last executing test programs: 12m2.103381565s ago: executing program 0 (id=3582): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYBLOB="c8e97f6fd5cc6685ef15ec0aee87750a1ba49b1b48242ebf33c4f72f59992b50df82a23ebcb4304fd2d7cab0ef3cd64b6da9e4837c6c0629fd02778e25f586874cae175f850e83600449850f71aba3ff839fab6e8f5b44974da920a3dacd924015a25206ba8c4dfb954024ef0fc8afbfe63c451a30fbd351b4117e5a1ee2bf", @ANYRES8=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES32=r3, @ANYRES64=0x0, @ANYRESHEX=r2, @ANYRESDEC], 0x1088}, 0x1, 0x0, 0x0, 0xc000800}, 0x44004) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "2719731ed3c77d6f", "5b0575433c178572384f0d75eb93f2e4428651062bfa6c641dcc294fb44eaf36", '\b\x00', "75b3ca0ce96600"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 12m1.675706927s ago: executing program 0 (id=3583): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}}}, 0x30) 12m0.850099307s ago: executing program 0 (id=3584): r0 = syz_usb_connect$uac3(0x2, 0xf4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x0, 0x50, 0x8, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x59, 0x7}, [@source_unit={0xc, 0x24, 0xb, 0xf7, 0x2, 0x6, 0x1, 0x2}, @processing_unit={0x1d, 0x24, 0x9, 0x3, 0x6, [0x2, 0x0, 0x3, 0x3, 0x2, 0x1]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x306, 0x5, 0x2, 0x48, 0x8001, 0x0, 0x3, 0x6}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x400, 0x2, 0x2, 0x0, 0x10f4, 0x1ff, 0xfff0, 0x1e71}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf3, 0x1, 0x9, 0x5, "", "e081"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xa, 0x4, 0x38, 0x2, "f4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x5, 0xfd, {0xa, 0x25, 0x25, 0x10, 0x10, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x4, 0x24}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7c9, 0x8, 0x7e, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x5, 0x2, {0xa, 0x25, 0x25, 0x8, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x2, 0x8, 0x10, 0x8}, 0x70, &(0x7f0000000140)={0x5, 0xf, 0x70, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x8000, 0xf, 0x6e, [0x0, 0x0, 0xff3f00, 0x0, 0x3f30]}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x101, 0xf00, 0xfff5, [0x30, 0xff0000, 0xff0000, 0xffc0c0, 0xc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x3, 0x1e00f, 0x2, [0xff30, 0x0, 0xc0, 0xc000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x0, 0x3, 0x4, 0x7f}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x40, 0x10, 0xd, {0xd, 0xc, "a5583840d8a6b58b2d117b"}}, &(0x7f0000000280)={0x0, 0x3, 0x12, @string={0x12, 0x3, "305e53960a0da675fb6a9af1b08b880d"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0x1, 0xe5, "74a20110e58ab3d310ff96810cf740d48130bc19bee9c622bf8956d8aa7f19de64ea1543ca1afb5b275477a8b73338301652a5f2241dad1b955210ed00ae9f9e6b347287fa8378a8c7963986a4b64e7a7ba456246564c5bc76cb6b817943a287b5eedae62e6ff3b017ddc7cdbcb639308445a60c548f830b4d2211ebe135d5641903deea16c9783eecbe90e4e6ebd22e075aed7e4eb6d183649aad61841a5dcf4f619988ac28a11fd2ea618f8385761b0539a920d7ece4d410cb666d3ac4e4352ffe633a8b4ee4591da5324e1a50c926689c522c1df76f4975049e52376fcd4edcc51e3f77"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0x20, 0x81, 0x3, "99c099"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "7d05"}, &(0x7f0000000500)={0x20, 0x83, 0x1, '\r'}, &(0x7f0000000540)={0x20, 0x84, 0x4, "3ab21a96"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "c92b16"}}) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m57.617765057s ago: executing program 0 (id=3592): setuid(0xee00) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0xe0, 0x11, 0xf720b6c5c733ef9d, 0x70bd29, 0x25dfdbfb, {0x2}, [@nested={0xcc, 0x28, 0x0, 0x1, [@nested={0xc5, 0xa0, 0x0, 0x1, [@generic="65d983938845c8ba4789bde8465ac808050e5cbed96154afaf264f33aefe0d574c85efb28deaef53ed5b2d0b8ae058645a82441d0454fabeb5ba2db9bcd5cd6d6bbd1430071c487e4e17bb92957965c087d900e02cb5457cfa13d467859a19fece830fa430965c42f42a62f51e5e11f6035ccee0788263b2bf0a5ff47981a759026d66a89a93cae08773d3ddadd43d5ea3517467ae066728f2cb3493497fadadd07910996c8df24ec60040bb698b9de0ffbf6f7a51d12f9341b5b3b9af89f7c682"]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010) socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000fe1294", 0x2e}], 0x1}, 0x0) 11m56.984426262s ago: executing program 0 (id=3593): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000b00)={0x3, 0x0, @ioapic={0x40000, 0xffffffff, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x3}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0x5}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0x3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x1}, {0xde, 0x60, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf4, 0xb, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x92, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x9, 0x40, '\x00', 0xcd}, {0x6c, 0x3f, 0x1d, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0xb}, {0x67, 0x2, 0x8, '\x00', 0xf9}, {0x5f, 0x7, 0x0, '\x00', 0xa5}, {0x1, 0x6, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0xbd, 0x9, 0x54, '\x00', 0x9}]}}) r2 = gettid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$msr(r3, &(0x7f0000000340)=""/231, 0xe7) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004500), 0x208850, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',version=8p2009}u,\x00']) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7], 0x15) 11m52.467657195s ago: executing program 0 (id=3597): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (fail_nth: 3) 11m37.366159244s ago: executing program 32 (id=3597): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (fail_nth: 3) 3m50.468826856s ago: executing program 2 (id=5848): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048d54) r2 = syz_open_pts(0xffffffffffffffff, 0x8182) dup3(r2, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x280) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x7}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x100000000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) syz_usb_ep_read(r0, 0x9, 0xe5, &(0x7f0000000600)=""/229) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x134, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000001700)=ANY=[@ANYBLOB="2800000014003927000000000000000028d68200fa"], 0x28}}, 0xc8c0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0xfffffffffffffe47, 0x0, 0x0}, &(0x7f0000000540)={0x1c, &(0x7f0000000380)=ANY=[@ANYRES8=r6], 0x0, 0x0}) 3m49.052790898s ago: executing program 2 (id=5851): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000015c0)=""/4074, 0xfea}, {&(0x7f0000003b40)=""/4102, 0x1006}, {&(0x7f0000000580)=""/201, 0xc9}], 0x5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="200000001200010a00000000000000000f000000000000000033000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x53d88b91b77bb9ad}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000140), 0x6, 0x100) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{}], 0xb, 0x0, &(0x7f0000000940)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000b40)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r10, 0x2, [0x80000001, 0x8]}, {r9, 0x0, 0x0, [0xc1b, 0x8004]}, 0x0, [0xfffffffd, 0x8]}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) syz_open_dev$video4linux(&(0x7f0000000000), 0x311c, 0x800) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3m48.650391994s ago: executing program 2 (id=5856): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000340)={0x1e, 0x0, [{0x40000001, 0x5, 0x2, 0xffff3418, 0x10, 0xc813, 0x5}, {0x80000000, 0x8, 0x1, 0x0, 0x5, 0x2, 0x97c}, {0xb, 0x1, 0x5, 0x0, 0xb71e, 0x8000, 0x5}, {0x40000001, 0xffff8001, 0x1, 0x5, 0xfffffff7, 0x9, 0x4}, {0x80000001, 0x5, 0x7, 0x93e6, 0x6060, 0x3, 0x8}]}) ioctl$I2C_SMBUS(r0, 0x706, 0x0) 3m48.538810181s ago: executing program 2 (id=5858): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000000c0)={0xfffffffc, 0x2000008}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000080)={"008000000080", 0x6}) prctl$PR_GET_THP_DISABLE(0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000002580)={'erspan0\x00', {0x2, 0x4e22, @empty}}) 3m47.954280243s ago: executing program 2 (id=5860): syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2b, 0x80801, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a320000000009000100", @ANYRES16=r3], 0xc4}}, 0x0) 3m44.376776098s ago: executing program 2 (id=5873): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0xf0, 0x300, 0x800, 0x320, 0x0, 0x4df, 0x8, 0x0, {0x8, 0x40}, {0x0, 0x20000005}, {0x800000, 0x80000000}, {0x3, 0x400, 0x3}, 0x0, 0x100, 0x0, 0xfff, 0x1, 0x0, 0x0, 0xfffffc00, 0x0, 0x3fd, 0x0, 0x8000, 0x30, 0x0, 0x2, 0x5}) 3m44.07638982s ago: executing program 33 (id=5873): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0xf0, 0x300, 0x800, 0x320, 0x0, 0x4df, 0x8, 0x0, {0x8, 0x40}, {0x0, 0x20000005}, {0x800000, 0x80000000}, {0x3, 0x400, 0x3}, 0x0, 0x100, 0x0, 0xfff, 0x1, 0x0, 0x0, 0xfffffc00, 0x0, 0x3fd, 0x0, 0x8000, 0x30, 0x0, 0x2, 0x5}) 12.542979593s ago: executing program 3 (id=6567): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$setsig(r0, 0xa, 0x2c) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x45, 0x84, 0x8e, 0x20, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x9, 0x30, 0x7, "", [{{0x9, 0x4, 0x9b, 0x9, 0x0, 0x17, 0x11, 0x5a, 0x2}}]}}]}}, 0x0) (async) syz_usb_connect$uac2(0x0, 0xe5, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xf2, 0x10, 0x1, {0x8, 0xb, 0x2, 0x1, 0x1, 0xc, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7ff, 0x0, 0x30, 0x8}, [@mixer_unit={0x7, 0x24, 0x4, 0x5, 0xf1, '-\''}, @selector_unit={0xd, 0x24, 0xb, 0x2, 0x8, "89d72812b633c754"}, @selector_unit={0xb, 0x24, 0xb, 0x9d, 0x6, "7369772a7505"}, @source_unit={0x8, 0x24, 0xa, 0xa, 0x3, 0x9, 0x4, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x7, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x2, 0x1, 0x5, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x5, 0x4, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x86, 0x1, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x4, 0x66, {0x8, 0x25, 0x1, 0x0, 0x3, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x4, 0x8, "7bb14e92"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x4, 0xdd, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2e, 0x3, 0x2, {0x8, 0x25, 0x1, 0x83, 0x8, 0x6, 0x6}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x9, 0x2, 0x8, 0x2}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x6, 0x4c, 0x80}]}, 0x20, [{0xe7, &(0x7f0000000180)=@string={0xe7, 0x3, "66d089d95b673359a3593ea77587f146c936ae51da693cc10a234a16daa4c99c767552323d45785c0643e73fb8a602010637fcb5b5731938ed0c4262b89e90794c6566cd15383dde7fbdddc40b7e217dacda4aafe9d98ba2b422f409eb67d47a19f23233de05ba3f637806ee6223815dc0c535341334674b01398521cfd561b04e1bc10f5dafe4c01fd1bad4e83cea21ed7a3fb9483895eda8ecf98cbda4137912221eab290ce81e1b1994d074187a3af460b4cbdab2055646a76d0790522d90946ee33a2d2245627b6f1ba54c595b22836f4883d10a1ff1a720ce5f26d0c933ffca59d562"}}, {0x6f, &(0x7f0000000280)=@string={0x6f, 0x3, "b2ad823a196672dc1a119d29ee906bf023acf044b92a5ad7c6a93c4118361fa756c892f06c366087556cff2d42bd42c5d061d43fc12848d4ca5cd090fadcbf3bc2728341bc384352a6d6189539af4c2b04342fc9d1e183463009e55f259eeecaf5bc0ce639bcb55181483c0422"}}, {0x23, &(0x7f0000000300)=@string={0x23, 0x3, "8f0b35109176264eb15895ceb10a23a77ab97acd40cec74d1b319cd05ed4a8d878"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x414}}, {0xbd, &(0x7f0000000380)=@string={0xbd, 0x3, "92d2d3126eb2007652e247f104e8b0735478cdd95bd70a8f177ff5f107da8788ca20fea1dbaf542c15946004cf97962ed50b3a2771035b8a9c56b71817ce6b7a3561b2d4ba7b3cb33d211cdd16e9276d2fcbb771e8a7daf6c3a12dd6f9a99b0a1aff34298fb58ef84ae2bff1f8dacec668baab4b7e70603c4b0389a48d666c7dbf4468b651a9af1457613d93cbbf9470adc7cfafdffcc51e0b79e03615ea8671f0d2caf3c9e96d61e848420c38615dd2119f67703192121acd635a"}}]}) 10.967790931s ago: executing program 3 (id=6573): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa, 0xadb2}}, './file0\x00'}) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000080)={0x4, 0x6, 0xfff, 0x80000001}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x6, &(0x7f0000000000)=ANY=[]) 8.673550689s ago: executing program 3 (id=6586): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xbf, "216119f549d60f4d879b20b1b1c5b0dfd39aadf75dc1bedeff31ea5520afc08afa549f3ec5205a5f806579ceab0bed3ce3f02b86689908816a9492e15d1f6eaed2f046974d53216dddfc9c6465568bef5a2a96b3428a4c345fa10ce9edeb92cd77443a4fc96f42e730e03c66c1e6272d5e2287b68eb38341aa16331982b9624ecc08784e2e1da49934ce09185a0170120066eaff97558d562ef6b99f814320c31ba70fd45367c76062484ef482848bd9af58f8116fb65bcf0e3233b4186efb"}, &(0x7f0000000100)=0xc7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4004816) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2a8}, {&(0x7f0000000bc0)}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x104, &(0x7f0000001000)={[{0xd6, 0x4e00, "da22b43c5f368e1d88d823506dbf3b62f680b1932027998991059f2d64dd71c5795133625c2a8af45257ec255aef331a2ee3f49ac51921da61de61cd330f3ede4bb411c04c365d47a48416cf00aabab2af7b5d13467827c37cfa8e003b9bdc9c73a72de055775cc793d4ffc2b63c5dcb4dcd025224299fff5273a0981aa3d43ba87ad3ce84e24dc05d4a7a04166ef9f3604e7e544511b28229774d7b3736d6fea4ae8ef436f65e8bb76c61b669e5b45ab6b632dab97848198375d5354b5651df84542b1326669a5b4ae38db9c89f8c4cf354e9a4764e"}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x1264, &(0x7f0000004500)={[{0xab, 0x4e00, "4b56f8b6d5444552bbcd145a47497642cd1d9d64091758a130e47ab71ad43f3c6553aa23c66ef89c32e2308f41530a23a7759c2296b6487bf7e86d8ccacd6c4de1e62edf5201fb042af2e9179a0982748cf26cbb1db11f821d70b76a8dc6a3dbad7d9ca1814b98026210e991328d5eef0b735fb081947f984aa1d820c35b827c9f0dc5b7f94b295d25ef8273fbf1f7c2411fd4a5fb4cf0296a10b8f455134aaf73a928ddd18f8ebd5451a3"}, {0x88, 0x4e00, "3b0b350aa67c2dfe968689d59e7e53e44fce6a683f19db4e385089879b479d36c991d8c6e2be552b6a65760f72db23459ddf0726c8debc632141e227484963fca62c19ccb47ff7810b9577a67008090cd55f700674bbd949b5b48f5855ebd03f408b77cee981cffd619f8eb7e892b824287a3d31fedeaf5ee4c4160f0244d35e7d076893e14e565e"}, {0x1000, 0x4e00, "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"}, {0xc7, 0x4e00, "d81e6ca685c5ecc340361204ffb19ef7c9f82762d997046f30e1223a38dafdcbff48469b52a7812789ffb65d4da10e3bad8460e2a67936e500c7c295d4fcb35617bfc6855066a56f6ceeafb244da5ae94311955f1b025fc6dd1d5d63802969802438d1e75d3e1ebf1cc4977d42c149ec71be423217cf1171c9806528ac208b0c3dbaa34bbe52066ca1443ce45ae2d219b79b96b5fa26234651bde518304a77118ea6ba3f9291c29cfe4097be4d003aa7e06af1f3fb09805dc6025e7ca6f31a78516886954baa99"}, {0x51, 0x4e00, "41f14777fd26374d1e7661af33a7b6c822defb302040fd50be6e4f58fc6a9d6d1f591a9b154d691c10cefed3e3192a200ac83ebc875458b5d2c6ed5352b2bc6f68a2eb6249d9c7ebc4c12ccc650579e257"}]}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0xa3}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000300)=""/9, 0x4}], 0x8, &(0x7f00000006c0)=""/198, 0xbf}}], 0x1, 0x8000, &(0x7f0000003700)={0x77359400}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000ac0)={"7c05fd638582b81fd11bdfa53f5772b7", 0x0, 0x0, {0x4, 0x100}, {0xfffffffffffffffb, 0x800}, 0x9, [0xc4, 0x1, 0x8, 0xd9, 0x7, 0x80000000, 0x5, 0x6, 0x44, 0x6, 0x3ff, 0x1, 0x6, 0x9, 0x2, 0x5815]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001fc0)={{r4}, r8, 0x0, @inherit={0x88, &(0x7f0000000d80)={0x0, 0x8, 0x2, 0x8, {0x8, 0x1ff, 0xfffffffffffffffa, 0x7, 0x5}, [0x9, 0xc, 0x6, 0x3, 0x9, 0x9300000, 0x1, 0x1]}}, @subvolid=0x7e7d7386}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000034c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003480)={&(0x7f0000002fc0)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x4}, 0x7, 0x81, 0x10, 0x4, 0x18, 'syz0\x00', "31e505be3c6937db8b180437f67c475641b6323f19c5dd86aae57b6adce8bb74", "94eac64cabbe0e7254bf4988a4b9f1c365a2b1d0e0a60724ecb4657cd55e7fe4", [{0xc1c, 0x3078, {0x1, 0x9}}, {0x0, 0x2, {0x3, 0x730}}, {0x40, 0x0, {0x3, 0x4}}, {0x2, 0x6, {0x0, 0xffffff01}}, {0xf4da, 0x3, {0x0, 0x5}}, {0x80, 0x7, {0x0, 0x5}}, {0xff81, 0x400, {0x1, 0x3}}, {0x1, 0xf221, {0x0, 0xc}}, {0x489a, 0x7, {0x0, 0x5}}, {0x106, 0x400, {0x1, 0x2}}, {0xde4, 0x0, {0x3}}, {0x0, 0x5, {0x0, 0xffffe077}}, {0xb, 0x10, {0x2, 0xf825}}, {0x7, 0x4, {0x1, 0x9}}, {0x1, 0x3, {0x0, 0x2}}, {0x9, 0x1, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0xbdb}}, {0x0, 0x322, {0x0, 0x81}}, {0x8, 0x2, {0x3, 0x81}}, {0x7, 0x9, {0x1, 0xffff}}, {0x4, 0x20, {0x0, 0x2c4c}}, {0x6, 0x1, {0x0, 0x3}}, {0xab61, 0x9, {0x1, 0xb4}}, {0xf, 0x9, {0x1, 0x9}}, {0x43e, 0x6, {0x0, 0x130}}, {0x897, 0x9, {0x3, 0x5}}, {0x4, 0x10, {0x0, 0x10}}, {0x6, 0xfff8, {0x3, 0x5}}, {0xfff7, 0xd, {0x1, 0x80000000}}, {0x101, 0xff, {0x0, 0x5}}, {0x915, 0x999, {0x3, 0xcc6}}, {0x100, 0x8000, {0x0, 0x7}}, {0x6, 0x7, {0x2, 0x10001}}, {0x0, 0x8, {0x3, 0xb9a0}}, {0x101, 0x9, {0x3, 0x2}}, {0x7ff, 0x6, {0x0, 0x8}}, {0xfffd, 0x3ff7, {0x2, 0x7}}, {0xb7, 0x7, {0x3, 0x6}}, {0x3, 0x8, {0x1, 0x7}}, {0xfffb, 0x1c3f, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0xe}, 0x1, 0x8, 0x4800, 0x3, 0x14, 'syz1\x00', "e433314eac4227fafec3684b25dbe97be592581bc0384ac38d248fa043421e2c", "8b200d1dadfa9e20df42c250da11b27364a2cd690769d639f8999d920d35dd28", [{0x6, 0x0, {0x2}}, {0xfc2, 0x1ff, {0x2, 0xfffffff9}}, {0x6, 0xffff, {0x3, 0x5}}, {0x5, 0x3ff, {0x3, 0x5}}, {0x9, 0x3, {0x1, 0x8001}}, {0x6, 0x8, {0x1, 0x4}}, {0x800, 0x4, {0x0, 0x8}}, {0x8, 0xffff, {0x2, 0x40}}, {0xd94, 0x10, {0x0, 0xad1}}, {0x2, 0x2, {0x1, 0x2}}, {0x4, 0x5, {0x1, 0xdb8}}, {0x40, 0x2, {0x3, 0x2}}, {0x101, 0x3ff, {0x3, 0x5}}, {0x3, 0x9, {0x2, 0x2}}, {0x0, 0x9, {0x2, 0x90}}, {0x0, 0x9, {0x0, 0xfffffff9}}, {0xe4, 0x2, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x22be}}, {0x9, 0x9, {0x3, 0x3}}, {0xc, 0x9, {0x1, 0x5}}, {0xff, 0x2, {0x1, 0x3}}, {0x7fff, 0x9, {0x3, 0x3}}, {0x6, 0x0, {0x1, 0x2}}, {0xbc, 0x1, {0x2, 0x8}}, {0xb8a, 0x2, {0x3}}, {0x10, 0x4487, {0x2, 0xa}}, {0x4, 0x3, {0x1, 0xc18}}, {0xfffe, 0x918, {0x1, 0x7fff}}, {0x4, 0x2, {0x2, 0xd}}, {0x800, 0x6, {0x1, 0x2}}, {0x401, 0x9, {0x3, 0x3}}, {0x9, 0x5, {0xd2b882bde6756e7b, 0x80000000}}, {0x4, 0x2, {0x2, 0x9}}, {0x81, 0x3ff, {0x1, 0x3}}, {0x0, 0x7ff, {0x3, 0x6}}, {0x5, 0x7f, {0x0, 0x8000}}, {0xe, 0x6, {0x2, 0x1ff}}, {0x1, 0x8, {0x3, 0xffffffff}}, {0x1, 0x7f, {0x2, 0x4}}, {0x8001, 0x0, {0x2, 0xb}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000010}, 0x44804) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x87, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x7, 0x8000, 0x1}}) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000580)=""/253, 0xf6}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f00000002c0)=""/72, 0xfe91}, {&(0x7f0000000340)=""/225, 0xe9}, {&(0x7f0000000440)=""/6, 0x1a3a2cb4}, {&(0x7f0000000200)=""/51, 0x3c}], 0x7, 0xfffffffb, 0x4, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) 6.126097498s ago: executing program 4 (id=6598): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(r0, 0x1) (fail_nth: 3) 5.813067663s ago: executing program 4 (id=6600): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(r0, 0x1) 5.600535668s ago: executing program 4 (id=6602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x80) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newspdinfo={0x14, 0x24, 0x801, 0x70bd2d, 0x25dfdbfb, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 4.808554708s ago: executing program 3 (id=6607): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000002300)=[{&(0x7f0000000180)="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", 0x102}, {&(0x7f0000000000)="8423237733626c19eece2fdfb6d02610fc997800000000000000", 0x1a}, {&(0x7f0000000900)="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", 0x226}, {&(0x7f00000012c0)="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", 0x27f}], 0x4, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4f0}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7a}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a", 0x12}, {0x0}], 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 4.686799326s ago: executing program 1 (id=6608): add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = epoll_create(0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x2000000d}) (fail_nth: 3) 3.587445439s ago: executing program 3 (id=6611): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_rdma(0x0, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140), 0x40, &(0x7f0000002280)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@dfltgid}, {@common=@uname={'uname', 0x3d, 'tmpfs\x00'}}]}}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd000000083d9c0000000000000000", @ANYRES32=r3, @ANYBLOB="08005e8004000100"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') sendfile(r4, r4, 0x0, 0x100000000) syz_usb_ep_write(r0, 0x7, 0x87, &(0x7f00000000c0)="72114ef933ce9a963ded8793d5bd7a792e136b6e9126bb16a4b79185e9947033ee42fe47c6ca3124aad4b2d1d776684a3e963412c7be3b12296f3fcabf8c919fecf3c6dddace08b9785b3785c05691de1203a0ccd933ab8da6a32aba8c7f13942035323ff7cff5916f50b7a8c63c3e5a654520e64db29cfb6961a020591fb8611bcc2bc2e2c0e0") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000ac1414420000000000000000000000004e230000000080000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4894) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2c, 0x0, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x35}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x58, r2, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x2a}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x16}, {0x48}, {0x24}, {0x24, 0x1}, {0x1, 0x1}, {0x30, 0x1}, {0x60}, {0x36, 0x1}, {0x16, 0x1}, {0x6}, {0x30}, {0x18, 0x1}, {0x5}, {0x1b}, {0x18, 0x1}, {0x6c, 0x1}, {0x16, 0x1}, {0xc}, {0x3, 0x1}, {0x2, 0x1}, {0x12, 0x1}, {0x6c}, {0x3}, {0x24, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x30, 0x1}, {0x5, 0x1}, {0x9}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x80) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r9) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb4, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6df059f6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9294}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xfdcb}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000000)=0x40, 0x4) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000300)={0x40, 0xe, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0}) 3.542605488s ago: executing program 1 (id=6612): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001600)={{r3, 0x78d75320, 0x7fffffff, 0xca, 0x6, 0x0, 0x2, 0x1, 0x2, 0x4, 0xe1, 0x5, 0x6, 0x1, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r0, 0x7c45b000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0) 2.759778428s ago: executing program 1 (id=6619): mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', 0x0, 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=rdma,port=0x0000']) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 2) 1.961862771s ago: executing program 4 (id=6623): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffbffffe, 0x7f, 0xfffffe06}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) set_mempolicy(0x4, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/219, &(0x7f0000000000)=0xdb) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r2, 0x80000001, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="e74061c63d9356b7bd2ef98ca2d33ebc8440c5f549", 0x15}, {&(0x7f0000000200)="83f603971d7eaf706aaedaea6eb4875285d01c88b9b4731e145b1a3f7959dca083b434a2d3f4007c135f7e91", 0x2c}, {&(0x7f0000000240)="0aef79cf77bfcad877698c0850de208a598a84056b381cd3a81118568e8a0bc33934458b29719e3ed1db8b113e4f8d596770323b3331de8a74d12e5bc03133422f2c5a9968cb157077ac2176d0d0e86a5d10542c7290aa8632a66c69b2e1855a49d1ac4aa3abf6e4fc3fa2a02959ad4e9b77a061baebc420e01b9b00e4b2fef47e8b889606a5fb4faa5559ca037a6a695ad843", 0x93}], 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0xd1, 0x1, 0xb285, 0x1ff, 0x2, 0xffffffff}) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffbffffe, 0x7f, 0xfffffe06}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) (async) set_mempolicy(0x4, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/219, &(0x7f0000000000)=0xdb) (async) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) (async) ptrace$cont(0x21, r2, 0x80000001, 0x4) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="e74061c63d9356b7bd2ef98ca2d33ebc8440c5f549", 0x15}, {&(0x7f0000000200)="83f603971d7eaf706aaedaea6eb4875285d01c88b9b4731e145b1a3f7959dca083b434a2d3f4007c135f7e91", 0x2c}, {&(0x7f0000000240)="0aef79cf77bfcad877698c0850de208a598a84056b381cd3a81118568e8a0bc33934458b29719e3ed1db8b113e4f8d596770323b3331de8a74d12e5bc03133422f2c5a9968cb157077ac2176d0d0e86a5d10542c7290aa8632a66c69b2e1855a49d1ac4aa3abf6e4fc3fa2a02959ad4e9b77a061baebc420e01b9b00e4b2fef47e8b889606a5fb4faa5559ca037a6a695ad843", 0x93}], 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) (async) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0xd1, 0x1, 0xb285, 0x1ff, 0x2, 0xffffffff}) (async) 1.337554928s ago: executing program 3 (id=6625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xbf, "216119f549d60f4d879b20b1b1c5b0dfd39aadf75dc1bedeff31ea5520afc08afa549f3ec5205a5f806579ceab0bed3ce3f02b86689908816a9492e15d1f6eaed2f046974d53216dddfc9c6465568bef5a2a96b3428a4c345fa10ce9edeb92cd77443a4fc96f42e730e03c66c1e6272d5e2287b68eb38341aa16331982b9624ecc08784e2e1da49934ce09185a0170120066eaff97558d562ef6b99f814320c31ba70fd45367c76062484ef482848bd9af58f8116fb65bcf0e3233b4186efb"}, &(0x7f0000000100)=0xc7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4004816) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d936", 0x2a8}, {&(0x7f0000000bc0)}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x104, &(0x7f0000001000)={[{0xd7, 0x4e00, "da22b43c5f368e1d88d823506dbf3b62f680b1932027998991059f2d64dd71c5795133625c2a8af45257ec255aef331a2ee3f49ac51921da61de61cd330f3ede4bb411c04c365d47a48416cf00aabab2af7b5d13467827c37cfa8e003b9bdc9c73a72de055775cc793d4ffc2b63c5dcb4dcd025224299fff5273a0981aa3d43ba87ad3ce84e24dc05d4a7a04166ef9f3604e7e544511b28229774d7b3736d6fea4ae8ef436f65e8bb76c61b669e5b45ab6b632dab97848198375d5354b5651df84542b1326669a5b4ae38db9c89f8c4cf354e9a4764e0a"}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0xa3}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000300)=""/9, 0x4}], 0x8, &(0x7f00000006c0)=""/198, 0xbf}}], 0x1, 0x8000, &(0x7f0000003700)={0x77359400}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000ac0)={"7c05fd638582b81fd11bdfa53f5772b7", 0x0, 0x0, {0x4, 0x100}, {0xfffffffffffffffb, 0x800}, 0x9, [0xc4, 0x1, 0x8, 0xd9, 0x7, 0x80000000, 0x5, 0x6, 0x44, 0x6, 0x3ff, 0x1, 0x6, 0x9, 0x2, 0x5815]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001fc0)={{r4}, r8, 0x0, @inherit={0x88, &(0x7f0000000d80)={0x0, 0x8, 0x2, 0x8, {0x8, 0x1ff, 0xfffffffffffffffa, 0x7, 0x5}, [0x9, 0xc, 0x6, 0x3, 0x9, 0x9300000, 0x1, 0x1]}}, @subvolid=0x7e7d7386}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000034c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003480)={&(0x7f0000002fc0)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x4}, 0x7, 0x81, 0x10, 0x4, 0x18, 'syz0\x00', "31e505be3c6937db8b180437f67c475641b6323f19c5dd86aae57b6adce8bb74", "94eac64cabbe0e7254bf4988a4b9f1c365a2b1d0e0a60724ecb4657cd55e7fe4", [{0xc1c, 0x3078, {0x1, 0x9}}, {0x0, 0x2, {0x3, 0x730}}, {0x40, 0x0, {0x3, 0x4}}, {0x2, 0x6, {0x0, 0xffffff01}}, {0xf4da, 0x3, {0x0, 0x5}}, {0x80, 0x7, {0x0, 0x5}}, {0xff81, 0x400, {0x1, 0x3}}, {0x1, 0xf221, {0x0, 0xc}}, {0x489a, 0x7, {0x0, 0x5}}, {0x106, 0x400, {0x1, 0x2}}, {0xde4, 0x0, {0x3}}, {0x0, 0x5, {0x0, 0xffffe077}}, {0xb, 0x10, {0x2, 0xf825}}, {0x7, 0x4, {0x1, 0x9}}, {0x1, 0x3, {0x0, 0x2}}, {0x9, 0x1, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0xbdb}}, {0x0, 0x322, {0x0, 0x81}}, {0x8, 0x2, {0x3, 0x81}}, {0x7, 0x9, {0x1, 0xffff}}, {0x4, 0x20, {0x0, 0x2c4c}}, {0x6, 0x1, {0x0, 0x3}}, {0xab61, 0x9, {0x1, 0xb4}}, {0xf, 0x9, {0x1, 0x9}}, {0x43e, 0x6, {0x0, 0x130}}, {0x897, 0x9, {0x3, 0x5}}, {0x4, 0x10, {0x0, 0x10}}, {0x6, 0xfff8, {0x3, 0x5}}, {0xfff7, 0xd, {0x1, 0x80000000}}, {0x101, 0xff, {0x0, 0x5}}, {0x915, 0x999, {0x3, 0xcc6}}, {0x100, 0x8000, {0x0, 0x7}}, {0x6, 0x7, {0x2, 0x10001}}, {0x0, 0x8, {0x3, 0xb9a0}}, {0x101, 0x9, {0x3, 0x2}}, {0x7ff, 0x6, {0x0, 0x8}}, {0xfffd, 0x3ff7, {0x2, 0x7}}, {0xb7, 0x7, {0x3, 0x6}}, {0x3, 0x8, {0x1, 0x7}}, {0xfffb, 0x1c3f, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0xe}, 0x1, 0x8, 0x4800, 0x3, 0x14, 'syz1\x00', "e433314eac4227fafec3684b25dbe97be592581bc0384ac38d248fa043421e2c", "8b200d1dadfa9e20df42c250da11b27364a2cd690769d639f8999d920d35dd28", [{0x6, 0x0, {0x2}}, {0xfc2, 0x1ff, {0x2, 0xfffffff9}}, {0x6, 0xffff, {0x3, 0x5}}, {0x5, 0x3ff, {0x3, 0x5}}, {0x9, 0x3, {0x1, 0x8001}}, {0x6, 0x8, {0x1, 0x4}}, {0x800, 0x4, {0x0, 0x8}}, {0x8, 0xffff, {0x2, 0x40}}, {0xd94, 0x10, {0x0, 0xad1}}, {0x2, 0x2, {0x1, 0x2}}, {0x4, 0x5, {0x1, 0xdb8}}, {0x40, 0x2, {0x3, 0x2}}, {0x101, 0x3ff, {0x3, 0x5}}, {0x3, 0x9, {0x2, 0x2}}, {0x0, 0x9, {0x2, 0x90}}, {0x0, 0x9, {0x0, 0xfffffff9}}, {0xe4, 0x2, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x22be}}, {0x9, 0x9, {0x3, 0x3}}, {0xc, 0x9, {0x1, 0x5}}, {0xff, 0x2, {0x1, 0x3}}, {0x7fff, 0x9, {0x3, 0x3}}, {0x6, 0x0, {0x1, 0x2}}, {0xbc, 0x1, {0x2, 0x8}}, {0xb8a, 0x2, {0x3}}, {0x10, 0x4487, {0x2, 0xa}}, {0x4, 0x3, {0x1, 0xc18}}, {0xfffe, 0x918, {0x1, 0x7fff}}, {0x4, 0x2, {0x2, 0xd}}, {0x800, 0x6, {0x1, 0x2}}, {0x401, 0x9, {0x3, 0x3}}, {0x9, 0x5, {0xd2b882bde6756e7b, 0x80000000}}, {0x4, 0x2, {0x2, 0x9}}, {0x81, 0x3ff, {0x1, 0x3}}, {0x0, 0x7ff, {0x3, 0x6}}, {0x5, 0x7f, {0x0, 0x8000}}, {0xe, 0x6, {0x2, 0x1ff}}, {0x1, 0x8, {0x3, 0xffffffff}}, {0x1, 0x7f, {0x2, 0x4}}, {0x8001, 0x0, {0x2, 0xb}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000010}, 0x44804) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x87, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x7, 0x8000, 0x1}}) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000580)=""/253, 0xf6}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f00000002c0)=""/72, 0xfe91}, {&(0x7f0000000340)=""/225, 0xe9}, {&(0x7f0000000440)=""/6, 0x1a3a2cb4}, {&(0x7f0000000200)=""/51, 0x3c}], 0x7, 0xfffffffb, 0x4, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.298326185s ago: executing program 1 (id=6627): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @loopback, 0x0}, &(0x7f0000000080)=0xc) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x6, r1, 0x4}, 0xc) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{}, {0x3d, 0x1}, {0x24}, {0x9, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x6c}, {0x1b}, {0x5, 0x1}, {0x4}, {0x6}, {0xc}, {0xb}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7a, 0xdc12}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x22, 0xbe, "2e4d26f5de3ce87f316d499b84c1729f28252e2c5129a7a00cf2f029d1f3"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x48044}, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x2) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x200, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc499}, {0x6, 0x11, 0xef}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x8001}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0xd7ac}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x2}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x30fc}, {0x8, 0x13, 0x7}, {0x5}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4004050}, 0x1895) pread64(r0, &(0x7f00000005c0)=""/18, 0x12, 0x5) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0xa0864, &(0x7f0000000780)={[{@verity_require}, {@redirect_dir_on}, {@uuid_on}, {@verity_require}, {@uuid_on}, {@default_permissions}, {@uuid_on}, {@metacopy_on}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfshat={'smackfshat', 0x3d, 'netdevsim'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x64, 0x64, 0x66, 0x36, 0x63, 0x37], 0x2d, [0x32, 0x66, 0x37, 0x62], 0x2d, [0x33, 0x34, 0x38, 0x37], 0x2d, [0x63, 0x61, 0x65, 0x63], 0x2d, [0x39, 0x36, 0x65, 0x31, 0x33, 0x66, 0x62, 0x61]}}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b9}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x4d, 0x7, 0x1, 0x0, "562851d5f9160773fc55f7c8dfa67630ac58b11acb985b3b1fd2b7cc78a468ba7bc54814ebb7766c7d893ff70d39c3d7bbf39b342b400b79f9d3a067b1c4f1c63ba3ba380868c6d5bd"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000b00)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000ac0)='veth0_macvtap\x00', 0x8, 0x5, 0x50}) r3 = open(&(0x7f0000000b80)='./file1\x00', 0x100, 0x44) stat(&(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000d00)='./file2\x00', 0x4000, 0x3fb, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x2148000, &(0x7f0000000e40)={[{@uuid_auto}, {@redirect_dir_follow}, {@volatile}, {@verity_off}, {@uuid_off}, {@xino_auto}, {@redirect_dir_follow}, {@redirect_dir_nofollow}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '-+[@]]\\:\\(]&.)'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r4}}, {@uid_eq={'uid', 0x3d, r2}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'smackfshat'}}, {@fsuuid={'fsuuid', 0x3d, {[0x3c, 0x38, 0x39, 0x32, 0x37, 0x63, 0x64, 0x61], 0x2d, [0x30, 0x62, 0x38, 0x64], 0x2d, [0x32, 0x35, 0x32, 0x60], 0x2d, [0x32, 0x34, 0x61, 0x63], 0x2d, [0x36, 0x33, 0x64, 0x34, 0x39, 0x1c, 0x36, 0x37]}}}]}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000fc0)={0x5, 0xffff, {0xffffffffffffffff}, {r2}, 0x3, 0x5}) r8 = syz_open_procfs(r7, &(0x7f0000001000)='net/ip6_tables_targets\x00') r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file2\x00', &(0x7f0000001080)={0x2, 0x10, 0x2e}, 0x18) getdents64(r9, &(0x7f00000010c0)=""/80, 0x50) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001140)) ioctl$XFS_IOC_FSBULKSTAT(r8, 0xc0205865, &(0x7f0000001800)={&(0x7f0000001180)=0x200000000000, 0x4, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000017c0)}) write(r6, &(0x7f0000001840)="58fcb8b294058e1e9cc3ebe8d2dc60d6eda968d20153048efeb0b6eceecd28725e4fad823c7fdeeb48287c73cf8e9264da08ae27887612e128b0c0cc0652c6ea9b3c4392", 0x44) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f00000018c0)={0x80}) bind$unix(r3, &(0x7f0000001980)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvfrom$packet(r0, &(0x7f0000001a00)=""/98, 0x62, 0x140, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000001a80)={@multicast1, @loopback, @broadcast}, 0xc) mount$overlay(0x0, &(0x7f0000001ac0)='./file2\x00', &(0x7f0000001b00), 0x2202010, &(0x7f0000001bc0)={[{@default_permissions}, {@xino_off}, {@uuid_null}, {@nfs_export_on}, {@redirect_dir_on}], [{@fowner_eq}, {@flag='dirsync'}, {@euid_gt}]}) 1.162029684s ago: executing program 1 (id=6628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"209e76702c5eaa2ec089efa6c4206fba4d1e37b16ce3b193210df2442260ec00d37e9d338b55b943390ecee0c30dc6b7de5c7194f9af55b89def2eedf221749a8fa655e3bc34c30014d8dc98c35630bc0c07942df5dfda020ba00cc267a5bff280a52050c0bc35957a3c96dc408cca2e5f47b488aa3b94011bd688213c35dd9bbd1539711b2b4ebddcb189fa295441a1c4221acd757640f3fcfdf6c6a494c103be02dcf3ef56301d6648bf29f935137ee1e86d43dfed5a48e6ee5fff8099e6d7e89db7ddcbc6148d07a702e9fa46c0a7ec6893021d81c100c1b9ecba4f4a0eec3206ef91f3f70492fd8b9f757926a66ee04b6358f69a9c1d3038fac28e7e61440b5c8eb5fa0e8111a551a743abf29973ceefa82dc6862ebb70f896a01efb6b543b41cff82338ab64ad3f6733db73394d5dcb4f81a746e9786c8d481d612c7c50cb56b1b2fe0d9909598d2488a722675b4729d5cf8849ee3f87f9d3d0c7fcf7bed3eb1f797c93dab840583e42e01aa8cc5a22863dc6df81bd4437ec9cb05423aed58e84039b69cef3189adb74f613d863063795f8dc9e2210cedeb78c13c1dd76490d73ca4b9394e33c2894ee65808a9b3501f8e6681099dd89cb926f61c6e04a068fa95eeab5f5a5ca6f100eac3920f92ac37473d2e4b9af3247655af1b283671dfa4c6a6c572756398b5b606ebbc5a49ef2f01c47b986c10ca5253268ac7e6eb9f00f49bc1484970bc881a9440c5c8b1a61c31443abd076275ce8af8f6185a2e06a9afb7c62ad5ecd4affcc9e91d41d7b373242d0fe2fae6a17473cf5e248523c7a7f7cb40106a5f9e0fb4ca4734622ff21567bf205132b0ccb2c264b6f9c88fabe9a012e3378aec8779f97f137b645dc0a9c8c5d2d26fcc6339c61a2cc1b7c4af85512928022bbcb1318afa9770b020b46227eb3f0216be24687cd956aad67095c1a512ca09e36e8ab777be3447de97edd3a69aa26959f8449eafc9324720a415651b8a29da6131920a7d2fb2cf53f92bb1853997fb7117c52914d438ad4dd0f6334909e20a29560bc418faf3254488a37c7c1e1ad4a23542f52fff42fbe84a77be5df7377d7ec0acccf1e687b2a5f562734ee37165c6b866bc802432ae44429d13f8eda5838d81e2945e3f65009720a736db77d3d626e18ba054f16ad7e07236bc9263ad4912d390a8cc0629b50289e9fd27517511f37ddf4a38acb06b8517e8dd7518a7417b87cb40ed718e5e26b77a2eb60875ceee8a65f18be935d8bf287ac03c0c40992d43b2d6678d4dc1a79489979fd587cf98e48133079dc26c8d758bcf8218b4cfa7bf907cf2ff0fdc6f591de2ba39b1adf262fbb7b3f77da0251d49d57b7fc84dfd5f7c38bcb163cf0cd2dc7931797245bea4b06bc58261edacace16bfb3bd6772cfab57c787601ceddb14a45c112ec0307074184855508ca89d"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.002560355s ago: executing program 4 (id=6630): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000080)={'\x00', 0x1000, 0x4, 0xe, 0x0, 0x9, 0x8080000, 0xe000, '\x00', 0x8}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)=@arm64={0x2, 0x2, 0x5, '\x00', 0x4d35}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0xe54a680, 0x2, 0x7fffffff, 0x4, 0x5, 0x9}, {0xb, 0xadf, 0x2, 0x8, 0x10000, 0x3, 0x5}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000300)={[{0x7, 0x4, 0xa, 0x7b, 0x1, 0x53, 0x3, 0xfb, 0x1, 0x10, 0xf1, 0x3, 0x3ff}, {0x5, 0xf5cc, 0x81, 0xf, 0x4, 0x7f, 0x20, 0x1, 0xf9, 0x7, 0xff, 0x5, 0x1}, {0x10000, 0x8, 0x2b, 0xfb, 0x6, 0x3, 0x80, 0x0, 0xca, 0x4, 0x72, 0x0, 0x67b}], 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a80)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) r5 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@tipc, &(0x7f0000000c00)=0x80) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000c40)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0}, &(0x7f0000000cc0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0}, &(0x7f0000000d40)=0xc) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_clone3(&(0x7f0000001280)={0x100000, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180), {0x1e}, &(0x7f00000011c0)=""/39, 0x27, &(0x7f0000001200)=""/59, &(0x7f0000001240)=[0x0], 0x1}, 0x58) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001440)=0x0) getgroups(0x5, &(0x7f0000001480)=[0xee00, 0xee01, 0x0, 0xee00, 0x0]) stat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() r17 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001740), 0xc0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001c00)=0x0) r22 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, 0x0}, &(0x7f0000001c80)=0xc) sendmmsg$unix(r2, &(0x7f0000004100)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="311beb770a30442519a9b89ed76ef8c93411aa19ada9ad39ba6dd738c1170f9b1a160202b9a1238f258ed6c9c0fd741551c1e0ce1cb6a7a5bf910289f259648978e6526bec258f8e42b0473035e359f5274ae94b9029c081e1f3389bb87917423ff16aea0d5d812dcadcaced55c0fa8e282f9641c2a4a39ae950e3df3974e1fd0eeb670231bcd003357d81ea6ef1ad2a81e3ded68c6f548f25251c48b7f2eeeef9c8fab223bef015f38df3a7adbbda3c39bf38f74760d988d8152a494d1082592ec59ae385ab8a8443b91bbedf148812142e820685ddc860", 0xd8}, {&(0x7f0000000540)="a2a960b1778982c54a270bceb7f7f940ea3faf10e956cca61f79d869190b49f69a53c1f104a9e5aa9b25e4f84d77087d1ce86c7d6395e1879bb55e067f058b42f656858b3371e472fbf3341762414a7dd880bdf25adfecdae14dd90874bcf101673baae680d1d03163e48a09af54fb305d5701519d38e23b22919509d98c836af6c97fad5327579a668e638a347cb815f62c01b70e328f0bf4c54f1c63347ba17855fad7fb91", 0xa6}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000700)="de42f10a446175c91029bc71c228b5675114afb4b4e8cf72ea219ed63670cedc4093b9c4e0e1c92af03dc6d92b537e257a6419d93668b6e2b310f25306595a5a3ccf286c18ddd174cc14c7a8e5c385280e5c0e598a70535b665b9a785a9cc904b530fea88965b405a17b38281cde7f57533a40a4f6c0e209b858e06ffd4891864e9f12b87674cac93c49f35846af091aa58ef5cc2767a2717304e0c60defc1fabe122bfe491cd1720952a3ac9bc17f0ec4fc378fa77afe09bc0618485221189a64ec66355958b92a6518077688e2a05dba547d9f156f6d046a004617479106cb1e94a6c5fe1841e5", 0xe8}, {&(0x7f0000000800)="40bf0fa45955c0aec53b79c8f0f4bbc5d7cd647c269dde8f1e2c719400977dbfff16df9e9d5d9b34f3717f0b5c49e1f9edd4a7b2be17a510df110cea210f2203d9f8c706d8b5cc1724baaa61767d1894603fbab60859f61d2fd0636a6ef0e6a0fd47cca8", 0x64}, {&(0x7f0000000880)="4ac9e46dd8a9705d08d4a8a56eda46c18705cf98d1fc13ea251f21a74d1a0d32e1ab8f5960c980915bfb7d81d7027df5d5f1e1c231b30ba2742c6cd55796d20eca9acaf0b2b5614eedf439ca237cd81a392caba2d0ee21845d4cd442a1bc7be6b121c0a193cac85399f6bd9e8694294daa", 0x71}, {&(0x7f0000000900)="445e2131513d1be859c41f29bb2d434858ca5e84676f1fc9ff573d5c32973104894320952ab02cb7cbd53d011fe382e80e7e5a0805a1e2057415cf3ec57f6392be458578c2bfe499117194924da82846ec553c67e628c70a80e7d20615509f84e563bdb58d6510a777cf5c5f8740b37987c5a4c8465e1f4c9dc1fb38113a671f6bab57e1ea05a84ff5544dfa4a0e05dea00740151b31c2ddb587baaf7b8e2a5a37e8d22dcecbfc5d0dbfeff6753cee9f0abb1db1c15c90f0848daec7f7c18c598351", 0xc2}], 0x7, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r0, r1, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xa8, 0x4000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f00)="765efbc7a600e170516d44dd6e0a68673b3c4fa52bbf0d884f6404cdd5f61773966402248658f45f64350808066ec4a5f281aafe", 0x34}], 0x1, &(0x7f0000000f80), 0x0, 0x20000830}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="a3ed0e36b680c9cc1ba372af1c2565ffd58648d8c01ade218bba2496c83a5ac6ecb26ceecf00699ba8aa410604004785c69f6fc40695cb64fb3d472e3fee05afc45f505145d5dcd2fd9f79269939f260ec435c6efb11226fda1d5f36b8548acd241f93e83e27c7a1fdf837ac4073cfa35bd3633215d79f2b2e0d24dd4341b62ecdac2254c373e30147167741a6bcbe1f5fd5fccfc29781a54d2f7a42a92c719a8ac10a941e246b6af3713fe9f53d86bb474d303ec0bdad9ddbdcfe3ac154a019280bee58accfd6d4b3fd3709bfa4976ee6d72f4951a9e58eb5f98cc2ecb19884e6a66e6773b96d3aaaea0ce2d97530", 0xef}], 0x1, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee00, r14}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r17]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r18, r19}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r0, r1, 0xffffffffffffffff, r20]}}], 0x118, 0x40001}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001940)="eb7cfeb523c47bedc133993ebd9986f3f405ec2686222ebe5d5f7b", 0x1b}, {&(0x7f0000001980)="a3cc849dbe63ff50fb43fe79032c2842bf81e37ba972987e6034d36eeb2bee70abb3d96e70b7b383e138ff459a0c0b7570ca8c2f120913665d475146c119a71e960ed9e940", 0x45}, {&(0x7f0000001a00)="700803e41d4e10aa18ac4b8805efe4b3a482083b4e9df000d61d1e2d0834fba04817a2e017dc", 0x26}], 0x3, 0x0, 0x0, 0x20048001}}, {{&(0x7f0000001a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001b00)="d00b287c2d9bbd6b86152363cb1f68fa74d7910523df5775efa99266044bc07ac5d5dca3ee5c103fccaf9953532e6e20dd73d1c169caf913cdd86dc53696c5b46e3cc83ef7714197916bbe6fa459f77c18eeebaeaa931bf6425ea1a7c34be66285399a5f0e763df85bda", 0x6a}, {&(0x7f0000001b80)="f814dfcefe94311279123b044864f383959248a1a4298d2ffdb9eb2f7019676250e1fff119a10d18d638d04920e4", 0x2e}], 0x2, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x128, 0x20040000}}], 0x5, 0x20004001) 953.890514ms ago: executing program 5 (id=6631): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRES8=0x0, @ANYBLOB=',rootmode=00000000000000000040000,', @ANYRESDEC]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xa400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x2}) shutdown(r0, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x28, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x0, 0x120) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/14, 0xe}, 0x10001}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="800000007000fddbdf250600000005000500a1000000db45e59d1cc154e2"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x80) r9 = getpid() prlimit64(r9, 0x2, &(0x7f00000005c0)={0x32, 0x101}, &(0x7f0000000600)) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r6}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x58, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x8, @remote, 0xffffffff}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @empty}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000500)={r11, 0x9}, &(0x7f0000000540)=0x8) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000440)={&(0x7f0000000340)=[{0xfff, 0x3, 0x93, 0x401}, {0x339, 0xe, 0x7, 0x5}, {0xfffffffffffffffb, 0xfffffffffffffff7, 0xc800000000000, 0x7}, {0x9, 0x0, 0x7fff, 0x7}, {0x5, 0xb, 0x2, 0x3}, {0x7fffffff, 0x38, 0x100000001, 0x9}, {0x9, 0x5, 0x9, 0x1}], 0x7, 0x20, 0x4, 0x9}) 924.090867ms ago: executing program 5 (id=6632): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 839.249587ms ago: executing program 5 (id=6633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) 740.596966ms ago: executing program 5 (id=6634): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000840)={{r0}, "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"}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x50424752}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 678.916119ms ago: executing program 5 (id=6635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4ae41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa81002f000800"], 0x3e) 673.15469ms ago: executing program 4 (id=6636): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000900)={0x2, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x40, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x3, 0x0, 0x2, '\x00', 0x5b}, {0x7, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x29}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0xcb}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x75, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x6, '\x00', 0x6}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x5, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa4, 0x81, '\x00', 0x81}, {0xfd, 0x7, 0x80, '\x00', 0x6}]}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1, 0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1, 0x2}}, './file0\x00'}) 617.022054ms ago: executing program 1 (id=6637): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=6638): r0 = syz_open_dev$media(&(0x7f0000000040), 0xf171, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket(0x11, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000080)=@phonet={0x23, 0x2d, 0x58, 0x9}, 0x80, 0x0}}], 0x1, 0x4004801) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000040)) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x0, 0xfffffffffffffc99, 0x0, 0x0, 0x20007}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) kernel console output (not intermixed with test programs): USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.093452][T24715] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1534.111987][T22504] m920x_read = error: -19 [ 1534.112017][T22504] dvb-usb: error while querying for an remote control event. [ 1534.119307][ T823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1534.122875][T24167] usb 4-1: Using ep0 maxpacket: 16 [ 1534.156750][T24167] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1534.156787][T24167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1534.173880][T24167] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1534.173981][T24167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1534.174061][T24167] usb 4-1: SerialNumber: syz [ 1534.222129][ T7908] m920x_read = error: -19 [ 1534.222160][ T7908] dvb-usb: error while querying for an remote control event. [ 1534.332299][ T7908] m920x_read = error: -19 [ 1534.332341][ T7908] dvb-usb: error while querying for an remote control event. [ 1534.442502][ T7908] m920x_read = error: -19 [ 1534.442534][ T7908] dvb-usb: error while querying for an remote control event. [ 1534.552145][ T7908] m920x_read = error: -19 [ 1534.552174][ T7908] dvb-usb: error while querying for an remote control event. [ 1534.662455][ T7908] m920x_read = error: -19 [ 1534.662486][ T7908] dvb-usb: error while querying for an remote control event. [ 1534.698364][T24167] usb 4-1: 0:2 : does not exist [ 1534.728743][ T823] usb 2-1: USB disconnect, device number 58 [ 1534.773031][ T7908] m920x_read = error: -19 [ 1534.773068][ T7908] dvb-usb: error while querying for an remote control event. [ 1534.887812][ T7908] m920x_read = error: -19 [ 1534.887843][ T7908] dvb-usb: error while querying for an remote control event. [ 1535.005824][ T7908] m920x_read = error: -19 [ 1535.005858][ T7908] dvb-usb: error while querying for an remote control event. [ 1535.112298][ T7908] m920x_read = error: -19 [ 1535.112331][ T7908] dvb-usb: error while querying for an remote control event. [ 1535.222132][ T9] m920x_read = error: -19 [ 1535.222166][ T9] dvb-usb: error while querying for an remote control event. [ 1535.332133][ T9] m920x_read = error: -19 [ 1535.332167][ T9] dvb-usb: error while querying for an remote control event. [ 1535.442140][ T9] m920x_read = error: -19 [ 1535.442169][ T9] dvb-usb: error while querying for an remote control event. [ 1535.552227][ T9] m920x_read = error: -19 [ 1535.552262][ T9] dvb-usb: error while querying for an remote control event. [ 1535.662235][ T9] m920x_read = error: -19 [ 1535.662268][ T9] dvb-usb: error while querying for an remote control event. [ 1535.772273][ T9] m920x_read = error: -19 [ 1535.772307][ T9] dvb-usb: error while querying for an remote control event. [ 1535.882932][ T9] m920x_read = error: -19 [ 1535.882978][ T9] dvb-usb: error while querying for an remote control event. [ 1536.001747][T22504] m920x_read = error: -19 [ 1536.001782][T22504] dvb-usb: error while querying for an remote control event. [ 1536.103421][ T7908] m920x_read = error: -19 [ 1536.103455][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.212249][ T7908] m920x_read = error: -19 [ 1536.212283][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.322254][ T7908] m920x_read = error: -19 [ 1536.322289][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.435249][ T7908] m920x_read = error: -19 [ 1536.435281][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.543338][ T7908] m920x_read = error: -19 [ 1536.543371][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.658315][ T7908] m920x_read = error: -19 [ 1536.658348][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.762172][ T7908] m920x_read = error: -19 [ 1536.762206][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.796835][T24167] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1536.832514][T24167] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1536.842964][T24167] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1536.872654][ T7908] m920x_read = error: -19 [ 1536.872689][ T7908] dvb-usb: error while querying for an remote control event. [ 1536.875514][T24167] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1536.936865][T24167] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1536.948196][T24731] FAULT_INJECTION: forcing a failure. [ 1536.948196][T24731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1536.952050][T24731] CPU: 1 UID: 0 PID: 24731 Comm: syz.3.6478 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1536.952090][T24731] Tainted: [L]=SOFTLOCKUP [ 1536.952099][T24731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1536.952113][T24731] Call Trace: [ 1536.952123][T24731] [ 1536.952134][T24731] dump_stack_lvl+0xe8/0x150 [ 1536.952170][T24731] should_fail_ex+0x46b/0x600 [ 1536.952207][T24731] _copy_from_user+0x2d/0xb0 [ 1536.952246][T24731] kvm_vm_ioctl_set_pmu_event_filter+0xc1/0x670 [ 1536.952283][T24731] ? __pfx_kvm_vm_ioctl_set_pmu_event_filter+0x10/0x10 [ 1536.952319][T24731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1536.952368][T24731] kvm_arch_vm_ioctl+0xc0d/0x1a20 [ 1536.952404][T24731] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1536.952436][T24731] ? __lock_acquire+0x6b5/0x2d10 [ 1536.952464][T24731] ? __lock_acquire+0x6b5/0x2d10 [ 1536.952512][T24731] ? unwind_next_frame+0xa6/0x2550 [ 1536.952579][T24731] ? unwind_next_frame+0xa6/0x2550 [ 1536.952712][T24731] ? is_bpf_text_address+0x26/0x2b0 [ 1536.952811][T24731] ? is_bpf_text_address+0x26/0x2b0 [ 1536.952895][T24731] ? is_bpf_text_address+0x292/0x2b0 [ 1536.952968][T24731] ? is_bpf_text_address+0x26/0x2b0 [ 1536.953045][T24731] ? kernel_text_address+0xa5/0xe0 [ 1536.953120][T24731] ? __kernel_text_address+0xd/0x30 [ 1536.953194][T24731] ? unwind_get_return_address+0x4d/0x90 [ 1536.953287][T24731] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1536.953378][T24731] ? arch_stack_walk+0xfb/0x150 [ 1536.953482][T24731] ? stack_trace_save+0xa9/0x100 [ 1536.953562][T24731] ? __pfx_stack_trace_save+0x10/0x10 [ 1536.953654][T24731] ? kasan_save_free_info+0x46/0x50 [ 1536.953733][T24731] ? stack_depot_save_flags+0x33/0x810 [ 1536.953832][T24731] ? kasan_save_track+0x4f/0x80 [ 1536.953913][T24731] ? kasan_save_track+0x3e/0x80 [ 1536.953993][T24731] ? kasan_save_free_info+0x46/0x50 [ 1536.954025][T24731] ? __kasan_slab_free+0x5c/0x80 [ 1536.954115][T24731] ? kfree+0x1c5/0x6c0 [ 1536.954189][T24731] ? tomoyo_path_number_perm+0x501/0x630 [ 1536.954274][T24731] ? security_file_ioctl+0xc3/0x2a0 [ 1536.954358][T24731] ? __se_sys_ioctl+0x47/0x170 [ 1536.954459][T24731] ? do_syscall_64+0x15f/0xf80 [ 1536.954515][T24731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.954553][T24731] kvm_vm_ioctl+0x908/0xd50 [ 1536.954596][T24731] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1536.954794][T24731] ? kasan_quarantine_put+0xbb/0x1f0 [ 1536.954890][T24731] ? tomoyo_path_number_perm+0x219/0x630 [ 1536.954985][T24731] ? tomoyo_path_number_perm+0x219/0x630 [ 1536.955079][T24731] ? do_vfs_ioctl+0x117b/0x1540 [ 1536.955183][T24731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1536.955341][T24731] ? __fget_files+0x2a/0x420 [ 1536.955423][T24731] ? __fget_files+0x2a/0x420 [ 1536.955475][T24731] ? __fget_files+0x3a6/0x420 [ 1536.955510][T24731] ? __fget_files+0x2a/0x420 [ 1536.955595][T24731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1536.955665][T24731] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1536.955742][T24731] __se_sys_ioctl+0xff/0x170 [ 1536.955824][T24731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.955896][T24731] do_syscall_64+0x15f/0xf80 [ 1536.955944][T24731] ? trace_irq_disable+0x3b/0x140 [ 1536.956040][T24731] ? clear_bhb_loop+0x40/0x90 [ 1536.956171][T24731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.956239][T24731] RIP: 0033:0x7fe14b19ce59 [ 1536.956304][T24731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.956367][T24731] RSP: 002b:00007fe1493ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1536.956456][T24731] RAX: ffffffffffffffda RBX: 00007fe14b415fa0 RCX: 00007fe14b19ce59 [ 1536.956495][T24731] RDX: 0000200000000300 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 1536.956538][T24731] RBP: 00007fe1493ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.956574][T24731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.956613][T24731] R13: 00007fe14b416038 R14: 00007fe14b415fa0 R15: 00007ffe61c59388 [ 1536.956706][T24731] [ 1536.989237][ T7908] m920x_read = error: -19 [ 1536.989267][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.225827][ T7908] m920x_read = error: -19 [ 1537.225860][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.362110][ T7908] m920x_read = error: -19 [ 1537.362138][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.430781][T24167] usb 4-1: USB disconnect, device number 36 [ 1537.472219][ T7908] m920x_read = error: -19 [ 1537.472245][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.582179][ T7908] m920x_read = error: -19 [ 1537.582211][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.692245][ T7908] m920x_read = error: -19 [ 1537.692272][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.802173][ T7908] m920x_read = error: -19 [ 1537.802203][ T7908] dvb-usb: error while querying for an remote control event. [ 1537.912249][ T7908] m920x_read = error: -19 [ 1537.912281][ T7908] dvb-usb: error while querying for an remote control event. [ 1538.026160][ T7908] m920x_read = error: -19 [ 1538.026194][ T7908] dvb-usb: error while querying for an remote control event. [ 1538.132177][ T7908] m920x_read = error: -19 [ 1538.132208][ T7908] dvb-usb: error while querying for an remote control event. [ 1538.191799][T24739] FAULT_INJECTION: forcing a failure. [ 1538.191799][T24739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.192072][T24739] CPU: 0 UID: 0 PID: 24739 Comm: syz.3.6481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1538.192108][T24739] Tainted: [L]=SOFTLOCKUP [ 1538.192117][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1538.192133][T24739] Call Trace: [ 1538.192143][T24739] [ 1538.192155][T24739] dump_stack_lvl+0xe8/0x150 [ 1538.192192][T24739] should_fail_ex+0x46b/0x600 [ 1538.192230][T24739] _copy_from_iter+0x1d3/0x1670 [ 1538.192275][T24739] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1538.192308][T24739] ? __alloc_skb+0x27d/0x7d0 [ 1538.192349][T24739] ? __pfx__copy_from_iter+0x10/0x10 [ 1538.192383][T24739] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1538.192419][T24739] ? __alloc_skb+0x27d/0x7d0 [ 1538.192457][T24739] ? netlink_sendmsg+0x650/0xb40 [ 1538.192492][T24739] ? skb_put+0x11b/0x210 [ 1538.192531][T24739] netlink_sendmsg+0x6c0/0xb40 [ 1538.192578][T24739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.192617][T24739] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1538.192664][T24739] ? aa_sock_msg_perm+0x122/0x200 [ 1538.192703][T24739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.192739][T24739] sock_sendmsg_nosec+0x112/0x150 [ 1538.192772][T24739] sock_write_iter+0x308/0x410 [ 1538.192801][T24739] ? __pfx_sock_write_iter+0x10/0x10 [ 1538.192851][T24739] do_iter_readv_writev+0x62b/0x8d0 [ 1538.192904][T24739] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1538.192948][T24739] ? rw_verify_area+0x25b/0x4e0 [ 1538.192983][T24739] vfs_writev+0x345/0x9a0 [ 1538.193017][T24739] ? __pfx_vfs_writev+0x10/0x10 [ 1538.193057][T24739] ? __fget_files+0x2a/0x420 [ 1538.193089][T24739] ? __fget_files+0x3a6/0x420 [ 1538.193115][T24739] ? __fget_files+0x2a/0x420 [ 1538.193154][T24739] do_writev+0x15a/0x2e0 [ 1538.193183][T24739] ? __pfx_do_writev+0x10/0x10 [ 1538.193217][T24739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.193245][T24739] do_syscall_64+0x15f/0xf80 [ 1538.193286][T24739] ? trace_irq_disable+0x3b/0x140 [ 1538.193331][T24739] ? clear_bhb_loop+0x40/0x90 [ 1538.193363][T24739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.193389][T24739] RIP: 0033:0x7fe14b19ce59 [ 1538.193414][T24739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.193437][T24739] RSP: 002b:00007fe1493ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1538.193465][T24739] RAX: ffffffffffffffda RBX: 00007fe14b415fa0 RCX: 00007fe14b19ce59 [ 1538.193484][T24739] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 1538.193500][T24739] RBP: 00007fe1493ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.193517][T24739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.193533][T24739] R13: 00007fe14b416038 R14: 00007fe14b415fa0 R15: 00007ffe61c59388 [ 1538.193571][T24739] [ 1538.282327][ T7908] m920x_read = error: -19 [ 1538.282358][ T7908] dvb-usb: error while querying for an remote control event. [ 1538.392154][ T7908] m920x_read = error: -19 [ 1538.392184][ T7908] dvb-usb: error while querying for an remote control event. [ 1538.562142][T22504] m920x_read = error: -19 [ 1538.562173][T22504] dvb-usb: error while querying for an remote control event. [ 1538.647231][T24741] FAULT_INJECTION: forcing a failure. [ 1538.647231][T24741] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.647284][T24741] CPU: 1 UID: 0 PID: 24741 Comm: syz.3.6482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1538.647318][T24741] Tainted: [L]=SOFTLOCKUP [ 1538.647328][T24741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1538.647344][T24741] Call Trace: [ 1538.647354][T24741] [ 1538.647366][T24741] dump_stack_lvl+0xe8/0x150 [ 1538.647415][T24741] should_fail_ex+0x46b/0x600 [ 1538.647462][T24741] should_failslab+0xa8/0x100 [ 1538.647500][T24741] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 1538.647539][T24741] ? kasprintf+0xe2/0x140 [ 1538.647568][T24741] kvasprintf+0xeb/0x1a0 [ 1538.647595][T24741] ? __pfx_kvasprintf+0x10/0x10 [ 1538.647650][T24741] kasprintf+0xe2/0x140 [ 1538.647673][T24741] ? format_decode+0x631/0xdb0 [ 1538.647711][T24741] ? __pfx_kasprintf+0x10/0x10 [ 1538.647744][T24741] ? __pfx_add_uevent_var+0x10/0x10 [ 1538.647779][T24741] ? __pfx_drm_devnode+0x10/0x10 [ 1538.647805][T24741] device_get_devnode+0x16b/0x2a0 [ 1538.647846][T24741] dev_uevent+0x16b/0x880 [ 1538.647882][T24741] ? __pfx_dev_uevent+0x10/0x10 [ 1538.647907][T24741] ? kobject_get_path+0x17b/0x2f0 [ 1538.647942][T24741] ? kobject_get_path+0x20b/0x2f0 [ 1538.647977][T24741] kobject_uevent_env+0x47a/0x9e0 [ 1538.648020][T24741] drm_sysfs_lease_event+0x111/0x150 [ 1538.648048][T24741] ? __pfx_drm_sysfs_lease_event+0x10/0x10 [ 1538.648088][T24741] drm_lease_destroy+0x2f9/0x400 [ 1538.648120][T24741] drm_master_put+0x10a/0x210 [ 1538.648155][T24741] drm_master_release+0x366/0x560 [ 1538.648195][T24741] drm_file_free+0x783/0x9f0 [ 1538.648224][T24741] ? drm_release+0x2ec/0x400 [ 1538.648256][T24741] drm_release+0x2f4/0x400 [ 1538.648285][T24741] ? __pfx_drm_release+0x10/0x10 [ 1538.648310][T24741] __fput+0x461/0xa70 [ 1538.648351][T24741] fput_close_sync+0x11f/0x240 [ 1538.648381][T24741] ? __pfx_fput_close_sync+0x10/0x10 [ 1538.648415][T24741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.648451][T24741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.648478][T24741] __x64_sys_close+0x7e/0x110 [ 1538.648510][T24741] do_syscall_64+0x15f/0xf80 [ 1538.648533][T24741] ? trace_irq_disable+0x3b/0x140 [ 1538.648569][T24741] ? clear_bhb_loop+0x40/0x90 [ 1538.648600][T24741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.648625][T24741] RIP: 0033:0x7fe14b19ce59 [ 1538.648650][T24741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.648673][T24741] RSP: 002b:00007fe1493ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1538.648700][T24741] RAX: ffffffffffffffda RBX: 00007fe14b415fa0 RCX: 00007fe14b19ce59 [ 1538.648719][T24741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1538.648735][T24741] RBP: 00007fe1493ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.648752][T24741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.648768][T24741] R13: 00007fe14b416038 R14: 00007fe14b415fa0 R15: 00007ffe61c59388 [ 1538.648805][T24741] [ 1538.684376][ T7908] m920x_read = error: -19 [ 1538.684408][ T7908] dvb-usb: error while querying for an remote control event. [ 1538.795512][ T7908] m920x_read = error: -19 [ 1538.795548][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.015209][ T7908] m920x_read = error: -19 [ 1539.015240][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.122209][ T7908] m920x_read = error: -19 [ 1539.122238][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.236244][ T7908] m920x_read = error: -19 [ 1539.236283][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.342448][ T7908] m920x_read = error: -19 [ 1539.342481][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.452212][ T7908] m920x_read = error: -19 [ 1539.452251][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.562181][ T7908] m920x_read = error: -19 [ 1539.562211][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.672273][ T7908] m920x_read = error: -19 [ 1539.672307][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.782113][ T7908] m920x_read = error: -19 [ 1539.782146][ T7908] dvb-usb: error while querying for an remote control event. [ 1539.892253][ T7908] m920x_read = error: -19 [ 1539.892288][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.002162][ T7908] m920x_read = error: -19 [ 1540.002267][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.112207][ T7908] m920x_read = error: -19 [ 1540.112248][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.222261][ T7908] m920x_read = error: -19 [ 1540.222292][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.253591][T24769] FAULT_INJECTION: forcing a failure. [ 1540.253591][T24769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.253637][T24769] CPU: 0 UID: 0 PID: 24769 Comm: syz.1.6495 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1540.253671][T24769] Tainted: [L]=SOFTLOCKUP [ 1540.253681][T24769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1540.253696][T24769] Call Trace: [ 1540.253706][T24769] [ 1540.253718][T24769] dump_stack_lvl+0xe8/0x150 [ 1540.253752][T24769] should_fail_ex+0x46b/0x600 [ 1540.253789][T24769] _copy_to_user+0x31/0xb0 [ 1540.253830][T24769] simple_read_from_buffer+0xe1/0x170 [ 1540.253867][T24769] proc_fail_nth_read+0x1be/0x230 [ 1540.253903][T24769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1540.253937][T24769] ? rw_verify_area+0x2ac/0x4e0 [ 1540.253971][T24769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1540.254004][T24769] vfs_read+0x212/0xa80 [ 1540.254046][T24769] ? __pfx_vfs_read+0x10/0x10 [ 1540.254082][T24769] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1540.254120][T24769] ? lockdep_hardirqs_on+0x7a/0x110 [ 1540.254158][T24769] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1540.254195][T24769] ? mutex_lock_nested+0x152/0x1d0 [ 1540.254235][T24769] ? fdget_pos+0x252/0x320 [ 1540.254273][T24769] ksys_read+0x156/0x270 [ 1540.254308][T24769] ? __pfx_ksys_read+0x10/0x10 [ 1540.254350][T24769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.254377][T24769] do_syscall_64+0x15f/0xf80 [ 1540.254401][T24769] ? trace_irq_disable+0x3b/0x140 [ 1540.254436][T24769] ? clear_bhb_loop+0x40/0x90 [ 1540.254471][T24769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.254495][T24769] RIP: 0033:0x7f03f348d68e [ 1540.254520][T24769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1540.254542][T24769] RSP: 002b:00007f03f1725fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1540.254570][T24769] RAX: ffffffffffffffda RBX: 00007f03f17266c0 RCX: 00007f03f348d68e [ 1540.254590][T24769] RDX: 000000000000000f RSI: 00007f03f17260a0 RDI: 0000000000000004 [ 1540.254607][T24769] RBP: 00007f03f1726090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.254623][T24769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.254639][T24769] R13: 00007f03f3746038 R14: 00007f03f3745fa0 R15: 00007ffef0c85cd8 [ 1540.254689][T24769] [ 1540.340810][ T7908] m920x_read = error: -19 [ 1540.340841][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.442167][ T9] m920x_read = error: -19 [ 1540.442206][ T9] dvb-usb: error while querying for an remote control event. [ 1540.552108][ T7908] m920x_read = error: -19 [ 1540.552138][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.662224][ T7908] m920x_read = error: -19 [ 1540.662255][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.783116][ T7908] m920x_read = error: -19 [ 1540.783148][ T7908] dvb-usb: error while querying for an remote control event. [ 1540.892307][ T7908] m920x_read = error: -19 [ 1540.892340][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.002255][ T7908] m920x_read = error: -19 [ 1541.002286][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.112211][ T7908] m920x_read = error: -19 [ 1541.112243][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.222215][ T7908] m920x_read = error: -19 [ 1541.222242][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.332621][ T7908] m920x_read = error: -19 [ 1541.332656][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.442682][ T7908] m920x_read = error: -19 [ 1541.442710][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.552122][ T7908] m920x_read = error: -19 [ 1541.552152][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.662681][ T7908] m920x_read = error: -19 [ 1541.662714][ T7908] dvb-usb: error while querying for an remote control event. [ 1541.772326][ T9] m920x_read = error: -19 [ 1541.772358][ T9] dvb-usb: error while querying for an remote control event. [ 1541.882186][ T9] m920x_read = error: -19 [ 1541.882219][ T9] dvb-usb: error while querying for an remote control event. [ 1541.883493][T24801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6506'. [ 1541.992143][ T9] m920x_read = error: -19 [ 1541.992172][ T9] dvb-usb: error while querying for an remote control event. [ 1542.102294][ T9] m920x_read = error: -19 [ 1542.102326][ T9] dvb-usb: error while querying for an remote control event. [ 1542.212282][ T9] m920x_read = error: -19 [ 1542.212315][ T9] dvb-usb: error while querying for an remote control event. [ 1542.322193][ T9] m920x_read = error: -19 [ 1542.322322][ T9] dvb-usb: error while querying for an remote control event. [ 1542.333023][ T5818] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1542.432248][ T9] m920x_read = error: -19 [ 1542.432278][ T9] dvb-usb: error while querying for an remote control event. [ 1542.482518][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 1542.485040][ T5818] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1542.485075][ T5818] usb 4-1: config 0 has no interface number 0 [ 1542.488088][ T5818] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1542.488125][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.488150][ T5818] usb 4-1: Product: syz [ 1542.488167][ T5818] usb 4-1: Manufacturer: syz [ 1542.488185][ T5818] usb 4-1: SerialNumber: syz [ 1542.524885][ T5818] usb 4-1: config 0 descriptor?? [ 1542.547345][ T7908] m920x_read = error: -19 [ 1542.547376][ T7908] dvb-usb: error while querying for an remote control event. [ 1542.652298][ T9] m920x_read = error: -19 [ 1542.652330][ T9] dvb-usb: error while querying for an remote control event. [ 1542.762238][ T9] m920x_read = error: -19 [ 1542.762271][ T9] dvb-usb: error while querying for an remote control event. [ 1542.872195][ T9] m920x_read = error: -19 [ 1542.872228][ T9] dvb-usb: error while querying for an remote control event. [ 1542.984373][ T9] m920x_read = error: -19 [ 1542.984407][ T9] dvb-usb: error while querying for an remote control event. [ 1543.015030][ T5818] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1543.015071][ T5818] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1543.092119][ T9] m920x_read = error: -19 [ 1543.092152][ T9] dvb-usb: error while querying for an remote control event. [ 1543.143648][T24820] FAULT_INJECTION: forcing a failure. [ 1543.143648][T24820] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.143691][T24820] CPU: 1 UID: 0 PID: 24820 Comm: syz.1.6513 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1543.143728][T24820] Tainted: [L]=SOFTLOCKUP [ 1543.143737][T24820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1543.143752][T24820] Call Trace: [ 1543.143761][T24820] [ 1543.143772][T24820] dump_stack_lvl+0xe8/0x150 [ 1543.143807][T24820] should_fail_ex+0x46b/0x600 [ 1543.143845][T24820] should_failslab+0xa8/0x100 [ 1543.143885][T24820] kmem_cache_alloc_noprof+0x87/0x680 [ 1543.143919][T24820] ? copy_fs_struct+0x4f/0x270 [ 1543.143949][T24820] copy_fs_struct+0x4f/0x270 [ 1543.143978][T24820] __se_sys_setns+0x450/0x1bb0 [ 1543.144014][T24820] ? __pfx___schedule+0x10/0x10 [ 1543.144056][T24820] ? __pfx___se_sys_setns+0x10/0x10 [ 1543.144086][T24820] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1543.144137][T24820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.144164][T24820] do_syscall_64+0x15f/0xf80 [ 1543.144190][T24820] ? clear_bhb_loop+0x40/0x90 [ 1543.144221][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.144248][T24820] RIP: 0033:0x7f03f34cce59 [ 1543.144271][T24820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.144293][T24820] RSP: 002b:00007f03f1726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1543.144321][T24820] RAX: ffffffffffffffda RBX: 00007f03f3745fa0 RCX: 00007f03f34cce59 [ 1543.144339][T24820] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000005 [ 1543.144366][T24820] RBP: 00007f03f1726090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.144382][T24820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.144397][T24820] R13: 00007f03f3746038 R14: 00007f03f3745fa0 R15: 00007ffef0c85cd8 [ 1543.144435][T24820] [ 1543.227402][ T9] m920x_read = error: -19 [ 1543.227430][ T9] dvb-usb: error while querying for an remote control event. [ 1543.344806][ T9] m920x_read = error: -19 [ 1543.344840][ T9] dvb-usb: error while querying for an remote control event. [ 1543.411181][ T5818] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1543.411512][ T5818] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1543.452112][ T9] m920x_read = error: -19 [ 1543.452142][ T9] dvb-usb: error while querying for an remote control event. [ 1543.485862][ T5818] usb 4-1: USB disconnect, device number 37 [ 1543.564620][ T9] m920x_read = error: -19 [ 1543.564651][ T9] dvb-usb: error while querying for an remote control event. [ 1543.672227][ T9] m920x_read = error: -19 [ 1543.672260][ T9] dvb-usb: error while querying for an remote control event. [ 1543.782174][ T9] m920x_read = error: -19 [ 1543.782205][ T9] dvb-usb: error while querying for an remote control event. [ 1543.821386][T24836] FAULT_INJECTION: forcing a failure. [ 1543.821386][T24836] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.821432][T24836] CPU: 1 UID: 0 PID: 24836 Comm: syz.1.6518 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1543.821466][T24836] Tainted: [L]=SOFTLOCKUP [ 1543.821476][T24836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1543.821492][T24836] Call Trace: [ 1543.821502][T24836] [ 1543.821513][T24836] dump_stack_lvl+0xe8/0x150 [ 1543.821550][T24836] should_fail_ex+0x46b/0x600 [ 1543.821595][T24836] should_failslab+0xa8/0x100 [ 1543.821634][T24836] kmem_cache_alloc_noprof+0x87/0x680 [ 1543.821668][T24836] ? vm_area_dup+0x2b/0x670 [ 1543.821710][T24836] vm_area_dup+0x2b/0x670 [ 1543.821752][T24836] __split_vma+0x1e4/0xa30 [ 1543.821780][T24836] ? __lock_acquire+0x6b5/0x2d10 [ 1543.821818][T24836] ? __pfx___split_vma+0x10/0x10 [ 1543.821856][T24836] ? __lock_acquire+0x6b5/0x2d10 [ 1543.821886][T24836] ? can_vma_merge_left+0x191/0x3e0 [ 1543.821912][T24836] vma_modify+0x9f9/0x1f20 [ 1543.821952][T24836] vma_modify_flags+0x24b/0x330 [ 1543.821981][T24836] ? __pfx_vma_modify_flags+0x10/0x10 [ 1543.822027][T24836] ? may_expand_vm+0x24d/0x390 [ 1543.822062][T24836] mprotect_fixup+0x62a/0xb60 [ 1543.822090][T24836] ? __pfx_mprotect_fixup+0x10/0x10 [ 1543.822128][T24836] ? apparmor_file_mprotect+0x1d0/0x400 [ 1543.822154][T24836] ? security_file_mprotect+0x1a/0x290 [ 1543.822189][T24836] do_mprotect_pkey+0x8d5/0xd20 [ 1543.822225][T24836] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1543.822269][T24836] ? ksys_write+0x248/0x270 [ 1543.822302][T24836] ? __pfx_ksys_write+0x10/0x10 [ 1543.822337][T24836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.822374][T24836] __x64_sys_mprotect+0x80/0x90 [ 1543.822397][T24836] do_syscall_64+0x15f/0xf80 [ 1543.822419][T24836] ? trace_irq_disable+0x3b/0x140 [ 1543.822453][T24836] ? clear_bhb_loop+0x40/0x90 [ 1543.822485][T24836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.822508][T24836] RIP: 0033:0x7f03f34cce59 [ 1543.822531][T24836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.822553][T24836] RSP: 002b:00007f03f1705028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1543.822579][T24836] RAX: ffffffffffffffda RBX: 00007f03f3746090 RCX: 00007f03f34cce59 [ 1543.822599][T24836] RDX: 0000000000000006 RSI: 0000000000800000 RDI: 0000200000000000 [ 1543.822617][T24836] RBP: 00007f03f1705090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.822633][T24836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.822650][T24836] R13: 00007f03f3746128 R14: 00007f03f3746090 R15: 00007ffef0c85cd8 [ 1543.822688][T24836] [ 1543.892228][ T9] m920x_read = error: -19 [ 1543.892259][ T9] dvb-usb: error while querying for an remote control event. [ 1544.142274][T22504] m920x_read = error: -19 [ 1544.142305][T22504] dvb-usb: error while querying for an remote control event. [ 1544.254885][ T9] m920x_read = error: -19 [ 1544.254917][ T9] dvb-usb: error while querying for an remote control event. [ 1544.365751][ T9] m920x_read = error: -19 [ 1544.365781][ T9] dvb-usb: error while querying for an remote control event. [ 1544.391032][T24846] netlink: 'syz.1.6523': attribute type 21 has an invalid length. [ 1544.391117][T24846] netlink: 'syz.1.6523': attribute type 6 has an invalid length. [ 1544.391132][T24846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6523'. [ 1544.475853][ T9] m920x_read = error: -19 [ 1544.475881][ T9] dvb-usb: error while querying for an remote control event. [ 1544.586376][ T9] m920x_read = error: -19 [ 1544.586410][ T9] dvb-usb: error while querying for an remote control event. [ 1544.680742][T24857] FAULT_INJECTION: forcing a failure. [ 1544.680742][T24857] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.680786][T24857] CPU: 0 UID: 0 PID: 24857 Comm: syz.4.6526 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1544.680818][T24857] Tainted: [L]=SOFTLOCKUP [ 1544.680827][T24857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1544.680840][T24857] Call Trace: [ 1544.680848][T24857] [ 1544.680858][T24857] dump_stack_lvl+0xe8/0x150 [ 1544.680893][T24857] should_fail_ex+0x46b/0x600 [ 1544.680928][T24857] should_failslab+0xa8/0x100 [ 1544.680966][T24857] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1544.681004][T24857] ? __alloc_skb+0x1d0/0x7d0 [ 1544.681033][T24857] ? lockdep_hardirqs_on+0x7a/0x110 [ 1544.681079][T24857] __alloc_skb+0x1d0/0x7d0 [ 1544.681132][T24857] create_monitor_ctrl_close+0xbd/0x520 [ 1544.681167][T24857] ? hci_sock_release+0xbc/0x590 [ 1544.681202][T24857] hci_sock_release+0xd9/0x590 [ 1544.681240][T24857] __sock_release+0xb9/0x250 [ 1544.681267][T24857] ? __pfx_sock_close+0x10/0x10 [ 1544.681295][T24857] sock_close+0x1c/0x30 [ 1544.681320][T24857] __fput+0x461/0xa70 [ 1544.681363][T24857] task_work_run+0x1d9/0x270 [ 1544.681397][T24857] ? __pfx_task_work_run+0x10/0x10 [ 1544.681437][T24857] exit_to_user_mode_loop+0xf3/0x4d0 [ 1544.681474][T24857] ? rcu_is_watching+0x15/0xb0 [ 1544.681505][T24857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.681532][T24857] do_syscall_64+0x33e/0xf80 [ 1544.681556][T24857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.681583][T24857] ? clear_bhb_loop+0x40/0x90 [ 1544.681623][T24857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.681650][T24857] RIP: 0033:0x7f8805e0ce59 [ 1544.681674][T24857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.681705][T24857] RSP: 002b:00007f8804066028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1544.681731][T24857] RAX: 0000000000000000 RBX: 00007f8806085fa0 RCX: 00007f8805e0ce59 [ 1544.681749][T24857] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1544.681767][T24857] RBP: 00007f8804066090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.681784][T24857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.681800][T24857] R13: 00007f8806086038 R14: 00007f8806085fa0 R15: 00007fff80f716e8 [ 1544.681837][T24857] [ 1544.721469][ T9] m920x_read = error: -19 [ 1544.721503][ T9] dvb-usb: error while querying for an remote control event. [ 1544.853688][ T9] m920x_read = error: -19 [ 1544.853722][ T9] dvb-usb: error while querying for an remote control event. [ 1544.962201][ T7908] m920x_read = error: -19 [ 1544.962234][ T7908] dvb-usb: error while querying for an remote control event. [ 1545.072146][ T7908] m920x_read = error: -19 [ 1545.072179][ T7908] dvb-usb: error while querying for an remote control event. [ 1545.182206][ T9] m920x_read = error: -19 [ 1545.182237][ T9] dvb-usb: error while querying for an remote control event. [ 1545.292227][ T9] m920x_read = error: -19 [ 1545.292259][ T9] dvb-usb: error while querying for an remote control event. [ 1545.388327][T24872] ALSA: mixer_oss: invalid OSS volume '' [ 1545.388349][T24872] ALSA: mixer_oss: invalid OSS volume '' [ 1545.388365][T24872] ALSA: mixer_oss: invalid OSS volume '' [ 1545.388381][T24872] ALSA: mixer_oss: invalid OSS volume '' [ 1545.388402][T24872] ALSA: mixer_oss: invalid OSS volume '' [ 1545.388831][T24872] ALSA: mixer_oss: invalid OSS volume '”' [ 1545.418587][ T9] m920x_read = error: -19 [ 1545.418620][ T9] dvb-usb: error while querying for an remote control event. [ 1545.535457][T24860] overlayfs: failed to resolve './file1': -2 [ 1545.542637][ T9] m920x_read = error: -19 [ 1545.542683][ T9] dvb-usb: error while querying for an remote control event. [ 1545.646333][T24878] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6535'. [ 1545.661216][ T9] m920x_read = error: -19 [ 1545.661250][ T9] dvb-usb: error while querying for an remote control event. [ 1545.762950][ T9] m920x_read = error: -19 [ 1545.762982][ T9] dvb-usb: error while querying for an remote control event. [ 1545.812471][T24880] syzkaller1: entered promiscuous mode [ 1545.812494][T24880] syzkaller1: entered allmulticast mode [ 1545.834947][ T7908] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1545.872248][ T9] m920x_read = error: -19 [ 1545.872282][ T9] dvb-usb: error while querying for an remote control event. [ 1545.975203][T24886] FAULT_INJECTION: forcing a failure. [ 1545.975203][T24886] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.975247][T24886] CPU: 0 UID: 0 PID: 24886 Comm: syz.5.6538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1545.975280][T24886] Tainted: [L]=SOFTLOCKUP [ 1545.975290][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1545.975305][T24886] Call Trace: [ 1545.975314][T24886] [ 1545.975325][T24886] dump_stack_lvl+0xe8/0x150 [ 1545.975360][T24886] should_fail_ex+0x46b/0x600 [ 1545.975400][T24886] should_failslab+0xa8/0x100 [ 1545.975436][T24886] __kmalloc_noprof+0xdf/0x7b0 [ 1545.975470][T24886] ? input_register_device+0x76a/0x1140 [ 1545.975511][T24886] input_register_device+0x76a/0x1140 [ 1545.975555][T24886] uinput_create_device+0x422/0x680 [ 1545.975606][T24886] uinput_ioctl_handler+0x41a/0x14a0 [ 1545.975643][T24886] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1545.975684][T24886] ? __fget_files+0x2a/0x420 [ 1545.975712][T24886] ? __fget_files+0x3a6/0x420 [ 1545.975746][T24886] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1545.975772][T24886] ? __pfx_uinput_ioctl+0x10/0x10 [ 1545.975801][T24886] __se_sys_ioctl+0xff/0x170 [ 1545.975835][T24886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.975862][T24886] do_syscall_64+0x15f/0xf80 [ 1545.975888][T24886] ? clear_bhb_loop+0x40/0x90 [ 1545.975918][T24886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.975943][T24886] RIP: 0033:0x7f4338dbce59 [ 1545.975965][T24886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.975987][T24886] RSP: 002b:00007f4337016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.976013][T24886] RAX: ffffffffffffffda RBX: 00007f4339035fa0 RCX: 00007f4338dbce59 [ 1545.976031][T24886] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1545.976046][T24886] RBP: 00007f4337016090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.976062][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.976076][T24886] R13: 00007f4339036038 R14: 00007f4339035fa0 R15: 00007fff44de7278 [ 1545.976110][T24886] [ 1545.988188][ T9] m920x_read = error: -19 [ 1545.988226][ T9] dvb-usb: error while querying for an remote control event. [ 1546.099038][ T9] m920x_read = error: -19 [ 1546.099069][ T9] dvb-usb: error while querying for an remote control event. [ 1546.142295][ T7908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.142362][ T7908] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1546.142390][ T7908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.144925][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.274975][T22504] m920x_read = error: -19 [ 1546.275005][T22504] dvb-usb: error while querying for an remote control event. [ 1546.332951][ T7908] usb 2-1: config 0 descriptor?? [ 1546.382258][ T9] m920x_read = error: -19 [ 1546.382286][ T9] dvb-usb: error while querying for an remote control event. [ 1546.492124][T22504] m920x_read = error: -19 [ 1546.492219][T22504] dvb-usb: error while querying for an remote control event. [ 1546.602296][T22504] m920x_read = error: -19 [ 1546.602327][T22504] dvb-usb: error while querying for an remote control event. [ 1546.646280][ T823] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1546.712092][T23220] m920x_read = error: -19 [ 1546.712190][T23220] dvb-usb: error while querying for an remote control event. [ 1546.832350][T22504] m920x_read = error: -19 [ 1546.832383][T22504] dvb-usb: error while querying for an remote control event. [ 1546.917846][T24890] FAULT_INJECTION: forcing a failure. [ 1546.917846][T24890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.917897][T24890] CPU: 1 UID: 0 PID: 24890 Comm: syz.5.6539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1546.917931][T24890] Tainted: [L]=SOFTLOCKUP [ 1546.917942][T24890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.917959][T24890] Call Trace: [ 1546.917970][T24890] [ 1546.917981][T24890] dump_stack_lvl+0xe8/0x150 [ 1546.918021][T24890] should_fail_ex+0x46b/0x600 [ 1546.918060][T24890] _copy_from_iter+0x1d3/0x1670 [ 1546.918108][T24890] ? __pfx__copy_from_iter+0x10/0x10 [ 1546.918164][T24890] file_tty_write+0x4c9/0xa10 [ 1546.918210][T24890] vfs_write+0x629/0xba0 [ 1546.918259][T24890] ? __pfx_vfs_write+0x10/0x10 [ 1546.918305][T24890] ? __fget_files+0x2a/0x420 [ 1546.918347][T24890] ksys_write+0x156/0x270 [ 1546.918386][T24890] ? __pfx_ksys_write+0x10/0x10 [ 1546.918431][T24890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.918460][T24890] do_syscall_64+0x15f/0xf80 [ 1546.918484][T24890] ? trace_irq_disable+0x3b/0x140 [ 1546.918522][T24890] ? clear_bhb_loop+0x40/0x90 [ 1546.918554][T24890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.918579][T24890] RIP: 0033:0x7f4338dbce59 [ 1546.918610][T24890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.918634][T24890] RSP: 002b:00007f4337016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1546.918662][T24890] RAX: ffffffffffffffda RBX: 00007f4339035fa0 RCX: 00007f4338dbce59 [ 1546.918682][T24890] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 1546.918699][T24890] RBP: 00007f4337016090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.918716][T24890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.918732][T24890] R13: 00007f4339036038 R14: 00007f4339035fa0 R15: 00007fff44de7278 [ 1546.918771][T24890] [ 1546.942488][ T9] m920x_read = error: -19 [ 1546.942577][ T9] dvb-usb: error while querying for an remote control event. [ 1546.977603][T24869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.994062][T24869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.068243][ T9] m920x_read = error: -19 [ 1547.070064][ T823] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1547.070143][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.070165][ T823] usb 4-1: Product: syz [ 1547.070183][ T823] usb 4-1: Manufacturer: syz [ 1547.070200][ T823] usb 4-1: SerialNumber: syz [ 1547.079990][ T9] dvb-usb: error while querying for an remote control event. [ 1547.202871][ T9] m920x_read = error: -19 [ 1547.202901][ T9] dvb-usb: error while querying for an remote control event. [ 1547.262131][ T823] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1547.312194][ T9] m920x_read = error: -19 [ 1547.312326][ T9] dvb-usb: error while querying for an remote control event. [ 1547.317257][T15661] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1547.424388][ T9] m920x_read = error: -19 [ 1547.424473][ T9] dvb-usb: error while querying for an remote control event. [ 1547.504599][T24875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.505993][T24875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.548085][ T9] m920x_read = error: -19 [ 1547.548189][ T9] dvb-usb: error while querying for an remote control event. [ 1547.652148][ T9] m920x_read = error: -19 [ 1547.652225][ T9] dvb-usb: error while querying for an remote control event. [ 1547.681101][ C1] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 1547.762282][ T9] m920x_read = error: -19 [ 1547.762375][ T9] dvb-usb: error while querying for an remote control event. [ 1547.872135][ T9] m920x_read = error: -19 [ 1547.872233][ T9] dvb-usb: error while querying for an remote control event. [ 1547.983833][ T9] m920x_read = error: -19 [ 1547.983868][ T9] dvb-usb: error while querying for an remote control event. [ 1548.092529][ T9] m920x_read = error: -19 [ 1548.092559][ T9] dvb-usb: error while querying for an remote control event. [ 1548.192259][T24895] FAULT_INJECTION: forcing a failure. [ 1548.192259][T24895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1548.192310][T24895] CPU: 0 UID: 0 PID: 24895 Comm: syz.5.6541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1548.192344][T24895] Tainted: [L]=SOFTLOCKUP [ 1548.192354][T24895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1548.192371][T24895] Call Trace: [ 1548.192381][T24895] [ 1548.192392][T24895] dump_stack_lvl+0xe8/0x150 [ 1548.192441][T24895] should_fail_ex+0x46b/0x600 [ 1548.192478][T24895] _copy_from_user+0x2d/0xb0 [ 1548.192513][T24895] sw_sync_ioctl+0x110/0x1110 [ 1548.192555][T24895] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 1548.192598][T24895] ? __fget_files+0x2a/0x420 [ 1548.192628][T24895] ? __fget_files+0x3a6/0x420 [ 1548.192657][T24895] ? __fget_files+0x2a/0x420 [ 1548.192685][T24895] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1548.192709][T24895] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 1548.192742][T24895] __se_sys_ioctl+0xff/0x170 [ 1548.192777][T24895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.192806][T24895] do_syscall_64+0x15f/0xf80 [ 1548.192832][T24895] ? trace_irq_disable+0x3b/0x140 [ 1548.192876][T24895] ? clear_bhb_loop+0x40/0x90 [ 1548.192901][T24895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.192923][T24895] RIP: 0033:0x7f4338dbce59 [ 1548.192943][T24895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.192966][T24895] RSP: 002b:00007f4337016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.193011][T24895] RAX: ffffffffffffffda RBX: 00007f4339035fa0 RCX: 00007f4338dbce59 [ 1548.193031][T24895] RDX: 00002000000002c0 RSI: 0000000040045701 RDI: 0000000000000005 [ 1548.193047][T24895] RBP: 00007f4337016090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.193062][T24895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.193075][T24895] R13: 00007f4339036038 R14: 00007f4339035fa0 R15: 00007fff44de7278 [ 1548.193107][T24895] [ 1548.221783][ T9] m920x_read = error: -19 [ 1548.221813][ T9] dvb-usb: error while querying for an remote control event. [ 1548.342261][T22504] m920x_read = error: -19 [ 1548.342297][T22504] dvb-usb: error while querying for an remote control event. [ 1548.452205][ T9] m920x_read = error: -19 [ 1548.452239][ T9] dvb-usb: error while querying for an remote control event. [ 1548.582202][T22504] m920x_read = error: -19 [ 1548.582237][T22504] dvb-usb: error while querying for an remote control event. [ 1548.648974][T15661] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1548.649423][T15661] ath9k_htc: Failed to initialize the device [ 1548.692238][ T9] m920x_read = error: -19 [ 1548.692270][ T9] dvb-usb: error while querying for an remote control event. [ 1548.768797][T15661] usb 4-1: ath9k_htc: USB layer deinitialized [ 1548.802134][ T9] m920x_read = error: -19 [ 1548.802163][ T9] dvb-usb: error while querying for an remote control event. [ 1548.910244][T24901] input: syz1 as /devices/virtual/input/input71 [ 1548.912099][ T9] m920x_read = error: -19 [ 1548.912201][ T9] dvb-usb: error while querying for an remote control event. [ 1549.022728][T22504] m920x_read = error: -19 [ 1549.023013][T22504] dvb-usb: error while querying for an remote control event. [ 1549.132218][T22504] m920x_read = error: -19 [ 1549.132248][T22504] dvb-usb: error while querying for an remote control event. [ 1549.243689][T22504] m920x_read = error: -19 [ 1549.243724][T22504] dvb-usb: error while querying for an remote control event. [ 1549.354611][T22504] m920x_read = error: -19 [ 1549.354646][T22504] dvb-usb: error while querying for an remote control event. [ 1549.378679][ T7908] usbhid 2-1:0.0: can't add hid device: -71 [ 1549.378810][ T7908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1549.439986][ T7908] usb 2-1: USB disconnect, device number 59 [ 1549.462028][T22504] m920x_read = error: -19 [ 1549.462060][T22504] dvb-usb: error while querying for an remote control event. [ 1549.572136][T22504] m920x_read = error: -19 [ 1549.572169][T22504] dvb-usb: error while querying for an remote control event. [ 1549.580412][T24902] FAULT_INJECTION: forcing a failure. [ 1549.580412][T24902] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1549.580458][T24902] CPU: 0 UID: 0 PID: 24902 Comm: syz.5.6543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1549.580493][T24902] Tainted: [L]=SOFTLOCKUP [ 1549.580502][T24902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.580517][T24902] Call Trace: [ 1549.580526][T24902] [ 1549.580536][T24902] dump_stack_lvl+0xe8/0x150 [ 1549.580572][T24902] should_fail_ex+0x46b/0x600 [ 1549.580608][T24902] get_futex_key+0x8d1/0x1590 [ 1549.580639][T24902] ? perf_lock_task_context+0x785/0x850 [ 1549.580680][T24902] ? __pfx_get_futex_key+0x10/0x10 [ 1549.580700][T24902] ? __lock_acquire+0x6b5/0x2d10 [ 1549.580723][T24902] ? __lock_acquire+0x6b5/0x2d10 [ 1549.580748][T24902] futex_wake+0x114/0x580 [ 1549.580779][T24902] ? __pfx_futex_wake+0x10/0x10 [ 1549.580805][T24902] ? do_raw_spin_lock+0x12b/0x2f0 [ 1549.580844][T24902] do_futex+0x395/0x420 [ 1549.580865][T24902] ? __might_fault+0xaf/0x130 [ 1549.580895][T24902] ? __pfx_do_futex+0x10/0x10 [ 1549.580920][T24902] ? __might_fault+0xaf/0x130 [ 1549.580948][T24902] mm_release+0x101/0x290 [ 1549.580977][T24902] exit_mm+0x51/0x250 [ 1549.580996][T24902] ? unwind_deferred_task_exit+0x67/0xa0 [ 1549.581021][T24902] do_exit+0x6a2/0x22c0 [ 1549.581042][T24902] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1549.581076][T24902] ? __pfx_do_exit+0x10/0x10 [ 1549.581094][T24902] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1549.581118][T24902] ? reacquire_held_locks+0x104/0x190 [ 1549.581139][T24902] ? rt_spin_lock+0x1e0/0x400 [ 1549.581171][T24902] do_group_exit+0x21b/0x2d0 [ 1549.581192][T24902] ? rt_spin_unlock+0x160/0x200 [ 1549.581236][T24902] get_signal+0x1284/0x1330 [ 1549.581279][T24902] arch_do_signal_or_restart+0xbc/0x840 [ 1549.581298][T24902] ? __fget_files+0x2a/0x420 [ 1549.581332][T24902] ? __fget_files+0x3a6/0x420 [ 1549.581356][T24902] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1549.581383][T24902] ? ksys_write+0x248/0x270 [ 1549.581417][T24902] exit_to_user_mode_loop+0x8c/0x4d0 [ 1549.581448][T24902] ? rcu_is_watching+0x15/0xb0 [ 1549.581472][T24902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.581493][T24902] do_syscall_64+0x33e/0xf80 [ 1549.581512][T24902] ? trace_irq_disable+0x3b/0x140 [ 1549.581540][T24902] ? clear_bhb_loop+0x40/0x90 [ 1549.581564][T24902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.581585][T24902] RIP: 0033:0x7f4338dbce59 [ 1549.581610][T24902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.581629][T24902] RSP: 002b:00007f4336ff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1549.581651][T24902] RAX: fffffffffffffffc RBX: 00007f4339036090 RCX: 00007f4338dbce59 [ 1549.581666][T24902] RDX: 000000000000045c RSI: 0000200000000900 RDI: 0000000000000003 [ 1549.581680][T24902] RBP: 00007f4336ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.581693][T24902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.581705][T24902] R13: 00007f4339036128 R14: 00007f4339036090 R15: 00007fff44de7278 [ 1549.581734][T24902] [ 1549.942748][T22504] m920x_read = error: -19 [ 1549.942779][T22504] dvb-usb: error while querying for an remote control event. [ 1550.057091][ T9] m920x_read = error: -19 [ 1550.057123][ T9] dvb-usb: error while querying for an remote control event. [ 1550.163368][ T9] m920x_read = error: -19 [ 1550.163402][ T9] dvb-usb: error while querying for an remote control event. [ 1550.281713][ T9] m920x_read = error: -19 [ 1550.281746][ T9] dvb-usb: error while querying for an remote control event. [ 1550.319106][ T9] usb 4-1: USB disconnect, device number 38 [ 1550.382312][T22504] m920x_read = error: -19 [ 1550.382342][T22504] dvb-usb: error while querying for an remote control event. [ 1550.494692][T22504] m920x_read = error: -19 [ 1550.494726][T22504] dvb-usb: error while querying for an remote control event. [ 1550.602181][ T9] m920x_read = error: -19 [ 1550.602226][ T9] dvb-usb: error while querying for an remote control event. [ 1550.649210][T24910] FAULT_INJECTION: forcing a failure. [ 1550.649210][T24910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1550.649257][T24910] CPU: 1 UID: 0 PID: 24910 Comm: syz.3.6546 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1550.649291][T24910] Tainted: [L]=SOFTLOCKUP [ 1550.649301][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1550.649316][T24910] Call Trace: [ 1550.649325][T24910] [ 1550.649336][T24910] dump_stack_lvl+0xe8/0x150 [ 1550.649373][T24910] should_fail_ex+0x46b/0x600 [ 1550.649410][T24910] _copy_from_iter+0x1d3/0x1670 [ 1550.649452][T24910] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1550.649483][T24910] ? __alloc_skb+0x27d/0x7d0 [ 1550.649516][T24910] ? __pfx__copy_from_iter+0x10/0x10 [ 1550.649548][T24910] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1550.649582][T24910] ? __alloc_skb+0x27d/0x7d0 [ 1550.649618][T24910] ? netlink_sendmsg+0x650/0xb40 [ 1550.649652][T24910] ? skb_put+0x11b/0x210 [ 1550.649694][T24910] netlink_sendmsg+0x6c0/0xb40 [ 1550.649740][T24910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.649778][T24910] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1550.649824][T24910] ? aa_sock_msg_perm+0x122/0x200 [ 1550.649861][T24910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.649895][T24910] sock_sendmsg_nosec+0x112/0x150 [ 1550.649937][T24910] ____sys_sendmsg+0x55c/0x870 [ 1550.649978][T24910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1550.650027][T24910] ? import_iovec+0x73/0xa0 [ 1550.650065][T24910] ___sys_sendmsg+0x2a5/0x360 [ 1550.650101][T24910] ? __lock_acquire+0x6b5/0x2d10 [ 1550.650130][T24910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1550.650200][T24910] ? __fget_files+0x2a/0x420 [ 1550.650228][T24910] ? __fget_files+0x3a6/0x420 [ 1550.650268][T24910] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1550.650306][T24910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1550.650352][T24910] ? __pfx_ksys_write+0x10/0x10 [ 1550.650395][T24910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.650423][T24910] do_syscall_64+0x15f/0xf80 [ 1550.650447][T24910] ? trace_irq_disable+0x3b/0x140 [ 1550.650480][T24910] ? clear_bhb_loop+0x40/0x90 [ 1550.650510][T24910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.650535][T24910] RIP: 0033:0x7fe14b19ce59 [ 1550.650559][T24910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.650581][T24910] RSP: 002b:00007fe1493ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1550.650608][T24910] RAX: ffffffffffffffda RBX: 00007fe14b415fa0 RCX: 00007fe14b19ce59 [ 1550.650627][T24910] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1550.650644][T24910] RBP: 00007fe1493ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.650660][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.650676][T24910] R13: 00007fe14b416038 R14: 00007fe14b415fa0 R15: 00007ffe61c59388 [ 1550.650719][T24910] [ 1550.722099][ T9] m920x_read = error: -19 [ 1550.722130][ T9] dvb-usb: error while querying for an remote control event. [ 1550.832074][ T9] m920x_read = error: -19 [ 1550.832106][ T9] dvb-usb: error while querying for an remote control event. [ 1550.942099][ T9] m920x_read = error: -19 [ 1550.942126][ T9] dvb-usb: error while querying for an remote control event. [ 1551.052295][ T9] m920x_read = error: -19 [ 1551.052327][ T9] dvb-usb: error while querying for an remote control event. [ 1551.162246][T22504] m920x_read = error: -19 [ 1551.162277][T22504] dvb-usb: error while querying for an remote control event. [ 1551.223427][T24167] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1551.272328][T22504] m920x_read = error: -19 [ 1551.272361][T22504] dvb-usb: error while querying for an remote control event. [ 1551.322092][ T7908] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1551.382218][T22504] m920x_read = error: -19 [ 1551.382250][T22504] dvb-usb: error while querying for an remote control event. [ 1551.406450][T24167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.406501][T24167] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.406570][T24167] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1551.406610][T24167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.434347][T24167] usb 6-1: config 0 descriptor?? [ 1551.484562][ T7908] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1551.484600][ T7908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1551.492222][T22504] m920x_read = error: -19 [ 1551.492252][T22504] dvb-usb: error while querying for an remote control event. [ 1551.525316][ T7908] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1551.525355][ T7908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.525380][ T7908] usb 2-1: Product: syz [ 1551.525398][ T7908] usb 2-1: Manufacturer: syz [ 1551.525416][ T7908] usb 2-1: SerialNumber: syz [ 1551.567501][ T7908] usb 2-1: config 0 descriptor?? [ 1551.582218][ T7908] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1551.602311][T22504] m920x_read = error: -19 [ 1551.602406][T22504] dvb-usb: error while querying for an remote control event. [ 1551.713857][T22504] m920x_read = error: -19 [ 1551.713943][T22504] dvb-usb: error while querying for an remote control event. [ 1551.822285][T22504] m920x_read = error: -19 [ 1551.822314][T22504] dvb-usb: error while querying for an remote control event. [ 1551.906794][T24167] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1551.906847][T24167] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1551.906883][T24167] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1551.906922][T24167] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1551.906965][T24167] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1551.929756][T24167] playstation 0003:054C:0DF2.0063: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1551.932954][T22504] m920x_read = error: -19 [ 1551.938078][T22504] dvb-usb: error while querying for an remote control event. [ 1552.006148][T24167] playstation 0003:054C:0DF2.0063: Failed to retrieve feature with reportID 9: -32 [ 1552.006185][T24167] playstation 0003:054C:0DF2.0063: Failed to retrieve DualSense pairing info: -32 [ 1552.006242][T24167] playstation 0003:054C:0DF2.0063: Failed to get MAC address from DualSense [ 1552.006261][T24167] playstation 0003:054C:0DF2.0063: Failed to create dualsense. [ 1552.019811][T24167] playstation 0003:054C:0DF2.0063: probe with driver playstation failed with error -32 [ 1552.044270][T22504] m920x_read = error: -19 [ 1552.048581][T22504] dvb-usb: error while querying for an remote control event. [ 1552.152226][ T9] m920x_read = error: -19 [ 1552.152260][ T9] dvb-usb: error while querying for an remote control event. [ 1552.217117][ T7908] gspca_sunplus: reg_r err -71 [ 1552.217242][ T7908] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1552.247342][ T7908] usb 2-1: USB disconnect, device number 60 [ 1552.266358][T22504] m920x_read = error: -19 [ 1552.266387][T22504] dvb-usb: error while querying for an remote control event. [ 1552.335411][T24925] input: syz1 as /devices/virtual/input/input72 [ 1552.372294][T22504] m920x_read = error: -19 [ 1552.372323][T22504] dvb-usb: error while querying for an remote control event. [ 1552.482504][ T7908] m920x_read = error: -19 [ 1552.482532][ T7908] dvb-usb: error while querying for an remote control event. [ 1552.592235][ T7908] m920x_read = error: -19 [ 1552.592267][ T7908] dvb-usb: error while querying for an remote control event. [ 1552.639405][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6552'. [ 1552.702201][ T7908] m920x_read = error: -19 [ 1552.702236][ T7908] dvb-usb: error while querying for an remote control event. [ 1552.727467][T24931] FAULT_INJECTION: forcing a failure. [ 1552.727467][T24931] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.727513][T24931] CPU: 0 UID: 0 PID: 24931 Comm: syz.4.6553 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1552.727548][T24931] Tainted: [L]=SOFTLOCKUP [ 1552.727569][T24931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1552.727585][T24931] Call Trace: [ 1552.727595][T24931] [ 1552.727606][T24931] dump_stack_lvl+0xe8/0x150 [ 1552.727643][T24931] should_fail_ex+0x46b/0x600 [ 1552.727682][T24931] should_failslab+0xa8/0x100 [ 1552.727720][T24931] __kmalloc_noprof+0xdf/0x7b0 [ 1552.727755][T24931] ? sock_kmalloc+0xd6/0x160 [ 1552.727800][T24931] sock_kmalloc+0xd6/0x160 [ 1552.727841][T24931] skcipher_recvmsg+0x517/0x1140 [ 1552.727893][T24931] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1552.727922][T24931] ? __lock_acquire+0x6b5/0x2d10 [ 1552.727953][T24931] ? aa_sock_msg_perm+0x122/0x200 [ 1552.727990][T24931] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1552.728020][T24931] sock_recvmsg_nosec+0x10c/0x140 [ 1552.728052][T24931] ____sys_recvmsg+0x23d/0x4f0 [ 1552.728100][T24931] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1552.728153][T24931] ? import_iovec+0x73/0xa0 [ 1552.728195][T24931] ___sys_recvmsg+0x215/0x590 [ 1552.728244][T24931] ? __pfx____sys_recvmsg+0x10/0x10 [ 1552.728288][T24931] ? __fget_files+0x2a/0x420 [ 1552.728338][T24931] ? __fget_files+0x3a6/0x420 [ 1552.728379][T24931] do_recvmmsg+0x33a/0x800 [ 1552.728428][T24931] ? __pfx_do_recvmmsg+0x10/0x10 [ 1552.728480][T24931] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1552.728532][T24931] __x64_sys_recvmmsg+0x198/0x250 [ 1552.728582][T24931] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1552.728630][T24931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.728658][T24931] do_syscall_64+0x15f/0xf80 [ 1552.728681][T24931] ? trace_irq_disable+0x3b/0x140 [ 1552.728716][T24931] ? clear_bhb_loop+0x40/0x90 [ 1552.728748][T24931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.728773][T24931] RIP: 0033:0x7f8805e0ce59 [ 1552.728797][T24931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.728820][T24931] RSP: 002b:00007f8804066028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1552.728847][T24931] RAX: ffffffffffffffda RBX: 00007f8806085fa0 RCX: 00007f8805e0ce59 [ 1552.728867][T24931] RDX: 0000000000000001 RSI: 0000200000003100 RDI: 0000000000000004 [ 1552.728884][T24931] RBP: 00007f8804066090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.728901][T24931] R10: 0000000040002021 R11: 0000000000000246 R12: 0000000000000001 [ 1552.728918][T24931] R13: 00007f8806086038 R14: 00007f8806085fa0 R15: 00007fff80f716e8 [ 1552.728954][T24931] [ 1552.911049][ T7908] m920x_read = error: -19 [ 1552.911077][ T7908] dvb-usb: error while querying for an remote control event. [ 1553.012151][ T7908] m920x_read = error: -19 [ 1553.012184][ T7908] dvb-usb: error while querying for an remote control event. [ 1553.122292][ T7908] m920x_read = error: -19 [ 1553.122325][ T7908] dvb-usb: error while querying for an remote control event. [ 1553.243017][T23220] m920x_read = error: -19 [ 1553.243066][T23220] dvb-usb: error while querying for an remote control event. [ 1553.352212][ T9] m920x_read = error: -19 [ 1553.352245][ T9] dvb-usb: error while querying for an remote control event. [ 1553.390160][T24940] FAULT_INJECTION: forcing a failure. [ 1553.390160][T24940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.390206][T24940] CPU: 0 UID: 0 PID: 24940 Comm: syz.3.6557 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1553.390242][T24940] Tainted: [L]=SOFTLOCKUP [ 1553.390251][T24940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1553.390265][T24940] Call Trace: [ 1553.390274][T24940] [ 1553.390285][T24940] dump_stack_lvl+0xe8/0x150 [ 1553.390318][T24940] should_fail_ex+0x46b/0x600 [ 1553.390353][T24940] _copy_from_user+0x2d/0xb0 [ 1553.390390][T24940] kvm_vm_ioctl_set_pmu_event_filter+0xc1/0x670 [ 1553.390424][T24940] ? __pfx_kvm_vm_ioctl_set_pmu_event_filter+0x10/0x10 [ 1553.390471][T24940] kvm_arch_vm_ioctl+0xc0d/0x1a20 [ 1553.390506][T24940] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1553.390538][T24940] ? __lock_acquire+0x6b5/0x2d10 [ 1553.390567][T24940] ? __lock_acquire+0x6b5/0x2d10 [ 1553.390614][T24940] ? unwind_next_frame+0xa6/0x2550 [ 1553.390653][T24940] ? unwind_next_frame+0xa6/0x2550 [ 1553.390687][T24940] ? is_bpf_text_address+0x26/0x2b0 [ 1553.390723][T24940] ? is_bpf_text_address+0x26/0x2b0 [ 1553.390752][T24940] ? is_bpf_text_address+0x292/0x2b0 [ 1553.390776][T24940] ? is_bpf_text_address+0x26/0x2b0 [ 1553.390804][T24940] ? kernel_text_address+0xa5/0xe0 [ 1553.390833][T24940] ? __kernel_text_address+0xd/0x30 [ 1553.390870][T24940] ? unwind_get_return_address+0x4d/0x90 [ 1553.390900][T24940] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1553.390936][T24940] ? arch_stack_walk+0xfb/0x150 [ 1553.390980][T24940] ? stack_trace_save+0xa9/0x100 [ 1553.391014][T24940] ? __pfx_stack_trace_save+0x10/0x10 [ 1553.391044][T24940] ? kasan_save_free_info+0x46/0x50 [ 1553.391071][T24940] ? stack_depot_save_flags+0x33/0x810 [ 1553.391106][T24940] ? kasan_save_track+0x4f/0x80 [ 1553.391134][T24940] ? kasan_save_track+0x3e/0x80 [ 1553.391162][T24940] ? kasan_save_free_info+0x46/0x50 [ 1553.391184][T24940] ? __kasan_slab_free+0x5c/0x80 [ 1553.391212][T24940] ? kfree+0x1c5/0x6c0 [ 1553.391239][T24940] ? tomoyo_path_number_perm+0x501/0x630 [ 1553.391270][T24940] ? security_file_ioctl+0xc3/0x2a0 [ 1553.391298][T24940] ? __se_sys_ioctl+0x47/0x170 [ 1553.391330][T24940] ? do_syscall_64+0x15f/0xf80 [ 1553.391353][T24940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.391393][T24940] kvm_vm_ioctl+0x908/0xd50 [ 1553.391425][T24940] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1553.391475][T24940] ? kasan_quarantine_put+0xbb/0x1f0 [ 1553.391514][T24940] ? tomoyo_path_number_perm+0x219/0x630 [ 1553.391547][T24940] ? tomoyo_path_number_perm+0x219/0x630 [ 1553.391582][T24940] ? do_vfs_ioctl+0x117b/0x1540 [ 1553.391626][T24940] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1553.391717][T24940] ? __fget_files+0x2a/0x420 [ 1553.391750][T24940] ? __fget_files+0x2a/0x420 [ 1553.391778][T24940] ? __fget_files+0x3a6/0x420 [ 1553.391806][T24940] ? __fget_files+0x2a/0x420 [ 1553.391838][T24940] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1553.391900][T24940] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1553.391931][T24940] __se_sys_ioctl+0xff/0x170 [ 1553.391967][T24940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.391994][T24940] do_syscall_64+0x15f/0xf80 [ 1553.392018][T24940] ? trace_irq_disable+0x3b/0x140 [ 1553.392052][T24940] ? clear_bhb_loop+0x40/0x90 [ 1553.392083][T24940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.392108][T24940] RIP: 0033:0x7fe14b19ce59 [ 1553.392131][T24940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.392154][T24940] RSP: 002b:00007fe1493ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.392182][T24940] RAX: ffffffffffffffda RBX: 00007fe14b415fa0 RCX: 00007fe14b19ce59 [ 1553.392202][T24940] RDX: 0000200000000300 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 1553.392219][T24940] RBP: 00007fe1493ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.392236][T24940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.392252][T24940] R13: 00007fe14b416038 R14: 00007fe14b415fa0 R15: 00007ffe61c59388 [ 1553.392289][T24940] [ 1553.551112][ T7908] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1553.607103][ T9] m920x_read = error: -19 [ 1553.607131][ T9] dvb-usb: error while querying for an remote control event. [ 1553.717640][ T9] m920x_read = error: -19 [ 1553.717672][ T9] dvb-usb: error while querying for an remote control event. [ 1553.822158][T22504] m920x_read = error: -19 [ 1553.822187][T22504] dvb-usb: error while querying for an remote control event. [ 1553.851226][ T7908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1553.851268][ T7908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.851294][ T7908] usb 2-1: Product: syz [ 1553.851311][ T7908] usb 2-1: Manufacturer: syz [ 1553.851330][ T7908] usb 2-1: SerialNumber: syz [ 1553.896585][ T7908] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1553.924520][T22504] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1553.960217][ T9] m920x_read = error: -19 [ 1553.960334][ T9] dvb-usb: error while querying for an remote control event. [ 1554.019750][T24167] usb 6-1: USB disconnect, device number 12 [ 1554.062562][ T7908] m920x_read = error: -19 [ 1554.062594][ T7908] dvb-usb: error while querying for an remote control event. [ 1554.149218][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 1554.172177][ T7908] m920x_read = error: -19 [ 1554.172296][ T7908] dvb-usb: error while querying for an remote control event. [ 1554.282766][ T7908] m920x_read = error: -19 [ 1554.282979][ T7908] dvb-usb: error while querying for an remote control event. [ 1554.392297][ T7908] m920x_read = error: -19 [ 1554.392328][ T7908] dvb-usb: error while querying for an remote control event. [ 1554.502376][ T9] m920x_read = error: -19 [ 1554.502547][ T9] dvb-usb: error while querying for an remote control event. [ 1554.615245][ T9] m920x_read = error: -19 [ 1554.615366][ T9] dvb-usb: error while querying for an remote control event. [ 1554.724333][ T9] m920x_read = error: -19 [ 1554.724495][ T9] dvb-usb: error while querying for an remote control event. [ 1554.736547][T24952] FAULT_INJECTION: forcing a failure. [ 1554.736547][T24952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.738173][T24952] CPU: 1 UID: 0 PID: 24952 Comm: syz.5.6562 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1554.738291][T24952] Tainted: [L]=SOFTLOCKUP [ 1554.738308][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1554.738324][T24952] Call Trace: [ 1554.738334][T24952] [ 1554.738346][T24952] dump_stack_lvl+0xe8/0x150 [ 1554.738383][T24952] should_fail_ex+0x46b/0x600 [ 1554.738437][T24952] _copy_from_iter+0x1d3/0x1670 [ 1554.738480][T24952] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1554.738522][T24952] ? __alloc_skb+0x27d/0x7d0 [ 1554.738554][T24952] ? __pfx__copy_from_iter+0x10/0x10 [ 1554.738616][T24952] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1554.738698][T24952] ? __alloc_skb+0x27d/0x7d0 [ 1554.738736][T24952] ? netlink_sendmsg+0x650/0xb40 [ 1554.738769][T24952] ? skb_put+0x11b/0x210 [ 1554.738866][T24952] netlink_sendmsg+0x6c0/0xb40 [ 1554.738919][T24952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.738956][T24952] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1554.738997][T24952] ? aa_sock_msg_perm+0x122/0x200 [ 1554.739032][T24952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.739064][T24952] sock_sendmsg_nosec+0x112/0x150 [ 1554.739095][T24952] sock_write_iter+0x308/0x410 [ 1554.739124][T24952] ? __pfx_sock_write_iter+0x10/0x10 [ 1554.739196][T24952] do_iter_readv_writev+0x62b/0x8d0 [ 1554.739283][T24952] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1554.739331][T24952] ? rw_verify_area+0x25b/0x4e0 [ 1554.739399][T24952] vfs_writev+0x345/0x9a0 [ 1554.739437][T24952] ? __pfx_vfs_writev+0x10/0x10 [ 1554.739478][T24952] ? __fget_files+0x2a/0x420 [ 1554.739513][T24952] ? __fget_files+0x3a6/0x420 [ 1554.739549][T24952] ? __fget_files+0x2a/0x420 [ 1554.739650][T24952] do_writev+0x15a/0x2e0 [ 1554.739680][T24952] ? __pfx_do_writev+0x10/0x10 [ 1554.739715][T24952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.739765][T24952] do_syscall_64+0x15f/0xf80 [ 1554.739842][T24952] ? trace_irq_disable+0x3b/0x140 [ 1554.739879][T24952] ? clear_bhb_loop+0x40/0x90 [ 1554.739910][T24952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.739983][T24952] RIP: 0033:0x7f4338dbce59 [ 1554.740033][T24952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.740056][T24952] RSP: 002b:00007f4337016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1554.740082][T24952] RAX: ffffffffffffffda RBX: 00007f4339035fa0 RCX: 00007f4338dbce59 [ 1554.740102][T24952] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1554.740119][T24952] RBP: 00007f4337016090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.740149][T24952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.740200][T24952] R13: 00007f4339036038 R14: 00007f4339035fa0 R15: 00007fff44de7278 [ 1554.740259][T24952] [ 1554.832142][ T9] m920x_read = error: -19 [ 1554.832170][ T9] dvb-usb: error while querying for an remote control event. [ 1555.025382][T22504] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1555.031310][ T9] m920x_read = error: -19 [ 1555.031348][ T9] dvb-usb: error while querying for an remote control event. [ 1555.077822][T22504] ath9k_htc: Failed to initialize the device [ 1555.133568][ T9] m920x_read = error: -19 [ 1555.133602][ T9] dvb-usb: error while querying for an remote control event. [ 1555.135253][T22504] usb 2-1: ath9k_htc: USB layer deinitialized [ 1555.242086][ T9] m920x_read = error: -19 [ 1555.242179][ T9] dvb-usb: error while querying for an remote control event. [ 1555.352142][ T7908] m920x_read = error: -19 [ 1555.352237][ T7908] dvb-usb: error while querying for an remote control event. [ 1555.493104][ T9] m920x_read = error: -19 [ 1555.493135][ T9] dvb-usb: error while querying for an remote control event. [ 1555.602108][ T7908] m920x_read = error: -19 [ 1555.602202][ T7908] dvb-usb: error while querying for an remote control event. [ 1555.712238][ T9] m920x_read = error: -19 [ 1555.712523][ T9] dvb-usb: error while querying for an remote control event. [ 1555.786850][T15661] usb 2-1: USB disconnect, device number 61 [ 1555.822434][T22504] m920x_read = error: -19 [ 1555.822464][T22504] dvb-usb: error while querying for an remote control event. [ 1555.872493][ T7908] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1555.932066][T22504] m920x_read = error: -19 [ 1555.932097][T22504] dvb-usb: error while querying for an remote control event. [ 1555.992845][T24966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.993447][T24966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.034674][ T7908] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1556.034713][ T7908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.051754][T22504] m920x_read = error: -19 [ 1556.051779][T22504] dvb-usb: error while querying for an remote control event. [ 1556.102279][ T7908] usb 6-1: config 0 descriptor?? [ 1556.152400][T22504] m920x_read = error: -19 [ 1556.152494][T22504] dvb-usb: error while querying for an remote control event. [ 1556.234688][T15661] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1556.262043][T22504] m920x_read = error: -19 [ 1556.262139][T22504] dvb-usb: error while querying for an remote control event. [ 1556.310140][ T7908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1556.349238][ T7908] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1556.375862][T22504] m920x_read = error: -19 [ 1556.375892][T22504] dvb-usb: error while querying for an remote control event. [ 1556.379776][ T7908] dvb-usb: Elgato EyeTV Sat error while loading driver (-19) [ 1556.409060][T15661] usb 4-1: config 0 has an invalid interface number: 155 but max is 0 [ 1556.409096][T15661] usb 4-1: config 0 has no interface number 0 [ 1556.409131][T15661] usb 4-1: config 0 interface 155 has no altsetting 0 [ 1556.444564][T15661] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1556.444606][T15661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.444631][T15661] usb 4-1: Product: syz [ 1556.444649][T15661] usb 4-1: Manufacturer: syz [ 1556.444676][T15661] usb 4-1: SerialNumber: syz [ 1556.482110][ T7908] m920x_read = error: -19 [ 1556.482141][ T7908] dvb-usb: error while querying for an remote control event. [ 1556.515778][T15661] usb 4-1: config 0 descriptor?? [ 1556.592155][ T7908] m920x_read = error: -19 [ 1556.592189][ T7908] dvb-usb: error while querying for an remote control event. [ 1556.702391][T22504] m920x_read = error: -19 [ 1556.702425][T22504] dvb-usb: error while querying for an remote control event. [ 1556.764045][T15661] go7007 4-1:0.155: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1556.766638][T15661] usb 4-1: USB disconnect, device number 39 [ 1556.812143][ T7908] m920x_read = error: -19 [ 1556.812175][ T7908] dvb-usb: error while querying for an remote control event. [ 1556.922549][ T7908] m920x_read = error: -19 [ 1556.922581][ T7908] dvb-usb: error while querying for an remote control event. [ 1556.962537][T24978] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6570'. [ 1557.032169][ T7908] m920x_read = error: -19 [ 1557.032199][ T7908] dvb-usb: error while querying for an remote control event. [ 1557.090248][T24980] FAULT_INJECTION: forcing a failure. [ 1557.090248][T24980] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.090281][T24980] CPU: 1 UID: 0 PID: 24980 Comm: syz.1.6571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1557.090305][T24980] Tainted: [L]=SOFTLOCKUP [ 1557.090312][T24980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.090323][T24980] Call Trace: [ 1557.090330][T24980] [ 1557.090337][T24980] dump_stack_lvl+0xe8/0x150 [ 1557.090364][T24980] should_fail_ex+0x46b/0x600 [ 1557.090391][T24980] should_failslab+0xa8/0x100 [ 1557.090418][T24980] __kmalloc_noprof+0xdf/0x7b0 [ 1557.090442][T24980] ? sock_kmalloc+0xd6/0x160 [ 1557.090473][T24980] sock_kmalloc+0xd6/0x160 [ 1557.090501][T24980] skcipher_recvmsg+0x517/0x1140 [ 1557.090538][T24980] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1557.090558][T24980] ? __lock_acquire+0x6b5/0x2d10 [ 1557.090581][T24980] ? aa_sock_msg_perm+0x122/0x200 [ 1557.090606][T24980] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1557.090628][T24980] sock_recvmsg_nosec+0x10c/0x140 [ 1557.090651][T24980] ____sys_recvmsg+0x23d/0x4f0 [ 1557.090683][T24980] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1557.090720][T24980] ? import_iovec+0x73/0xa0 [ 1557.090749][T24980] ___sys_recvmsg+0x215/0x590 [ 1557.090774][T24980] ? get_pid_task+0x20/0x1f0 [ 1557.090795][T24980] ? __pfx____sys_recvmsg+0x10/0x10 [ 1557.090824][T24980] ? __fget_files+0x2a/0x420 [ 1557.090856][T24980] ? __fget_files+0x3a6/0x420 [ 1557.090884][T24980] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1557.090913][T24980] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1557.090946][T24980] ? __pfx_ksys_write+0x10/0x10 [ 1557.090976][T24980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.090995][T24980] do_syscall_64+0x15f/0xf80 [ 1557.091012][T24980] ? trace_irq_disable+0x3b/0x140 [ 1557.091037][T24980] ? clear_bhb_loop+0x40/0x90 [ 1557.091066][T24980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.091084][T24980] RIP: 0033:0x7f03f34cce59 [ 1557.091100][T24980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.091115][T24980] RSP: 002b:00007f03f1726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1557.091134][T24980] RAX: ffffffffffffffda RBX: 00007f03f3745fa0 RCX: 00007f03f34cce59 [ 1557.091148][T24980] RDX: 0000000000000043 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1557.091159][T24980] RBP: 00007f03f1726090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.091170][T24980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.091181][T24980] R13: 00007f03f3746038 R14: 00007f03f3745fa0 R15: 00007ffef0c85cd8 [ 1557.091207][T24980] [ 1557.142073][ T7908] m920x_read = error: -19 [ 1557.142101][ T7908] dvb-usb: error while querying for an remote control event. [ 1557.252837][ T7908] m920x_read = error: -19 [ 1557.252865][ T7908] dvb-usb: error while querying for an remote control event. [ 1557.362081][T22504] m920x_read = error: -19 [ 1557.362109][T22504] dvb-usb: error while querying for an remote control event. [ 1557.455252][T24983] FAULT_INJECTION: forcing a failure. [ 1557.455252][T24983] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.455297][T24983] CPU: 0 UID: 0 PID: 24983 Comm: syz.1.6572 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1557.455331][T24983] Tainted: [L]=SOFTLOCKUP [ 1557.455341][T24983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.455357][T24983] Call Trace: [ 1557.455367][T24983] [ 1557.455378][T24983] dump_stack_lvl+0xe8/0x150 [ 1557.455415][T24983] should_fail_ex+0x46b/0x600 [ 1557.455453][T24983] should_failslab+0xa8/0x100 [ 1557.455492][T24983] __kmalloc_noprof+0xdf/0x7b0 [ 1557.455536][T24983] ? sock_kmalloc+0xd6/0x160 [ 1557.455580][T24983] sock_kmalloc+0xd6/0x160 [ 1557.455621][T24983] skcipher_recvmsg+0x517/0x1140 [ 1557.455674][T24983] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1557.455702][T24983] ? __lock_acquire+0x6b5/0x2d10 [ 1557.455731][T24983] ? aa_sock_msg_perm+0x122/0x200 [ 1557.455767][T24983] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1557.455798][T24983] sock_recvmsg_nosec+0x10c/0x140 [ 1557.455829][T24983] ____sys_recvmsg+0x23d/0x4f0 [ 1557.455877][T24983] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1557.455937][T24983] ? import_iovec+0x73/0xa0 [ 1557.455989][T24983] ___sys_recvmsg+0x215/0x590 [ 1557.456024][T24983] ? get_pid_task+0x20/0x1f0 [ 1557.456056][T24983] ? __pfx____sys_recvmsg+0x10/0x10 [ 1557.456098][T24983] ? __fget_files+0x2a/0x420 [ 1557.456146][T24983] ? __fget_files+0x3a6/0x420 [ 1557.456188][T24983] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1557.456230][T24983] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1557.456278][T24983] ? __pfx_ksys_write+0x10/0x10 [ 1557.456322][T24983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.456358][T24983] do_syscall_64+0x15f/0xf80 [ 1557.456385][T24983] ? clear_bhb_loop+0x40/0x90 [ 1557.456415][T24983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.456441][T24983] RIP: 0033:0x7f03f34cce59 [ 1557.456464][T24983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.456487][T24983] RSP: 002b:00007f03f1726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1557.456514][T24983] RAX: ffffffffffffffda RBX: 00007f03f3745fa0 RCX: 00007f03f34cce59 [ 1557.456541][T24983] RDX: 0000000000000150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1557.456558][T24983] RBP: 00007f03f1726090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.456574][T24983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.456590][T24983] R13: 00007f03f3746038 R14: 00007f03f3745fa0 R15: 00007ffef0c85cd8 [ 1557.456650][T24983] [ 1557.472075][T22504] m920x_read = error: -19 [ 1557.472109][T22504] dvb-usb: error while querying for an remote control event. [ 1557.583124][T22504] m920x_read = error: -19 [ 1557.583156][T22504] dvb-usb: error while querying for an remote control event. [ 1557.764666][ T7908] m920x_read = error: -19 [ 1557.764700][ T7908] dvb-usb: error while querying for an remote control event. [ 1557.790745][T23269] usb 6-1: USB disconnect, device number 13 [ 1557.872197][T22504] m920x_read = error: -19 [ 1557.872227][T22504] dvb-usb: error while querying for an remote control event. [ 1557.941992][T24989] FAULT_INJECTION: forcing a failure. [ 1557.941992][T24989] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.942039][T24989] CPU: 1 UID: 0 PID: 24989 Comm: syz.1.6574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1557.942074][T24989] Tainted: [L]=SOFTLOCKUP [ 1557.942084][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.942100][T24989] Call Trace: [ 1557.942109][T24989] [ 1557.942121][T24989] dump_stack_lvl+0xe8/0x150 [ 1557.942158][T24989] should_fail_ex+0x46b/0x600 [ 1557.942196][T24989] should_failslab+0xa8/0x100 [ 1557.942234][T24989] __kmalloc_noprof+0xdf/0x7b0 [ 1557.942270][T24989] ? sock_kmalloc+0xd6/0x160 [ 1557.942315][T24989] sock_kmalloc+0xd6/0x160 [ 1557.942356][T24989] skcipher_recvmsg+0x517/0x1140 [ 1557.942408][T24989] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1557.942437][T24989] ? __lock_acquire+0x6b5/0x2d10 [ 1557.942467][T24989] ? aa_sock_msg_perm+0x122/0x200 [ 1557.942504][T24989] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1557.942536][T24989] sock_recvmsg_nosec+0x10c/0x140 [ 1557.942570][T24989] ____sys_recvmsg+0x23d/0x4f0 [ 1557.942617][T24989] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1557.942671][T24989] ? import_iovec+0x73/0xa0 [ 1557.942713][T24989] ___sys_recvmsg+0x215/0x590 [ 1557.942748][T24989] ? get_pid_task+0x20/0x1f0 [ 1557.942779][T24989] ? __pfx____sys_recvmsg+0x10/0x10 [ 1557.942821][T24989] ? __fget_files+0x2a/0x420 [ 1557.942881][T24989] ? __fget_files+0x3a6/0x420 [ 1557.942928][T24989] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1557.942969][T24989] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1557.943016][T24989] ? __pfx_ksys_write+0x10/0x10 [ 1557.943060][T24989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.943088][T24989] do_syscall_64+0x15f/0xf80 [ 1557.943112][T24989] ? trace_irq_disable+0x3b/0x140 [ 1557.943148][T24989] ? clear_bhb_loop+0x40/0x90 [ 1557.943182][T24989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.943208][T24989] RIP: 0033:0x7f03f34cce59 [ 1557.943231][T24989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.943254][T24989] RSP: 002b:00007f03f1726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1557.943281][T24989] RAX: ffffffffffffffda RBX: 00007f03f3745fa0 RCX: 00007f03f34cce59 [ 1557.943299][T24989] RDX: 0000000000008dff RSI: 0000200000000340 RDI: 0000000000000004 [ 1557.943316][T24989] RBP: 00007f03f1726090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.943332][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.943348][T24989] R13: 00007f03f3746038 R14: 00007f03f3745fa0 R15: 00007ffef0c85cd8 [ 1557.943386][T24989] [ 1558.118444][T22504] m920x_read = error: -19 [ 1558.118473][T22504] dvb-usb: error while querying for an remote control event. [ 1558.176069][T15661] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1558.227794][ T7908] m920x_read = error: -19 [ 1558.227830][ T7908] dvb-usb: error while querying for an remote control event. [ 1558.332161][T22504] m920x_read = error: -19 [ 1558.332191][T22504] dvb-usb: error while querying for an remote control event. [ 1558.362671][T15661] usb 4-1: Using ep0 maxpacket: 8 [ 1558.365035][T15661] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1558.365070][T15661] usb 4-1: config 179 has no interface number 0 [ 1558.365121][T15661] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1558.365152][T15661] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1558.365182][T15661] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1558.365212][T15661] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1558.365242][T15661] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1558.365290][T15661] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1558.365318][T15661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.477847][T22504] m920x_read = error: -19 [ 1558.477874][T22504] dvb-usb: error while querying for an remote control event. [ 1558.542050][T19717] Bluetooth: hci1: command 0x0406 tx timeout [ 1558.560757][T24986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1558.589478][ T7908] m920x_read = error: -19 [ 1558.589506][ T7908] dvb-usb: error while querying for an remote control event. [ 1558.601797][T24995] FAULT_INJECTION: forcing a failure. [ 1558.601797][T24995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1558.601980][T24995] CPU: 1 UID: 0 PID: 24995 Comm: syz.1.6576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1558.602016][T24995] Tainted: [L]=SOFTLOCKUP [ 1558.602025][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1558.602041][T24995] Call Trace: [ 1558.602051][T24995] [ 1558.602062][T24995] dump_stack_lvl+0xe8/0x150 [ 1558.602099][T24995] should_fail_ex+0x46b/0x600 [ 1558.602138][T24995] _copy_from_user+0x2d/0xb0 [ 1558.602177][T24995] snd_pcm_oss_write2+0x227/0x440 [ 1558.602213][T24995] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1558.602252][T24995] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1558.602293][T24995] ? snd_pcm_oss_write+0x20d/0xbe0 [ 1558.602328][T24995] snd_pcm_oss_write+0x6d1/0xbe0 [ 1558.602370][T24995] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1558.602401][T24995] vfs_write+0x2a3/0xba0 [ 1558.602444][T24995] ? __pfx_vfs_write+0x10/0x10 [ 1558.602480][T24995] ? __fget_files+0x2a/0x420 [ 1558.602512][T24995] ? __fget_files+0x2a/0x420 [ 1558.602575][T24995] ? __fget_files+0x3a6/0x420 [ 1558.602638][T24995] ? __fget_files+0x2a/0x420 [ 1558.602738][T24995] ksys_write+0x156/0x270 [ 1558.602827][T24995] ? __pfx_ksys_write+0x10/0x10 [ 1558.602989][T24995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.603069][T24995] do_syscall_64+0x15f/0xf80 [ 1558.603134][T24995] ? trace_irq_disable+0x3b/0x140 [ 1558.603228][T24995] ? clear_bhb_loop+0x40/0x90 [ 1558.603284][T24995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.603331][T24995] RIP: 0033:0x7f03f34cce59 [ 1558.603394][T24995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.603442][T24995] RSP: 002b:00007f03f1705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1558.603502][T24995] RAX: ffffffffffffffda RBX: 00007f03f3746090 RCX: 00007f03f34cce59 [ 1558.603546][T24995] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1558.603588][T24995] RBP: 00007f03f1705090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.603629][T24995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.603670][T24995] R13: 00007f03f3746128 R14: 00007f03f3746090 R15: 00007ffef0c85cd8 [ 1558.603800][T24995] [ 1558.693294][ T7908] m920x_read = error: -19 [ 1558.693322][ T7908] dvb-usb: error while querying for an remote control event. [ 1558.932057][ T7908] m920x_read = error: -19 [ 1558.932090][ T7908] dvb-usb: error while querying for an remote control event. [ 1558.939890][T24968] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 1559.042335][T22504] m920x_read = error: -19 [ 1559.042366][T22504] dvb-usb: error while querying for an remote control event. [ 1559.156182][T22504] m920x_read = error: -19 [ 1559.156214][T22504] dvb-usb: error while querying for an remote control event. [ 1559.262102][ T7908] m920x_read = error: -19 [ 1559.262183][ T7908] dvb-usb: error while querying for an remote control event. [ 1559.373034][T22504] m920x_read = error: -19 [ 1559.373068][T22504] dvb-usb: error while querying for an remote control event. [ 1559.482107][T22504] m920x_read = error: -19 [ 1559.482134][T22504] dvb-usb: error while querying for an remote control event. [ 1559.518437][T25004] netlink: 'syz.1.6581': attribute type 4 has an invalid length. [ 1559.592237][ T7908] m920x_read = error: -19 [ 1559.592267][ T7908] dvb-usb: error while querying for an remote control event. [ 1559.702325][T22504] m920x_read = error: -19 [ 1559.702357][T22504] dvb-usb: error while querying for an remote control event. [ 1559.812218][ T9] m920x_read = error: -19 [ 1559.812251][ T9] dvb-usb: error while querying for an remote control event. [ 1559.923925][ T9] m920x_read = error: -19 [ 1559.923958][ T9] dvb-usb: error while querying for an remote control event. [ 1560.033931][ T7908] m920x_read = error: -19 [ 1560.033958][ T7908] dvb-usb: error while querying for an remote control event. [ 1560.143269][ T9] m920x_read = error: -19 [ 1560.143296][ T9] dvb-usb: error while querying for an remote control event. [ 1560.230158][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1560.230210][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1560.232070][T15661] usb 4-1: USB disconnect, device number 40 [ 1560.256796][ T9] m920x_read = error: -19 [ 1560.256838][ T9] dvb-usb: error while querying for an remote control event. [ 1560.362694][ T9] m920x_read = error: -19 [ 1560.362726][ T9] dvb-usb: error while querying for an remote control event. [ 1560.473666][ T9] m920x_read = error: -19 [ 1560.473697][ T9] dvb-usb: error while querying for an remote control event. [ 1560.582146][T15661] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1560.584036][ T9] m920x_read = error: -19 [ 1560.584064][ T9] dvb-usb: error while querying for an remote control event. [ 1560.692150][ T9] m920x_read = error: -19 [ 1560.692175][ T9] dvb-usb: error while querying for an remote control event. [ 1560.729196][T25028] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1560.729412][T25028] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1560.759234][T15661] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1560.759278][T15661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.759308][T15661] usb 4-1: Product: syz [ 1560.759321][T15661] usb 4-1: Manufacturer: syz [ 1560.759333][T15661] usb 4-1: SerialNumber: syz [ 1560.802643][ T9] m920x_read = error: -19 [ 1560.810729][ T9] dvb-usb: error while querying for an remote control event. [ 1560.842088][T15661] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1560.854964][T24167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1560.912147][ T9] m920x_read = error: -19 [ 1560.912180][ T9] dvb-usb: error while querying for an remote control event. [ 1561.022205][ T9] m920x_read = error: -19 [ 1561.022239][ T9] dvb-usb: error while querying for an remote control event. [ 1561.061611][T25028] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1561.085551][T25028] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1561.111170][ C1] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 1561.132289][T22504] m920x_read = error: -19 [ 1561.132320][T22504] dvb-usb: error while querying for an remote control event. [ 1561.247879][ T9] m920x_read = error: -19 [ 1561.247913][ T9] dvb-usb: error while querying for an remote control event. [ 1561.352066][ T9] m920x_read = error: -19 [ 1561.352098][ T9] dvb-usb: error while querying for an remote control event. [ 1561.463280][ T9] m920x_read = error: -19 [ 1561.463311][ T9] dvb-usb: error while querying for an remote control event. [ 1561.464762][T25028] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1561.464968][T25028] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1561.464994][T25028] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1561.572885][ T9] m920x_read = error: -19 [ 1561.572919][ T9] dvb-usb: error while querying for an remote control event. [ 1561.682216][ T9] m920x_read = error: -19 [ 1561.682249][ T9] dvb-usb: error while querying for an remote control event. [ 1561.792177][ T9] m920x_read = error: -19 [ 1561.792209][ T9] dvb-usb: error while querying for an remote control event. [ 1561.818036][T25041] netlink: 57 bytes leftover after parsing attributes in process `syz.5.6595'. [ 1561.877899][T25044] FAULT_INJECTION: forcing a failure. [ 1561.877899][T25044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.878003][T25044] CPU: 1 UID: 0 PID: 25044 Comm: syz.4.6596 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1561.878029][T25044] Tainted: [L]=SOFTLOCKUP [ 1561.878036][T25044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1561.878047][T25044] Call Trace: [ 1561.878055][T25044] [ 1561.878063][T25044] dump_stack_lvl+0xe8/0x150 [ 1561.878091][T25044] should_fail_ex+0x46b/0x600 [ 1561.878120][T25044] _copy_from_user+0x2d/0xb0 [ 1561.878149][T25044] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1561.878171][T25044] drm_ioctl+0x5d0/0xb80 [ 1561.878201][T25044] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1561.878226][T25044] ? __pfx_drm_ioctl+0x10/0x10 [ 1561.878274][T25044] ? __fget_files+0x2a/0x420 [ 1561.878297][T25044] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1561.878316][T25044] ? __pfx_drm_ioctl+0x10/0x10 [ 1561.878341][T25044] __se_sys_ioctl+0xff/0x170 [ 1561.878367][T25044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.878386][T25044] do_syscall_64+0x15f/0xf80 [ 1561.878404][T25044] ? clear_bhb_loop+0x40/0x90 [ 1561.878425][T25044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.878465][T25044] RIP: 0033:0x7f8805e0ce59 [ 1561.878489][T25044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.878510][T25044] RSP: 002b:00007f8804066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.878535][T25044] RAX: ffffffffffffffda RBX: 00007f8806085fa0 RCX: 00007f8805e0ce59 [ 1561.878554][T25044] RDX: 0000200000000580 RSI: 00000000c03864bc RDI: 0000000000000003 [ 1561.878573][T25044] RBP: 00007f8804066090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.878590][T25044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.878601][T25044] R13: 00007f8806086038 R14: 00007f8806085fa0 R15: 00007fff80f716e8 [ 1561.878626][T25044] [ 1561.925690][ T9] m920x_read = error: -19 [ 1561.925720][ T9] dvb-usb: error while querying for an remote control event. [ 1562.000461][T24167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1562.001547][T24167] ath9k_htc: Failed to initialize the device [ 1562.032064][ T9] m920x_read = error: -19 [ 1562.032095][ T9] dvb-usb: error while querying for an remote control event. [ 1562.143403][ T9] m920x_read = error: -19 [ 1562.144538][ T9] dvb-usb: error while querying for an remote control event. [ 1562.219461][T24167] usb 4-1: ath9k_htc: USB layer deinitialized [ 1562.252088][T22504] m920x_read = error: -19 [ 1562.252121][T22504] dvb-usb: error while querying for an remote control event. [ 1562.346146][T25047] FAULT_INJECTION: forcing a failure. [ 1562.346146][T25047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.346191][T25047] CPU: 0 UID: 0 PID: 25047 Comm: syz.4.6598 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1562.346226][T25047] Tainted: [L]=SOFTLOCKUP [ 1562.346236][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1562.346252][T25047] Call Trace: [ 1562.346262][T25047] [ 1562.346272][T25047] dump_stack_lvl+0xe8/0x150 [ 1562.346309][T25047] should_fail_ex+0x46b/0x600 [ 1562.346348][T25047] _copy_to_user+0x31/0xb0 [ 1562.346389][T25047] simple_read_from_buffer+0xe1/0x170 [ 1562.346425][T25047] proc_fail_nth_read+0x1be/0x230 [ 1562.346464][T25047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.346501][T25047] ? rw_verify_area+0x2ac/0x4e0 [ 1562.346536][T25047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.346569][T25047] vfs_read+0x212/0xa80 [ 1562.346612][T25047] ? __pfx_vfs_read+0x10/0x10 [ 1562.346646][T25047] ? chmod_common+0x437/0x4a0 [ 1562.346681][T25047] ? __pfx_chmod_common+0x10/0x10 [ 1562.346712][T25047] ksys_read+0x156/0x270 [ 1562.346749][T25047] ? __pfx_ksys_read+0x10/0x10 [ 1562.346792][T25047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.346821][T25047] do_syscall_64+0x15f/0xf80 [ 1562.346848][T25047] ? clear_bhb_loop+0x40/0x90 [ 1562.346880][T25047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.346913][T25047] RIP: 0033:0x7f8805dcd68e [ 1562.346937][T25047] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1562.346960][T25047] RSP: 002b:00007f8804065fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1562.346988][T25047] RAX: ffffffffffffffda RBX: 00007f88040666c0 RCX: 00007f8805dcd68e [ 1562.347008][T25047] RDX: 000000000000000f RSI: 00007f88040660a0 RDI: 0000000000000004 [ 1562.347025][T25047] RBP: 00007f8804066090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.347041][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.347057][T25047] R13: 00007f8806086038 R14: 00007f8806085fa0 R15: 00007fff80f716e8 [ 1562.347094][T25047] [ 1562.424653][ T9] m920x_read = error: -19 [ 1562.424682][ T9] dvb-usb: error while querying for an remote control event. [ 1562.548630][T22504] m920x_read = error: -19 [ 1562.548665][T22504] dvb-usb: error while querying for an remote control event. [ 1562.652198][ T9] m920x_read = error: -19 [ 1562.652232][ T9] dvb-usb: error while querying for an remote control event. [ 1562.762180][ T9] m920x_read = error: -19 [ 1562.762213][ T9] dvb-usb: error while querying for an remote control event. [ 1562.872196][T22504] m920x_read = error: -19 [ 1562.872229][T22504] dvb-usb: error while querying for an remote control event. [ 1562.919662][T25051] FAULT_INJECTION: forcing a failure. [ 1562.919662][T25051] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.919707][T25051] CPU: 1 UID: 0 PID: 25051 Comm: syz.1.6601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1562.919744][T25051] Tainted: [L]=SOFTLOCKUP [ 1562.919754][T25051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1562.919770][T25051] Call Trace: [ 1562.919780][T25051] [ 1562.919791][T25051] dump_stack_lvl+0xe8/0x150 [ 1562.919829][T25051] should_fail_ex+0x46b/0x600 [ 1562.919875][T25051] should_failslab+0xa8/0x100 [ 1562.919915][T25051] __kmalloc_noprof+0xdf/0x7b0 [ 1562.919948][T25051] ? kfree+0x4d/0x6c0 [ 1562.919978][T25051] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1562.920024][T25051] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1562.920065][T25051] ? tomoyo_domain+0xd7/0x130 [ 1562.920097][T25051] ? tomoyo_path_number_perm+0x219/0x630 [ 1562.920131][T25051] tomoyo_path_number_perm+0x246/0x630 [ 1562.920168][T25051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1562.920200][T25051] ? __lock_acquire+0x6b5/0x2d10 [ 1562.920230][T25051] ? do_raw_spin_lock+0x12b/0x2f0 [ 1562.920301][T25051] ? __fget_files+0x2a/0x420 [ 1562.920333][T25051] ? __fget_files+0x2a/0x420 [ 1562.920362][T25051] ? __fget_files+0x3a6/0x420 [ 1562.920390][T25051] ? __fget_files+0x2a/0x420 [ 1562.920425][T25051] security_file_ioctl+0xc3/0x2a0 [ 1562.920460][T25051] __se_sys_ioctl+0x47/0x170 [ 1562.920497][T25051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.920526][T25051] do_syscall_64+0x15f/0xf80 [ 1562.920553][T25051] ? clear_bhb_loop+0x40/0x90 [ 1562.920585][T25051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.920611][T25051] RIP: 0033:0x7f03f34cce59 [ 1562.920635][T25051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.920659][T25051] RSP: 002b:00007f03f1726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.920686][T25051] RAX: ffffffffffffffda RBX: 00007f03f3745fa0 RCX: 00007f03f34cce59 [ 1562.920707][T25051] RDX: 0000200000000080 RSI: 000000004048aecb RDI: 0000000000000005 [ 1562.920725][T25051] RBP: 00007f03f1726090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.920742][T25051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.920759][T25051] R13: 00007f03f3746038 R14: 00007f03f3745fa0 R15: 00007ffef0c85cd8 [ 1562.920797][T25051] [ 1562.920907][T25051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1562.982080][T22504] m920x_read = error: -19 [ 1562.982112][T22504] dvb-usb: error while querying for an remote control event. [ 1563.092129][T22504] m920x_read = error: -19 [ 1563.092160][T22504] dvb-usb: error while querying for an remote control event. [ 1563.202145][T22504] m920x_read = error: -19 [ 1563.202172][T22504] dvb-usb: error while querying for an remote control event. [ 1563.312223][T22504] m920x_read = error: -19 [ 1563.312254][T22504] dvb-usb: error while querying for an remote control event. [ 1563.429267][T22504] m920x_read = error: -19 [ 1563.429297][T22504] dvb-usb: error while querying for an remote control event. [ 1563.532414][T22504] m920x_read = error: -19 [ 1563.532638][T22504] dvb-usb: error while querying for an remote control event. [ 1563.617738][T23269] usb 4-1: USB disconnect, device number 41 [ 1563.642244][T22504] m920x_read = error: -19 [ 1563.642277][T22504] dvb-usb: error while querying for an remote control event. [ 1563.752233][T22504] m920x_read = error: -19 [ 1563.752264][T22504] dvb-usb: error while querying for an remote control event. [ 1563.866926][T22504] m920x_read = error: -19 [ 1563.866958][T22504] dvb-usb: error while querying for an remote control event. [ 1563.972134][T22504] m920x_read = error: -19 [ 1563.972166][T22504] dvb-usb: error while querying for an remote control event. [ 1563.978441][T25072] FAULT_INJECTION: forcing a failure. [ 1563.978441][T25072] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.978540][T25072] CPU: 1 UID: 0 PID: 25072 Comm: syz.1.6608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1563.978565][T25072] Tainted: [L]=SOFTLOCKUP [ 1563.978572][T25072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1563.978583][T25072] Call Trace: [ 1563.978590][T25072] [ 1563.978599][T25072] dump_stack_lvl+0xe8/0x150 [ 1563.978625][T25072] should_fail_ex+0x46b/0x600 [ 1563.978652][T25072] should_failslab+0xa8/0x100 [ 1563.978680][T25072] kmem_cache_alloc_noprof+0x87/0x680 [ 1563.978704][T25072] ? ep_insert+0x36f/0x17f0 [ 1563.978727][T25072] ? ep_insert+0x4f5/0x17f0 [ 1563.978755][T25072] ep_insert+0x4f5/0x17f0 [ 1563.978789][T25072] ? __pfx_ep_insert+0x10/0x10 [ 1563.978819][T25072] ? lockdep_hardirqs_on+0x7a/0x110 [ 1563.978847][T25072] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1563.978888][T25072] ? mutex_lock_nested+0x152/0x1d0 [ 1563.978909][T25072] ? do_epoll_ctl_file+0x2d5/0x1070 [ 1563.978953][T25072] do_epoll_ctl_file+0x867/0x1070 [ 1563.978983][T25072] __se_sys_epoll_ctl+0x14e/0x210 [ 1563.979009][T25072] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1563.979039][T25072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.979059][T25072] do_syscall_64+0x15f/0xf80 [ 1563.979076][T25072] ? trace_irq_disable+0x3b/0x140 [ 1563.979101][T25072] ? clear_bhb_loop+0x40/0x90 [ 1563.979123][T25072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.979141][T25072] RIP: 0033:0x7f03f34cce59 [ 1563.979158][T25072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.979174][T25072] RSP: 002b:00007f03f1705028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1563.979194][T25072] RAX: ffffffffffffffda RBX: 00007f03f3746090 RCX: 00007f03f34cce59 [ 1563.979208][T25072] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 1563.979218][T25072] RBP: 00007f03f1705090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.979230][T25072] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1563.979249][T25072] R13: 00007f03f3746128 R14: 00007f03f3746090 R15: 00007ffef0c85cd8 [ 1563.979275][T25072] [ 1564.085733][ T9] m920x_read = error: -19 [ 1564.085765][ T9] dvb-usb: error while querying for an remote control event. [ 1564.193099][ T9] m920x_read = error: -19 [ 1564.193127][ T9] dvb-usb: error while querying for an remote control event. [ 1564.302431][ T9] m920x_read = error: -19 [ 1564.302543][ T9] dvb-usb: error while querying for an remote control event. [ 1564.412370][ T9] m920x_read = error: -19 [ 1564.412410][ T9] dvb-usb: error while querying for an remote control event. [ 1564.430267][T25077] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 1564.435623][T25077] FAULT_INJECTION: forcing a failure. [ 1564.435623][T25077] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.435664][T25077] CPU: 1 UID: 0 PID: 25077 Comm: syz.5.6610 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1564.435697][T25077] Tainted: [L]=SOFTLOCKUP [ 1564.435714][T25077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1564.435754][T25077] Call Trace: [ 1564.435770][T25077] [ 1564.435780][T25077] dump_stack_lvl+0xe8/0x150 [ 1564.435815][T25077] should_fail_ex+0x46b/0x600 [ 1564.435850][T25077] should_failslab+0xa8/0x100 [ 1564.435893][T25077] __kmalloc_cache_noprof+0x84/0x690 [ 1564.435949][T25077] ? vhost_task_create+0x123/0x380 [ 1564.435996][T25077] vhost_task_create+0x123/0x380 [ 1564.436022][T25077] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1564.436060][T25077] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1564.436098][T25077] ? __pfx_vhost_task_create+0x10/0x10 [ 1564.436135][T25077] ? __pfx_vhost_task_fn+0x10/0x10 [ 1564.436165][T25077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.436203][T25077] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.436241][T25077] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1564.436279][T25077] ? mutex_lock_nested+0x152/0x1d0 [ 1564.436308][T25077] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 1564.436349][T25077] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1564.436390][T25077] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1564.436434][T25077] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1564.436463][T25077] ? do_raw_spin_lock+0x12b/0x2f0 [ 1564.436511][T25077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.436547][T25077] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.436582][T25077] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1564.436619][T25077] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1564.436658][T25077] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1564.436691][T25077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.436729][T25077] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.436768][T25077] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1564.436806][T25077] ? rt_write_unlock+0x190/0x230 [ 1564.436841][T25077] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1564.436883][T25077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1564.436950][T25077] ? __fget_files+0x2a/0x420 [ 1564.436984][T25077] ? __fget_files+0x2a/0x420 [ 1564.437010][T25077] ? __fget_files+0x3a6/0x420 [ 1564.437037][T25077] ? __fget_files+0x2a/0x420 [ 1564.437069][T25077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1564.437096][T25077] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1564.437130][T25077] __se_sys_ioctl+0xff/0x170 [ 1564.437166][T25077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.437205][T25077] do_syscall_64+0x15f/0xf80 [ 1564.437226][T25077] ? trace_irq_disable+0x3b/0x140 [ 1564.437259][T25077] ? clear_bhb_loop+0x40/0x90 [ 1564.437287][T25077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.437311][T25077] RIP: 0033:0x7f4338dbce59 [ 1564.437335][T25077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.437356][T25077] RSP: 002b:00007f4337016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.437382][T25077] RAX: ffffffffffffffda RBX: 00007f4339035fa0 RCX: 00007f4338dbce59 [ 1564.437401][T25077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1564.437433][T25077] RBP: 00007f4337016090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.437450][T25077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.437464][T25077] R13: 00007f4339036038 R14: 00007f4339035fa0 R15: 00007fff44de7278 [ 1564.437503][T25077] [ 1564.522076][ T9] m920x_read = error: -19 [ 1564.522108][ T9] dvb-usb: error while querying for an remote control event. [ 1564.638990][ T9] m920x_read = error: -19 [ 1564.639019][ T9] dvb-usb: error while querying for an remote control event. [ 1564.752195][ T9] m920x_read = error: -19 [ 1564.752226][ T9] dvb-usb: error while querying for an remote control event. [ 1564.862231][T22504] m920x_read = error: -19 [ 1564.862261][T22504] dvb-usb: error while querying for an remote control event. [ 1564.972294][ T9] m920x_read = error: -19 [ 1564.972328][ T9] dvb-usb: error while querying for an remote control event. [ 1565.082656][ T9] m920x_read = error: -19 [ 1565.082687][ T9] dvb-usb: error while querying for an remote control event. [ 1565.192233][ T7908] m920x_read = error: -19 [ 1565.192265][ T7908] dvb-usb: error while querying for an remote control event. [ 1565.192868][T22504] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1565.302880][ T7908] m920x_read = error: -19 [ 1565.302913][ T7908] dvb-usb: error while querying for an remote control event. [ 1565.370686][T22504] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1565.370725][T22504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.400977][T22504] usb 4-1: config 0 descriptor?? [ 1565.412230][ T7908] m920x_read = error: -19 [ 1565.412260][ T7908] dvb-usb: error while querying for an remote control event. [ 1565.464004][T22504] cp210x 4-1:0.0: cp210x converter detected [ 1565.522236][ T7908] m920x_read = error: -19 [ 1565.522267][ T7908] dvb-usb: error while querying for an remote control event. [ 1565.632352][ T7908] m920x_read = error: -19 [ 1565.632474][ T7908] dvb-usb: error while querying for an remote control event. [ 1565.742244][ T7908] m920x_read = error: -19 [ 1565.742510][ T7908] dvb-usb: error while querying for an remote control event. [ 1565.855772][ T9] m920x_read = error: -19 [ 1565.855909][ T9] dvb-usb: error while querying for an remote control event. [ 1565.892072][T22504] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1565.958074][T22504] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1565.969458][T23220] m920x_read = error: -19 [ 1565.969488][T23220] dvb-usb: error while querying for an remote control event. [ 1566.070340][T25104] FAULT_INJECTION: forcing a failure. [ 1566.070340][T25104] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.070383][T25104] CPU: 1 UID: 0 PID: 25104 Comm: syz.1.6619 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1566.070415][T25104] Tainted: [L]=SOFTLOCKUP [ 1566.070425][T25104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1566.070440][T25104] Call Trace: [ 1566.070450][T25104] [ 1566.070460][T25104] dump_stack_lvl+0xe8/0x150 [ 1566.070493][T25104] should_fail_ex+0x46b/0x600 [ 1566.070530][T25104] should_failslab+0xa8/0x100 [ 1566.070567][T25104] __kmalloc_noprof+0xdf/0x7b0 [ 1566.070602][T25104] ? tomoyo_encode+0x28b/0x550 [ 1566.070644][T25104] tomoyo_encode+0x28b/0x550 [ 1566.070689][T25104] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1566.070729][T25104] ? tomoyo_domain+0xd7/0x130 [ 1566.070765][T25104] ? tomoyo_path_number_perm+0x219/0x630 [ 1566.070798][T25104] tomoyo_path_number_perm+0x246/0x630 [ 1566.070834][T25104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1566.070866][T25104] ? __lock_acquire+0x6b5/0x2d10 [ 1566.070894][T25104] ? do_raw_spin_lock+0x12b/0x2f0 [ 1566.070961][T25104] ? __fget_files+0x2a/0x420 [ 1566.070995][T25104] ? __fget_files+0x2a/0x420 [ 1566.071023][T25104] ? __fget_files+0x3a6/0x420 [ 1566.071067][T25104] ? __fget_files+0x2a/0x420 [ 1566.071102][T25104] security_file_ioctl+0xc3/0x2a0 [ 1566.071137][T25104] __se_sys_ioctl+0x47/0x170 [ 1566.071174][T25104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.071202][T25104] do_syscall_64+0x15f/0xf80 [ 1566.071238][T25104] ? clear_bhb_loop+0x40/0x90 [ 1566.071269][T25104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.071292][T25104] RIP: 0033:0x7f03f34cce59 [ 1566.071313][T25104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.071331][T25104] RSP: 002b:00007f03f1705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.071353][T25104] RAX: ffffffffffffffda RBX: 00007f03f3746090 RCX: 00007f03f34cce59 [ 1566.071369][T25104] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1566.071382][T25104] RBP: 00007f03f1705090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.071395][T25104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.071408][T25104] R13: 00007f03f3746128 R14: 00007f03f3746090 R15: 00007ffef0c85cd8 [ 1566.071437][T25104] [ 1566.071489][T25104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1566.278855][T24167] usb 4-1: USB disconnect, device number 42 [ 1566.350008][T22504] m920x_read = error: -19 [ 1566.350041][T22504] dvb-usb: error while querying for an remote control event. [ 1566.443753][T24167] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1566.452241][T22504] m920x_read = error: -19 [ 1566.452274][T22504] dvb-usb: error while querying for an remote control event. [ 1566.550987][T25111] FAULT_INJECTION: forcing a failure. [ 1566.550987][T25111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.551033][T25111] CPU: 1 UID: 0 PID: 25111 Comm: syz.5.6622 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1566.551067][T25111] Tainted: [L]=SOFTLOCKUP [ 1566.551077][T25111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1566.551092][T25111] Call Trace: [ 1566.551102][T25111] [ 1566.551113][T25111] dump_stack_lvl+0xe8/0x150 [ 1566.551149][T25111] should_fail_ex+0x46b/0x600 [ 1566.551195][T25111] _copy_to_user+0x31/0xb0 [ 1566.551237][T25111] simple_read_from_buffer+0xe1/0x170 [ 1566.551273][T25111] proc_fail_nth_read+0x1be/0x230 [ 1566.551308][T25111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.551342][T25111] ? rw_verify_area+0x2ac/0x4e0 [ 1566.551377][T25111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.551413][T25111] vfs_read+0x212/0xa80 [ 1566.551457][T25111] ? __pfx_vfs_read+0x10/0x10 [ 1566.551495][T25111] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1566.551534][T25111] ? lockdep_hardirqs_on+0x7a/0x110 [ 1566.551572][T25111] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1566.551616][T25111] ? mutex_lock_nested+0x152/0x1d0 [ 1566.551646][T25111] ? fdget_pos+0x252/0x320 [ 1566.551685][T25111] ksys_read+0x156/0x270 [ 1566.551722][T25111] ? __pfx_ksys_read+0x10/0x10 [ 1566.551765][T25111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.551792][T25111] do_syscall_64+0x15f/0xf80 [ 1566.551816][T25111] ? trace_irq_disable+0x3b/0x140 [ 1566.551849][T25111] ? clear_bhb_loop+0x40/0x90 [ 1566.551880][T25111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.551905][T25111] RIP: 0033:0x7f4338d7d68e [ 1566.551929][T25111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1566.551952][T25111] RSP: 002b:00007f4337015fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1566.551979][T25111] RAX: ffffffffffffffda RBX: 00007f43370166c0 RCX: 00007f4338d7d68e [ 1566.551999][T25111] RDX: 000000000000000f RSI: 00007f43370160a0 RDI: 0000000000000004 [ 1566.552017][T25111] RBP: 00007f4337016090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.552033][T25111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.552050][T25111] R13: 00007f4339036038 R14: 00007f4339035fa0 R15: 00007fff44de7278 [ 1566.552087][T25111] [ 1566.803072][ T9] m920x_read = error: -19 [ 1566.803105][ T9] dvb-usb: error while querying for an remote control event. [ 1566.883076][T24167] cp210x 4-1:0.0: device disconnected [ 1566.922108][T23220] m920x_read = error: -19 [ 1566.922140][T23220] dvb-usb: error while querying for an remote control event. [ 1567.042769][T22504] m920x_read = error: -19 [ 1567.042804][T22504] dvb-usb: error while querying for an remote control event. [ 1567.155981][T23220] m920x_read = error: -19 [ 1567.156016][T23220] dvb-usb: error while querying for an remote control event. [ 1567.262534][T23220] m920x_read = error: -19 [ 1567.262566][T23220] dvb-usb: error while querying for an remote control event. [ 1567.372141][T23220] m920x_read = error: -19 [ 1567.372172][T23220] dvb-usb: error while querying for an remote control event. [ 1567.405326][T25127] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 1567.482191][T23220] m920x_read = error: -19 [ 1567.482222][T23220] dvb-usb: error while querying for an remote control event. [ 1567.502146][T23269] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1567.592222][T23220] m920x_read = error: -19 [ 1567.592258][T23220] dvb-usb: error while querying for an remote control event. [ 1567.702184][T23220] m920x_read = error: -19 [ 1567.702218][T23220] dvb-usb: error while querying for an remote control event. [ 1567.707604][T23269] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1567.707641][T23269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.707665][T23269] usb 4-1: Product: syz [ 1567.707682][T23269] usb 4-1: Manufacturer: syz [ 1567.707699][T23269] usb 4-1: SerialNumber: syz [ 1567.812324][T23220] m920x_read = error: -19 [ 1567.812357][T23220] dvb-usb: error while querying for an remote control event. [ 1567.818647][T23269] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1567.923500][T23220] m920x_read = error: -19 [ 1567.923534][T23220] dvb-usb: error while querying for an remote control event. [ 1567.976680][T19717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1567.976717][T19717] CPU: 1 UID: 0 PID: 19717 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1567.976754][T19717] Tainted: [L]=SOFTLOCKUP [ 1567.976764][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1567.976782][T19717] Workqueue: hci4 hci_rx_work [ 1567.976828][T19717] Call Trace: [ 1567.976839][T19717] [ 1567.976851][T19717] dump_stack_lvl+0xe8/0x150 [ 1567.976888][T19717] sysfs_create_dir_ns+0x271/0x2a0 [ 1567.976923][T19717] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1567.976959][T19717] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1567.976996][T19717] ? rt_spin_unlock+0x160/0x200 [ 1567.977045][T19717] kobject_add_internal+0x631/0xd10 [ 1567.977089][T19717] kobject_add+0x163/0x240 [ 1567.977126][T19717] ? __pfx_kobject_add+0x10/0x10 [ 1567.977166][T19717] ? get_device_parent+0x370/0x3a0 [ 1567.977208][T19717] device_add+0x408/0xb90 [ 1567.977252][T19717] hci_conn_add_sysfs+0xd5/0x210 [ 1567.977295][T19717] le_conn_complete_evt+0x10e6/0x16b0 [ 1567.977340][T19717] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1567.977373][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1567.977415][T19717] ? lockdep_hardirqs_on+0x7a/0x110 [ 1567.977457][T19717] ? skb_pull_data+0xfb/0x200 [ 1567.977489][T19717] hci_le_conn_complete_evt+0x187/0x470 [ 1567.977528][T19717] hci_event_packet+0x659/0xef0 [ 1567.977577][T19717] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1567.977611][T19717] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1567.977639][T19717] ? __pfx_hci_event_packet+0x10/0x10 [ 1567.977692][T19717] ? rt_spin_unlock+0x14f/0x200 [ 1567.977734][T19717] ? hci_send_to_monitor+0xe2/0x590 [ 1567.977771][T19717] hci_rx_work+0x3ee/0x1040 [ 1567.977821][T19717] ? process_one_work+0x8be/0x1630 [ 1567.977854][T19717] process_one_work+0x98b/0x1630 [ 1567.977911][T19717] ? __pfx_process_one_work+0x10/0x10 [ 1567.977942][T19717] ? do_raw_spin_lock+0x12b/0x2f0 [ 1567.977997][T19717] worker_thread+0xb49/0x1140 [ 1567.978047][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1567.978102][T19717] kthread+0x388/0x470 [ 1567.978129][T19717] ? __pfx_worker_thread+0x10/0x10 [ 1567.978163][T19717] ? __pfx_kthread+0x10/0x10 [ 1567.978196][T19717] ret_from_fork+0x514/0xb70 [ 1567.978231][T19717] ? __pfx_ret_from_fork+0x10/0x10 [ 1567.978262][T19717] ? __switch_to+0xc79/0x1410 [ 1567.978324][T19717] ? __pfx_kthread+0x10/0x10 [ 1567.978353][T19717] ret_from_fork_asm+0x1a/0x30 [ 1567.978408][T19717] [ 1567.980173][T19717] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1567.980237][T19717] Bluetooth: hci4: failed to register connection device [ 1568.036048][T23220] m920x_read = error: -19 [ 1568.036082][T23220] dvb-usb: error while querying for an remote control event. [ 1568.142122][T23220] m920x_read = error: -19 [ 1568.142154][T23220] dvb-usb: error while querying for an remote control event. [ 1568.255732][T23220] m920x_read = error: -19 [ 1568.255765][T23220] dvb-usb: error while querying for an remote control event. [ 1568.366560][T22504] m920x_read = error: -19 [ 1568.366593][T22504] dvb-usb: error while querying for an remote control event. [ 1568.455037][T24167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1568.472105][ T9] m920x_read = error: -19 [ 1568.472131][ T9] dvb-usb: error while querying for an remote control event. [ 1568.543423][T19717] ================================================================== [ 1568.543442][T19717] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.543487][T19717] Read of size 8 at addr ffff8880303527b0 by task kworker/u9:0/19717 [ 1568.543508][T19717] [ 1568.543525][T19717] CPU: 1 UID: 0 PID: 19717 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1568.543559][T19717] Tainted: [L]=SOFTLOCKUP [ 1568.543568][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1568.543585][T19717] Workqueue: hci4 hci_rx_work [ 1568.543620][T19717] Call Trace: [ 1568.543630][T19717] [ 1568.543640][T19717] dump_stack_lvl+0xe8/0x150 [ 1568.543670][T19717] print_address_description+0x55/0x1e0 [ 1568.543702][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.543734][T19717] print_report+0x58/0x70 [ 1568.543774][T19717] kasan_report+0x117/0x150 [ 1568.543814][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.543851][T19717] l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.543885][T19717] l2cap_connect_cfm+0x368/0x1560 [ 1568.543920][T19717] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1568.543951][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1568.543989][T19717] ? lockdep_hardirqs_on+0x7a/0x110 [ 1568.544026][T19717] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1568.544061][T19717] ? mutex_lock_nested+0x152/0x1d0 [ 1568.544089][T19717] ? hci_connect_cfm+0x2c/0x140 [ 1568.544114][T19717] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1568.544143][T19717] hci_connect_cfm+0x95/0x140 [ 1568.544172][T19717] le_conn_complete_evt+0x1134/0x16b0 [ 1568.544205][T19717] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1568.544232][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1568.544265][T19717] ? lockdep_hardirqs_on+0x7a/0x110 [ 1568.544300][T19717] ? skb_pull_data+0xfb/0x200 [ 1568.544323][T19717] hci_le_conn_complete_evt+0x187/0x470 [ 1568.544351][T19717] hci_event_packet+0x659/0xef0 [ 1568.544387][T19717] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1568.544414][T19717] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1568.544436][T19717] ? __pfx_hci_event_packet+0x10/0x10 [ 1568.544467][T19717] ? rt_spin_unlock+0x14f/0x200 [ 1568.544497][T19717] ? hci_send_to_monitor+0xe2/0x590 [ 1568.544526][T19717] hci_rx_work+0x3ee/0x1040 [ 1568.544563][T19717] ? process_one_work+0x8be/0x1630 [ 1568.544591][T19717] process_one_work+0x98b/0x1630 [ 1568.544629][T19717] ? __pfx_process_one_work+0x10/0x10 [ 1568.544659][T19717] ? do_raw_spin_lock+0x12b/0x2f0 [ 1568.544698][T19717] worker_thread+0xb49/0x1140 [ 1568.544735][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1568.544779][T19717] kthread+0x388/0x470 [ 1568.544835][T19717] ? __pfx_worker_thread+0x10/0x10 [ 1568.544868][T19717] ? __pfx_kthread+0x10/0x10 [ 1568.544892][T19717] ret_from_fork+0x514/0xb70 [ 1568.544921][T19717] ? __pfx_ret_from_fork+0x10/0x10 [ 1568.544949][T19717] ? __switch_to+0xc79/0x1410 [ 1568.544988][T19717] ? __pfx_kthread+0x10/0x10 [ 1568.545011][T19717] ret_from_fork_asm+0x1a/0x30 [ 1568.545051][T19717] [ 1568.545061][T19717] [ 1568.545067][T19717] Allocated by task 19717: [ 1568.545080][T19717] kasan_save_track+0x3e/0x80 [ 1568.545110][T19717] __kasan_kmalloc+0x93/0xb0 [ 1568.545153][T19717] __kmalloc_noprof+0x3e7/0x7b0 [ 1568.545183][T19717] sk_prot_alloc+0xe7/0x210 [ 1568.545213][T19717] sk_alloc+0x3a/0x390 [ 1568.545242][T19717] bt_sock_alloc+0x3b/0x310 [ 1568.545263][T19717] l2cap_sock_new_connection_cb+0xf1/0x2f0 [ 1568.545297][T19717] l2cap_connect_cfm+0x368/0x1560 [ 1568.545324][T19717] hci_connect_cfm+0x95/0x140 [ 1568.545349][T19717] le_conn_complete_evt+0x1134/0x16b0 [ 1568.545374][T19717] hci_le_conn_complete_evt+0x187/0x470 [ 1568.545397][T19717] hci_event_packet+0x659/0xef0 [ 1568.545429][T19717] hci_rx_work+0x3ee/0x1040 [ 1568.545472][T19717] process_one_work+0x98b/0x1630 [ 1568.545500][T19717] worker_thread+0xb49/0x1140 [ 1568.545529][T19717] kthread+0x388/0x470 [ 1568.545549][T19717] ret_from_fork+0x514/0xb70 [ 1568.545574][T19717] ret_from_fork_asm+0x1a/0x30 [ 1568.545601][T19717] [ 1568.545608][T19717] Freed by task 25151: [ 1568.545621][T19717] kasan_save_track+0x3e/0x80 [ 1568.545648][T19717] kasan_save_free_info+0x46/0x50 [ 1568.545671][T19717] __kasan_slab_free+0x5c/0x80 [ 1568.545701][T19717] kfree+0x1c5/0x6c0 [ 1568.545727][T19717] __sk_destruct+0x74b/0x9d0 [ 1568.545757][T19717] l2cap_sock_cleanup_listen+0xe0/0x440 [ 1568.545795][T19717] l2cap_sock_release+0x6e/0x270 [ 1568.545823][T19717] __sock_release+0xb9/0x250 [ 1568.545846][T19717] sock_close+0x1c/0x30 [ 1568.545867][T19717] __fput+0x461/0xa70 [ 1568.545896][T19717] task_work_run+0x1d9/0x270 [ 1568.545918][T19717] exit_to_user_mode_loop+0xf3/0x4d0 [ 1568.545954][T19717] do_syscall_64+0x33e/0xf80 [ 1568.545975][T19717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.545996][T19717] [ 1568.546003][T19717] The buggy address belongs to the object at ffff888030352000 [ 1568.546003][T19717] which belongs to the cache kmalloc-2k of size 2048 [ 1568.546025][T19717] The buggy address is located 1968 bytes inside of [ 1568.546025][T19717] freed 2048-byte region [ffff888030352000, ffff888030352800) [ 1568.546051][T19717] [ 1568.546058][T19717] The buggy address belongs to the physical page: [ 1568.546086][T19717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30350 [ 1568.546110][T19717] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1568.546130][T19717] flags: 0x80000000000040(head|node=0|zone=1) [ 1568.546151][T19717] page_type: f5(slab) [ 1568.546175][T19717] raw: 0080000000000040 ffff88813fea2000 dead000000000100 dead000000000122 [ 1568.546197][T19717] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1568.546220][T19717] head: 0080000000000040 ffff88813fea2000 dead000000000100 dead000000000122 [ 1568.546242][T19717] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1568.546264][T19717] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1568.546285][T19717] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1568.546299][T19717] page dumped because: kasan: bad access detected [ 1568.546312][T19717] page_owner tracks the page as allocated [ 1568.546322][T19717] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24655996839, free_ts 0 [ 1568.546363][T19717] post_alloc_hook+0x1f9/0x250 [ 1568.546393][T19717] get_page_from_freelist+0x27d6/0x2850 [ 1568.546428][T19717] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1568.546464][T19717] allocate_slab+0x74/0x5e0 [ 1568.546487][T19717] refill_objects+0x33c/0x3d0 [ 1568.546509][T19717] __pcs_replace_empty_main+0x373/0x720 [ 1568.546534][T19717] __kvmalloc_node_noprof+0x6f4/0x8e0 [ 1568.546566][T19717] v4l2_ctrl_new+0x105d/0x1860 [ 1568.546595][T19717] v4l2_ctrl_new_custom+0x5fc/0x850 [ 1568.546624][T19717] vivid_create_controls+0xe21/0x3bd0 [ 1568.546646][T19717] vivid_probe+0x425f/0x72c0 [ 1568.546677][T19717] platform_probe+0xf9/0x190 [ 1568.546707][T19717] really_probe+0x267/0xaf0 [ 1568.546741][T19717] __driver_probe_device+0x1e2/0x350 [ 1568.546774][T19717] driver_probe_device+0x4f/0x240 [ 1568.546816][T19717] __driver_attach+0x33c/0x600 [ 1568.546848][T19717] page_owner free stack trace missing [ 1568.546865][T19717] [ 1568.546870][T19717] Memory state around the buggy address: [ 1568.546884][T19717] ffff888030352680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1568.546901][T19717] ffff888030352700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1568.546918][T19717] >ffff888030352780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1568.546931][T19717] ^ [ 1568.546945][T19717] ffff888030352800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1568.546962][T19717] ffff888030352880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1568.546975][T19717] ================================================================== [ 1568.548968][T19717] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1568.548999][T19717] CPU: 1 UID: 0 PID: 19717 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1568.549038][T19717] Tainted: [L]=SOFTLOCKUP [ 1568.549049][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1568.549073][T19717] Workqueue: hci4 hci_rx_work [ 1568.549115][T19717] Call Trace: [ 1568.549126][T19717] [ 1568.549137][T19717] vpanic+0x56c/0xa60 [ 1568.549179][T19717] ? __pfx_vpanic+0x10/0x10 [ 1568.549218][T19717] ? lockdep_hardirqs_on+0x7a/0x110 [ 1568.549262][T19717] panic+0xc5/0xd0 [ 1568.549296][T19717] ? __pfx_panic+0x10/0x10 [ 1568.549331][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.549374][T19717] ? __pfx_panic+0x10/0x10 [ 1568.549410][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.549460][T19717] check_panic_on_warn+0x89/0xb0 [ 1568.549487][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.549523][T19717] end_report+0x73/0x170 [ 1568.549559][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.549593][T19717] kasan_report+0x128/0x150 [ 1568.549625][T19717] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.549661][T19717] l2cap_sock_new_connection_cb+0x208/0x2f0 [ 1568.549693][T19717] l2cap_connect_cfm+0x368/0x1560 [ 1568.549723][T19717] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1568.549749][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1568.549780][T19717] ? lockdep_hardirqs_on+0x7a/0x110 [ 1568.549820][T19717] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1568.549851][T19717] ? mutex_lock_nested+0x152/0x1d0 [ 1568.549875][T19717] ? hci_connect_cfm+0x2c/0x140 [ 1568.549898][T19717] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1568.549925][T19717] hci_connect_cfm+0x95/0x140 [ 1568.549948][T19717] le_conn_complete_evt+0x1134/0x16b0 [ 1568.549978][T19717] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1568.550008][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1568.550039][T19717] ? lockdep_hardirqs_on+0x7a/0x110 [ 1568.550068][T19717] ? skb_pull_data+0xfb/0x200 [ 1568.550087][T19717] hci_le_conn_complete_evt+0x187/0x470 [ 1568.550112][T19717] hci_event_packet+0x659/0xef0 [ 1568.550144][T19717] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1568.550167][T19717] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1568.550187][T19717] ? __pfx_hci_event_packet+0x10/0x10 [ 1568.550214][T19717] ? rt_spin_unlock+0x14f/0x200 [ 1568.550241][T19717] ? hci_send_to_monitor+0xe2/0x590 [ 1568.550271][T19717] hci_rx_work+0x3ee/0x1040 [ 1568.550308][T19717] ? process_one_work+0x8be/0x1630 [ 1568.550334][T19717] process_one_work+0x98b/0x1630 [ 1568.550367][T19717] ? __pfx_process_one_work+0x10/0x10 [ 1568.550391][T19717] ? do_raw_spin_lock+0x12b/0x2f0 [ 1568.550424][T19717] worker_thread+0xb49/0x1140 [ 1568.550455][T19717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1568.550489][T19717] kthread+0x388/0x470 [ 1568.550509][T19717] ? __pfx_worker_thread+0x10/0x10 [ 1568.550533][T19717] ? __pfx_kthread+0x10/0x10 [ 1568.550553][T19717] ret_from_fork+0x514/0xb70 [ 1568.550578][T19717] ? __pfx_ret_from_fork+0x10/0x10 [ 1568.550601][T19717] ? __switch_to+0xc79/0x1410 [ 1568.550633][T19717] ? __pfx_kthread+0x10/0x10 [ 1568.550653][T19717] ret_from_fork_asm+0x1a/0x30 [ 1568.550686][T19717] [ 1568.554683][T19717] Kernel Offset: disabled