ T796] dvb-usb: error while querying for an remote control event. [ 903.298144][ T5892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 903.368250][ T5907] m920x_read = error: -19 [ 903.372645][ T5907] dvb-usb: error while querying for an remote control event. [ 903.488727][ T5907] m920x_read = error: -19 [ 903.492489][ T5892] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 903.493162][ T5907] dvb-usb: error while querying for an remote control event. [ 903.535584][ T5892] usb 1-1: config 128 has no interface number 0 [ 903.567657][ T5892] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 903.653242][ T5907] m920x_read = error: -19 [ 903.667963][ T5907] dvb-usb: error while querying for an remote control event. [ 903.682713][ T5892] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 903.705321][ T5892] usb 1-1: config 128 interface 148 has no altsetting 0 [ 903.723722][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 903.737137][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.778796][ T5907] m920x_read = error: -19 [ 903.783245][ T5907] dvb-usb: error while querying for an remote control event. [ 903.845824][ T5892] usb 1-1: Product: syz [ 903.851029][ T5892] usb 1-1: Manufacturer: syz [ 903.868660][ T5892] usb 1-1: SerialNumber: syz [ 903.899817][ T5907] m920x_read = error: -19 [ 903.904398][ T5907] dvb-usb: error while querying for an remote control event. [ 904.006332][T16740] chnl_net:caif_netlink_parms(): no params data found [ 904.028265][ T5915] m920x_read = error: -19 [ 904.032754][ T5915] dvb-usb: error while querying for an remote control event. [ 904.148304][ T5915] m920x_read = error: -19 [ 904.152934][ T5915] dvb-usb: error while querying for an remote control event. [ 904.246297][ T5892] usb 1-1: USB disconnect, device number 28 [ 904.278225][ T796] m920x_read = error: -19 [ 904.282637][ T796] dvb-usb: error while querying for an remote control event. [ 904.428296][ T796] m920x_read = error: -19 [ 904.438293][ T796] dvb-usb: error while querying for an remote control event. [ 904.537884][ T2158] usb 3-1: USB disconnect, device number 75 [ 904.575140][ T796] m920x_read = error: -19 [ 904.598651][ T796] dvb-usb: error while querying for an remote control event. [ 904.728464][ T5892] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 904.748389][ T796] m920x_read = error: -19 [ 904.758838][ T796] dvb-usb: error while querying for an remote control event. [ 904.832662][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.848794][ T5842] Bluetooth: hci2: command tx timeout [ 904.887029][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.898219][ T5915] m920x_read = error: -19 [ 904.902632][ T5915] dvb-usb: error while querying for an remote control event. [ 904.918327][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 904.922325][T16740] bridge_slave_0: entered allmulticast mode [ 904.940133][ T5892] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 904.960734][T16740] bridge_slave_0: entered promiscuous mode [ 904.969516][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.989758][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.991332][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.007103][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 905.027579][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.028539][ T5907] m920x_read = error: -19 [ 905.079023][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.086227][ T5907] dvb-usb: error while querying for an remote control event. [ 905.086220][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 905.086259][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.132286][T16740] bridge_slave_1: entered allmulticast mode [ 905.158880][T16740] bridge_slave_1: entered promiscuous mode [ 905.218239][ T5915] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 905.248198][ T796] m920x_read = error: -19 [ 905.252670][ T796] dvb-usb: error while querying for an remote control event. [ 905.290697][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.319852][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.378189][ T796] m920x_read = error: -19 [ 905.385364][ T796] dvb-usb: error while querying for an remote control event. [ 905.387180][ T5892] usb 1-1: usb_control_msg returned -32 [ 905.398179][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 905.430648][ T5915] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 905.452596][ T5915] usb 5-1: config 0 has no interface number 0 [ 905.452610][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 905.469722][T16740] team0: Port device team_slave_0 added [ 905.486847][T16740] team0: Port device team_slave_1 added [ 905.492543][ T5915] usb 5-1: config 0 interface 12 has no altsetting 0 [ 905.514695][ T5915] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 905.532674][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.541320][ T796] m920x_read = error: -19 [ 905.545672][ T796] dvb-usb: error while querying for an remote control event. [ 905.576670][ T5915] usb 5-1: Product: syz [ 905.581412][ T5915] usb 5-1: Manufacturer: syz [ 905.603398][ T5915] usb 5-1: SerialNumber: syz [ 905.620243][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.628550][ T5915] usb 5-1: config 0 descriptor?? [ 905.634551][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.666152][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.678427][ T5907] m920x_read = error: -19 [ 905.683115][ T5907] dvb-usb: error while querying for an remote control event. [ 905.692260][T16776] FAULT_INJECTION: forcing a failure. [ 905.692260][T16776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.696765][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.711209][T16776] CPU: 0 UID: 0 PID: 16776 Comm: syz.1.2802 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.711298][T16776] Tainted: [L]=SOFTLOCKUP [ 905.711319][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.711358][T16776] Call Trace: [ 905.711381][T16776] [ 905.711404][T16776] dump_stack_lvl+0xe8/0x150 [ 905.711498][T16776] should_fail_ex+0x412/0x560 [ 905.711596][T16776] _copy_to_user+0x31/0xb0 [ 905.711695][T16776] media_device_enum_links+0x6cb/0x890 [ 905.711772][T16776] ? media_device_ioctl+0x2e3/0x4c0 [ 905.711831][T16776] ? __pfx_media_device_enum_links+0x10/0x10 [ 905.711896][T16776] ? __pfx___mutex_lock+0x10/0x10 [ 905.712021][T16776] media_device_ioctl+0x312/0x4c0 [ 905.712105][T16776] ? __pfx_media_device_ioctl+0x10/0x10 [ 905.712221][T16776] ? __fget_files+0x3a0/0x420 [ 905.712307][T16776] ? __fget_files+0x2a/0x420 [ 905.712383][T16776] ? __pfx_media_device_ioctl+0x10/0x10 [ 905.712447][T16776] ? media_ioctl+0xfe/0x120 [ 905.712509][T16776] ? __pfx_media_ioctl+0x10/0x10 [ 905.712574][T16776] __se_sys_ioctl+0xfc/0x170 [ 905.712651][T16776] do_syscall_64+0x14d/0xf80 [ 905.712718][T16776] ? trace_irq_disable+0x3b/0x150 [ 905.712764][T16776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.712839][T16776] ? clear_bhb_loop+0x40/0x90 [ 905.712942][T16776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.712964][T16776] RIP: 0033:0x7f6caf99c799 [ 905.712984][T16776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.713001][T16776] RSP: 002b:00007f6cb07d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.713023][T16776] RAX: ffffffffffffffda RBX: 00007f6cafc15fa0 RCX: 00007f6caf99c799 [ 905.713052][T16776] RDX: 0000200000000180 RSI: 00000000c0287c02 RDI: 0000000000000003 [ 905.713103][T16776] RBP: 00007f6cb07d0090 R08: 0000000000000000 R09: 0000000000000000 [ 905.713151][T16776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.713170][T16776] R13: 00007f6cafc16038 R14: 00007f6cafc15fa0 R15: 00007f6cafd3fa48 [ 905.713265][T16776] [ 905.925210][ T5907] m920x_read = error: -19 [ 905.929669][ T5907] dvb-usb: error while querying for an remote control event. [ 905.938425][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.964827][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.008177][ T796] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 906.038316][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 906.050968][ T5907] m920x_read = error: -19 [ 906.055442][ T5907] dvb-usb: error while querying for an remote control event. [ 906.075906][T16740] hsr_slave_0: entered promiscuous mode [ 906.083133][T16740] hsr_slave_1: entered promiscuous mode [ 906.089832][T16740] debugfs: 'hsr0' already exists in 'hsr' [ 906.109541][T16740] Cannot create hsr debugfs directory [ 906.168257][ T5907] m920x_read = error: -19 [ 906.172738][ T5907] dvb-usb: error while querying for an remote control event. [ 906.184259][ T796] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 906.192999][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.220989][ T796] usb 4-1: config 0 has no interface number 0 [ 906.238296][ T796] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 906.272870][ T796] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 906.300519][ T796] usb 4-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 906.314414][ T5907] m920x_read = error: -19 [ 906.319230][ T5907] dvb-usb: error while querying for an remote control event. [ 906.345444][ T796] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 906.375756][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.416839][ T796] usb 4-1: config 0 descriptor?? [ 906.438336][ T5907] m920x_read = error: -19 [ 906.443377][ T5907] dvb-usb: error while querying for an remote control event. [ 906.530318][ T796] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 906.578311][T16788] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 906.679474][ T5907] m920x_read = error: -19 [ 906.683941][ T5907] dvb-usb: error while querying for an remote control event. [ 906.712963][ T796] usb 4-1: USB disconnect, device number 37 [ 906.804662][ T5915] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 906.813351][ T5915] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 906.822066][ T5915] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 906.829845][ T5907] m920x_read = error: -19 [ 906.834225][ T5907] dvb-usb: error while querying for an remote control event. [ 906.845293][ T5915] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 906.887358][ T5915] usb 5-1: USB disconnect, device number 42 [ 906.952583][ T5842] Bluetooth: hci2: command tx timeout [ 906.958463][ T5907] m920x_read = error: -19 [ 906.964003][ T5907] dvb-usb: error while querying for an remote control event. [ 907.031423][T16740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.078507][ T5907] m920x_read = error: -19 [ 907.082997][ T5907] dvb-usb: error while querying for an remote control event. [ 907.157738][T16740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.249141][ T5907] m920x_read = error: -19 [ 907.254675][ T5907] dvb-usb: error while querying for an remote control event. [ 907.378176][ T5907] m920x_read = error: -19 [ 907.382597][ T5907] dvb-usb: error while querying for an remote control event. [ 907.432450][T16740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.518520][ T5915] m920x_read = error: -19 [ 907.523191][ T5915] dvb-usb: error while querying for an remote control event. [ 907.575011][T16740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.595953][ T5907] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 907.649571][ T5915] m920x_read = error: -19 [ 907.654052][ T5915] dvb-usb: error while querying for an remote control event. [ 907.778718][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 907.785099][ T5915] m920x_read = error: -19 [ 907.790868][ T5915] dvb-usb: error while querying for an remote control event. [ 907.812388][ T5907] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.841317][ T5907] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.858170][ T5907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 907.896430][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 907.911563][ T2158] usb 1-1: USB disconnect, device number 29 [ 907.924613][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.948549][ T5915] m920x_read = error: -19 [ 907.953038][ T5915] dvb-usb: error while querying for an remote control event. [ 907.979354][ T5907] usb 4-1: config 0 descriptor?? [ 908.020206][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input68 [ 908.119768][ T5915] m920x_read = error: -19 [ 908.124185][ T5915] dvb-usb: error while querying for an remote control event. [ 908.182189][T16740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 908.202723][T16740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 908.210449][ T5181] bcm5974 4-1:0.0: could not read from device [ 908.234843][T16740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 908.281033][ T5915] m920x_read = error: -19 [ 908.285553][ T5907] usb 4-1: USB disconnect, device number 38 [ 908.308550][ T5181] bcm5974 4-1:0.0: could not read from device [ 908.314908][ T5915] dvb-usb: error while querying for an remote control event. [ 908.443429][ T5915] m920x_read = error: -19 [ 908.449457][ T5915] dvb-usb: error while querying for an remote control event. [ 908.462352][T16740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.580810][ T5915] m920x_read = error: -19 [ 908.595149][ T5915] dvb-usb: error while querying for an remote control event. [ 908.719328][ T5915] m920x_read = error: -19 [ 908.724006][ T5915] dvb-usb: error while querying for an remote control event. [ 908.745677][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.849940][ T796] m920x_read = error: -19 [ 908.856535][ T796] dvb-usb: error while querying for an remote control event. [ 908.871969][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.889125][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2809'. [ 908.911499][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.918740][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.938321][ T5907] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 908.998381][ T5842] Bluetooth: hci2: command tx timeout [ 909.008386][ T5915] m920x_read = error: -19 [ 909.014397][ T5915] dvb-usb: error while querying for an remote control event. [ 909.049045][T16827] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2812'. [ 909.100508][ T5907] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 909.110058][ T5907] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 909.128473][ T5915] m920x_read = error: -19 [ 909.135899][ T5915] dvb-usb: error while querying for an remote control event. [ 909.155330][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 909.259549][ T1210] m920x_read = error: -19 [ 909.264068][ T1210] dvb-usb: error while querying for an remote control event. [ 909.347390][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 909.378287][ T1210] m920x_read = error: -19 [ 909.465898][ T1210] dvb-usb: error while querying for an remote control event. [ 909.478505][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 909.492011][ T5907] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 909.501373][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 909.509820][ T5907] usb 5-1: Product: syz [ 909.514111][ T5907] usb 5-1: Manufacturer: syz [ 909.547319][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.554551][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.599052][ T796] m920x_read = error: -19 [ 909.603450][ T796] dvb-usb: error while querying for an remote control event. [ 909.658447][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 909.665476][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 909.671891][ T1210] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 909.691876][ T5907] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 909.711735][ T5907] cdc_wdm 5-1:1.0: Unknown control protocol [ 909.779896][ T5907] m920x_read = error: -19 [ 909.784312][ T5907] dvb-usb: error while querying for an remote control event. [ 909.808159][ T1210] usb 1-1: device descriptor read/64, error -71 [ 909.895474][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.902457][T16830] FAULT_INJECTION: forcing a failure. [ 909.902457][T16830] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 909.902683][T16830] CPU: 0 UID: 0 PID: 16830 Comm: syz.3.2813 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.902712][T16830] Tainted: [L]=SOFTLOCKUP [ 909.902720][T16830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.902734][T16830] Call Trace: [ 909.902742][T16830] [ 909.902791][T16830] dump_stack_lvl+0xe8/0x150 [ 909.902895][T16830] should_fail_ex+0x412/0x560 [ 909.903006][T16830] prepare_alloc_pages+0x22a/0x650 [ 909.903100][T16830] __alloc_frozen_pages_noprof+0x12f/0x380 [ 909.903185][T16830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 909.903273][T16830] ? __pfx_policy_nodemask+0x10/0x10 [ 909.903348][T16830] ? register_lock_class+0x31/0x2e0 [ 909.903428][T16830] alloc_pages_mpol+0x232/0x4a0 [ 909.903516][T16830] folio_alloc_mpol_noprof+0x39/0x70 [ 909.903597][T16830] shmem_alloc_and_add_folio+0x445/0xf80 [ 909.903683][T16830] ? filemap_get_entry+0xca/0x320 [ 909.903739][T16830] ? filemap_get_entry+0xca/0x320 [ 909.903803][T16830] ? filemap_get_entry+0x2ac/0x320 [ 909.903865][T16830] ? __pfx_filemap_get_entry+0x10/0x10 [ 909.903929][T16830] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 909.903997][T16830] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 909.904105][T16830] shmem_get_folio_gfp+0x5a9/0x1670 [ 909.904258][T16830] shmem_fault+0x179/0x390 [ 909.904364][T16830] __do_fault+0x138/0x390 [ 909.904435][T16830] do_pte_missing+0x5c4/0x3490 [ 909.904531][T16830] ? handle_mm_fault+0xee/0x3310 [ 909.904620][T16830] handle_mm_fault+0x1bec/0x3310 [ 909.904755][T16830] ? handle_mm_fault+0xee/0x3310 [ 909.904861][T16830] ? __pfx_handle_mm_fault+0x10/0x10 [ 909.904978][T16830] ? lock_mm_and_find_vma+0xa7/0x340 [ 909.905051][T16830] do_user_addr_fault+0x75b/0x1340 [ 909.905169][T16830] exc_page_fault+0x6a/0xc0 [ 909.905245][T16830] asm_exc_page_fault+0x26/0x30 [ 909.905298][T16830] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 909.905390][T16830] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 909.905429][T16830] RSP: 0018:ffffc9000567fb28 EFLAGS: 00050212 [ 909.905481][T16830] RAX: 0000000000000001 RBX: 0000000000000034 RCX: 0000000000000034 [ 909.905522][T16830] RDX: 0000000000000000 RSI: ffffc9000567fc20 RDI: 0000200000001580 [ 909.905557][T16830] RBP: ffffc9000567fcd0 R08: 0000000000000003 R09: 0000000000000004 [ 909.905598][T16830] R10: dffffc0000000000 R11: fffff52000acff8a R12: 00002000000015b4 [ 909.905654][T16830] R13: 00007ffffffff000 R14: ffffc9000567fc20 R15: 0000200000001580 [ 909.905779][T16830] _copy_to_user+0x8a/0xb0 [ 909.905847][T16830] media_device_enum_links+0x6cb/0x890 [ 909.905923][T16830] ? media_device_ioctl+0x2e3/0x4c0 [ 909.905987][T16830] ? __pfx_media_device_enum_links+0x10/0x10 [ 909.906051][T16830] ? __pfx___mutex_lock+0x10/0x10 [ 909.906178][T16830] media_device_ioctl+0x312/0x4c0 [ 909.906246][T16830] ? __pfx_media_device_ioctl+0x10/0x10 [ 909.906373][T16830] ? __fget_files+0x3a0/0x420 [ 909.906443][T16830] ? __fget_files+0x2a/0x420 [ 909.906527][T16830] ? __pfx_media_device_ioctl+0x10/0x10 [ 909.906583][T16830] ? media_ioctl+0xfe/0x120 [ 909.906646][T16830] ? __pfx_media_ioctl+0x10/0x10 [ 909.906719][T16830] __se_sys_ioctl+0xfc/0x170 [ 909.906794][T16830] do_syscall_64+0x14d/0xf80 [ 909.906858][T16830] ? trace_irq_disable+0x3b/0x150 [ 909.906913][T16830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.906976][T16830] ? clear_bhb_loop+0x40/0x90 [ 909.907068][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.907135][T16830] RIP: 0033:0x7fe1b139c799 [ 909.907189][T16830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.907232][T16830] RSP: 002b:00007fe1b2176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.907291][T16830] RAX: ffffffffffffffda RBX: 00007fe1b1615fa0 RCX: 00007fe1b139c799 [ 909.907327][T16830] RDX: 0000200000000180 RSI: 00000000c0287c02 RDI: 0000000000000003 [ 909.907367][T16830] RBP: 00007fe1b2176090 R08: 0000000000000000 R09: 0000000000000000 [ 909.907399][T16830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.907425][T16830] R13: 00007fe1b1616038 R14: 00007fe1b1615fa0 R15: 00007fe1b173fa48 [ 909.907519][T16830] [ 910.339005][ T5907] m920x_read = error: -19 [ 910.343419][ T5907] dvb-usb: error while querying for an remote control event. [ 910.468252][ T5907] m920x_read = error: -19 [ 910.472718][ T5907] dvb-usb: error while querying for an remote control event. [ 910.500480][ T1210] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 910.588347][ T5907] m920x_read = error: -19 [ 910.592944][ T5907] dvb-usb: error while querying for an remote control event. [ 910.603253][T16740] veth0_vlan: entered promiscuous mode [ 910.642712][T16740] veth1_vlan: entered promiscuous mode [ 910.668355][ T1210] usb 1-1: device descriptor read/64, error -71 [ 910.718387][ T5907] m920x_read = error: -19 [ 910.728248][ T5907] dvb-usb: error while querying for an remote control event. [ 910.751416][T16740] veth0_macvtap: entered promiscuous mode [ 910.776363][T16740] veth1_macvtap: entered promiscuous mode [ 910.783179][ T1210] usb usb1-port1: attempt power cycle [ 910.812421][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.831944][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.852815][ T5907] m920x_read = error: -19 [ 910.857233][ T5907] dvb-usb: error while querying for an remote control event. [ 910.870594][ T6852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.882284][ T6852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.899655][ T6852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.911188][ T6852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.978233][ T5907] m920x_read = error: -19 [ 910.982692][ T5907] dvb-usb: error while querying for an remote control event. [ 911.036452][ T6852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.057640][ T6852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.080754][ T5842] Bluetooth: hci2: command tx timeout [ 911.138474][ T5907] m920x_read = error: -19 [ 911.146441][ T5907] dvb-usb: error while querying for an remote control event. [ 911.154812][ T1210] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 911.175977][ T6855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.190783][ T6855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.209538][ T1210] usb 1-1: device descriptor read/8, error -71 [ 911.310151][ T5907] m920x_read = error: -19 [ 911.324935][ T5907] dvb-usb: error while querying for an remote control event. [ 911.448519][ T5907] m920x_read = error: -19 [ 911.453460][ T5907] dvb-usb: error while querying for an remote control event. [ 911.552229][ T5907] usb 5-1: USB disconnect, device number 43 [ 911.627931][ T796] m920x_read = error: -19 [ 911.632429][ T796] dvb-usb: error while querying for an remote control event. [ 911.749484][ T5900] m920x_read = error: -19 [ 911.754030][ T5900] dvb-usb: error while querying for an remote control event. [ 912.028133][ T2158] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 912.068534][ T5900] m920x_read = error: -19 [ 912.074286][ T5900] dvb-usb: error while querying for an remote control event. [ 912.418106][ T5907] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 912.474745][ T1210] m920x_read = error: -19 [ 912.517125][ T1210] dvb-usb: error while querying for an remote control event. [ 912.646690][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 912.683732][ T1210] m920x_read = error: -19 [ 912.700426][ T1210] dvb-usb: error while querying for an remote control event. [ 912.708248][ T5907] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 912.725320][ T5907] usb 5-1: config 0 has no interface number 0 [ 912.749172][ T5907] usb 5-1: config 0 interface 12 has no altsetting 0 [ 912.813703][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 912.832449][ T1210] m920x_read = error: -19 [ 912.848192][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.860962][ T1210] dvb-usb: error while querying for an remote control event. [ 912.885550][ T5907] usb 5-1: Product: syz [ 912.905337][ T5907] usb 5-1: Manufacturer: syz [ 912.915396][ T5907] usb 5-1: SerialNumber: syz [ 912.936846][ T5907] usb 5-1: config 0 descriptor?? [ 912.991075][ T1210] m920x_read = error: -19 [ 913.012531][ T1210] dvb-usb: error while querying for an remote control event. [ 913.080956][ T30] audit: type=1326 audit(1774699207.144:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 913.119086][T16893] fuse: Bad value for 'fd' [ 913.158965][ T796] m920x_read = error: -19 [ 913.167346][ T796] dvb-usb: error while querying for an remote control event. [ 913.175172][ T30] audit: type=1326 audit(1774699207.144:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 913.269147][ T30] audit: type=1326 audit(1774699207.174:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 913.319508][ T796] m920x_read = error: -19 [ 913.328192][ T796] dvb-usb: error while querying for an remote control event. [ 913.375325][ T30] audit: type=1326 audit(1774699207.174:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 913.477729][ T30] audit: type=1326 audit(1774699207.184:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 913.508794][ T5915] m920x_read = error: -19 [ 913.537032][ T5915] dvb-usb: error while querying for an remote control event. [ 913.691660][ T1210] m920x_read = error: -19 [ 913.697277][ T1210] dvb-usb: error while querying for an remote control event. [ 913.717420][ T30] audit: type=1326 audit(1774699207.184:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 913.780702][T16906] program syz.2.2825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 913.818334][ T1210] m920x_read = error: -19 [ 913.822843][ T1210] dvb-usb: error while querying for an remote control event. [ 913.951247][ T5915] m920x_read = error: -19 [ 913.962018][ T5915] dvb-usb: error while querying for an remote control event. [ 914.078258][ T5915] m920x_read = error: -19 [ 914.082691][ T5915] dvb-usb: error while querying for an remote control event. [ 914.132929][ T5907] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 914.148347][ T5907] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 914.156022][ T30] audit: type=1326 audit(1774699207.184:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 914.207898][ T5907] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 914.207910][ T30] audit: type=1326 audit(1774699207.204:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 914.208002][ T30] audit: type=1326 audit(1774699207.214:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 914.216073][ T1210] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 914.269905][ T5915] m920x_read = error: -19 [ 914.274256][ T5915] dvb-usb: error while querying for an remote control event. [ 914.288270][ T5907] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 914.307440][ T5907] usb 5-1: USB disconnect, device number 44 [ 914.379721][ T30] audit: type=1326 audit(1774699207.224:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c1b9c799 code=0x7ffc0000 [ 914.403409][ T5915] m920x_read = error: -19 [ 914.407890][ T5915] dvb-usb: error while querying for an remote control event. [ 914.438243][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 914.518493][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 914.526101][ T1210] usb 2-1: config 0 has no interfaces? [ 914.532054][ T5915] m920x_read = error: -19 [ 914.536591][ T5915] dvb-usb: error while querying for an remote control event. [ 914.546363][ T1210] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 914.562188][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.595661][ T1210] usb 2-1: config 0 descriptor?? [ 914.658883][ T1210] m920x_read = error: -19 [ 914.670580][ T1210] dvb-usb: error while querying for an remote control event. [ 914.793864][ T1210] m920x_read = error: -19 [ 914.811544][ T1210] dvb-usb: error while querying for an remote control event. [ 914.836485][T16919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.872267][T16919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.908198][ T5942] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 914.958578][ T1210] m920x_read = error: -19 [ 914.966721][ T1210] dvb-usb: error while querying for an remote control event. [ 915.023273][T14324] usb 2-1: USB disconnect, device number 25 [ 915.085679][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.118222][ T1210] m920x_read = error: -19 [ 915.122646][ T1210] dvb-usb: error while querying for an remote control event. [ 915.151340][ T5942] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 915.198173][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.231954][ T5942] usb 4-1: config 0 descriptor?? [ 915.314577][ T1210] m920x_read = error: -19 [ 915.332334][ T1210] dvb-usb: error while querying for an remote control event. [ 915.458528][ T1210] m920x_read = error: -19 [ 915.466702][ T1210] dvb-usb: error while querying for an remote control event. [ 915.494567][T16915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2830'. [ 915.517619][ T5942] usbhid 4-1:0.0: can't add hid device: -71 [ 915.528175][T14324] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 915.541266][ T5942] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 915.555617][ T5942] usb 4-1: USB disconnect, device number 39 [ 915.598276][ T1210] m920x_read = error: -19 [ 915.646775][ T1210] dvb-usb: error while querying for an remote control event. [ 915.709340][T14324] usb 2-1: Using ep0 maxpacket: 32 [ 915.717093][T14324] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 915.727641][T14324] usb 2-1: config 0 has no interface number 0 [ 915.788176][ T1210] m920x_read = error: -19 [ 915.793941][ T1210] dvb-usb: error while querying for an remote control event. [ 915.804033][T14324] usb 2-1: config 0 interface 12 has no altsetting 0 [ 915.857712][T14324] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 915.873436][T14324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.922094][ T1210] m920x_read = error: -19 [ 915.927162][ T1210] dvb-usb: error while querying for an remote control event. [ 916.059919][ T5942] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 916.095341][T14324] usb 2-1: Product: syz [ 916.137120][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 916.192153][ T1210] m920x_read = error: -19 [ 916.202556][ T1210] dvb-usb: error while querying for an remote control event. [ 916.206670][T14324] usb 2-1: Manufacturer: syz [ 916.220243][T14324] usb 2-1: SerialNumber: syz [ 916.255729][T14324] usb 2-1: config 0 descriptor?? [ 916.260951][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 916.269561][ T5942] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.284812][ T5942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 916.294568][ T5942] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 916.347506][ T1210] m920x_read = error: -19 [ 916.383248][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.407667][ T1210] dvb-usb: error while querying for an remote control event. [ 916.416314][ T5942] usb 4-1: config 0 descriptor?? [ 916.468795][ T5892] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 916.538484][ T1210] m920x_read = error: -19 [ 916.544963][ T1210] dvb-usb: error while querying for an remote control event. [ 916.598564][ T5892] usb 5-1: device descriptor read/64, error -71 [ 916.670591][ T1210] m920x_read = error: -19 [ 916.688092][ T1210] dvb-usb: error while querying for an remote control event. [ 916.808381][ T5907] m920x_read = error: -19 [ 916.812898][ T5907] dvb-usb: error while querying for an remote control event. [ 916.836450][ T5942] mcp2221 0003:04D8:00DD.0025: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 916.847371][ T5892] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 916.956213][T16927] x_tables: duplicate underflow at hook 1 [ 916.982574][ T5907] m920x_read = error: -19 [ 916.987011][ T5907] dvb-usb: error while querying for an remote control event. [ 917.001003][ T5892] usb 5-1: device descriptor read/64, error -71 [ 917.017673][T14324] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 917.030576][ C0] ================================================================== [ 917.038694][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 917.046717][ C0] Read of size 1 at addr ffff8880389affff by task syz.0.2838/16942 [ 917.054610][ C0] [ 917.056946][ C0] CPU: 0 UID: 0 PID: 16942 Comm: syz.0.2838 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.056969][ C0] Tainted: [L]=SOFTLOCKUP [ 917.056975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 917.056985][ C0] Call Trace: [ 917.056992][ C0] [ 917.056999][ C0] dump_stack_lvl+0xe8/0x150 [ 917.057030][ C0] print_report+0xba/0x230 [ 917.057049][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.057067][ C0] kasan_report+0x117/0x150 [ 917.057089][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.057110][ C0] mcp2221_raw_event+0x106a/0x1240 [ 917.057147][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 917.057165][ C0] ? down_trylock+0x50/0xb0 [ 917.057187][ C0] hid_input_report+0x41d/0x580 [ 917.057212][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 917.057232][ C0] hid_irq_in+0x47e/0x6d0 [ 917.057255][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 917.057283][ C0] dummy_timer+0xbbd/0x45d0 [ 917.057328][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 917.057353][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 917.057371][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 917.057394][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 917.057418][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 917.057449][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 917.057472][ C0] ? read_tsc+0x9/0x20 [ 917.057489][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 917.057513][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 917.057540][ C0] handle_softirqs+0x22a/0x870 [ 917.057563][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 917.057587][ C0] __irq_exit_rcu+0x5f/0x150 [ 917.057607][ C0] irq_exit_rcu+0x9/0x30 [ 917.057627][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 917.057646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.057664][ C0] RIP: 0033:0x7fc9c326cc44 [ 917.057679][ C0] Code: 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 48 8b 4b 08 <48> 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 [ 917.057694][ C0] RSP: 002b:00007fc9c373fa90 EFLAGS: 00000293 [ 917.057708][ C0] RAX: 00007fc9c2d52758 RBX: 00007fc9c2d03ff8 RCX: ffffffff897962c3 [ 917.057722][ C0] RDX: ffffffff897a0c9f RSI: 00007fc9c2d52758 RDI: 00007fc9c2d21778 [ 917.057734][ C0] RBP: 00007fc9c2ce8a40 R08: 00007fc9c3600000 R09: 00007fc9c3616128 [ 917.057745][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: 00007fc9c2d5a4b8 [ 917.057756][ C0] R13: 0000000000000020 R14: 000000000000e34f R15: 0000000000000001 [ 917.057770][ C0] ? skb_copy_datagram_iter+0x93/0x270 [ 917.057793][ C0] ? __scm_recv_common+0x4cf/0x640 [ 917.057819][ C0] [ 917.057825][ C0] [ 917.170376][ T5907] m920x_read = error: -19 [ 917.173940][ C0] Allocated by task 16809: [ 917.324520][ C0] kasan_save_track+0x3e/0x80 [ 917.329205][ C0] __kasan_kmalloc+0x93/0xb0 [ 917.333828][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 917.339214][ C0] bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 917.344585][ C0] bpf_prog_alloc+0x3c/0x1a0 [ 917.349205][ C0] bpf_prog_load+0x7ba/0x1ae0 [ 917.353882][ C0] __sys_bpf+0x618/0x950 [ 917.358143][ C0] __x64_sys_bpf+0x7c/0x90 [ 917.362565][ C0] do_syscall_64+0x14d/0xf80 [ 917.367188][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.373262][ C0] [ 917.375587][ C0] Freed by task 2158: [ 917.379560][ C0] kasan_save_track+0x3e/0x80 [ 917.384242][ C0] kasan_save_free_info+0x46/0x50 [ 917.389287][ C0] __kasan_slab_free+0x5c/0x80 [ 917.394098][ C0] kfree+0x1c1/0x630 [ 917.398000][ C0] __bpf_prog_free+0xe2/0x140 [ 917.402745][ C0] process_scheduled_works+0xb6e/0x18c0 [ 917.408321][ C0] worker_thread+0xa53/0xfc0 [ 917.412921][ C0] kthread+0x388/0x470 [ 917.416997][ C0] ret_from_fork+0x51e/0xb90 [ 917.421596][ C0] ret_from_fork_asm+0x1a/0x30 [ 917.426373][ C0] [ 917.428697][ C0] Last potentially related work creation: [ 917.434419][ C0] kasan_save_stack+0x3e/0x60 [ 917.439106][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 917.444331][ C0] insert_work+0x3d/0x330 [ 917.448669][ C0] __queue_work+0xd03/0x1020 [ 917.453271][ C0] queue_work_on+0x106/0x1d0 [ 917.457873][ C0] bpf_prog_load+0x15a1/0x1ae0 [ 917.462638][ C0] __sys_bpf+0x618/0x950 [ 917.466894][ C0] __x64_sys_bpf+0x7c/0x90 [ 917.471316][ C0] do_syscall_64+0x14d/0xf80 [ 917.475915][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.481819][ C0] [ 917.484189][ C0] The buggy address belongs to the object at ffff8880389ae000 [ 917.484189][ C0] which belongs to the cache kmalloc-cg-4k of size 4096 [ 917.498509][ C0] The buggy address is located 4095 bytes to the right of [ 917.498509][ C0] allocated 4096-byte region [ffff8880389ae000, ffff8880389af000) [ 917.513359][ C0] [ 917.515719][ C0] The buggy address belongs to the physical page: [ 917.522146][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x389a8 [ 917.530939][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 917.539439][ C0] memcg:ffff8880389a9011 [ 917.543697][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 917.551264][ C0] page_type: f5(slab) [ 917.555265][ C0] raw: 00fff00000000040 ffff88813fe01500 dead000000000100 dead000000000122 [ 917.563866][ C0] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880389a9011 [ 917.572459][ C0] head: 00fff00000000040 ffff88813fe01500 dead000000000100 dead000000000122 [ 917.581140][ C0] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880389a9011 [ 917.589816][ C0] head: 00fff00000000003 ffffea0000e26a01 00000000ffffffff 00000000ffffffff [ 917.598499][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 917.607171][ C0] page dumped because: kasan: bad access detected [ 917.613586][ C0] page_owner tracks the page as allocated [ 917.619312][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5196, tgid 5196 (udevd), ts 727496684210, free_ts 727470328075 [ 917.640416][ C0] post_alloc_hook+0x231/0x280 [ 917.645189][ C0] get_page_from_freelist+0x24dc/0x2580 [ 917.650746][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 917.656564][ C0] allocate_slab+0x77/0x660 [ 917.661076][ C0] refill_objects+0x331/0x3c0 [ 917.665766][ C0] __pcs_replace_empty_main+0x2e6/0x730 [ 917.671321][ C0] __kvmalloc_node_noprof+0x657/0x8a0 [ 917.676700][ C0] seq_read_iter+0x202/0xe10 [ 917.681294][ C0] vfs_read+0x582/0xa70 [ 917.685542][ C0] ksys_read+0x150/0x270 [ 917.689788][ C0] do_syscall_64+0x14d/0xf80 [ 917.694413][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.700347][ C0] page last free pid 14065 tgid 14065 stack trace: [ 917.706939][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 917.712055][ C0] __slab_free+0x263/0x2b0 [ 917.716475][ C0] qlist_free_all+0x97/0x100 [ 917.721089][ C0] kasan_quarantine_reduce+0x148/0x160 [ 917.726638][ C0] __kasan_slab_alloc+0x22/0x80 [ 917.731513][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 917.737006][ C0] do_getname+0x2e/0x250 [ 917.741259][ C0] do_sys_openat2+0xca/0x200 [ 917.745884][ C0] __x64_sys_openat+0x138/0x170 [ 917.750756][ C0] do_syscall_64+0x14d/0xf80 [ 917.755351][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.761247][ C0] [ 917.763574][ C0] Memory state around the buggy address: [ 917.769201][ C0] ffff8880389afe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.777264][ C0] ffff8880389aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.785327][ C0] >ffff8880389aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.793386][ C0] ^ [ 917.801375][ C0] ffff8880389b0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.809439][ C0] ffff8880389b0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.817495][ C0] ================================================================== [ 917.825572][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 917.832779][ C0] CPU: 0 UID: 0 PID: 16942 Comm: syz.0.2838 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.843719][ C0] Tainted: [L]=SOFTLOCKUP [ 917.848061][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 917.858139][ C0] Call Trace: [ 917.861424][ C0] [ 917.864370][ C0] vpanic+0x56c/0xa60 [ 917.868381][ C0] ? __pfx_vpanic+0x10/0x10 [ 917.872900][ C0] panic+0xc5/0xd0 [ 917.876633][ C0] ? __pfx_panic+0x10/0x10 [ 917.881063][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.886358][ C0] ? rcu_is_watching+0x15/0xb0 [ 917.891135][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.896523][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.901830][ C0] check_panic_on_warn+0x89/0xb0 [ 917.906818][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.912116][ C0] end_report+0x73/0x180 [ 917.916374][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.921670][ C0] kasan_report+0x128/0x150 [ 917.926207][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 917.931526][ C0] mcp2221_raw_event+0x106a/0x1240 [ 917.936648][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 917.942462][ C0] ? down_trylock+0x50/0xb0 [ 917.946982][ C0] hid_input_report+0x41d/0x580 [ 917.951916][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 917.957383][ C0] hid_irq_in+0x47e/0x6d0 [ 917.961725][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 917.967125][ C0] dummy_timer+0xbbd/0x45d0 [ 917.971695][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 917.976670][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 917.982487][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 917.987438][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 917.992391][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 917.997608][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 918.003340][ C0] ? read_tsc+0x9/0x20 [ 918.007420][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 918.013500][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 918.018633][ C0] handle_softirqs+0x22a/0x870 [ 918.023409][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 918.028186][ C0] __irq_exit_rcu+0x5f/0x150 [ 918.032787][ C0] irq_exit_rcu+0x9/0x30 [ 918.037046][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 918.042785][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 918.048796][ C0] RIP: 0033:0x7fc9c326cc44 [ 918.053241][ C0] Code: 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 48 8b 4b 08 <48> 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 [ 918.072851][ C0] RSP: 002b:00007fc9c373fa90 EFLAGS: 00000293 [ 918.078922][ C0] RAX: 00007fc9c2d52758 RBX: 00007fc9c2d03ff8 RCX: ffffffff897962c3 [ 918.086896][ C0] RDX: ffffffff897a0c9f RSI: 00007fc9c2d52758 RDI: 00007fc9c2d21778 [ 918.094893][ C0] RBP: 00007fc9c2ce8a40 R08: 00007fc9c3600000 R09: 00007fc9c3616128 [ 918.102878][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: 00007fc9c2d5a4b8 [ 918.110854][ C0] R13: 0000000000000020 R14: 000000000000e34f R15: 0000000000000001 [ 918.118854][ C0] ? skb_copy_datagram_iter+0x93/0x270 [ 918.124331][ C0] ? __scm_recv_common+0x4cf/0x640 [ 918.129460][ C0] [ 918.133097][ C0] Kernel Offset: disabled [ 918.137441][ C0] Rebooting in 86400 seconds..