last executing test programs: 1m15.838617864s ago: executing program 2 (id=3008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) write$P9_RGETLOCK(r3, &(0x7f00000002c0)={0x2a, 0x37, 0x1, {0x2, 0x40008000000, 0x4, r5, 0xc, '/dev/nullb0\x00'}}, 0x2a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r7 = dup(r6) syz_genetlink_get_family_id$gtp(0x0, r7) socket$inet6_tcp(0xa, 0x1, 0x0) 1m13.1430112s ago: executing program 2 (id=3023): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003800010326bd700203dcdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) (fail_nth: 11) 1m12.300789427s ago: executing program 2 (id=3027): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x80000000, 0xfff, 0x0, 0x45000, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0xe}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f0000000040)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0xc, 0x8}}, 0x28) 1m11.292504689s ago: executing program 2 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f00000021c0), 0x400, 0x0) recvmmsg$unix(r7, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000006c40)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0x20000000000ff, {0x1, 0x2, 0x742, 0xffffffffffffffff, 0x40ad, 0x4, {0x5, 0x9bd, 0x8000000000000001, 0x4000000000, 0x3, 0x8, 0xa, 0x2c06, 0x8, 0x4000, 0x7f, r4, 0x0, 0x3, 0x9465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r4, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x420e, r9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf2503ed00000400c280100001800c001080050008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1m11.219889179s ago: executing program 1 (id=3032): openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffffff], 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bond\x00', {}, 'macvlan1\x00', {}, 0xb, 0x6}}, @common=@unspec=@statistic={{0x38}, {0x8001, 0x0, 0x6, 0x9, 0xffff58d7, {0x2}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "acb1f84fe0cc4798499dd011ced9bb1f00000000000000008c00"}}, {{@ipv6={@mcast1, @mcast2, [0xff, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff], 'gretap0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x87, 0x7, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0xfff8, 0x1, 0x5, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3c8) 1m11.019796836s ago: executing program 1 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000560001000800000000000000070000007a98ba428b39010a258122630e8f6868fa33909e146d3a2d815be96cce9f85d2c9a984c739ffc6de0ad587d4050fc02d8a612d6b66ba510190d27c749cd1a16edb64256b3398d476c807745b42ab04381adf5601322f5afdd44a2662a21ef84508222f623ee5d49a2384a8014c79c3b7a44c53996ceaf1d7fc19331202aea94316b46c06c90f75ca11ba936721b79887df85076ebec924a47fe0ea029388b0af968ac265bdfc2642317f8429e0eb6703fe84dc7133af5915439872bc04fc", @ANYRES32=0x0], 0x18}}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) 1m10.183827738s ago: executing program 2 (id=3035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_to_team\x00', 0x1}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'pimreg\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000240), 0xa3, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0xffffffffffffff82, 0x3, 0x4, 0x8001, 0x0, 0x6, 0x8000000000000001, 0x4000000006, 0x8, 0x5}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) vmsplice(r3, &(0x7f0000000040), 0x0, 0x3) recvmmsg(r2, &(0x7f00000030c0)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000001500)=""/15, 0xf}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}, {{&(0x7f0000001540)=@nfc, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/6, 0x6}, {&(0x7f0000002a40)=""/13, 0xd}, {&(0x7f0000002a80)=""/181, 0xb5}, {&(0x7f0000002b40)=""/234, 0xea}, {&(0x7f0000002c40)=""/223, 0xdf}, {&(0x7f0000002d40)=""/170, 0xaa}, {&(0x7f0000002e00)=""/101, 0x65}], 0x8, &(0x7f0000002f00)=""/57, 0x39}, 0x5a}, {{&(0x7f0000002f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001400)=""/103, 0x5f}], 0x1, &(0x7f0000003080)=""/28, 0xd}, 0x3}], 0x3, 0x40000003, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001840)="5792754bbe067e1f2b3cf73b1725c87ee4540087075908e2e1d7de7a4ff61fbc6547cae0b82b9b12608e48b7d133535d38d2ed79ba1ef037da05a20dc5c2c63798c1fc735fa451aa5eea5400aef6f7fb8c4dda776d5a7467d27f4e7ac6a47c6ab900bed61825a7bcb6db6de6a9e68ea6f6d0a7a611476ae54a8acb4333db106b283e7e810dae8d9bb2f28b3f36839747f750eb7101526fb6e82048d327a14c3532937585ce2bf1a2729a8e54c3114540495e9a456bd9cba6fc27de12caf7fb6aca4ce2212785440e4f000000000000985223c27ddf4484b8025b4db2b098c03f2816f42ce46fd1d540f2a36960e61d164281652842fab5137095379603b521c8962892b7010b074207fd579c70311ea7b23e8eff5ecdebd7a41ec7f244a7a3f26d9366466972e26deb33e5c2f724502543d03c6abdcad4f74a9ccb60713fa538c7aca9394418364d847f4acead86afc6a16970d189266d79330cf4f389b42703ffad0ff63e64086586ee1d19c00d136ad881c23446a4b0af974bdf972cd2fdcad6352d45e49521e182d64db37d46b61e5641b3ceec2fd8b586e5e9657d25287ed0b2a6ef52", 0xffffffffffffff6a) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000014c0)={'syzkaller0\x00'}) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000015c0)=0x10, 0x4) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000001680)=ANY=[@ANYBLOB="727177020000000000000066490000000000000000000000000000000000000002", @ANYBLOB="915c29f426825419717813b497a0dce78bc883c5775dc34c4dbae1891780e9d1314f2b50105c52a084f174a0a81b1e8be212f6e6fff32b11053ca40623afd8640731ed8e7b32a77a20609a20cfc6a1a2883ced0ad40abe793ddb5f29d0b81b38407d90a39ec62790967a71f98204dcc9e3757f0b401057884d525c39c2e2dcad50d349b53e2fe800d6e019d64c55", @ANYRESOCT=r4, @ANYRESHEX=r8], 0x48) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x2000, 0x102, 0x2c}, 0x18) readlinkat(r10, &(0x7f00000001c0)='./file0\x00', &(0x7f00000014c0), 0x0) r11 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000001480)={0x7ff, 0x0, 0x2, r11}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000000)={0x0, 0x200000, 0x8}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x78f2e36b) syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) 1m9.948563625s ago: executing program 2 (id=3036): syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) 1m9.583697199s ago: executing program 32 (id=3036): syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) 1m8.457595951s ago: executing program 1 (id=3042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x6) setsockopt(r1, 0x9, 0x0, &(0x7f0000000040)="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", 0x1000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001040)={0x9, 0x612, 0x1, 0x10000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x89000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000010c0)=0x3, 0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000001100)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x60, 0x1407, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c048}, 0x88004) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001640)={0x7, &(0x7f0000001540)=[{0x400, 0x43, &(0x7f0000001280)="921a8488ecd4fe0ce41541c19647323d9967b165252ee689bfd1f74b8065d13a4aaaa2f4c14a4d507f3cd7d13e417b1ab95d2c86cf56078684243cd3c4d70916d368f4", 0x0, 0x1}, {0x6, 0x96, &(0x7f0000001300)="0e6accc934050ffe3955f97499e09061e3bf9b49a58d23c760bf63160929c31fbdfe36c333332103a6add0ca5cd9ba248ecbaa887950bb29c840436e991721cd74e2fe4acf595e71b674227e6ad6eb5695d7dea415d9defbd3d9354ef575343fe3ba6d9e3f8e86088105abcf3a4a3da4289e560ffcd5b21fd9c493a966fda8d91bd5a8c1ecf86fd6fbb40beb39e70017c1d54e5c347e", 0x1}, {0x2, 0x2f, &(0x7f00000013c0)="196a0ff180fa17cb8a844dc82c2e8e5f5b78a295ba872df7cca5dd92d446ed044feb814963a8260f3136e7e64a1ac4"}, {0xac2, 0x1a, &(0x7f0000001400)="0c70d4cb3818e813e6e349ec84eb0242d712c879b195d8255193"}, {0x9, 0x23, &(0x7f0000001440)="c0b6c7a1339c9d1311b445a9b9cc0c85f0311246147bab1520d2e93fea765eb1dddda7", 0x1, 0x3}, {0x8, 0x6a, &(0x7f0000001480)="5666c1004ffc26d07177bc27967c5284bcd83f9a031ac733e76a9eaf98fc685ad683b9247269c024529bc6243410fcb1a5e09ef0481ba1bdba2d6b33562c67f5ec3068effed8f9dd442b22bc820ed5f6b0c3bcd01e66ffe9e0e4b393dc22462f33ad4e5bcf17bb1566a1", 0x0, 0x1}, {0x7f, 0xb, &(0x7f0000001500)="01ac7fbf914994e102e7d3", 0x1}]}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000016c0)={0x3, 0x4, 0x25, "6ad63136a80fbbe2f37797b148a4970471b7f6e391ae1222996dd85ebb56396a04195c042d08e48555f7c6ce7dff6f0e417de53602197b1e503da13f", 0x1c, "eef1134ff75580c2b5348b6cd0fe88511f450a584c897a3cedce6266626264da2a49f19362ce56fb9e1e0ab7da28191791eeaf748048c3dba73a1e31"}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2010002}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x90) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000001880)={0xa, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ac0)={@fallback=r1, 0x36, 0x1, 0x6, &(0x7f00000019c0)=[0x0], 0x1, 0x0, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001b00)={@cgroup=r1, r1, 0x1a, 0x2040, r1, @value=r1, @void, @void, @void, r7}, 0x20) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000001b40), &(0x7f0000001b80)=0xc) r8 = syz_io_uring_complete(0x0, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00)=0x0, &(0x7f0000001e40)) r11 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000025c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000026c0)=0xe8) statx(r1, &(0x7f0000002700)='./file0\x00', 0x1000, 0x100, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f0000004dc0)=[{{&(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001c40)="ea3564cc01bbd9c38785be9318d5988a659da38cda60a0b49325279fd686f2e33b1ab3378798ad3d24756f01acc520cdf29b623f7d3854caaa7f719469ab24e042bd4199bb258b29d1c0cc8401e327ebc1a50452e1002bb3059f3c9104e85285952d9b47024a30ab194833d6a27fa15f8db44a3f4c1156c87e3005ecdddf229ae444c48e4c129c9759e1ea7d0eb4e66055b8c636f9e9869ac3077d20217e51e063e9bdee5efda6345eea395fef665282d77bbb772fa50d94ddfd6a51e6937cb6bb60804c15c2f75c9ad6d7e6e0ba3ce7c238354a183bddd0abc2555b94b8d863cc9d3822", 0xe4}], 0x1, &(0x7f0000001e80)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x24, 0x1, 0x1, [r0, r5, r2, r9, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r10}}}], 0x60, 0x4040040}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001f80)="864076ed1b7a860ff63fd1763fc9ef7bcc1df33ad712ebebbc136249fc0e82d6ad81c77f2ed4c25f748b1dec93924cfb1a1880e62e7dba92baeaef4d97fa1b9cea7f1fb3c01122eaa195b4e4ddf64346f03df57057d29684cd4f47fd9dac4ef25bd901930d673f30ec3782dfcce3e40550e989f8cf48c600b82f30b5cb8f00d9cde5", 0x82}, {&(0x7f0000002040)="b6e0c2cf2cb3696e", 0x8}, {&(0x7f0000002080)="6989435642cb72b40871829ec7919ef2b26216eace30b437c7447d133eab4f112871b47c030bd729542c974f9a8d9f8c1ecfed5d918943fa119bfa3bc2c23c5b6a5a1e046423e4f8f79146cf4cbf588ab36b7ce494cd299983628a50d708a584e543589fd2be77776a06ac3d5b31b4429cacf361f79ad791db97255375feb8fd460ec5348034501e995cdc74021a2a8f305f421ad9ad98decff82e158183a73014d2f63781da9ae32d6726802b11cba1c5c598f17b9829df72fca731e65220a6c5bc3fec38c1f449d6633ab837bff66ff9f5dd31025cbbe90a627ce2449ff67e9d7522346aafe6e09079eccd1e18f43acdce1a8e", 0xf4}], 0x3, &(0x7f00000021c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002200)="776349c3946b5a408c258f4426114d4f49bd9707ba9ebf398b6e505ca6066e1ecde99e53df108d179bb04f96e9b8a5c54372447fe1d3d32f85dafe192b151c7460f9dbbc5cc42f7ff2a318d82b0d9a4b3130fab8ff3e7f0d3fb90e8f34e3e53b279159e1f844bcae8d9b718f4c89f472b0af813fc882388f44aed0735f5cb590fc6c99b03060ae487af457ec93c01cb1330ce6ed27aed267d270e667f669875a56f807a8c7d600fc019cea1d06eb5544b6558ed6cf61a5a42e0ad5a6e73caa5b", 0xc0}, {&(0x7f00000022c0)="eb89a7d97a82263bc28dec30b544ee4777fd6cac78f1c676a4ff65f550092d0f5b6cad6580606b130f534db5490c9f3fe1d28aea0cef5eb48c1c91da8755f9020d5bd60ac370e3adb7ad849ee8930de81612dc68f8ecdb17ea1e28a55bb689ee833f3d7d8b1c6f73a0462fff3e6793ea578310c559a69c891d7c4212ae7c243413ab953d420d6fcf68a36f6b5e40d2ade42edf62f7109195ca3b41f7687be668c2fc7d52bdb88ecb3700e85fe847ffbaae0e8f94563b2d288f5e39e686fcf3a992dbc3befa5180093acd7e601ab3e165", 0xd0}, {&(0x7f00000023c0)="30fb08d27f0a5810a4b07e5da6694fb2ffa97077f5cbab4f095a19cd6f71ae73145c2eb6df86c9f94c4cdf8ee6696df4b41ba2e7081cb5ac702a90b8dd6a47661cdb94acb56c21d0070a63ddcd17702b812dfc98f68a76f69c762aa3103cc2932e90912b0cd9d5eb3f31e1357fb2de79bcd15f0f057a49", 0x77}, {&(0x7f0000002440)="494a43d870958f41826652a7ac8bb6a1444ff7", 0x13}, {&(0x7f0000002480)="bead97e259b45f415d0f0b9d6a7efc2b0a9ca411aa416f60bee4eb8e7c85f4f80508714839fb444386e9c5e7ea5739910fdda9d4df5e953330e2c28995414f891fef1c9fd6bcdc8890412512ed2361bcb6dd2c09eb713d6f072cd1e6529abe9ba62f078bc3114704ff2af840728b66aff344d54f9a354feaf3c1138f9ec25571f6239f20abaa18f25bd6e17915a5a8", 0x8f}], 0x5, &(0x7f0000004a80)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r0, r5, 0xffffffffffffffff, r6, r6, r3, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r1, r5, r2, 0xffffffffffffffff, r0, r3, r6, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x100, 0x40890}}, {{&(0x7f0000004b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c00)="59d1ef0097beb21aa7c5eb02cc93aeab3dfd5869c1dea3fa4c271fbee50d02110c10770f856eda7944c7a0c0d2e4516b9a271e489cae837d339b26a4bd1d2a4baf9be8a3d85da33720e05305496a98fd4fb6cbbc094d57bb6a5af23d961391f6e9ce568b0003dd4fc8ccb064046da01fb10932142727a065dcbd85d7e612fe381899d65f12e89d1a37dc6518ee24e9ea364290eee4359292586b7bece4f7e019925f2199fd3c4232cfb18c6596048cec83db42796339858daf2f809ad492044d71d49e0bbd2903c356c2a885a68bf1c76f7c5080e9aa6e9dcfd9d8b882b9a0f47619394ab98241df589e7ac9e8923176a8", 0xf1}, {&(0x7f0000004d00)="a86230595865ee77251408fc12da9b9880edbf101b7c1f91d713fa0fe3b5a7d179ad645be967044f81d3bc5c3cc92e44dc70465a656ec9175e2b3912", 0x3c}, {&(0x7f0000004d40)="736f531dc61fc8c069332c4c", 0xc}], 0x3, 0x0, 0x0, 0x40844}}], 0x4, 0x810) 1m8.247716908s ago: executing program 1 (id=3043): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES8, @ANYRES32=0x0], 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x54602, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'vcan0\x00', &(0x7f0000000280)=@ethtool_cmd={0x40ef947cf5975b81, 0x1, 0x6, 0x3, 0x2, 0x7, 0xa5, 0x1, 0xe, 0xff, 0x6, 0x80000000, 0x0, 0x6, 0xff, 0x9, [0xff, 0x23]}}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000, {0x1}, 0x0, 0x2}}) setsockopt$sock_timeval(r3, 0x1, 0x57, &(0x7f0000000040)={0x77359400}, 0x10) io_setup(0x8, &(0x7f00000000c0)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/address_bits', 0x80, 0x1c7) io_submit(r4, 0x0, &(0x7f0000000140)=[&(0x7f0000000000)={0x300000000000000, 0x0, 0x0, 0x5, 0x48b, r5, 0x0}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x26) fcntl$notify(r6, 0x402, 0x0) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x27) ioctl$KVM_SET_IRQCHIP(r11, 0x4020aeb2, &(0x7f0000000300)={0x1, 0xfffffff, @ioapic={0xffff1000, 0x7, 0xfffff5a7, 0xe6b, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x2, 0xe, '\x00', 0x3b}, {0x4a, 0xc, 0xd6, '\x00', 0x86}, {0x1d, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0x1, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0x10, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x6, '\x00', 0x8}, {0x12, 0x9, 0x0, '\x00', 0x3}, {0x45, 0x51, 0x6}, {0xa, 0xfc, 0x0, '\x00', 0x1}, {0xa, 0x2, 0x2, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x23}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xc6, '\x00', 0x6}, {0x0, 0x7, 0x5, '\x00', 0x1a}, {0x8, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x16, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0xa}, {0x8, 0xfd, 0x0, '\x00', 0x6}]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66baf80cb8c4309386ef66bafc0c66b8ee0066ef0f1c40de8fe8309e9df17f00008e66b822018ed80ffce20f01cb0f01cff0806ee3008fc878c31bfc0fc7ab00000000", 0x43}], 0x1, 0x48, 0x0, 0x0) 1m6.150075037s ago: executing program 1 (id=3046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0xfffffffffffffeac}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b", 0x2b}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000d80), 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.59176299s ago: executing program 1 (id=3048): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0xd9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x564) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) rseq(0x0, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x7183, &(0x7f0000000240)={0x0, 0x4172, 0x1000, 0x0, 0x1dc}) io_uring_setup(0x608d, &(0x7f00000002c0)={0x0, 0x3e1b, 0x8, 0x2, 0x2c8, 0x0, r4}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00001b4000/0x11000)=nil, 0x11000, 0x3000, 0x42dedc69eb5c03e7, &(0x7f00006ae000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, 0x0, 0x70000, 0x0) 50.465302585s ago: executing program 33 (id=3048): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0xd9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x564) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) rseq(0x0, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x7183, &(0x7f0000000240)={0x0, 0x4172, 0x1000, 0x0, 0x1dc}) io_uring_setup(0x608d, &(0x7f00000002c0)={0x0, 0x3e1b, 0x8, 0x2, 0x2c8, 0x0, r4}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00001b4000/0x11000)=nil, 0x11000, 0x3000, 0x42dedc69eb5c03e7, &(0x7f00006ae000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, 0x0, 0x70000, 0x0) 9.342649871s ago: executing program 3 (id=3206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) write$P9_RGETLOCK(r4, &(0x7f00000002c0)={0x2a, 0x37, 0x1, {0x2, 0x40008000000, 0x4, r6, 0xc, '/dev/nullb0\x00'}}, 0x2a) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r8 = dup(r7) syz_genetlink_get_family_id$gtp(0x0, r8) socket$inet6_tcp(0xa, 0x1, 0x0) 7.406960456s ago: executing program 4 (id=3212): syz_open_dev$usbfs(0x0, 0x205, 0x8401) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.1530624s ago: executing program 6 (id=3214): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x4, 0x4) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000440)=@can={{0x3, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "4b262a71f79c5d49"}, 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x4000010) 7.045002004s ago: executing program 4 (id=3215): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) pidfd_send_signal(0xffffffffffffffff, 0x27, &(0x7f0000000100)={0x2d, 0x8, 0xd}, 0x0) r5 = io_uring_setup(0x392f, &(0x7f0000000180)={0x0, 0x2feb, 0x10, 0xfffffffc, 0x2000032d}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r5, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) sendmsg$unix(r7, &(0x7f0000001e00)={&(0x7f0000001700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x10000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80840, 0x0) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x0, 0x70bd2c, 0x2000000, {0x0, 0x0, 0x0, r8, {0x3, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ptrace(0x10, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) fanotify_init(0x200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r10, 0x221c, 0x134d, 0x16, 0x0, 0x0) 7.02955016s ago: executing program 6 (id=3216): syz_usb_connect(0x0, 0x3c3, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c6e01208480b06100ac0010203010902b1030100008000090471000703a0b50009050c04400009f801a62167473354a9fd3c3bb56f503bb326e6f93dc2b06b0f472671c04299b6ba4c983afcdbc2cde25df75c1d795616ebe27f6fd73f4f33454918bebdb32e8469e0eb004afd05767dd78e5e05202b5c91a13361551d40221966f94cdd70a73f55225a476cde9cf6e73246d2a6de9bbbb85b4b2f93f0a630b0edf2a5012b9385e39df7f263f6c6dae9d7b888bfe97521d421947a7354acf39bf4bf1dbe931efe7bf969b4734957de09050a04400007000b090503"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"97ad97c7e77167c82f90a32ce730e488", r2, r3, {0x2, 0x8}, {0xfab, 0x8}, 0x7fffffffffffffff, [0x2, 0x5, 0xb, 0x7, 0x31, 0x8, 0x200, 0xfb6, 0xffffffffffffffff, 0x8, 0x4, 0x8, 0x9, 0x1, 0x8, 0x9]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"8c1368af81d86b54fe83befd0c38061c", r2, r4, {0x7ff, 0x8}, {0x1, 0x80000000}, 0x4, [0x400, 0x2, 0xb, 0x8, 0x603e, 0xfffffffffffffffc, 0x9, 0x9, 0x0, 0x0, 0x6, 0x3ff, 0x8, 0x9, 0x7, 0x7fff]}) fanotify_init(0x200, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xb, 0x1, 0x7fff, 0x7fffffff, 0x4, 0x3, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x9, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x120000, 0x762, 0x2, 0xd, 0xe, 0x2b10, 0x104, 0x6, 0x1c00, 0x9, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x782b, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x1, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x10004009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0xfe, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x40000880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x19, 0x7, 0xfffffffe, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x40, 0xa0, 0x0, 0x9}}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0xfff, 0xc, 0x101}, 0xffffffffffffffd6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0) 6.456461752s ago: executing program 4 (id=3218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x94) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c}) fchmod(r1, 0xa3) r3 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x3, 0x2df}, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) 6.326610509s ago: executing program 4 (id=3220): r0 = socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f00000000c0)='route\x00', 0x70040, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x8]}, {0x6, 0x8001, 0x5, 0x7}}, 0xff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x7f, 0x800, 0x0, 0xae8, 0x7, 0x8, 0x2f7b}, 0x1c) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 6.076633962s ago: executing program 4 (id=3222): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) preadv(r1, &(0x7f00000047c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f00000037c0)=""/4096, 0xfffffef3}], 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0xf, 0x9, 0xec9, 0x34, @mcast1, @loopback, 0x10, 0x8, 0x2, 0x4}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000380)=r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x7018, &(0x7f00000000c0)={0x0, 0x91cb, 0x2, 0x2, 0x40004f}, &(0x7f0000000140)=0x0, &(0x7f00000003c0), &(0x7f0000000280)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0xccf8f06b9def9854, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4, r5) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32, @ANYBLOB="0000000000000000000000000000003934608706", @ANYRES32=0x0, @ANYBLOB="0000000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.82813272s ago: executing program 0 (id=3225): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.714446755s ago: executing program 5 (id=3226): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000440)=@can={{0x3, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "4b262a71f79c5d49"}, 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x4000010) 5.576857925s ago: executing program 5 (id=3227): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x5, @win={{0x1, 0x1, 0x9, 0x101}, 0x5, 0xffffffff, 0x0, 0xc, 0x0, 0x9e}}) (fail_nth: 1) 5.021106254s ago: executing program 5 (id=3228): r0 = socket$netlink(0x10, 0x3, 0x17) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x40, 0xe0) lseek(r2, 0xfffffffffffffffa, 0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@getaddr={0x14, 0x16, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x24040000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000100)='+$}\x00', &(0x7f0000000140)='system.posix_acl_access\x00']}, &(0x7f00000002c0)={[&(0x7f0000000240)='.#\x00']}) 5.01721603s ago: executing program 3 (id=3229): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000440)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000b00)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.654395821s ago: executing program 6 (id=3230): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="2045f0ffff03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3fd, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x24040094) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac3(0x0, 0xca, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x5, 0x50, 0xfc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x15, 0x34}, [@multiply_unit={0xb, 0x24, 0xd, 0x6, 0x5e, 0x9, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0xb2, 0x6, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x22, 0xe, "98"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x3, "0f5711", "06"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x6, 0x8, {0xa, 0x25, 0x25, 0x7f800000, 0x1a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x2, 0x3, "d88c19", "5f6caa"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf1, 0x1, 0x1, 0x1e}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x200, 0xe0, 0x4, "c356"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x8, 0x9, {0xa, 0x25, 0x25, 0x6, 0xff, 0x424b}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x0, 0x4, 0x1, 0xff, 0x2}, 0x66, &(0x7f0000000440)={0x5, 0xf, 0x66, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x9, 0x3, 0x4e3a, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xa2, 0xf, 0x6, [0xffc000, 0xff3f00, 0xf, 0xf, 0x30]}, @generic={0x36, 0x10, 0x0, "a7da5c33eb17b5263aa71e8d56974129e35b9a7aebc13901dd7728a6b6066d3d6afee20137daebcde6a0df3ca23bf40cd08781"}]}, 0x7, [{0x31, &(0x7f00000004c0)=@string={0x31, 0x3, "343c394b9777259d30a05cb1747198498e918685fa8706e314f826f83d274ab0d88c4669e7a03bf029ed2fb76fafc3"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x807}}, {0x30, &(0x7f0000000600)=@string={0x30, 0x3, "9101c6e2e4bda6ef2b9d466ce178f3203ecbded1b48c006deb25b217f38749fde4f2204c5a5b8c7d1af1299f5d46"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x43e}}]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='4b\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf250700000020000180060001000a00000014000400fc010000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) 4.209733448s ago: executing program 4 (id=3231): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0x37}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40001043, r3, 0x0) write$P9_RWALK(r4, &(0x7f0000000000)={0x9, 0x6f, 0x2}, 0x9) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') read$FUSE(r6, &(0x7f00000042c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 4.006972379s ago: executing program 5 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a20000000000a01300000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a0104000000"], 0xac}, 0x1, 0x0, 0x0, 0x2004041}, 0x0) 3.890626013s ago: executing program 0 (id=3233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet(r0, &(0x7f0000000200)="8a53", 0x2, 0x4000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c00000312001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 3.737021235s ago: executing program 0 (id=3234): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88c00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) remap_file_pages(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x2000) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r2) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x40000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000dc6000/0x3000)=nil, 0x3000, 0x11}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x200000000000000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) 2.294384891s ago: executing program 3 (id=3235): r0 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0x0, 0x4000}, 0x20) 2.131798654s ago: executing program 5 (id=3236): syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x28000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.08028792s ago: executing program 3 (id=3237): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000440)=@can={{0x3, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "4b262a71f79c5d49"}, 0x10}, 0x1, 0x0, 0x0, 0x4044851}, 0x4000010) 1.886210852s ago: executing program 5 (id=3238): r0 = socket$inet6(0xa, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = fsmount(r1, 0x0, 0x90) set_mempolicy(0x1, &(0x7f0000001880)=0x8, 0x3) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "fe6ea448f35d9b5e", "d643cbb1c7800d46db98369f22b88e7b", "fafa8236", "c61e1cd27bd3dda9"}, 0x28) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000d80), 0x0, 0x45, &(0x7f0000000100)={0x11, 0xf5, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0xa}, 0x20) 1.883131701s ago: executing program 3 (id=3239): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x2, 0x1ba242, 0x3cbc2c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x11403f}) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x100, 0x40}, 0x0, 0x0, 0x3ff, 0x2, 0x1, 0x2000008000, 0x44, 0x7d04}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x3}, 0x0, 0x0, 0x6, 0x6, 0x3ff, 0x6, 0x44, 0x7}}], 0xb0, 0x8004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) 1.783487994s ago: executing program 6 (id=3240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="082003"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 1.344577926s ago: executing program 0 (id=3241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.265093889s ago: executing program 0 (id=3242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400fcffff000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.026468589s ago: executing program 0 (id=3243): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x1, 0x1a}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x53, "", [{{0x9, 0x4, 0x0, 0xd2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x7, 0x2, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x3, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1, 0x6, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000009c0)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x4, 0x4}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000200)={0xb1, 0x7f}, 0x20) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0xf, 0xc6, {0xc6, 0x3, "5b59286ffcda7631afc515c82f7f05d4595fcdf17227cee3c9aae84dde22ea6e033f3aff7be1711c1eb5b10aa82dcacea59b5d6f1a9596a323e55c5e2782d4069b69a051574989f3249f7bb2b9fb3cdf5a0d1106211f76ad89e00147b500fa62e32d55cd98d2d1610933200615fef19500c281769fc2e67d211aa2db68d89650382f309c8820d8f7087b8e509fb1b87143966d5839fc3118abb2ef68fe57c0659d1889178eeb24b558dc0f67ee78a0e9687deeaa2f5ac44d33077cefc3a08d6339940500"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)={0x0, 0xf, 0xb6, "ca5dec1a8345e3528ba6d0ee52da897f5f845e9b046ad026c9faa498b252491615eb661463b14b5865c312edebbd0080795101ab3a17333da06b3e665290bf0b777d98ffc50c4a07649dc839230bb98edc9e58c866a70df7ecb82870d32edc1444ee2d3047ff8ad399bd340eadb7a03a5d21d95a3818149f9d8374c0c7991c64f57450513d91d24a19d15275b7a21896a954585f9156052b2b811b1bc739e4289963a55ac5f72273d7789116909795f985ff1e30286e"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x81}}) 311.778824ms ago: executing program 3 (id=3244): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000008500)=[{{&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003280)=[{&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000008640)=""/4096, 0x1000}, {&(0x7f0000003080)=""/172, 0xac}, {&(0x7f0000003140)=""/69, 0x45}, {&(0x7f00000031c0)=""/150, 0x96}], 0x6, &(0x7f0000003300)=""/191, 0xbf}, 0x6}, {{&(0x7f00000033c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004680)=[{&(0x7f0000003440)=""/121, 0x79}, {&(0x7f00000034c0)=""/106, 0x6a}, {&(0x7f0000003540)=""/107, 0x6b}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/161, 0xa1}], 0x5}, 0x665b}, {{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/109, 0x6d}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/159, 0x9f}, {&(0x7f0000006840)=""/244, 0xf4}, {&(0x7f0000006940)=""/141, 0x8d}, {&(0x7f0000006a00)=""/31, 0x1f}, {&(0x7f0000006a40)=""/4096, 0x1000}], 0x8, &(0x7f0000007ac0)=""/76, 0x4c}, 0x4dc}, {{0x0, 0x0, &(0x7f0000008100)=[{&(0x7f0000007b40)=""/224, 0xe0}, {&(0x7f0000007c40)=""/85, 0x55}, {&(0x7f0000007cc0)=""/84, 0x54}, {&(0x7f0000007d40)=""/154, 0x9a}, {&(0x7f0000007e00)=""/106, 0x6a}, {&(0x7f0000007e80)=""/107, 0x6b}, {&(0x7f0000007f00)=""/251, 0xfb}, {&(0x7f0000008000)=""/214, 0xd6}], 0x8, &(0x7f0000008180)=""/161, 0xa1}, 0x3}, {{&(0x7f0000008240)=@alg, 0x80, &(0x7f00000084c0)=[{&(0x7f00000082c0)=""/117, 0x75}, {&(0x7f0000008340)=""/191, 0xbf}, {&(0x7f0000008400)=""/60, 0x3c}, {&(0x7f0000008440)=""/97, 0x61}], 0x4}, 0x7ff}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000540)={0x28, 0x0, r7, r5, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000440)="f4318ddbdb0d053751bc338672c7f79328b69ce2f5ea9485baf7c5490f2da63e2ec9f64fc1bf0f82168cb4d08b8d062f07d8ae37dbbd93f03a65ae8b4dd11215113abc00d09362fb70ef8eae74ff81b32a6e44a25edc63eb768e5d1dc9635d452ceaad26d539c3916a6f7801ce1480ad32ac2ca467edaad615162702da8b2d2b241fc68fc9d5276f50b27f17419e3a5335dd1f3f83da372d563dd9719b63cdfb30358a2dc2df1c0afa229035708bdfe147472172e8aa2b8de6ee33c810128a882a932ec93eb5b115c6b4f3"}) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$IOCTL_STATUS_ACCEL_DEV(r8, 0x40046103, &(0x7f0000000000)={0x0, 0x7fff, 0x20000008, 0x9, 0x5, 0x4, 0x5, 0x40, 0x4, 0x9, 0x0, "6590404b694fc8eb55ff90ec0df48ed23c4f1b8c5f3c6400"}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000240)=@gcm_128={{0x304}, "41c000001e00", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x28) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) 157.195885ms ago: executing program 6 (id=3245): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x10000000, 0x0, 0x40480c0}, 0x4) 0s ago: executing program 6 (id=3246): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x82, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="208402"], 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208402"], 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x65, 0x0, 0x81, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x0, 0x3, 0x65, 0x75, 0x11, 0x88, 0xe, @broadcast, @multicast1}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x0, 0x1, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): sim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.701102][ T129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.720258][T15143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.773009][ T6316] m920x_read = error: -19 [ 909.799799][ T6316] dvb-usb: error while querying for an remote control event. [ 909.953908][ T10] m920x_read = error: -19 [ 909.963193][ T10] dvb-usb: error while querying for an remote control event. [ 910.030811][ T6315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.064311][ T6315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.103139][ T10] m920x_read = error: -19 [ 910.116072][ T10] dvb-usb: error while querying for an remote control event. [ 910.241854][ T9] m920x_read = error: -19 [ 910.259086][ T9] dvb-usb: error while querying for an remote control event. [ 910.297792][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.326073][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.371252][T15143] veth0_vlan: entered promiscuous mode [ 910.383040][ T9] m920x_read = error: -19 [ 910.393784][ T9] dvb-usb: error while querying for an remote control event. [ 910.467382][T15143] veth1_vlan: entered promiscuous mode [ 910.535193][T13673] m920x_read = error: -19 [ 910.555037][T13673] dvb-usb: error while querying for an remote control event. [ 910.612996][T15143] veth0_macvtap: entered promiscuous mode [ 910.653775][ T1210] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 910.662359][T15143] veth1_macvtap: entered promiscuous mode [ 910.665448][T15336] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 910.691785][T13673] m920x_read = error: -19 [ 910.704171][T13673] dvb-usb: error while querying for an remote control event. [ 910.793778][T15143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.823152][T15338] tipc: Started in network mode [ 910.829661][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.842149][ T10] m920x_read = error: -19 [ 910.847888][ T10] dvb-usb: error while querying for an remote control event. [ 910.859207][T15338] tipc: Node identity da24af8468cd, cluster identity 4711 [ 910.866707][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.878745][T15338] tipc: Enabled bearer , priority 0 [ 910.901455][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 910.936834][ T1210] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 910.937149][T15143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.946925][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.972135][ T5966] m920x_read = error: -19 [ 910.975932][ T1210] usb 4-1: config 0 descriptor?? [ 910.985969][ T5966] dvb-usb: error while querying for an remote control event. [ 911.008247][T15342] syzkaller0: entered promiscuous mode [ 911.023693][T15342] syzkaller0: entered allmulticast mode [ 911.051798][T13673] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 911.122094][ T9] m920x_read = error: -19 [ 911.126506][ T9] dvb-usb: error while querying for an remote control event. [ 911.235470][T13673] usb 1-1: Using ep0 maxpacket: 32 [ 911.237370][T15345] tipc: Resetting bearer [ 911.248392][T13673] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 911.259176][ T9] m920x_read = error: -19 [ 911.276426][T11829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.277453][ T9] dvb-usb: error while querying for an remote control event. [ 911.299655][T13673] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 911.314661][T11829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.323420][T13673] usb 1-1: config 1 interface 2 has no altsetting 0 [ 911.325694][T13673] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 911.351771][T13673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.361075][T11829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.379245][T13673] usb 1-1: Product: syz [ 911.393342][T13673] usb 1-1: Manufacturer: syz [ 911.398413][T15342] tipc: Resetting bearer [ 911.404502][T13673] usb 1-1: SerialNumber: syz [ 911.431782][ T5966] m920x_read = error: -19 [ 911.436284][ T5966] dvb-usb: error while querying for an remote control event. [ 911.456875][T15342] tipc: Disabling bearer [ 911.469307][T11829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.553980][ T10] m920x_read = error: -19 [ 911.558665][ T10] dvb-usb: error while querying for an remote control event. [ 911.617071][ T1210] usbhid 4-1:0.0: can't add hid device: -71 [ 911.654066][ T1210] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 911.735268][ T1210] usb 4-1: USB disconnect, device number 20 [ 911.743309][ T9] m920x_read = error: -19 [ 911.743337][ T9] dvb-usb: error while querying for an remote control event. [ 911.786181][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.805813][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.863856][T13673] snd-ua101 1-1:1.1: sample format descriptor not found [ 911.872428][ T10] m920x_read = error: -19 [ 911.890254][ T10] dvb-usb: error while querying for an remote control event. [ 911.915359][T13673] snd-ua101 1-1:1.0: invalid num_altsetting [ 911.941913][ T5966] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 911.956189][ T5915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.965390][T13673] usb 1-1: selecting invalid altsetting 0 [ 911.975787][ T5915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.026451][T13673] usb 1-1: selecting invalid altsetting 0 [ 912.034812][ T6316] m920x_read = error: -19 [ 912.041222][ T6316] dvb-usb: error while querying for an remote control event. [ 912.061419][T13673] usbtest 1-1:1.2: probe with driver usbtest failed with error -22 [ 912.082640][T13673] usb 1-1: selecting invalid altsetting 0 [ 912.094655][T13673] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 912.129806][T13673] usb 1-1: selecting invalid altsetting 0 [ 912.135739][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 912.155653][T13673] snd-ua101 1-1:1.2: probe with driver snd-ua101 failed with error -22 [ 912.175898][ T5966] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 912.201373][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.210815][ T6316] m920x_read = error: -19 [ 912.216003][ T6316] dvb-usb: error while querying for an remote control event. [ 912.225622][T13673] usb 1-1: USB disconnect, device number 124 [ 912.243940][ T5966] usb 5-1: Product: syz [ 912.257464][ T5966] usb 5-1: Manufacturer: syz [ 912.280633][ T5966] usb 5-1: SerialNumber: syz [ 912.331343][ T5966] usb 5-1: config 0 descriptor?? [ 912.356283][ T6316] m920x_read = error: -19 [ 912.376313][ T6316] dvb-usb: error while querying for an remote control event. [ 912.384980][ T5966] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 912.511761][T13673] m920x_read = error: -19 [ 912.522032][T13673] dvb-usb: error while querying for an remote control event. [ 912.603511][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 912.619736][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 912.630692][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 912.660456][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 912.668077][ T6316] m920x_read = error: -19 [ 912.674685][ T6316] dvb-usb: error while querying for an remote control event. [ 912.682874][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 912.791713][ T6316] m920x_read = error: -19 [ 912.804020][ T6316] dvb-usb: error while querying for an remote control event. [ 912.932348][ T10] m920x_read = error: -19 [ 912.940479][ T10] dvb-usb: error while querying for an remote control event. [ 912.991687][T13673] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 913.061920][ T10] m920x_read = error: -19 [ 913.071678][ T10] dvb-usb: error while querying for an remote control event. [ 913.141725][T13673] usb 1-1: device descriptor read/64, error -71 [ 913.212179][ T10] m920x_read = error: -19 [ 913.226888][ T10] dvb-usb: error while querying for an remote control event. [ 913.371855][ T10] m920x_read = error: -19 [ 913.380953][ T10] dvb-usb: error while querying for an remote control event. [ 913.413222][T13673] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 913.511820][ T10] m920x_read = error: -19 [ 913.517009][ T10] dvb-usb: error while querying for an remote control event. [ 913.571702][T13673] usb 1-1: device descriptor read/64, error -71 [ 913.651812][ T5983] m920x_read = error: -19 [ 913.656352][ T5983] dvb-usb: error while querying for an remote control event. [ 913.692174][T13673] usb usb1-port1: attempt power cycle [ 913.781938][ T5983] m920x_read = error: -19 [ 913.788173][ T5983] dvb-usb: error while querying for an remote control event. [ 913.902448][ T5983] m920x_read = error: -19 [ 913.907105][ T5983] dvb-usb: error while querying for an remote control event. [ 914.022502][ T6316] m920x_read = error: -19 [ 914.027090][ T6316] dvb-usb: error while querying for an remote control event. [ 914.034690][T13673] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 914.063552][T13673] usb 1-1: device descriptor read/8, error -71 [ 914.151875][ T6316] m920x_read = error: -19 [ 914.156351][ T6316] dvb-usb: error while querying for an remote control event. [ 914.271747][ T6316] m920x_read = error: -19 [ 914.276235][ T6316] dvb-usb: error while querying for an remote control event. [ 914.301740][T13673] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 914.324009][T13673] usb 1-1: device descriptor read/8, error -71 [ 914.393790][ T6316] m920x_read = error: -19 [ 914.398289][ T6316] dvb-usb: error while querying for an remote control event. [ 914.433567][T13673] usb usb1-port1: unable to enumerate USB device [ 914.513698][T13673] m920x_read = error: -19 [ 914.518179][T13673] dvb-usb: error while querying for an remote control event. [ 914.610019][ T5966] gspca_ov534_9: reg_r err -71 [ 914.631842][T13673] m920x_read = error: -19 [ 914.636400][T13673] dvb-usb: error while querying for an remote control event. [ 914.751815][T13673] m920x_read = error: -19 [ 914.756247][T13673] dvb-usb: error while querying for an remote control event. [ 914.802446][ T5875] Bluetooth: hci2: command tx timeout [ 914.871876][T13673] m920x_read = error: -19 [ 914.877260][ T5966] gspca_ov534_9: Unknown sensor 0000 [ 914.877355][ T5966] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 914.893063][T13673] dvb-usb: error while querying for an remote control event. [ 914.908377][ T5966] usb 5-1: USB disconnect, device number 15 [ 915.012929][T13673] m920x_read = error: -19 [ 915.017414][T13673] dvb-usb: error while querying for an remote control event. [ 915.141803][ T5966] m920x_read = error: -19 [ 915.146285][ T5966] dvb-usb: error while querying for an remote control event. [ 915.261812][ T5966] m920x_read = error: -19 [ 915.276218][ T5966] dvb-usb: error while querying for an remote control event. [ 915.404048][ T5966] m920x_read = error: -19 [ 915.413161][ T5966] dvb-usb: error while querying for an remote control event. [ 915.440585][T15371] chnl_net:caif_netlink_parms(): no params data found [ 915.465876][T15396] netlink: 1744 bytes leftover after parsing attributes in process `syz.5.3072'. [ 915.552632][ T5966] m920x_read = error: -19 [ 915.565452][ T5966] dvb-usb: error while querying for an remote control event. [ 915.625336][T15399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.701798][ T5966] m920x_read = error: -19 [ 915.707107][ T5966] dvb-usb: error while querying for an remote control event. [ 915.851713][T13673] m920x_read = error: -19 [ 915.859507][T13673] dvb-usb: error while querying for an remote control event. [ 915.979072][T15371] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.017857][T13673] m920x_read = error: -19 [ 916.024001][T15371] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.052359][T13673] dvb-usb: error while querying for an remote control event. [ 916.057633][T15371] bridge_slave_0: entered allmulticast mode [ 916.146095][T15371] bridge_slave_0: entered promiscuous mode [ 916.200415][T15371] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.201859][T13673] m920x_read = error: -19 [ 916.239073][T15412] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3075'. [ 916.267906][T15371] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.293121][T13673] dvb-usb: error while querying for an remote control event. [ 916.304517][T15371] bridge_slave_1: entered allmulticast mode [ 916.337484][T15371] bridge_slave_1: entered promiscuous mode [ 916.432718][T13673] m920x_read = error: -19 [ 916.463562][T13673] dvb-usb: error while querying for an remote control event. [ 916.539608][T15371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.593770][T15371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.622624][T13673] m920x_read = error: -19 [ 916.637497][T13673] dvb-usb: error while querying for an remote control event. [ 916.755817][T15371] team0: Port device team_slave_0 added [ 916.785924][T15371] team0: Port device team_slave_1 added [ 916.792257][T13673] m920x_read = error: -19 [ 916.818044][T13673] dvb-usb: error while querying for an remote control event. [ 916.885299][ T5875] Bluetooth: hci2: command tx timeout [ 916.951717][T13673] m920x_read = error: -19 [ 916.966255][T13673] dvb-usb: error while querying for an remote control event. [ 916.976222][T15371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.017740][T15371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.110897][T15371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.151767][ T5966] m920x_read = error: -19 [ 917.157219][ T5966] dvb-usb: error while querying for an remote control event. [ 917.160141][T15371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.215254][T15371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.325143][T15371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.365608][T13673] m920x_read = error: -19 [ 917.377625][T13673] dvb-usb: error while querying for an remote control event. [ 917.531871][T13673] m920x_read = error: -19 [ 917.540136][T13673] dvb-usb: error while querying for an remote control event. [ 917.603358][T15371] hsr_slave_0: entered promiscuous mode [ 917.636221][T15371] hsr_slave_1: entered promiscuous mode [ 917.665024][T15371] debugfs: 'hsr0' already exists in 'hsr' [ 917.682305][ T5966] m920x_read = error: -19 [ 917.697674][T15371] Cannot create hsr debugfs directory [ 917.706170][ T5966] dvb-usb: error while querying for an remote control event. [ 917.851772][T13673] m920x_read = error: -19 [ 917.861181][T13673] dvb-usb: error while querying for an remote control event. [ 918.011854][T13673] m920x_read = error: -19 [ 918.032326][T13673] dvb-usb: error while querying for an remote control event. [ 918.151888][ T1210] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 918.163293][ T5966] m920x_read = error: -19 [ 918.189574][ T5966] dvb-usb: error while querying for an remote control event. [ 918.331748][ T5966] m920x_read = error: -19 [ 918.361183][ T5966] dvb-usb: error while querying for an remote control event. [ 918.391696][ T1210] usb 1-1: Using ep0 maxpacket: 16 [ 918.429645][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 918.444904][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 918.454766][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 918.468267][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 918.477593][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 918.521729][ T5966] m920x_read = error: -19 [ 918.533492][ T1210] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 918.541488][ T5966] dvb-usb: error while querying for an remote control event. [ 918.617262][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 918.650641][ T1210] usb 1-1: Product: syz [ 918.709013][ T1210] usb 1-1: Manufacturer: syz [ 918.711987][ T5966] m920x_read = error: -19 [ 918.734785][ T5966] dvb-usb: error while querying for an remote control event. [ 918.752775][ T1210] usb 1-1: SerialNumber: syz [ 918.803295][ T1210] usb 1-1: config 0 descriptor?? [ 918.884081][ T5966] m920x_read = error: -19 [ 918.899878][ T5966] dvb-usb: error while querying for an remote control event. [ 918.962992][ T5875] Bluetooth: hci2: command tx timeout [ 919.036058][ T5966] m920x_read = error: -19 [ 919.046682][ T5966] dvb-usb: error while querying for an remote control event. [ 919.181760][ T5966] m920x_read = error: -19 [ 919.188797][ T5966] dvb-usb: error while querying for an remote control event. [ 919.244685][ T1210] usb 1-1: USB disconnect, device number 3 [ 919.322644][ T5966] m920x_read = error: -19 [ 919.331668][ T5966] dvb-usb: error while querying for an remote control event. [ 919.371814][ T5930] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 919.451751][ T5966] m920x_read = error: -19 [ 919.456546][ T5966] dvb-usb: error while querying for an remote control event. [ 919.532009][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 919.561190][ T5930] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 919.579141][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.581766][ T5966] m920x_read = error: -19 [ 919.597666][ T5930] usb 5-1: Product: syz [ 919.601877][ T5966] dvb-usb: error while querying for an remote control event. [ 919.632920][ T5930] usb 5-1: Manufacturer: syz [ 919.643141][ T5930] usb 5-1: SerialNumber: syz [ 919.667345][ T5930] usb 5-1: config 0 descriptor?? [ 919.723213][ T5966] m920x_read = error: -19 [ 919.736689][ T5966] dvb-usb: error while querying for an remote control event. [ 919.871763][ T5966] m920x_read = error: -19 [ 919.877788][ T5966] dvb-usb: error while querying for an remote control event. [ 920.007910][ T5966] m920x_read = error: -19 [ 920.013510][ T5966] dvb-usb: error while querying for an remote control event. [ 920.131765][ T5966] m920x_read = error: -19 [ 920.140094][ T5966] dvb-usb: error while querying for an remote control event. [ 920.152001][ T5930] airspy 5-1:0.0: Board ID: 00 [ 920.156976][ T5930] airspy 5-1:0.0: Firmware version: [ 920.261746][ T5966] m920x_read = error: -19 [ 920.270704][ T5966] dvb-usb: error while querying for an remote control event. [ 920.358176][T15440] sg_write: data in/out 422364/112 bytes for SCSI command 0x0-- guessing data in; [ 920.358176][T15440] program syz.4.3081 not setting count and/or reply_len properly [ 920.391792][ T5966] m920x_read = error: -19 [ 920.399900][ T5966] dvb-usb: error while querying for an remote control event. [ 920.521755][ T5966] m920x_read = error: -19 [ 920.530555][ T5966] dvb-usb: error while querying for an remote control event. [ 920.563821][ T5875] Bluetooth: hci4: command tx timeout [ 920.624250][T15447] tipc: Started in network mode [ 920.631484][T15447] tipc: Node identity e2f7cb3ac2b7, cluster identity 4711 [ 920.650093][T15447] tipc: Enabled bearer , priority 0 [ 920.651946][ T5966] m920x_read = error: -19 [ 920.674053][ T5966] dvb-usb: error while querying for an remote control event. [ 920.685580][T15448] syzkaller0: entered promiscuous mode [ 920.710603][T15448] syzkaller0: entered allmulticast mode [ 920.791735][ T5966] m920x_read = error: -19 [ 920.801117][ T5966] dvb-usb: error while querying for an remote control event. [ 920.921764][ T5966] m920x_read = error: -19 [ 920.931407][ T5966] dvb-usb: error while querying for an remote control event. [ 920.989857][ T5930] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 921.028414][ T5930] airspy 5-1:0.0: Registered as swradio24 [ 921.035533][ T5930] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 921.043160][ T5875] Bluetooth: hci2: command tx timeout [ 921.051706][ T5966] m920x_read = error: -19 [ 921.055487][ T5930] usb 5-1: USB disconnect, device number 16 [ 921.061983][ T5966] dvb-usb: error while querying for an remote control event. [ 921.171786][ T5966] m920x_read = error: -19 [ 921.177428][ T5966] dvb-usb: error while querying for an remote control event. [ 921.301763][ T5983] m920x_read = error: -19 [ 921.307722][ T5983] dvb-usb: error while querying for an remote control event. [ 921.431734][ T5983] m920x_read = error: -19 [ 921.441702][ T5983] dvb-usb: error while querying for an remote control event. [ 921.464280][T15446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3083'. [ 921.537389][T15447] tipc: Resetting bearer [ 921.559890][T15444] tipc: Resetting bearer [ 921.561977][ T5983] m920x_read = error: -19 [ 921.597041][ T5983] dvb-usb: error while querying for an remote control event. [ 921.613116][T15444] tipc: Disabling bearer [ 921.722614][ T5966] m920x_read = error: -19 [ 921.736849][ T5966] dvb-usb: error while querying for an remote control event. [ 921.871819][ T5983] m920x_read = error: -19 [ 921.885483][ T5983] dvb-usb: error while querying for an remote control event. [ 922.021789][ T5983] m920x_read = error: -19 [ 922.027082][ T5983] dvb-usb: error while querying for an remote control event. [ 922.151909][ T5966] m920x_read = error: -19 [ 922.173787][ T5966] dvb-usb: error while querying for an remote control event. [ 922.322059][ T5966] m920x_read = error: -19 [ 922.348455][ T5966] dvb-usb: error while querying for an remote control event. [ 922.432282][T15437] chnl_net:caif_netlink_parms(): no params data found [ 922.474389][T15371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 922.496546][ T5966] m920x_read = error: -19 [ 922.509184][ T5966] dvb-usb: error while querying for an remote control event. [ 922.527131][T15371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 922.594858][T15371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 922.641913][ T5875] Bluetooth: hci4: command tx timeout [ 922.651936][ T5966] m920x_read = error: -19 [ 922.667464][ T5966] dvb-usb: error while querying for an remote control event. [ 922.688058][T15371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 922.802215][ T5966] m920x_read = error: -19 [ 922.812593][ T5966] dvb-usb: error while querying for an remote control event. [ 922.931850][ T5930] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 922.941752][ T5966] m920x_read = error: -19 [ 922.957995][ T5966] dvb-usb: error while querying for an remote control event. [ 923.012649][T15437] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.021074][T15437] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.028652][T15437] bridge_slave_0: entered allmulticast mode [ 923.039637][T15437] bridge_slave_0: entered promiscuous mode [ 923.058227][T15437] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.066322][T15437] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.075961][T15437] bridge_slave_1: entered allmulticast mode [ 923.084311][T15437] bridge_slave_1: entered promiscuous mode [ 923.092168][ T5966] m920x_read = error: -19 [ 923.101959][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 923.103659][ T5966] dvb-usb: error while querying for an remote control event. [ 923.110409][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.146095][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.166791][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 923.197356][ T5930] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 923.224550][T15437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.237600][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.259367][T15437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.272767][ T5930] usb 1-1: config 0 descriptor?? [ 923.273069][ T5966] m920x_read = error: -19 [ 923.309145][ T5966] dvb-usb: error while querying for an remote control event. [ 923.442069][ T6316] m920x_read = error: -19 [ 923.456027][ T6316] dvb-usb: error while querying for an remote control event. [ 923.481528][T15437] team0: Port device team_slave_0 added [ 923.532746][T15437] team0: Port device team_slave_1 added [ 923.567037][T15493] fuse: Unknown parameter 'group_id' [ 923.581841][ T6316] m920x_read = error: -19 [ 923.594080][ T6316] dvb-usb: error while querying for an remote control event. [ 923.617906][T15371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.650817][T15437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.661947][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.696100][T15437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.717917][T15437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.721750][ T6316] m920x_read = error: -19 [ 923.734065][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.743914][ T6316] dvb-usb: error while querying for an remote control event. [ 923.762858][ T5930] hid (null): report_id 0 is invalid [ 923.807864][T15437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.820576][ T5930] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0036/input/input44 [ 923.904590][T15371] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.929296][T15478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3091'. [ 923.931989][ T6316] m920x_read = error: -19 [ 923.975000][ T5930] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0036/input/input45 [ 923.978013][ T6316] dvb-usb: error while querying for an remote control event. [ 924.079735][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.086895][ T5929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.151741][ T5966] m920x_read = error: -19 [ 924.156172][ T5966] dvb-usb: error while querying for an remote control event. [ 924.254044][ T5930] kye 0003:0458:5011.0036: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 924.271782][ T5983] m920x_read = error: -19 [ 924.278252][ T5983] dvb-usb: error while querying for an remote control event. [ 924.287638][T15437] hsr_slave_0: entered promiscuous mode [ 924.308423][T15437] hsr_slave_1: entered promiscuous mode [ 924.330234][T15437] debugfs: 'hsr0' already exists in 'hsr' [ 924.349511][T15437] Cannot create hsr debugfs directory [ 924.411767][ T5983] m920x_read = error: -19 [ 924.418573][ T5983] dvb-usb: error while querying for an remote control event. [ 924.445618][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.452828][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.471683][ T5966] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 924.523118][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.541745][ T5983] m920x_read = error: -19 [ 924.549292][ T5983] dvb-usb: error while querying for an remote control event. [ 924.551747][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.661809][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 924.673411][ T5966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.684804][ T5983] m920x_read = error: -19 [ 924.692632][ T5983] dvb-usb: error while querying for an remote control event. [ 924.710369][ T5966] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 924.721802][ T5875] Bluetooth: hci4: command tx timeout [ 924.732995][ T5966] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 924.760137][ T5966] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 924.790313][ T5966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 924.819403][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 924.827741][ T5983] m920x_read = error: -19 [ 924.832631][ T5983] dvb-usb: error while querying for an remote control event. [ 924.858569][ T5966] usb 5-1: SerialNumber: syz [ 924.879714][T15371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.879829][T15504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 924.917205][T15504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 924.944917][ T5966] hub 5-1:1.0: bad descriptor, ignoring hub [ 924.962091][ T5983] m920x_read = error: -19 [ 924.969122][ T5966] hub 5-1:1.0: probe with driver hub failed with error -5 [ 924.977037][ T5983] dvb-usb: error while querying for an remote control event. [ 925.048176][T15478] syzkaller1: entered promiscuous mode [ 925.061059][T15478] syzkaller1: entered allmulticast mode [ 925.072116][ T1210] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 925.086769][T15437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 925.101993][ T5983] m920x_read = error: -19 [ 925.108595][ T5983] dvb-usb: error while querying for an remote control event. [ 925.125757][T15437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 925.153510][T15437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 925.186938][T15504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 925.188662][T15437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 925.204760][T15504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 925.241802][ T5983] m920x_read = error: -19 [ 925.247976][ T5983] dvb-usb: error while querying for an remote control event. [ 925.296786][T15371] veth0_vlan: entered promiscuous mode [ 925.353996][T15371] veth1_vlan: entered promiscuous mode [ 925.371889][ T5983] m920x_read = error: -19 [ 925.380335][ T5983] dvb-usb: error while querying for an remote control event. [ 925.475253][T15371] veth0_macvtap: entered promiscuous mode [ 925.502808][T15371] veth1_macvtap: entered promiscuous mode [ 925.516295][ T5983] m920x_read = error: -19 [ 925.520029][T15437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.527522][ T5983] dvb-usb: error while querying for an remote control event. [ 925.595077][T15371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.627041][T15437] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.631802][ T5983] m920x_read = error: -19 [ 925.642500][ T5983] dvb-usb: error while querying for an remote control event. [ 925.670981][ T5966] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 925.683418][T15371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.739855][ T129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.769755][ T129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.771889][ T5966] m920x_read = error: -19 [ 925.796176][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.798779][ T5966] dvb-usb: error while querying for an remote control event. [ 925.803503][T11829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.836429][ T129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.857909][ T129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.873619][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.881008][T11829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.931757][ T6316] m920x_read = error: -19 [ 925.936370][ T6316] dvb-usb: error while querying for an remote control event. [ 926.002099][ T5983] usb 5-1: USB disconnect, device number 17 [ 926.010681][ T5983] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 926.061742][ T6316] m920x_read = error: -19 [ 926.070518][ T6316] dvb-usb: error while querying for an remote control event. [ 926.191732][ T6316] m920x_read = error: -19 [ 926.218089][ T6316] dvb-usb: error while querying for an remote control event. [ 926.364814][ T6316] m920x_read = error: -19 [ 926.395569][ T6316] dvb-usb: error while querying for an remote control event. [ 926.432057][ T5951] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 926.541758][ T6316] m920x_read = error: -19 [ 926.559766][ T6316] dvb-usb: error while querying for an remote control event. [ 926.586544][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3097'. [ 926.610057][ T5951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.630310][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.640333][T11824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.665824][T11824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.677932][T15523] netlink: 'syz.0.3097': attribute type 5 has an invalid length. [ 926.692524][ T5951] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 926.693085][T13673] m920x_read = error: -19 [ 926.714114][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 926.751152][ T5951] usb 6-1: SerialNumber: syz [ 926.755949][T13673] dvb-usb: error while querying for an remote control event. [ 926.805008][ T5875] Bluetooth: hci4: command tx timeout [ 926.859730][T15437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.867109][ T5983] m920x_read = error: -19 [ 926.887903][ T5983] dvb-usb: error while querying for an remote control event. [ 926.929988][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.956360][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.973460][ T5952] usb 1-1: USB disconnect, device number 4 [ 927.023504][ T6316] m920x_read = error: -19 [ 927.035930][ T6316] dvb-usb: error while querying for an remote control event. [ 927.077001][T15514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.134693][T15514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.151288][T15437] veth0_vlan: entered promiscuous mode [ 927.181764][ T6316] m920x_read = error: -19 [ 927.203596][ T6316] dvb-usb: error while querying for an remote control event. [ 927.227214][T15437] veth1_vlan: entered promiscuous mode [ 927.322625][T15437] veth0_macvtap: entered promiscuous mode [ 927.353385][ T6316] m920x_read = error: -19 [ 927.367635][ T6316] dvb-usb: error while querying for an remote control event. [ 927.455509][T15437] veth1_macvtap: entered promiscuous mode [ 927.492171][ T9] m920x_read = error: -19 [ 927.504953][ T9] dvb-usb: error while querying for an remote control event. [ 927.623493][T15437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.634422][ T9] m920x_read = error: -19 [ 927.658358][ T9] dvb-usb: error while querying for an remote control event. [ 927.729020][T15437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.812166][ T6316] m920x_read = error: -19 [ 927.838482][ T6316] dvb-usb: error while querying for an remote control event. [ 927.938200][T11824] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.998522][T11824] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.011903][ T6316] m920x_read = error: -19 [ 928.030954][ T6316] dvb-usb: error while querying for an remote control event. [ 928.071474][T11824] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.079005][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3100'. [ 928.135790][T11824] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.180855][ T9] m920x_read = error: -19 [ 928.213344][ T9] dvb-usb: error while querying for an remote control event. [ 928.362198][ T5966] m920x_read = error: -19 [ 928.385084][ T5983] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 928.397658][ T5966] dvb-usb: error while querying for an remote control event. [ 928.566502][T15317] m920x_read = error: -19 [ 928.602270][ T5983] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 928.613959][T15317] dvb-usb: error while querying for an remote control event. [ 928.638523][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.674723][ T5983] usb 4-1: Product: syz [ 928.684375][ T5983] usb 4-1: Manufacturer: syz [ 928.708089][ T5983] usb 4-1: SerialNumber: syz [ 928.741915][T13673] m920x_read = error: -19 [ 928.755717][ T5983] usb 4-1: config 0 descriptor?? [ 928.776386][T13673] dvb-usb: error while querying for an remote control event. [ 928.801187][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.846216][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.963442][T13673] m920x_read = error: -19 [ 928.991147][T13673] dvb-usb: error while querying for an remote control event. [ 929.146473][T13673] m920x_read = error: -19 [ 929.159694][ T5915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.193815][T13673] dvb-usb: error while querying for an remote control event. [ 929.220259][ T5915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.265054][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.293294][ T5951] usb 6-1: 0:2 : does not exist [ 929.319327][ T5951] usb 6-1: unit 5: unexpected type 0x0c [ 929.358942][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.423147][T15317] m920x_read = error: -19 [ 929.450128][T15317] dvb-usb: error while querying for an remote control event. [ 929.614682][T13673] m920x_read = error: -19 [ 929.638951][T13673] dvb-usb: error while querying for an remote control event. [ 929.665428][ T5951] usb 6-1: USB disconnect, device number 2 [ 929.830298][T15317] m920x_read = error: -19 [ 929.875658][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.892265][T15317] dvb-usb: error while querying for an remote control event. [ 929.956475][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.997575][T14035] udevd[14035]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.053295][T15317] m920x_read = error: -19 [ 930.111854][T15317] dvb-usb: error while querying for an remote control event. [ 930.119381][ T5983] usb 4-1: Firmware version (0.0) predates our first public release. [ 930.154453][ T5983] usb 4-1: Please update to version 0.2 or newer [ 930.258369][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.270284][T15549] geneve1: entered promiscuous mode [ 930.280130][T15317] m920x_read = error: -19 [ 930.303534][T15317] dvb-usb: error while querying for an remote control event. [ 930.335658][T15549] macsec1: entered promiscuous mode [ 930.345119][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.372459][T15549] macsec1: entered allmulticast mode [ 930.385181][T15549] geneve1: entered allmulticast mode [ 930.440415][T15549] geneve1: left allmulticast mode [ 930.454477][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.461209][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.467688][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.474291][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.480666][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.482812][T15549] geneve1: left promiscuous mode [ 930.487451][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.487724][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.487740][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.487937][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.487949][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.488072][T13673] m920x_read = error: -19 [ 930.488089][T13673] dvb-usb: error while querying for an remote control event. [ 930.488128][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.488140][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.488347][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.488360][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.488557][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.488570][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.488765][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.488777][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.488978][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 930.488991][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 930.604398][T15317] m920x_read = error: -19 [ 930.620841][T15581] fuse: Bad value for 'user_id' [ 930.629380][T15581] fuse: Bad value for 'user_id' [ 930.641333][T15317] dvb-usb: error while querying for an remote control event. [ 930.781786][ T6316] m920x_read = error: -19 [ 930.786756][ T6316] dvb-usb: error while querying for an remote control event. [ 930.921701][ T6316] m920x_read = error: -19 [ 930.934263][ T6316] dvb-usb: error while querying for an remote control event. [ 931.092116][ T6316] m920x_read = error: -19 [ 931.118553][ T6316] dvb-usb: error while querying for an remote control event. [ 931.261841][ T6316] m920x_read = error: -19 [ 931.276884][ T6316] dvb-usb: error while querying for an remote control event. [ 931.411863][ T6316] m920x_read = error: -19 [ 931.426844][ T6316] dvb-usb: error while querying for an remote control event. [ 931.526758][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.533374][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.561746][ T6316] m920x_read = error: -19 [ 931.573434][ T6316] dvb-usb: error while querying for an remote control event. [ 931.711744][ T6316] m920x_read = error: -19 [ 931.740236][ T6316] dvb-usb: error while querying for an remote control event. [ 931.811733][ T5951] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 931.892400][ T6316] m920x_read = error: -19 [ 931.912818][ T6316] dvb-usb: error while querying for an remote control event. [ 931.982776][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 931.999259][ T5951] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 932.017007][ T5951] usb 5-1: config 0 has no interface number 0 [ 932.038813][ T5951] usb 5-1: config 0 interface 12 has no altsetting 0 [ 932.051749][ T6316] m920x_read = error: -19 [ 932.055275][ T5951] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 932.077904][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.087021][ T6316] dvb-usb: error while querying for an remote control event. [ 932.117216][ T5951] usb 5-1: Product: syz [ 932.131849][ T5951] usb 5-1: Manufacturer: syz [ 932.141985][ T5951] usb 5-1: SerialNumber: syz [ 932.174538][ T5951] usb 5-1: config 0 descriptor?? [ 932.201831][T13673] m920x_read = error: -19 [ 932.208973][T13673] dvb-usb: error while querying for an remote control event. [ 932.320455][T15580] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3104'. [ 932.343561][T13673] m920x_read = error: -19 [ 932.368590][T13673] dvb-usb: error while querying for an remote control event. [ 932.521748][ T6316] m920x_read = error: -19 [ 932.533409][ T6316] dvb-usb: error while querying for an remote control event. [ 932.611442][ T5983] usb 4-1: USB disconnect, device number 21 [ 932.671906][ T6316] m920x_read = error: -19 [ 932.697130][ T6316] dvb-usb: error while querying for an remote control event. [ 932.851724][T13673] m920x_read = error: -19 [ 932.865421][T13673] dvb-usb: error while querying for an remote control event. [ 933.001804][T15317] m920x_read = error: -19 [ 933.015040][T15317] dvb-usb: error while querying for an remote control event. [ 933.097037][ T5951] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 933.121811][ T5951] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 933.153481][ T5951] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 933.161962][T13673] m920x_read = error: -19 [ 933.200009][T13673] dvb-usb: error while querying for an remote control event. [ 933.275445][ T5951] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 933.354613][ T5951] usb 5-1: USB disconnect, device number 18 [ 933.361879][T15317] m920x_read = error: -19 [ 933.388723][T15317] dvb-usb: error while querying for an remote control event. [ 933.522613][T13673] m920x_read = error: -19 [ 933.528057][T13673] dvb-usb: error while querying for an remote control event. [ 933.641762][T13673] m920x_read = error: -19 [ 933.656954][T13673] dvb-usb: error while querying for an remote control event. [ 933.685435][T15624] syzkaller1: entered promiscuous mode [ 933.740442][T15624] syzkaller1: entered allmulticast mode [ 933.782133][T15317] m920x_read = error: -19 [ 933.788636][T15317] dvb-usb: error while querying for an remote control event. [ 933.962142][ T9] m920x_read = error: -19 [ 933.989854][ T9] dvb-usb: error while querying for an remote control event. [ 934.142853][ T9] m920x_read = error: -19 [ 934.153070][ T9] dvb-usb: error while querying for an remote control event. [ 934.204160][T15635] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3113'. [ 934.382158][ T9] m920x_read = error: -19 [ 934.387186][ T9] dvb-usb: error while querying for an remote control event. [ 934.654546][ T9] m920x_read = error: -19 [ 934.672087][ T9] dvb-usb: error while querying for an remote control event. [ 934.815244][ T9] m920x_read = error: -19 [ 934.827530][ T9] dvb-usb: error while querying for an remote control event. [ 934.971792][ T5983] m920x_read = error: -19 [ 934.979253][ T5983] dvb-usb: error while querying for an remote control event. [ 935.142348][ T5983] m920x_read = error: -19 [ 935.157071][ T5983] dvb-usb: error while querying for an remote control event. [ 935.391866][ T9] m920x_read = error: -19 [ 935.401715][ T9] dvb-usb: error while querying for an remote control event. [ 935.561769][ T5983] m920x_read = error: -19 [ 935.585145][ T5983] dvb-usb: error while querying for an remote control event. [ 935.794086][ T5983] m920x_read = error: -19 [ 935.811349][ T5983] dvb-usb: error while querying for an remote control event. [ 935.996801][ T5983] m920x_read = error: -19 [ 936.046048][ T5983] dvb-usb: error while querying for an remote control event. [ 936.252173][ T5983] m920x_read = error: -19 [ 936.292270][ T5983] dvb-usb: error while querying for an remote control event. [ 936.475515][ T9] m920x_read = error: -19 [ 936.501494][ T9] dvb-usb: error while querying for an remote control event. [ 936.652117][ T5983] m920x_read = error: -19 [ 936.661168][ T5983] dvb-usb: error while querying for an remote control event. [ 936.821732][ T9] m920x_read = error: -19 [ 936.876045][ T9] dvb-usb: error while querying for an remote control event. [ 937.063311][ T5983] m920x_read = error: -19 [ 937.085967][ T5983] dvb-usb: error while querying for an remote control event. [ 937.216558][T15688] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3122'. [ 937.238038][ T9] m920x_read = error: -19 [ 937.241753][ T5861] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 937.258638][ T9] dvb-usb: error while querying for an remote control event. [ 937.332464][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'. [ 937.416638][ T9] m920x_read = error: -19 [ 937.441706][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 937.458750][ T9] dvb-usb: error while querying for an remote control event. [ 937.486532][ T5861] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 937.526440][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.552179][ T5861] usb 5-1: Product: syz [ 937.575268][ T5861] usb 5-1: Manufacturer: syz [ 937.602840][ T9] m920x_read = error: -19 [ 937.616510][ T9] dvb-usb: error while querying for an remote control event. [ 937.617907][ T5861] usb 5-1: SerialNumber: syz [ 937.680366][ T5861] usb 5-1: config 0 descriptor?? [ 937.773368][ T9] m920x_read = error: -19 [ 937.791015][ T9] dvb-usb: error while querying for an remote control event. [ 937.863328][T15698] IPv6: Can't replace route, no match found [ 937.941077][ T9] m920x_read = error: -19 [ 937.956338][ T9] dvb-usb: error while querying for an remote control event. [ 938.111808][ T9] m920x_read = error: -19 [ 938.149155][ T9] dvb-usb: error while querying for an remote control event. [ 938.281723][ T9] m920x_read = error: -19 [ 938.298386][ T9] dvb-usb: error while querying for an remote control event. [ 938.324279][ T5861] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 938.345393][ T5861] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 938.362490][ T5861] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 938.441729][ T9] m920x_read = error: -19 [ 938.457720][ T9] dvb-usb: error while querying for an remote control event. [ 938.582354][ T9] m920x_read = error: -19 [ 938.593446][ T9] dvb-usb: error while querying for an remote control event. [ 938.711747][ T9] m920x_read = error: -19 [ 938.721641][ T9] dvb-usb: error while querying for an remote control event. [ 938.821688][ T5951] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 938.841726][ T9] m920x_read = error: -19 [ 938.851210][ T9] dvb-usb: error while querying for an remote control event. [ 938.859766][ T5861] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 938.971776][ T9] m920x_read = error: -19 [ 938.982848][ T9] dvb-usb: error while querying for an remote control event. [ 939.093349][ T5951] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 939.103473][ T5951] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 939.111880][ T9] m920x_read = error: -19 [ 939.116013][ T5951] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 939.128497][ T9] dvb-usb: error while querying for an remote control event. [ 939.131725][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.147583][ T5951] usb 4-1: Product: syz [ 939.151973][ T5951] usb 4-1: Manufacturer: syz [ 939.156982][ T5951] usb 4-1: SerialNumber: syz [ 939.164496][ T5951] usb 4-1: config 0 descriptor?? [ 939.171389][T15713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 939.188663][T15713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 939.262996][ T9] m920x_read = error: -19 [ 939.271652][ T9] dvb-usb: error while querying for an remote control event. [ 939.391746][ T9] m920x_read = error: -19 [ 939.401231][ T9] dvb-usb: error while querying for an remote control event. [ 939.438302][T15713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 939.451883][T15713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 939.534578][ T9] m920x_read = error: -19 [ 939.543455][ T9] dvb-usb: error while querying for an remote control event. [ 939.662111][ T9] m920x_read = error: -19 [ 939.666620][ T9] dvb-usb: error while querying for an remote control event. [ 939.792256][ T9] m920x_read = error: -19 [ 939.801554][ T9] dvb-usb: error while querying for an remote control event. [ 939.866392][ T5951] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 939.921923][ T5983] m920x_read = error: -19 [ 939.926347][ T5983] dvb-usb: error while querying for an remote control event. [ 940.003031][ T5861] usb 5-1: USB disconnect, device number 19 [ 940.041728][ T5983] m920x_read = error: -19 [ 940.047789][ T5983] dvb-usb: error while querying for an remote control event. [ 940.109136][T15734] FAULT_INJECTION: forcing a failure. [ 940.109136][T15734] name failslab, interval 1, probability 0, space 0, times 0 [ 940.131690][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.4.3128 Not tainted syzkaller #0 PREEMPT(full) [ 940.131715][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 940.131726][T15734] Call Trace: [ 940.131733][T15734] [ 940.131741][T15734] dump_stack_lvl+0xe8/0x150 [ 940.131772][T15734] should_fail_ex+0x412/0x560 [ 940.131796][T15734] should_failslab+0xa8/0x100 [ 940.131820][T15734] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 940.131844][T15734] ? __alloc_skb+0x1d0/0x7d0 [ 940.131867][T15734] ? __local_bh_enable_ip+0xd0/0x130 [ 940.131892][T15734] __alloc_skb+0x1d0/0x7d0 [ 940.131921][T15734] netlink_dump+0x1ef/0xe80 [ 940.131953][T15734] ? __pfx_netlink_dump+0x10/0x10 [ 940.131986][T15734] ? netlink_recvmsg+0x5d6/0xa50 [ 940.132007][T15734] ? kmem_cache_free+0x180/0x630 [ 940.132032][T15734] netlink_recvmsg+0x690/0xa50 [ 940.132064][T15734] ? __pfx_netlink_recvmsg+0x10/0x10 [ 940.132090][T15734] ? __lock_acquire+0x6b5/0x2cf0 [ 940.132111][T15734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 940.132132][T15734] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 940.132152][T15734] ? security_socket_recvmsg+0x7e/0x2c0 [ 940.132175][T15734] ? __pfx_netlink_recvmsg+0x10/0x10 [ 940.132199][T15734] sock_recvmsg+0x172/0x1b0 [ 940.132224][T15734] ____sys_recvmsg+0x1e6/0x4a0 [ 940.132252][T15734] ? __pfx_____sys_recvmsg+0x10/0x10 [ 940.132293][T15734] ? import_iovec+0x73/0xa0 [ 940.132320][T15734] ___sys_recvmsg+0x215/0x590 [ 940.132338][T15734] ? get_pid_task+0x20/0x1f0 [ 940.132359][T15734] ? __pfx____sys_recvmsg+0x10/0x10 [ 940.132383][T15734] ? __fget_files+0x2a/0x420 [ 940.132415][T15734] ? __fget_files+0x3a0/0x420 [ 940.132439][T15734] __x64_sys_recvmsg+0x1ba/0x2a0 [ 940.132459][T15734] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 940.132487][T15734] ? __pfx_ksys_write+0x10/0x10 [ 940.132515][T15734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.132534][T15734] do_syscall_64+0x15f/0xf80 [ 940.132554][T15734] ? clear_bhb_loop+0x40/0x90 [ 940.132578][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.132596][T15734] RIP: 0033:0x7f8807f9c819 [ 940.132614][T15734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.132627][T15734] RSP: 002b:00007f8808e94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 940.132646][T15734] RAX: ffffffffffffffda RBX: 00007f8808215fa0 RCX: 00007f8807f9c819 [ 940.132658][T15734] RDX: 0000000000002000 RSI: 0000200000002980 RDI: 0000000000000003 [ 940.132669][T15734] RBP: 00007f8808e94090 R08: 0000000000000000 R09: 0000000000000000 [ 940.132679][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.132689][T15734] R13: 00007f8808216038 R14: 00007f8808215fa0 R15: 00007f880833fa48 [ 940.132717][T15734] [ 940.431626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 940.522830][T13673] m920x_read = error: -19 [ 940.527268][T13673] dvb-usb: error while querying for an remote control event. [ 940.570793][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 940.641757][ T5983] m920x_read = error: -19 [ 940.646156][ T5983] dvb-usb: error while querying for an remote control event. [ 940.711686][ T9] usb 1-1: device descriptor read/64, error -71 [ 940.761712][ T5983] m920x_read = error: -19 [ 940.766131][ T5983] dvb-usb: error while querying for an remote control event. [ 940.789380][ T5951] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 940.818302][ T5951] usb 4-1: USB disconnect, device number 22 [ 940.891827][ T5983] m920x_read = error: -19 [ 940.898457][ T5983] dvb-usb: error while querying for an remote control event. [ 940.962320][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 941.032254][ T5983] m920x_read = error: -19 [ 941.047740][ T5983] dvb-usb: error while querying for an remote control event. [ 941.101812][ T9] usb 1-1: device descriptor read/64, error -71 [ 941.181980][ T5983] m920x_read = error: -19 [ 941.198460][ T5983] dvb-usb: error while querying for an remote control event. [ 941.222303][ T9] usb usb1-port1: attempt power cycle [ 941.331866][ T5983] m920x_read = error: -19 [ 941.345045][ T5983] dvb-usb: error while querying for an remote control event. [ 941.492745][ T5983] m920x_read = error: -19 [ 941.506857][ T5983] dvb-usb: error while querying for an remote control event. [ 941.581729][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 941.633588][ T9] usb 1-1: device descriptor read/8, error -71 [ 941.644954][ T5983] m920x_read = error: -19 [ 941.657998][ T5983] dvb-usb: error while querying for an remote control event. [ 941.809470][T15317] m920x_read = error: -19 [ 941.840112][T15317] dvb-usb: error while querying for an remote control event. [ 941.897677][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 941.957696][ T9] usb 1-1: device descriptor read/8, error -71 [ 941.983008][T15745] tun0: tun_chr_ioctl cmd 1074025675 [ 942.005893][T15745] tun0: persist enabled [ 942.010233][ T5983] m920x_read = error: -19 [ 942.018137][ T5983] dvb-usb: error while querying for an remote control event. [ 942.029336][T15745] FAULT_INJECTION: forcing a failure. [ 942.029336][T15745] name failslab, interval 1, probability 0, space 0, times 0 [ 942.092041][ T9] usb usb1-port1: unable to enumerate USB device [ 942.112782][T15745] CPU: 1 UID: 0 PID: 15745 Comm: syz.3.3131 Not tainted syzkaller #0 PREEMPT(full) [ 942.112800][T15745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 942.112808][T15745] Call Trace: [ 942.112812][T15745] [ 942.112818][T15745] dump_stack_lvl+0xe8/0x150 [ 942.112837][T15745] should_fail_ex+0x412/0x560 [ 942.112853][T15745] should_failslab+0xa8/0x100 [ 942.112869][T15745] __kmalloc_noprof+0xe8/0x760 [ 942.112882][T15745] ? tomoyo_encode+0x28b/0x550 [ 942.112897][T15745] tomoyo_encode+0x28b/0x550 [ 942.112911][T15745] tomoyo_realpath_from_path+0x58d/0x5d0 [ 942.112928][T15745] ? tomoyo_path_number_perm+0x219/0x630 [ 942.112944][T15745] tomoyo_path_number_perm+0x246/0x630 [ 942.112960][T15745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 942.112975][T15745] ? __lock_acquire+0x6b5/0x2cf0 [ 942.112995][T15745] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 942.113017][T15745] ? __fget_files+0x2a/0x420 [ 942.113029][T15745] ? __fget_files+0x2a/0x420 [ 942.113038][T15745] ? __fget_files+0x3a0/0x420 [ 942.113047][T15745] ? __fget_files+0x2a/0x420 [ 942.113059][T15745] security_file_ioctl+0xc3/0x2a0 [ 942.113076][T15745] __se_sys_ioctl+0x47/0x170 [ 942.113089][T15745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.113100][T15745] do_syscall_64+0x15f/0xf80 [ 942.113117][T15745] ? trace_irq_disable+0x3b/0x140 [ 942.113131][T15745] ? clear_bhb_loop+0x40/0x90 [ 942.113144][T15745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.113154][T15745] RIP: 0033:0x7f7cd579c819 [ 942.113165][T15745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.113174][T15745] RSP: 002b:00007f7cd66d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.113185][T15745] RAX: ffffffffffffffda RBX: 00007f7cd5a15fa0 RCX: 00007f7cd579c819 [ 942.113193][T15745] RDX: 0000000000000000 RSI: 00000000400454cb RDI: 0000000000000003 [ 942.113199][T15745] RBP: 00007f7cd66d1090 R08: 0000000000000000 R09: 0000000000000000 [ 942.113205][T15745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.113211][T15745] R13: 00007f7cd5a16038 R14: 00007f7cd5a15fa0 R15: 00007f7cd5b3fa48 [ 942.113226][T15745] [ 942.115378][T15745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 942.375895][T15745] tun0: tun_chr_ioctl cmd 1074025675 [ 942.388861][T15745] tun0: persist disabled [ 942.416886][ T9] m920x_read = error: -19 [ 942.449464][ T9] dvb-usb: error while querying for an remote control event. [ 942.595772][ T5983] m920x_read = error: -19 [ 942.627956][ T5983] dvb-usb: error while querying for an remote control event. [ 942.771737][ T5983] m920x_read = error: -19 [ 942.777447][T15750] FAULT_INJECTION: forcing a failure. [ 942.777447][T15750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.790602][ T5983] dvb-usb: error while querying for an remote control event. [ 942.805878][T15750] CPU: 0 UID: 0 PID: 15750 Comm: syz.5.3133 Not tainted syzkaller #0 PREEMPT(full) [ 942.805906][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 942.805918][T15750] Call Trace: [ 942.805926][T15750] [ 942.805934][T15750] dump_stack_lvl+0xe8/0x150 [ 942.805964][T15750] should_fail_ex+0x412/0x560 [ 942.805991][T15750] _copy_from_user+0x2d/0xb0 [ 942.806022][T15750] sctp_setsockopt+0x1c4/0x12c0 [ 942.806041][T15750] ? sock_common_setsockopt+0x36/0xc0 [ 942.806064][T15750] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 942.806089][T15750] do_sock_setsockopt+0x17c/0x1b0 [ 942.806111][T15750] __x64_sys_setsockopt+0x13d/0x1b0 [ 942.806131][T15750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.806151][T15750] do_syscall_64+0x15f/0xf80 [ 942.806171][T15750] ? trace_irq_disable+0x3b/0x140 [ 942.806189][T15750] ? clear_bhb_loop+0x40/0x90 [ 942.806211][T15750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.806229][T15750] RIP: 0033:0x7f050099c819 [ 942.806246][T15750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.806266][T15750] RSP: 002b:00007f0501850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 942.806285][T15750] RAX: ffffffffffffffda RBX: 00007f0500c15fa0 RCX: 00007f050099c819 [ 942.806299][T15750] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 942.806310][T15750] RBP: 00007f0501850090 R08: 000000000000009c R09: 0000000000000000 [ 942.806322][T15750] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 942.806333][T15750] R13: 00007f0500c16038 R14: 00007f0500c15fa0 R15: 00007f0500d3fa48 [ 942.806361][T15750] [ 942.982034][ T9] m920x_read = error: -19 [ 942.986594][ T9] dvb-usb: error while querying for an remote control event. [ 943.171739][ T9] m920x_read = error: -19 [ 943.179825][ T9] dvb-usb: error while querying for an remote control event. [ 943.257179][T15752] vxcan3: entered promiscuous mode [ 943.303204][ T5983] m920x_read = error: -19 [ 943.329786][ T5983] dvb-usb: error while querying for an remote control event. [ 943.461695][ T5983] m920x_read = error: -19 [ 943.466122][ T5983] dvb-usb: error while querying for an remote control event. [ 943.594433][T15317] m920x_read = error: -19 [ 943.598870][T15317] dvb-usb: error while querying for an remote control event. [ 943.721720][T15317] m920x_read = error: -19 [ 943.729125][T15317] dvb-usb: error while querying for an remote control event. [ 943.732658][ T5951] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 943.843290][T15317] m920x_read = error: -19 [ 943.850906][T15317] dvb-usb: error while querying for an remote control event. [ 943.904557][ T5951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 943.921106][ T5951] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 943.943934][ T5951] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 943.963840][T15317] m920x_read = error: -19 [ 943.968446][T15317] dvb-usb: error while querying for an remote control event. [ 943.984459][ T5951] usb 4-1: string descriptor 0 read error: -22 [ 943.998430][ T5951] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 944.029213][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.091729][ T9] m920x_read = error: -19 [ 944.096360][ T9] dvb-usb: error while querying for an remote control event. [ 944.217070][ T9] m920x_read = error: -19 [ 944.222318][ T9] dvb-usb: error while querying for an remote control event. [ 944.281691][T15317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 944.332274][ T5983] m920x_read = error: -19 [ 944.336811][ T5983] dvb-usb: error while querying for an remote control event. [ 944.445936][T15317] usb 7-1: Using ep0 maxpacket: 32 [ 944.456717][ T5983] m920x_read = error: -19 [ 944.465152][ T5983] dvb-usb: error while querying for an remote control event. [ 944.483835][T15317] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 944.499010][T15317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.517493][T15317] usb 7-1: Product: syz [ 944.527672][T15317] usb 7-1: Manufacturer: syz [ 944.537830][T15317] usb 7-1: SerialNumber: syz [ 944.563538][T15317] usb 7-1: config 0 descriptor?? [ 944.583045][T15317] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 944.601722][ T9] m920x_read = error: -19 [ 944.609780][ T9] dvb-usb: error while querying for an remote control event. [ 944.731819][ T9] m920x_read = error: -19 [ 944.736780][ T9] dvb-usb: error while querying for an remote control event. [ 944.847877][ T5951] usb 4-1: Can't set UAC3 power state to 1 for id 10 [ 944.857818][ T5951] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 944.871747][ T9] m920x_read = error: -19 [ 944.875532][ T5951] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 944.879568][ T9] dvb-usb: error while querying for an remote control event. [ 944.960192][ T5951] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 945.011904][ T9] m920x_read = error: -19 [ 945.018254][ T9] dvb-usb: error while querying for an remote control event. [ 945.071497][ T5951] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 945.109982][ T5951] usb 4-1: USB disconnect, device number 23 [ 945.161722][ T9] m920x_read = error: -19 [ 945.183189][ T9] dvb-usb: error while querying for an remote control event. [ 945.323593][ T9] m920x_read = error: -19 [ 945.338069][ T9] dvb-usb: error while querying for an remote control event. [ 945.484425][ T9] m920x_read = error: -19 [ 945.501257][ T9] dvb-usb: error while querying for an remote control event. [ 945.576332][T15791] ip6t_srh: unknown srh invflags 4000 [ 945.641823][ T5983] m920x_read = error: -19 [ 945.660458][ T5983] dvb-usb: error while querying for an remote control event. [ 945.811818][ T5983] m920x_read = error: -19 [ 945.829883][ T5983] dvb-usb: error while querying for an remote control event. [ 945.915527][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.983166][ T9] m920x_read = error: -19 [ 946.008119][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.017564][ T9] dvb-usb: error while querying for an remote control event. [ 946.161913][ T5983] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 946.191183][ T9] m920x_read = error: -19 [ 946.211769][ T9] dvb-usb: error while querying for an remote control event. [ 946.351895][ T9] m920x_read = error: -19 [ 946.362603][ T5983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 946.373266][ T9] dvb-usb: error while querying for an remote control event. [ 946.412922][ T5983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.448333][ T5983] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 946.471937][ T5983] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 946.483406][ T5983] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 946.496710][ T5983] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 946.506361][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.517661][ T5983] usb 4-1: Product: syz [ 946.522182][ T5983] usb 4-1: Manufacturer: syz [ 946.536135][ T5983] usb 4-1: SerialNumber: syz [ 946.541806][ T9] m920x_read = error: -19 [ 946.551828][ T9] dvb-usb: error while querying for an remote control event. [ 946.668217][T15802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3149'. [ 946.703069][ T9] m920x_read = error: -19 [ 946.742024][ T9] dvb-usb: error while querying for an remote control event. [ 946.826391][T15317] gspca_ov534_9: reg_r err -71 [ 946.882498][ T6316] m920x_read = error: -19 [ 946.890282][ T6316] dvb-usb: error while querying for an remote control event. [ 947.011753][ T6316] m920x_read = error: -19 [ 947.025996][ T6316] dvb-usb: error while querying for an remote control event. [ 947.031717][T15516] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 947.123003][T15317] gspca_ov534_9: Unknown sensor 0000 [ 947.123225][T15317] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 947.136645][T13673] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 947.172755][ T6316] m920x_read = error: -19 [ 947.177257][ T6316] dvb-usb: error while querying for an remote control event. [ 947.193159][T15317] usb 7-1: USB disconnect, device number 2 [ 947.227821][T15516] usb 1-1: Using ep0 maxpacket: 32 [ 947.261299][T15516] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 947.300559][T15516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.312205][ T6316] m920x_read = error: -19 [ 947.329242][T13673] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 947.343195][ T6316] dvb-usb: error while querying for an remote control event. [ 947.345584][T15516] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 947.386534][T13673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.422423][T15516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.425195][T13673] usb 6-1: config 0 has no interface number 0 [ 947.477772][T13673] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 947.506325][T15516] usb 1-1: config 0 descriptor?? [ 947.524632][T15317] m920x_read = error: -19 [ 947.537286][T15317] dvb-usb: error while querying for an remote control event. [ 947.546666][T13673] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.623704][T13673] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 947.650673][T13673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.669106][T13673] usb 6-1: Product: syz [ 947.680899][T13673] usb 6-1: Manufacturer: syz [ 947.693591][T15317] m920x_read = error: -19 [ 947.708876][T13673] usb 6-1: SerialNumber: syz [ 947.723486][T15317] dvb-usb: error while querying for an remote control event. [ 947.760596][T13673] usb 6-1: config 0 descriptor?? [ 947.882626][T15317] m920x_read = error: -19 [ 947.895427][T15317] dvb-usb: error while querying for an remote control event. [ 947.985249][T15516] logitech 0003:046D:C29C.0037: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 948.051742][T15317] m920x_read = error: -19 [ 948.081053][T15317] dvb-usb: error while querying for an remote control event. [ 948.200390][T15516] logitech 0003:046D:C29C.0037: no inputs found [ 948.217817][T13673] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 948.229026][T15317] m920x_read = error: -19 [ 948.284341][T15317] dvb-usb: error while querying for an remote control event. [ 948.308635][T15516] usb 1-1: USB disconnect, device number 9 [ 948.342854][T13673] usb 6-1: USB disconnect, device number 3 [ 948.388378][T15817] fido_id[15817]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C29C.0037/report_descriptor': No such device [ 948.456249][ T5966] m920x_read = error: -19 [ 948.469368][ T5966] dvb-usb: error while querying for an remote control event. [ 948.631797][T13673] m920x_read = error: -19 [ 948.663960][T13673] dvb-usb: error while querying for an remote control event. [ 948.801960][T13673] m920x_read = error: -19 [ 948.816336][T13673] dvb-usb: error while querying for an remote control event. [ 948.951887][T13673] m920x_read = error: -19 [ 948.987955][T13673] dvb-usb: error while querying for an remote control event. [ 949.015616][ T5983] usb 4-1: 0:2 : does not exist [ 949.123596][T13673] m920x_read = error: -19 [ 949.158867][T13673] dvb-usb: error while querying for an remote control event. [ 949.291709][T13673] m920x_read = error: -19 [ 949.312571][T13673] dvb-usb: error while querying for an remote control event. [ 949.323331][ T5983] usb 4-1: USB disconnect, device number 24 [ 949.356903][ C1] sd 0:0:1:0: [sda] tag#946 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 949.367259][ C1] sd 0:0:1:0: [sda] tag#946 CDB: Read(6) 08 00 00 00 00 00 [ 949.462185][T13673] m920x_read = error: -19 [ 949.468695][T13673] dvb-usb: error while querying for an remote control event. [ 949.509384][T14035] udevd[14035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.518533][T15839] fuse: Bad value for 'fd' [ 949.602915][T15317] m920x_read = error: -19 [ 949.613744][T15317] dvb-usb: error while querying for an remote control event. [ 949.732916][T15317] m920x_read = error: -19 [ 949.738198][T15317] dvb-usb: error while querying for an remote control event. [ 949.792675][ T5983] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 949.864031][T15317] m920x_read = error: -19 [ 949.868582][T15317] dvb-usb: error while querying for an remote control event. [ 949.941774][ T5983] usb 4-1: device descriptor read/64, error -71 [ 949.984333][T15317] m920x_read = error: -19 [ 949.991884][T15317] dvb-usb: error while querying for an remote control event. [ 950.103232][T15317] m920x_read = error: -19 [ 950.107932][T15317] dvb-usb: error while querying for an remote control event. [ 950.191914][ T5983] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 950.222665][T15317] m920x_read = error: -19 [ 950.227324][T15317] dvb-usb: error while querying for an remote control event. [ 950.333688][ T5983] usb 4-1: device descriptor read/64, error -71 [ 950.352654][T15317] m920x_read = error: -19 [ 950.357118][T15317] dvb-usb: error while querying for an remote control event. [ 950.442942][ T5983] usb usb4-port1: attempt power cycle [ 950.472055][ T5966] m920x_read = error: -19 [ 950.481259][ T5966] dvb-usb: error while querying for an remote control event. [ 950.623532][T15317] m920x_read = error: -19 [ 950.639285][T15317] dvb-usb: error while querying for an remote control event. [ 950.771941][ T5966] m920x_read = error: -19 [ 950.779347][ T5966] dvb-usb: error while querying for an remote control event. [ 950.788646][ T5983] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 950.832318][ T5983] usb 4-1: device descriptor read/8, error -71 [ 950.922700][ T6316] m920x_read = error: -19 [ 950.927229][T13673] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 950.934953][ T6316] dvb-usb: error while querying for an remote control event. [ 950.997787][T15858] FAULT_INJECTION: forcing a failure. [ 950.997787][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 951.010910][T15858] CPU: 0 UID: 0 PID: 15858 Comm: syz.0.3169 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.010941][T15858] Tainted: [L]=SOFTLOCKUP [ 951.010948][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 951.010959][T15858] Call Trace: [ 951.010967][T15858] [ 951.010975][T15858] dump_stack_lvl+0xe8/0x150 [ 951.011005][T15858] should_fail_ex+0x412/0x560 [ 951.011032][T15858] should_failslab+0xa8/0x100 [ 951.011055][T15858] ? vm_area_alloc+0x24/0x140 [ 951.011078][T15858] kmem_cache_alloc_noprof+0x87/0x650 [ 951.011106][T15858] vm_area_alloc+0x24/0x140 [ 951.011129][T15858] create_init_stack_vma+0x57/0x670 [ 951.011149][T15858] ? do_raw_spin_unlock+0xf5/0x210 [ 951.011171][T15858] alloc_bprm+0x495/0x5c0 [ 951.011194][T15858] do_execveat_common+0x175/0x690 [ 951.011228][T15858] ? do_getname+0x151/0x250 [ 951.011252][T15858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.011273][T15858] __x64_sys_execve+0x97/0xc0 [ 951.011295][T15858] do_syscall_64+0x15f/0xf80 [ 951.011315][T15858] ? trace_irq_disable+0x3b/0x140 [ 951.011333][T15858] ? clear_bhb_loop+0x40/0x90 [ 951.011356][T15858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.011373][T15858] RIP: 0033:0x7f0a98b9c819 [ 951.011390][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.011405][T15858] RSP: 002b:00007f0a99aee028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 951.011425][T15858] RAX: ffffffffffffffda RBX: 00007f0a98e15fa0 RCX: 00007f0a98b9c819 [ 951.011438][T15858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 951.011450][T15858] RBP: 00007f0a99aee090 R08: 0000000000000000 R09: 0000000000000000 [ 951.011462][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.011472][T15858] R13: 00007f0a98e16038 R14: 00007f0a98e15fa0 R15: 00007f0a98f3fa48 [ 951.011501][T15858] [ 951.205301][ T6316] m920x_read = error: -19 [ 951.209718][ T6316] dvb-usb: error while querying for an remote control event. [ 951.294270][ T5983] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 951.302156][ T5966] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 951.329025][ T6316] m920x_read = error: -19 [ 951.333609][ T6316] dvb-usb: error while querying for an remote control event. [ 951.342158][ T5983] usb 4-1: device descriptor read/8, error -71 [ 951.349926][T13673] usb 7-1: unable to get BOS descriptor or descriptor too short [ 951.360327][T13673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.371129][T13673] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 951.382892][T13673] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 951.396331][T13673] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 951.411222][T13673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.428879][T13673] usb 7-1: Product: syz [ 951.436656][T13673] usb 7-1: Manufacturer: syz [ 951.441727][T15317] m920x_read = error: -19 [ 951.446267][T15317] dvb-usb: error while querying for an remote control event. [ 951.454396][ T5983] usb usb4-port1: unable to enumerate USB device [ 951.464611][T13673] usb 7-1: SerialNumber: syz [ 951.475949][ T5966] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 951.489786][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.510674][ T5966] usb 5-1: Product: syz [ 951.514979][ T5966] usb 5-1: Manufacturer: syz [ 951.519594][ T5966] usb 5-1: SerialNumber: syz [ 951.549915][ T5966] usb 5-1: config 0 descriptor?? [ 951.581742][T15317] m920x_read = error: -19 [ 951.586204][T15317] dvb-usb: error while querying for an remote control event. [ 951.711739][T15317] m920x_read = error: -19 [ 951.716667][T15317] dvb-usb: error while querying for an remote control event. [ 951.852495][ T6316] m920x_read = error: -19 [ 951.856957][ T6316] dvb-usb: error while querying for an remote control event. [ 951.972808][T15317] m920x_read = error: -19 [ 951.978225][T15317] dvb-usb: error while querying for an remote control event. [ 952.092271][ T6316] m920x_read = error: -19 [ 952.096756][ T5966] usb 5-1: Firmware version (0.0) predates our first public release. [ 952.114287][ T6316] dvb-usb: error while querying for an remote control event. [ 952.126143][ T5966] usb 5-1: Please update to version 0.2 or newer [ 952.253889][T15317] m920x_read = error: -19 [ 952.258459][T15317] dvb-usb: error while querying for an remote control event. [ 952.381830][T15317] m920x_read = error: -19 [ 952.393593][T15317] dvb-usb: error while querying for an remote control event. [ 952.532010][T15317] m920x_read = error: -19 [ 952.536925][T15317] dvb-usb: error while querying for an remote control event. [ 952.652719][T15317] m920x_read = error: -19 [ 952.662211][T15317] dvb-usb: error while querying for an remote control event. [ 952.793603][T15317] m920x_read = error: -19 [ 952.803891][T15317] dvb-usb: error while querying for an remote control event. [ 952.932284][T15317] m920x_read = error: -19 [ 952.945075][T15317] dvb-usb: error while querying for an remote control event. [ 953.057830][ T5966] usb 5-1: USB disconnect, device number 20 [ 953.114104][T15317] m920x_read = error: -19 [ 953.132276][T15317] dvb-usb: error while querying for an remote control event. [ 953.158891][T13673] usb 7-1: USB disconnect, device number 3 [ 953.312970][T15884] loop5: detected capacity change from 0 to 7 [ 953.315838][T15317] m920x_read = error: -19 [ 953.361233][T15317] dvb-usb: error while querying for an remote control event. [ 953.471703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 953.483726][T13902] udevd[13902]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.516275][T15317] m920x_read = error: -19 [ 953.548879][T15317] dvb-usb: error while querying for an remote control event. [ 953.711876][T15317] m920x_read = error: -19 [ 953.722560][T15317] dvb-usb: error while querying for an remote control event. [ 953.842823][T15317] m920x_read = error: -19 [ 953.851447][T15317] dvb-usb: error while querying for an remote control event. [ 953.868089][ T5966] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 953.946951][T15884] Dev loop5: unable to read RDB block 7 [ 953.972942][T15884] loop5: unable to read partition table [ 953.984459][T13673] m920x_read = error: -19 [ 953.994813][T13673] dvb-usb: error while querying for an remote control event. [ 954.001459][T15884] loop5: partition table beyond EOD, truncated [ 954.038734][T15884] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 954.056870][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 954.092050][ T5966] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 954.122785][ T5966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.135514][T13673] m920x_read = error: -19 [ 954.142617][T13673] dvb-usb: error while querying for an remote control event. [ 954.152205][ T5966] usb 5-1: config 0 has no interface number 0 [ 954.158649][ T5966] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 954.170889][ T5966] usb 5-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 954.228903][ T5966] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 954.272111][T15317] m920x_read = error: -19 [ 954.283274][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.296307][T15317] dvb-usb: error while querying for an remote control event. [ 954.335591][ T5966] usb 5-1: Product: syz [ 954.340256][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3178'. [ 954.367637][ T5966] usb 5-1: Manufacturer: syz [ 954.373050][T15896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.410382][ T5966] usb 5-1: SerialNumber: syz [ 954.435323][T15896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.450421][T15317] m920x_read = error: -19 [ 954.465214][ T5966] usb 5-1: config 0 descriptor?? [ 954.475412][T15317] dvb-usb: error while querying for an remote control event. [ 954.502762][ T5952] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 954.527893][ T5966] ttusb_dec_send_command: command bulk message failed: error -8 [ 954.575425][ T5966] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8 [ 954.590638][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 954.609347][ T5966] usbhid 5-1:0.113: couldn't find an input interrupt endpoint [ 954.617288][T13673] m920x_read = error: -19 [ 954.625236][T13673] dvb-usb: error while querying for an remote control event. [ 954.679621][ T5952] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 954.708049][ T5952] usb 7-1: config 0 has no interface number 0 [ 954.735439][ T5952] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 954.761713][ T5966] m920x_read = error: -19 [ 954.788332][ T5952] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.793563][ T5966] dvb-usb: error while querying for an remote control event. [ 954.843056][ T5952] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 954.863789][T15516] usb 5-1: USB disconnect, device number 21 [ 954.893069][ T5952] usb 7-1: config 0 interface 1 has no altsetting 0 [ 954.915159][ T5952] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 954.939375][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.963781][ T5952] usb 7-1: config 0 descriptor?? [ 954.998916][ T5966] m920x_read = error: -19 [ 955.030749][ T5966] dvb-usb: error while querying for an remote control event. [ 955.085972][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3182'. [ 955.174439][T13673] m920x_read = error: -19 [ 955.179066][T13673] dvb-usb: error while querying for an remote control event. [ 955.291844][T13673] m920x_read = error: -19 [ 955.298403][T13673] dvb-usb: error while querying for an remote control event. [ 955.401689][ T5966] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 955.431009][T13673] m920x_read = error: -19 [ 955.444813][T13673] dvb-usb: error while querying for an remote control event. [ 955.573324][T13673] m920x_read = error: -19 [ 955.581107][T13673] dvb-usb: error while querying for an remote control event. [ 955.589879][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 955.597000][ T5966] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 955.603894][ T5952] uclogic 0003:145F:0212.0038: failed retrieving string descriptor #100: -71 [ 955.611525][ T5966] usb 4-1: config 0 has no interface number 0 [ 955.627937][ T5966] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 955.644645][ T5952] uclogic 0003:145F:0212.0038: failed retrieving pen parameters: -71 [ 955.647115][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.675311][ T5952] uclogic 0003:145F:0212.0038: pen probing failed: -71 [ 955.698994][ T5952] uclogic 0003:145F:0212.0038: failed probing parameters: -71 [ 955.711759][T13673] m920x_read = error: -19 [ 955.725498][ T5952] uclogic 0003:145F:0212.0038: probe with driver uclogic failed with error -71 [ 955.788891][ T5952] usb 7-1: USB disconnect, device number 4 [ 955.823044][ T5966] usb 4-1: Product: syz [ 955.829009][T13673] dvb-usb: error while querying for an remote control event. [ 955.838350][ T5966] usb 4-1: Manufacturer: syz [ 955.868503][ T5966] usb 4-1: SerialNumber: syz [ 955.933072][ T5966] usb 4-1: config 0 descriptor?? [ 955.964018][ T5966] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 955.973907][T13673] m920x_read = error: -19 [ 955.981984][T13673] dvb-usb: error while querying for an remote control event. [ 956.121801][T13673] m920x_read = error: -19 [ 956.140093][T13673] dvb-usb: error while querying for an remote control event. [ 956.236817][ T5966] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 956.283163][T13673] m920x_read = error: -19 [ 956.287969][T13673] dvb-usb: error while querying for an remote control event. [ 956.302187][ T5966] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 956.441734][ T5966] m920x_read = error: -19 [ 956.486035][ T5966] dvb-usb: error while querying for an remote control event. [ 956.651885][ T5966] m920x_read = error: -19 [ 956.676850][ T5966] dvb-usb: error while querying for an remote control event. [ 956.764639][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 956.765058][ T5861] usb 4-1: USB disconnect, device number 29 [ 956.812965][ T5966] m920x_read = error: -19 [ 956.814008][ T5861] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 956.820771][ T5966] dvb-usb: error while querying for an remote control event. [ 956.863059][T15516] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 956.874224][T15941] FAULT_INJECTION: forcing a failure. [ 956.874224][T15941] name failslab, interval 1, probability 0, space 0, times 0 [ 956.906936][T15941] CPU: 0 UID: 0 PID: 15941 Comm: syz.4.3194 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.906966][T15941] Tainted: [L]=SOFTLOCKUP [ 956.906972][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 956.906982][T15941] Call Trace: [ 956.906990][T15941] [ 956.906998][T15941] dump_stack_lvl+0xe8/0x150 [ 956.907028][T15941] should_fail_ex+0x412/0x560 [ 956.907052][T15941] should_failslab+0xa8/0x100 [ 956.907077][T15941] __kmalloc_noprof+0xe8/0x760 [ 956.907098][T15941] ? tomoyo_encode+0x28b/0x550 [ 956.907122][T15941] tomoyo_encode+0x28b/0x550 [ 956.907145][T15941] tomoyo_realpath_from_path+0x58d/0x5d0 [ 956.907173][T15941] ? tomoyo_path_number_perm+0x219/0x630 [ 956.907198][T15941] tomoyo_path_number_perm+0x246/0x630 [ 956.907226][T15941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 956.907252][T15941] ? __lock_acquire+0x6b5/0x2cf0 [ 956.907277][T15941] ? __pfx___mutex_lock+0x10/0x10 [ 956.907325][T15941] ? __fget_files+0x2a/0x420 [ 956.907346][T15941] ? __fget_files+0x2a/0x420 [ 956.907363][T15941] ? __fget_files+0x3a0/0x420 [ 956.907380][T15941] ? __fget_files+0x2a/0x420 [ 956.907401][T15941] security_file_ioctl+0xc3/0x2a0 [ 956.907429][T15941] __se_sys_ioctl+0x47/0x170 [ 956.907452][T15941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.907472][T15941] do_syscall_64+0x15f/0xf80 [ 956.907491][T15941] ? trace_irq_disable+0x3b/0x140 [ 956.907510][T15941] ? clear_bhb_loop+0x40/0x90 [ 956.907532][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.907550][T15941] RIP: 0033:0x7f8807f9c4ab [ 956.907568][T15941] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 956.907582][T15941] RSP: 002b:00007f8808e92450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.907601][T15941] RAX: ffffffffffffffda RBX: 0000200000fe8000 RCX: 00007f8807f9c4ab [ 956.907613][T15941] RDX: 00007f8808e92bd0 RSI: 000000004020ae46 RDI: 0000000000000005 [ 956.907624][T15941] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000043 [ 956.907633][T15941] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000fec00000 [ 956.907643][T15941] R13: 00007f8808e92bd0 R14: 0000200000fed000 R15: 0000000000000005 [ 956.907670][T15941] [ 956.907710][T15941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 956.911896][ T5952] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 956.972513][T13673] m920x_read = error: -19 [ 956.975629][ T5861] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 957.171535][ T5861] quatech2 4-1:0.51: device disconnected [ 957.199437][T13673] dvb-usb: error while querying for an remote control event. [ 957.243085][T15516] usb 7-1: Using ep0 maxpacket: 8 [ 957.250161][T15516] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 957.258661][T15516] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.272351][T15516] usb 7-1: config 0 has no interface number 0 [ 957.280078][T15516] usb 7-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.295399][T15516] usb 7-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 957.319171][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 957.332585][T13673] m920x_read = error: -19 [ 957.335121][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 957.370875][T15516] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 957.392350][T15516] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.400951][ T5952] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 957.413883][T13673] dvb-usb: error while querying for an remote control event. [ 957.430721][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.442268][T15516] usb 7-1: Product: syz [ 957.449508][T15516] usb 7-1: Manufacturer: syz [ 957.455100][ T5952] usb 1-1: Product: syz [ 957.465724][T15516] usb 7-1: SerialNumber: syz [ 957.475065][ T5952] usb 1-1: Manufacturer: syz [ 957.496137][ T5952] usb 1-1: SerialNumber: syz [ 957.501008][T15516] usb 7-1: config 0 descriptor?? [ 957.528633][T15516] ttusb_dec_send_command: command bulk message failed: error -8 [ 957.541849][T13673] m920x_read = error: -19 [ 957.552155][ T5952] usb 1-1: config 0 descriptor?? [ 957.558961][T15516] ttusb-dec 7-1:0.113: probe with driver ttusb-dec failed with error -8 [ 957.580446][T13673] dvb-usb: error while querying for an remote control event. [ 957.594048][T15516] usbhid 7-1:0.113: couldn't find an input interrupt endpoint [ 957.607954][T15945] netlink: 'syz.3.3196': attribute type 2 has an invalid length. [ 957.626578][T15945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 957.655332][T15945] netlink: 'syz.3.3196': attribute type 2 has an invalid length. [ 957.667721][T15945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 957.743034][T13673] m920x_read = error: -19 [ 957.758696][T13673] dvb-usb: error while querying for an remote control event. [ 957.883835][T13673] usb 7-1: USB disconnect, device number 5 [ 957.956374][ T5966] m920x_read = error: -19 [ 957.971471][ T5966] dvb-usb: error while querying for an remote control event. [ 958.061306][T15939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3192'. [ 958.092974][T15939] openvswitch: netlink: Flow key attr not present in new flow. [ 958.131719][T13673] m920x_read = error: -19 [ 958.147412][T13673] dvb-usb: error while querying for an remote control event. [ 958.262135][T15955] netlink: 'syz.5.3200': attribute type 29 has an invalid length. [ 958.292203][T13673] m920x_read = error: -19 [ 958.298853][T15955] netlink: 'syz.5.3200': attribute type 29 has an invalid length. [ 958.313175][T13673] dvb-usb: error while querying for an remote control event. [ 958.329050][T15955] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3200'. [ 958.432302][ T5966] m920x_read = error: -19 [ 958.445603][ T5966] dvb-usb: error while querying for an remote control event. [ 958.485745][ T5952] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 958.553725][T15949] FAULT_INJECTION: forcing a failure. [ 958.553725][T15949] name failslab, interval 1, probability 0, space 0, times 0 [ 958.572747][ T5966] m920x_read = error: -19 [ 958.589933][ T5966] dvb-usb: error while querying for an remote control event. [ 958.593968][T15949] CPU: 1 UID: 0 PID: 15949 Comm: syz.3.3198 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.593997][T15949] Tainted: [L]=SOFTLOCKUP [ 958.594004][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.594015][T15949] Call Trace: [ 958.594022][T15949] [ 958.594030][T15949] dump_stack_lvl+0xe8/0x150 [ 958.594060][T15949] should_fail_ex+0x412/0x560 [ 958.594086][T15949] should_failslab+0xa8/0x100 [ 958.594113][T15949] __kmalloc_cache_noprof+0x88/0x660 [ 958.594134][T15949] ? __lock_acquire+0x6b5/0x2cf0 [ 958.594155][T15949] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 958.594180][T15949] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 958.594206][T15949] tcp_sendmsg_locked+0x4b82/0x5460 [ 958.594231][T15949] ? tcp_sendmsg_locked+0x361/0x5460 [ 958.594249][T15949] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 958.594277][T15949] ? __lock_acquire+0x6b5/0x2cf0 [ 958.594323][T15949] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 958.594349][T15949] ? tcp_sendmsg+0x21/0x50 [ 958.594370][T15949] ? __local_bh_enable_ip+0xd0/0x130 [ 958.594393][T15949] ? __pfx_inet6_sendmsg+0x10/0x10 [ 958.594417][T15949] tcp_sendmsg+0x2f/0x50 [ 958.594435][T15949] __sys_sendto+0x4a3/0x710 [ 958.594463][T15949] ? __pfx___sys_sendto+0x10/0x10 [ 958.594486][T15949] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 958.594518][T15949] ? __fget_files+0x3a0/0x420 [ 958.594545][T15949] ? ksys_write+0x242/0x270 [ 958.594567][T15949] ? __pfx_ksys_write+0x10/0x10 [ 958.594592][T15949] __x64_sys_sendto+0xde/0x100 [ 958.594618][T15949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.594637][T15949] do_syscall_64+0x15f/0xf80 [ 958.594655][T15949] ? trace_irq_disable+0x3b/0x140 [ 958.594673][T15949] ? clear_bhb_loop+0x40/0x90 [ 958.594700][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.594717][T15949] RIP: 0033:0x7f7cd579c819 [ 958.594735][T15949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.594750][T15949] RSP: 002b:00007f7cd66d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 958.594770][T15949] RAX: ffffffffffffffda RBX: 00007f7cd5a15fa0 RCX: 00007f7cd579c819 [ 958.594783][T15949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 958.594793][T15949] RBP: 00007f7cd66d1090 R08: 00002000000000c0 R09: 000000000000001c [ 958.594805][T15949] R10: a0f15a6d21a68a81 R11: 0000000000000246 R12: 0000000000000001 [ 958.594817][T15949] R13: 00007f7cd5a16038 R14: 00007f7cd5a15fa0 R15: 00007f7cd5b3fa48 [ 958.594844][T15949] [ 958.692193][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 958.893990][T15516] usb 1-1: USB disconnect, device number 10 [ 959.030253][ T5952] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 959.041197][ T5952] usb 5-1: config 0 has no interface number 0 [ 959.051071][ T5952] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.066005][ T5952] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 959.078470][ T5952] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 959.089925][ T5952] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 959.091782][ T5966] m920x_read = error: -19 [ 959.101003][ T5952] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 959.157511][ T5952] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.183935][ T5952] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 959.232059][ T5966] dvb-usb: error while querying for an remote control event. [ 959.246677][ T5952] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 959.275491][ T5952] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 959.294276][ T5952] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.420761][ T5952] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 959.439195][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.458332][T15976] loop9: detected capacity change from 0 to 7 [ 959.469422][ T5952] usb 5-1: Product: syz [ 959.477637][T15978] dummy0: entered promiscuous mode [ 959.479636][T15976] buffer_io_error: 9 callbacks suppressed [ 959.479659][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.501307][ T5952] usb 5-1: Manufacturer: syz [ 959.509729][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.515271][ T5952] usb 5-1: SerialNumber: syz [ 959.541453][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.564071][ T5952] usb 5-1: config 0 descriptor?? [ 959.570878][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.581741][ T5966] m920x_read = error: -19 [ 959.584638][T15947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 959.596150][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.597027][ T5966] dvb-usb: error while querying for an remote control event. [ 959.619827][T15947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 959.645166][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.660563][ T5952] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 959.671476][T15978] dummy0: entered allmulticast mode [ 959.674113][ T5952] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 959.691395][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.709679][T15976] ldm_validate_partition_table(): Disk read failed. [ 959.727614][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.743649][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.764056][T15976] Buffer I/O error on dev loop9, logical block 0, async page read [ 959.787580][T15976] Dev loop9: unable to read RDB block 0 [ 959.794728][ T5952] scsi host1: microtekX6 [ 959.827834][T15976] loop9: unable to read partition table [ 959.839909][T15976] loop9: partition table beyond EOD, truncated [ 959.867473][T15978] batman_adv: batadv0: Adding interface: dummy0 [ 959.897744][T15978] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.936705][T15976] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 959.936705][T15976] ) failed (rc=-5) [ 959.952273][T15317] m920x_read = error: -19 [ 959.973456][T15317] dvb-usb: error while querying for an remote control event. [ 960.005220][ T1210] usb 5-1: USB disconnect, device number 22 [ 960.040775][T15978] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 960.091714][T15317] m920x_read = error: -19 [ 960.110120][T15317] dvb-usb: error while querying for an remote control event. [ 960.254933][T15317] m920x_read = error: -19 [ 960.265192][T15317] dvb-usb: error while querying for an remote control event. [ 960.392962][ T5966] m920x_read = error: -19 [ 960.406451][ T5966] dvb-usb: error while querying for an remote control event. [ 960.576754][ T5966] m920x_read = error: -19 [ 960.589059][ T5966] dvb-usb: error while querying for an remote control event. [ 960.721415][ T5966] m920x_read = error: -19 [ 960.774056][ T5966] dvb-usb: error while querying for an remote control event. [ 960.783043][T15990] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3211'. [ 960.816545][T15990] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 960.925640][T15317] m920x_read = error: -19 [ 960.930574][T15317] dvb-usb: error while querying for an remote control event. [ 961.081851][T15317] m920x_read = error: -19 [ 961.103538][T15317] dvb-usb: error while querying for an remote control event. [ 961.254792][ T5966] m920x_read = error: -19 [ 961.264821][ T5966] dvb-usb: error while querying for an remote control event. [ 961.384409][T13673] m920x_read = error: -19 [ 961.392544][T13673] dvb-usb: error while querying for an remote control event. [ 961.611862][T15317] m920x_read = error: -19 [ 961.625516][T15317] dvb-usb: error while querying for an remote control event. [ 961.634928][T13673] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 961.803758][T15317] m920x_read = error: -19 [ 961.808313][T15317] dvb-usb: error while querying for an remote control event. [ 961.831838][T13673] usb 7-1: Using ep0 maxpacket: 8 [ 961.860796][T13673] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 962.035112][T13673] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.048001][T15317] m920x_read = error: -19 [ 962.085017][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'. [ 962.116535][T15317] dvb-usb: error while querying for an remote control event. [ 962.126549][T16016] bridge0: entered promiscuous mode [ 962.181435][T13673] usb 7-1: config 0 has no interface number 0 [ 962.206830][T13673] usb 7-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 962.229074][T13673] usb 7-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 962.319545][ T5966] m920x_read = error: -19 [ 962.336510][ T5966] dvb-usb: error while querying for an remote control event. [ 962.356549][T13673] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 962.406275][T13673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.429723][T13673] usb 7-1: Product: syz [ 962.445288][T13673] usb 7-1: Manufacturer: syz [ 962.456708][T13673] usb 7-1: SerialNumber: syz [ 962.486215][T13673] usb 7-1: config 0 descriptor?? [ 962.501718][ T5966] m920x_read = error: -19 [ 962.525396][T13673] ttusb_dec_send_command: command bulk message failed: error -8 [ 962.534326][ T5966] dvb-usb: error while querying for an remote control event. [ 962.550565][T13673] ttusb-dec 7-1:0.113: probe with driver ttusb-dec failed with error -8 [ 962.560875][T13673] usbhid 7-1:0.113: couldn't find an input interrupt endpoint [ 962.662106][T15317] m920x_read = error: -19 [ 962.666714][T15317] dvb-usb: error while querying for an remote control event. [ 962.791877][T15317] m920x_read = error: -19 [ 962.811355][T15317] dvb-usb: error while querying for an remote control event. [ 962.813814][ T30] audit: type=1326 audit(1776227728.190:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8807f96597 code=0x7ffc0000 [ 962.832150][T15317] usb 7-1: USB disconnect, device number 6 [ 962.850585][ T5966] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 962.871296][T16039] FAULT_INJECTION: forcing a failure. [ 962.871296][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 962.902595][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.5.3227 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.902646][T16039] Tainted: [L]=SOFTLOCKUP [ 962.902653][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.902662][T16039] Call Trace: [ 962.902668][T16039] [ 962.902677][T16039] dump_stack_lvl+0xe8/0x150 [ 962.902709][T16039] should_fail_ex+0x412/0x560 [ 962.902736][T16039] should_failslab+0xa8/0x100 [ 962.902762][T16039] __kmalloc_noprof+0xe8/0x760 [ 962.902785][T16039] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 962.902812][T16039] tomoyo_realpath_from_path+0xe3/0x5d0 [ 962.902834][T16039] ? tomoyo_domain+0xd7/0x130 [ 962.902860][T16039] ? tomoyo_path_number_perm+0x219/0x630 [ 962.902886][T16039] tomoyo_path_number_perm+0x246/0x630 [ 962.902915][T16039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.902941][T16039] ? __lock_acquire+0x6b5/0x2cf0 [ 962.902977][T16039] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 962.903025][T16039] ? __fget_files+0x2a/0x420 [ 962.903045][T16039] ? __fget_files+0x2a/0x420 [ 962.903062][T16039] ? __fget_files+0x3a0/0x420 [ 962.903079][T16039] ? __fget_files+0x2a/0x420 [ 962.903100][T16039] security_file_ioctl+0xc3/0x2a0 [ 962.903127][T16039] __se_sys_ioctl+0x47/0x170 [ 962.903150][T16039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.903171][T16039] do_syscall_64+0x15f/0xf80 [ 962.903189][T16039] ? trace_irq_disable+0x3b/0x140 [ 962.903208][T16039] ? clear_bhb_loop+0x40/0x90 [ 962.903230][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.903248][T16039] RIP: 0033:0x7f050099c819 [ 962.903266][T16039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.903282][T16039] RSP: 002b:00007f0501850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.903302][T16039] RAX: ffffffffffffffda RBX: 00007f0500c15fa0 RCX: 00007f050099c819 [ 962.903316][T16039] RDX: 0000200000000280 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 962.903328][T16039] RBP: 00007f0501850090 R08: 0000000000000000 R09: 0000000000000000 [ 962.903339][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.903350][T16039] R13: 00007f0500c16038 R14: 00007f0500c15fa0 R15: 00007f0500d3fa48 [ 962.903379][T16039] [ 962.903419][T16039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.961255][ T30] audit: type=1326 audit(1776227728.190:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8807f3db99 code=0x7ffc0000 [ 962.966291][ T5983] m920x_read = error: -19 [ 962.966312][ T5983] dvb-usb: error while querying for an remote control event. [ 963.084395][ T5983] m920x_read = error: -19 [ 963.183448][ T5983] dvb-usb: error while querying for an remote control event. [ 963.211140][ T5966] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 963.221293][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.244519][ T5966] usb 1-1: Product: syz [ 963.283845][ T5966] usb 1-1: Manufacturer: syz [ 963.299080][ T5966] usb 1-1: SerialNumber: syz [ 963.352426][ T30] audit: type=1326 audit(1776227728.190:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8807f96597 code=0x7ffc0000 [ 963.431726][ T6316] m920x_read = error: -19 [ 963.436185][ T6316] dvb-usb: error while querying for an remote control event. [ 963.457148][ T30] audit: type=1326 audit(1776227728.190:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8807f3db99 code=0x7ffc0000 [ 963.515475][ T30] audit: type=1326 audit(1776227728.230:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8807f96597 code=0x7ffc0000 [ 963.545248][ T30] audit: type=1326 audit(1776227728.230:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8807f3db99 code=0x7ffc0000 [ 963.567827][T13673] m920x_read = error: -19 [ 963.572342][T13673] dvb-usb: error while querying for an remote control event. [ 963.581314][ T30] audit: type=1326 audit(1776227728.230:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8807f96597 code=0x7ffc0000 [ 963.607577][ T30] audit: type=1326 audit(1776227728.230:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8807f3db99 code=0x7ffc0000 [ 963.686334][ T30] audit: type=1326 audit(1776227728.230:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8807f96597 code=0x7ffc0000 [ 963.713389][ T5983] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 963.721480][T13673] m920x_read = error: -19 [ 963.727502][T13673] dvb-usb: error while querying for an remote control event. [ 963.737430][ T30] audit: type=1326 audit(1776227728.230:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8807f3db99 code=0x7ffc0000 [ 963.781309][ T5966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 963.794612][ T5966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 963.810057][ T5966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 963.827045][ T5966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 963.840690][ T5966] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 963.851146][T15317] m920x_read = error: -19 [ 963.855873][T15317] dvb-usb: error while querying for an remote control event. [ 963.868433][ T5966] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 963.888766][ T5983] usb 4-1: Using ep0 maxpacket: 32 [ 963.901790][ T5983] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 963.914423][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.935889][ T5966] usb 1-1: USB disconnect, device number 11 [ 963.946296][ T5983] usb 4-1: Product: syz [ 963.957122][ T5983] usb 4-1: Manufacturer: syz [ 963.963038][ T5983] usb 4-1: SerialNumber: syz [ 963.971774][ T6316] m920x_read = error: -19 [ 963.987900][ T6316] dvb-usb: error while querying for an remote control event. [ 964.004659][ T5983] usb 4-1: config 0 descriptor?? [ 964.025424][T13673] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 964.101805][ T6316] m920x_read = error: -19 [ 964.107131][ T6316] dvb-usb: error while querying for an remote control event. [ 964.183756][T13673] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 964.198778][T13673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.231750][ T5966] m920x_read = error: -19 [ 964.237889][T13673] usb 7-1: config 0 descriptor?? [ 964.248863][ T5966] dvb-usb: error while querying for an remote control event. [ 964.280033][T13673] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 964.328283][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 964.353540][T16053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3232'. [ 964.384657][ T6316] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 964.411878][ T5966] m920x_read = error: -19 [ 964.420301][ T5983] airspy 4-1:0.0: Board ID: 00 [ 964.425292][ T5966] dvb-usb: error while querying for an remote control event. [ 964.444670][ T5983] airspy 4-1:0.0: Firmware version: [ 964.571857][T15317] m920x_read = error: -19 [ 964.576582][ T6316] usb 5-1: Using ep0 maxpacket: 8 [ 964.588507][T15317] dvb-usb: error while querying for an remote control event. [ 964.610460][ T6316] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.625056][ T6316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 964.639334][ T6316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.653179][ T6316] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.670585][ T6316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 964.681916][ T6316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.711833][T15317] m920x_read = error: -19 [ 964.717477][T15317] dvb-usb: error while querying for an remote control event. [ 964.813980][ T5966] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 964.841920][T15317] m920x_read = error: -19 [ 964.846717][T15317] dvb-usb: error while querying for an remote control event. [ 964.907236][ T6316] usb 5-1: GET_CAPABILITIES returned 0 [ 964.913497][ T6316] usbtmc 5-1:16.0: can't read capabilities [ 964.964765][T15317] m920x_read = error: -19 [ 964.969474][T15317] dvb-usb: error while querying for an remote control event. [ 965.006648][ T5966] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 965.016542][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.025545][ T5966] usb 1-1: Product: syz [ 965.030175][ T5966] usb 1-1: Manufacturer: syz [ 965.034974][ T5966] usb 1-1: SerialNumber: syz [ 965.050164][ T5966] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 965.081289][T15317] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 965.129127][ T5966] m920x_read = error: -19 [ 965.134248][ T5966] dvb-usb: error while querying for an remote control event. [ 965.251821][ T5966] m920x_read = error: -19 [ 965.256432][ T5966] dvb-usb: error while querying for an remote control event. [ 965.372887][ T5966] m920x_read = error: -19 [ 965.379169][ T5966] dvb-usb: error while querying for an remote control event. [ 965.426244][ T5983] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 965.458076][ T5983] airspy 4-1:0.0: Registered as swradio24 [ 965.464203][ T5983] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 965.479915][ T5983] usb 4-1: USB disconnect, device number 30 [ 965.502440][ T5966] m920x_read = error: -19 [ 965.509645][ T5966] dvb-usb: error while querying for an remote control event. [ 965.631866][ T5966] m920x_read = error: -19 [ 965.636704][ T5966] dvb-usb: error while querying for an remote control event. [ 965.751760][ T5983] m920x_read = error: -19 [ 965.756410][ T5983] dvb-usb: error while querying for an remote control event. [ 965.883166][ T5983] m920x_read = error: -19 [ 965.888180][ T5983] dvb-usb: error while querying for an remote control event. [ 965.906011][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.922279][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.937679][T13673] usb 7-1: USB disconnect, device number 7 [ 966.002087][ T5983] m920x_read = error: -19 [ 966.009062][ T5983] dvb-usb: error while querying for an remote control event. [ 966.151784][T13673] m920x_read = error: -19 [ 966.171802][T15317] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 966.189940][T13673] dvb-usb: error while querying for an remote control event. [ 966.217342][T15317] ath9k_htc: Failed to initialize the device [ 966.310793][T15317] usb 1-1: ath9k_htc: USB layer deinitialized [ 966.329463][T16065] usb usb8: usbfs: process 16065 (syz.5.3236) did not claim interface 0 before use [ 966.330532][T13673] usb 1-1: USB disconnect, device number 12 [ 966.345447][T15317] m920x_read = error: -19 [ 966.351543][T15317] dvb-usb: error while querying for an remote control event. [ 966.474240][T15317] m920x_read = error: -19 [ 966.488363][T15317] dvb-usb: error while querying for an remote control event. [ 966.581140][T16074] netlink: 'syz.5.3238': attribute type 10 has an invalid length. [ 966.633137][T15317] m920x_read = error: -19 [ 966.635050][T16074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.671838][T15317] dvb-usb: error while querying for an remote control event. [ 966.674541][T16074] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 966.822437][ T5983] m920x_read = error: -19 [ 966.832942][ T5983] dvb-usb: error while querying for an remote control event. [ 966.852083][T13673] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 966.973113][ T6316] m920x_read = error: -19 [ 966.978215][ T6316] dvb-usb: error while querying for an remote control event. [ 967.001908][ T5983] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 967.033890][T13673] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 967.048226][T13673] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.063871][T13673] usb 7-1: config 0 has no interface number 0 [ 967.070311][T13673] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 967.081473][T13673] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.104505][T13673] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 967.113765][T15317] m920x_read = error: -19 [ 967.118306][T15317] dvb-usb: error while querying for an remote control event. [ 967.127189][T13673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.137753][T13673] usb 7-1: Product: syz [ 967.143257][T13673] usb 7-1: Manufacturer: syz [ 967.148017][T13673] usb 7-1: SerialNumber: syz [ 967.154906][T13673] usb 7-1: config 0 descriptor?? [ 967.179368][T16080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3242'. [ 967.188955][ T5983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 967.208042][ T5983] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 967.235872][ T5983] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.249666][T15317] m920x_read = error: -19 [ 967.255631][T15317] dvb-usb: error while querying for an remote control event. [ 967.354911][ T5983] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 967.367966][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 967.376968][ T5966] m920x_read = error: -19 [ 967.381768][ T5966] dvb-usb: error while querying for an remote control event. [ 967.395780][ T5983] usb 6-1: Product: syz [ 967.407329][ T5983] usb 6-1: Manufacturer: syz [ 967.417009][ T5983] usb 6-1: SerialNumber: syz [ 967.511915][ T5966] m920x_read = error: -19 [ 967.517047][ T5966] dvb-usb: error while querying for an remote control event. [ 967.568998][T13673] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 967.578880][T15317] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 967.607905][T13673] usb 7-1: USB disconnect, device number 8 [ 967.657597][ T5966] m920x_read = error: -19 [ 967.671660][ T5966] dvb-usb: error while querying for an remote control event. [ 967.754024][T15317] usb 1-1: config 1 interface 0 has no altsetting 0 [ 967.764810][T15317] usb 1-1: string descriptor 0 read error: -22 [ 967.771298][T15317] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 967.784873][T15317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.794074][ T5966] m920x_read = error: -19 [ 967.808687][ T5966] dvb-usb: error while querying for an remote control event. [ 967.941785][ T5966] m920x_read = error: -19 [ 967.948019][ T5966] dvb-usb: error while querying for an remote control event. [ 968.081849][ T5966] m920x_read = error: -19 [ 968.091092][ T5966] dvb-usb: error while querying for an remote control event. [ 968.123510][T16085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.165365][T16085] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 968.211743][ T5966] m920x_read = error: -19 [ 968.227551][ T5966] dvb-usb: error while querying for an remote control event. [ 968.351834][T13673] m920x_read = error: -19 [ 968.364511][T13673] dvb-usb: error while querying for an remote control event. [ 968.444588][T16082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.459949][T16082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.482329][T13673] m920x_read = error: -19 [ 968.493602][T13673] dvb-usb: error while querying for an remote control event. [ 968.564210][T15317] uclogic 0003:5543:006E.0039: failed retrieving string descriptor #200: -71 [ 968.574048][T15317] uclogic 0003:5543:006E.0039: failed retrieving pen parameters: -71 [ 968.582393][ T5966] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 968.590667][T15317] uclogic 0003:5543:006E.0039: failed probing pen v2 parameters: -71 [ 968.601350][T15317] uclogic 0003:5543:006E.0039: failed probing parameters: -71 [ 968.609204][T13673] m920x_read = error: -19 [ 968.614274][T13673] dvb-usb: error while querying for an remote control event. [ 968.622093][T15317] uclogic 0003:5543:006E.0039: probe with driver uclogic failed with error -71 [ 968.639717][T15317] usb 1-1: USB disconnect, device number 13 [ 968.741838][ T6316] m920x_read = error: -19 [ 968.750616][ T6316] dvb-usb: error while querying for an remote control event. [ 968.761685][ T5966] usb 7-1: Using ep0 maxpacket: 16 [ 968.768786][ T5966] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 968.771927][T11831] ------------[ cut here ]------------ [ 968.783362][T11831] conntrack cleanup blocked for 60s [ 968.783388][T11831] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:11/11831 [ 968.801553][T11831] Modules linked in: [ 968.806232][T11831] CPU: 1 UID: 0 PID: 11831 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.817564][T11831] Tainted: [L]=SOFTLOCKUP [ 968.821917][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 968.832580][T11831] Workqueue: netns cleanup_net [ 968.837355][T11831] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 968.844785][T11831] Code: 08 48 89 df e8 ed 45 66 f8 4c 8b 3b 49 39 df 74 69 e8 90 15 fc f7 45 31 e4 e9 8e fe ff ff e8 83 15 fc f7 48 8d 3d fc dd 57 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 968.864894][T11831] RSP: 0018:ffffc900038678b0 EFLAGS: 00010293 [ 968.871255][T11831] RAX: ffffffff89c946ed RBX: ffffc90003867a50 RCX: ffff888076873d80 [ 968.879273][T11831] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff902124f0 [ 968.887719][T11831] RBP: 0000000000000001 R08: ffff888031ecf403 R09: 1ffff110063d9e80 [ 968.895843][T11831] R10: dffffc0000000000 R11: ffffed10063d9e81 R12: 0000000000000001 [ 968.896762][ T5966] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.903926][T11831] R13: dffffc0000000000 R14: 000000010001048c R15: 000000010001048d [ 968.903949][T11831] FS: 0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 968.903964][T11831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.903975][T11831] CR2: 000000110c2a97a5 CR3: 00000000735c8000 CR4: 00000000003526f0 [ 968.903991][T11831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009120 [ 968.904003][T11831] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 968.904014][T11831] Call Trace: [ 968.904023][T11831] [ 968.904039][T11831] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 968.904069][T11831] ops_undo_list+0x52b/0x940 [ 968.904102][T11831] ? __pfx_ops_undo_list+0x10/0x10 [ 968.915689][T15317] m920x_read = error: -19 [ 968.922705][T11831] ? idr_destroy+0x218/0x290 [ 968.932405][T15317] dvb-usb: error while querying for an remote control event. [ 968.939295][T11831] ? do_raw_spin_unlock+0xf5/0x210 [ 968.948510][ T5966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 968.955971][T11831] cleanup_net+0x56b/0x800 [ 968.986010][ T5966] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.986624][T11831] ? __pfx_cleanup_net+0x10/0x10 [ 968.990971][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.995654][T11831] ? process_scheduled_works+0xa70/0x1860 [ 968.995688][T11831] ? process_scheduled_works+0xa70/0x1860 [ 968.995712][T11831] process_scheduled_works+0xb5d/0x1860 [ 968.995766][T11831] ? __pfx_process_scheduled_works+0x10/0x10 [ 969.004182][ T5966] usb 7-1: Product: syz [ 969.008410][T11831] ? assign_work+0x3d5/0x5e0 [ 969.008448][T11831] worker_thread+0xa53/0xfc0 [ 969.018098][ T5966] usb 7-1: Manufacturer: syz [ 969.021893][T11831] kthread+0x388/0x470 [ 969.021923][T11831] ? __pfx_worker_thread+0x10/0x10 [ 969.021948][T11831] ? __pfx_kthread+0x10/0x10 [ 969.021969][T11831] ret_from_fork+0x514/0xb70 [ 969.031925][ T5966] usb 7-1: SerialNumber: syz [ 969.036920][T11831] ? __pfx_ret_from_fork+0x10/0x10 [ 969.082699][T15317] m920x_read = error: -19 [ 969.082727][T15317] dvb-usb: error while querying for an remote control event. [ 969.087293][T11831] ? __switch_to+0xc79/0x1410 [ 969.087332][T11831] ? __pfx_kthread+0x10/0x10 [ 969.087361][T11831] ret_from_fork_asm+0x1a/0x30 [ 969.142525][T11831] [ 969.145586][T11831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 969.152885][T11831] CPU: 1 UID: 0 PID: 11831 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.164188][T11831] Tainted: [L]=SOFTLOCKUP [ 969.168523][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 969.178671][T11831] Workqueue: netns cleanup_net [ 969.183472][T11831] Call Trace: [ 969.186764][T11831] [ 969.189881][T11831] vpanic+0x56c/0xa60 [ 969.193889][T11831] ? __pfx__printk+0x10/0x10 [ 969.198493][T11831] ? __pfx_vpanic+0x10/0x10 [ 969.203090][T11831] ? is_bpf_text_address+0x292/0x2b0 [ 969.208384][T11831] ? is_bpf_text_address+0x26/0x2b0 [ 969.213609][T11831] panic+0xc5/0xd0 [ 969.217338][T11831] ? __pfx_panic+0x10/0x10 [ 969.221789][T11831] ? ret_from_fork_asm+0x1a/0x30 [ 969.226741][T11831] __warn+0x315/0x4c0 [ 969.230740][T11831] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 969.236914][T11831] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 969.243172][T11831] __report_bug+0x29a/0x540 [ 969.247709][T11831] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 969.253879][T11831] ? __pfx___report_bug+0x10/0x10 [ 969.258923][T11831] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 969.265099][T11831] report_bug_entry+0x19a/0x290 [ 969.269955][T11831] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 969.276123][T11831] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 969.282378][T11831] handle_bug+0xce/0x200 [ 969.286647][T11831] exc_invalid_op+0x1a/0x50 [ 969.291195][T11831] asm_exc_invalid_op+0x1a/0x20 [ 969.296061][T11831] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 969.302831][T11831] Code: 08 48 89 df e8 ed 45 66 f8 4c 8b 3b 49 39 df 74 69 e8 90 15 fc f7 45 31 e4 e9 8e fe ff ff e8 83 15 fc f7 48 8d 3d fc dd 57 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 969.322569][T11831] RSP: 0018:ffffc900038678b0 EFLAGS: 00010293 [ 969.328653][T11831] RAX: ffffffff89c946ed RBX: ffffc90003867a50 RCX: ffff888076873d80 [ 969.336642][T11831] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff902124f0 [ 969.344616][T11831] RBP: 0000000000000001 R08: ffff888031ecf403 R09: 1ffff110063d9e80 [ 969.352609][T11831] R10: dffffc0000000000 R11: ffffed10063d9e81 R12: 0000000000000001 [ 969.360596][T11831] R13: dffffc0000000000 R14: 000000010001048c R15: 000000010001048d [ 969.368591][T11831] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 969.374905][T11831] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 969.380997][T11831] ops_undo_list+0x52b/0x940 [ 969.385655][T11831] ? __pfx_ops_undo_list+0x10/0x10 [ 969.390911][T11831] ? idr_destroy+0x218/0x290 [ 969.395520][T11831] ? do_raw_spin_unlock+0xf5/0x210 [ 969.400652][T11831] cleanup_net+0x56b/0x800 [ 969.405087][T11831] ? __pfx_cleanup_net+0x10/0x10 [ 969.410099][T11831] ? process_scheduled_works+0xa70/0x1860 [ 969.415813][T11831] ? process_scheduled_works+0xa70/0x1860 [ 969.421545][T11831] process_scheduled_works+0xb5d/0x1860 [ 969.427137][T11831] ? __pfx_process_scheduled_works+0x10/0x10 [ 969.433135][T11831] ? assign_work+0x3d5/0x5e0 [ 969.437734][T11831] worker_thread+0xa53/0xfc0 [ 969.442363][T11831] kthread+0x388/0x470 [ 969.446500][T11831] ? __pfx_worker_thread+0x10/0x10 [ 969.451635][T11831] ? __pfx_kthread+0x10/0x10 [ 969.456233][T11831] ret_from_fork+0x514/0xb70 [ 969.460849][T11831] ? __pfx_ret_from_fork+0x10/0x10 [ 969.465985][T11831] ? __switch_to+0xc79/0x1410 [ 969.470685][T11831] ? __pfx_kthread+0x10/0x10 [ 969.475272][T11831] ret_from_fork_asm+0x1a/0x30 [ 969.480070][T11831] [ 969.483470][T11831] Kernel Offset: disabled [ 969.487824][T11831] Rebooting in 86400 seconds..