last executing test programs:

19m26.672626084s ago: executing program 0 (id=2104):
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4}, 0x0)
gettid()
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0)
keyctl$clear(0x5, 0xfffffffffffffffd)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x8003, 0xee1e)
msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x0, 0x0)
msgrcv(r0, &(0x7f0000000500)={0x0, ""/221}, 0xe5, 0x1, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getrusage(0x1, &(0x7f0000001840))
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xe8})
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000340)=""/251)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x81)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0)
r5 = socket(0xb, 0x3, 0x1b)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001e40)={0x1, [{0x1, 0x10, 0x5, &(0x7f0000000300)="2b95"}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x401, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x644, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x0, 0x0}]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e2b, 0xfffffffe, @private2, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)

19m20.761418917s ago: executing program 0 (id=2123):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000580)={0x40, r3, 0x1, 0xfffffffe, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+ '}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x54de, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x8000, 0xb1}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x800)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)

19m19.376517864s ago: executing program 0 (id=2125):
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x4c2fe, 0x2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xfffff000)
fallocate(r0, 0x8, 0xffffffffffffffff, 0x1000f4)
write(r0, &(0x7f0000000440)="96", 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendfile(0xffffffffffffffff, r0, 0x0, 0x800000a1e)
memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xeaG\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x06\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xd4R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(r1, r1, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}}, [0xfff, 0x8, 0x100, 0x8, 0x6, 0xff, 0x2, 0x8, 0x1, 0x5, 0x80, 0x9, 0x8, 0x4, 0x6]}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000001600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}], 0x1, 0x44051)
shutdown(r2, 0x1)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
fchdir(r4)
r5 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1)
pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x1f, &(0x7f0000002640)=""/4050, &(0x7f0000001180)=0xfd2)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xc067}, {r5, 0x40}], 0x2e, 0x0, 0x0, 0x0)

19m18.716599332s ago: executing program 0 (id=2128):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'batadv_slave_1\x00', 0x2})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(r1, &(0x7f0000000140)=0x8c, r5, &(0x7f00000002c0)=0x6cd, 0x9, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040))
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="000903000000826604ae5331fe748ba3fee816a8b238e3676ffbd3ac6d87a1e4aac691394cf74a0fd7044a2c6c66ff4df1c36f3aecd749a48cbe6fa96eef7ef27f95f3ecee9e"], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x40000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r10, 0x40045731, 0x0)

19m16.767031202s ago: executing program 0 (id=2135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)

19m16.080419463s ago: executing program 0 (id=2138):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_type(r1, &(0x7f0000000040), 0xffffffffffffffe5)
r2 = syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0xd195, 0x2, 0x4}, &(0x7f0000000180), &(0x7f0000000280))
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000600)={[0xff5, 0x200, 0xa1d4, 0x6356, 0x7d45e321, 0x2, 0x4, 0x7fffffffffffffff, 0x1fffffffe000, 0x8001, 0x2, 0x8, 0x1, 0xc53, 0xeedd], 0xe000, 0xc000})
syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040))
r5 = syz_open_dev$loop(&(0x7f0000000700), 0x1, 0x0)
splice(r0, &(0x7f00000006c0)=0xb9c, r5, &(0x7f0000000740)=0x1000, 0x9, 0x0)
ptrace$cont(0x20, r3, 0x80000005, 0x9)
modify_ldt$write2(0x11, &(0x7f00000005c0)={0x2, 0x100000, 0x4000, 0x0, 0x1}, 0x10)
io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/117)

19m15.521116577s ago: executing program 32 (id=2138):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_type(r1, &(0x7f0000000040), 0xffffffffffffffe5)
r2 = syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0xd195, 0x2, 0x4}, &(0x7f0000000180), &(0x7f0000000280))
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000600)={[0xff5, 0x200, 0xa1d4, 0x6356, 0x7d45e321, 0x2, 0x4, 0x7fffffffffffffff, 0x1fffffffe000, 0x8001, 0x2, 0x8, 0x1, 0xc53, 0xeedd], 0xe000, 0xc000})
syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040))
r5 = syz_open_dev$loop(&(0x7f0000000700), 0x1, 0x0)
splice(r0, &(0x7f00000006c0)=0xb9c, r5, &(0x7f0000000740)=0x1000, 0x9, 0x0)
ptrace$cont(0x20, r3, 0x80000005, 0x9)
modify_ldt$write2(0x11, &(0x7f00000005c0)={0x2, 0x100000, 0x4000, 0x0, 0x1}, 0x10)
io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/117)

14.051812237s ago: executing program 3 (id=6990):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00')
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1200}}]}, 0x40}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x695}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa3, 0xd7, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7f, 0x6, 0x32}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x4, 0x35, 0x10, 0xfa}, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="050f420004141004056bec710500187a9aa5750fe9d9b3af940b1001cae3b0720204000f14100af682000000008802000f3f00800000ff000a8a0300000003000600"], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x410}}]})
syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xd, 0x2, 0x7f, 0x10, 0x9}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x4, 0x8, 0xff1c, [0x0, 0x3f30]}]}})
r9 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r9, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x206a00)

11.548324255s ago: executing program 3 (id=6998):
socket(0x10, 0x803, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1000000010, 0x80002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, <r7=>0xee00}}, './file0\x00'})
fchownat(r0, &(0x7f0000000080)='./file0\x00', r5, r7, 0x1000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)
connect$inet(r8, 0x0, 0x0)

9.664269162s ago: executing program 3 (id=7005):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @mcast1, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000004c0)=0x9, 0x4)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
sendmmsg$unix(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="f8076164ca7c88d8bf7d", 0xa}, {&(0x7f00000002c0)="ff16ec0263b64e01db79c16b7eb4d91e71f7d13c74f14f59b743ec6aef5d62b80b348586d58dd0546da196dea79c01db6fb9e4aed5f158e124b06143d088ed2b571b2cbd90a1bec8102866ceae1a9cde0efd73ee73c26b0fc0ccd7dbb923568bc37f5cec38eac03115f6e00c77db1f94940da4975c6335a20a2939a9acd2e8b66d8873ff196c32163b91257f923c2b4f7800a706c63b5baf87adf28eab6f3dad", 0xa0}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r3, r4, r3, r2, r4]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r4, 0xffffffffffffffff, r4, r0, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r6, r1]}}, @cred={{0x1c}}], 0x108, 0x40840}}], 0x1, 0x800)
writev(r6, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r7, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x2f)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x40000000)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r8, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

7.826906448s ago: executing program 2 (id=7015):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010008000000000000000000000000000000000cb2f567"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xca, r0}, 0x38)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000be9b2a204705602f55af0102030109002400010000100009046e", @ANYRESHEX, @ANYBLOB="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", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

7.76871565s ago: executing program 1 (id=7016):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000109010200000000000000000a0000000900010073797a3100000000080003400000001d0c0004800800014034c1306c0800054000000019080003400000b2b3a5edcc000708000540000000100900010073797a31000000000c000480080001"], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x10)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = syz_io_uring_setup(0x1e1c, &(0x7f0000000200)={0x0, 0x86f9, 0x10100, 0x200000, 0x0, 0x0, r2}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
r6 = syz_io_uring_setup(0x2e43, &(0x7f0000000000)={0x0, 0x3164, 0x40, 0x1, 0x108, 0x0, r3}, &(0x7f0000000080), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x18}, @ioring_restriction_sqe_op={0x1, 0x14}], 0x2)
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
fcntl$getownex(r7, 0x10, &(0x7f0000000400))

7.202222758s ago: executing program 4 (id=7018):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRESDEC], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) (fail_nth: 14)

6.90823529s ago: executing program 4 (id=7019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000080)={0x14}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x84}}, 0x0)

6.622883159s ago: executing program 4 (id=7020):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)=0x1000)
ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x4e24, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x9}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
r4 = socket(0x11, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x800, 0x0, 0xbffffffe}, 0x10)
ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f00000000c0)=0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r9, 0x0, 0x11, 0x810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c)

6.500707006s ago: executing program 3 (id=7021):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x1, 0x0, @irqchip={0x3, 0x8001}}]})

6.086482145s ago: executing program 3 (id=7022):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff", 0x52}], 0x1)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x1, 'Y'}, 0x0})
socket(0x840000000002, 0x3, 0xff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)

5.675917089s ago: executing program 4 (id=7023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000)
io_setup(0x30, &(0x7f0000000600)=<r4=>0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0, 0x0, 0x3}])
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000009928c4d5f34a3288b0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f000027a3665417a51372c12c66a9450bce111acead6697fb938b1accab86982cdcfd97640618073b2080d9c82f20afd250ed532a8838fe449af2e89fc7bdd178a682fca558fc1dc4704210c69b40986227f7a99c8454c6f1b7e4851956e4d7c19f9024de6037f4736735fddded3c90a31585d7d29b339a2d"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.361420119s ago: executing program 1 (id=7024):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00')
pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
socket$packet(0x11, 0xa, 0x300)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e)

4.668440232s ago: executing program 4 (id=7025):
userfaultfd(0x80001)
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x149)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd75)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r10, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r10, r11, 0x3, 0x500, 0xfa, 0x2, {0x400009, 0x9, 0xfffc, 0x8000, 0x3e, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0xfffffd, 0x6, 0x40000001, "0e19cd00000000caa3431a0300dffb381f5300"}})
close(r8)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0)
r12 = openat$binfmt(0xffffffffffffff9c, r7, 0x2, 0x0)
close(r12)
execveat$binfmt(r1, r7, 0x0, 0x0, 0x0)

4.668061127s ago: executing program 2 (id=7026):
r0 = io_uring_setup(0x218a, &(0x7f0000000000)={0x0, 0x3ffffffc, 0x800, 0x2, 0x221})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000200)='0', 0x1)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800"], 0x48}], 0x1, 0x40)
shutdown(r6, 0x2)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="02000000", 0x4)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r10, 0x69e, 0xffff}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={r10, 0x6d5, 0x10}, &(0x7f0000000300)=0xc)
sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080)
close_range(r0, 0xffffffffffffffff, 0x0)
io_setup(0x8, &(0x7f0000002740)=<r11=>0x0)
io_getevents(r11, 0x4, 0x13, &(0x7f0000000000), 0x0)

4.566443711s ago: executing program 5 (id=7027):
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x108}}], 0x1, 0xc040)

4.125983253s ago: executing program 5 (id=7028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0xffff, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x0)

3.86774243s ago: executing program 5 (id=7029):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d867", 0x8c}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b8, 0x29, 0x36, {0x5e, 0x34, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x370}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.988421521s ago: executing program 5 (id=7030):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x397, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000280)=0x6c, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138)
write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4)
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa000032a)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, 0x0, 0x24000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

2.89625502s ago: executing program 3 (id=7031):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @mcast1, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000004c0)=0x9, 0x4)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
sendmmsg$unix(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="f8076164ca7c88d8bf7d", 0xa}, {&(0x7f00000002c0)="ff16ec0263b64e01db79c16b7eb4d91e71f7d13c74f14f59b743ec6aef5d62b80b348586d58dd0546da196dea79c01db6fb9e4aed5f158e124b06143d088ed2b571b2cbd90a1bec8102866ceae1a9cde0efd73ee73c26b0fc0ccd7dbb923568bc37f5cec38eac03115f6e00c77db1f94940da4975c6335a20a2939a9acd2e8b66d8873ff196c32163b91257f923c2b4f7800a706c63b5baf87adf28eab6f3dad", 0xa0}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r3, r4, r3, r2, r4]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r4, 0xffffffffffffffff, r4, r0, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r6, r1]}}, @cred={{0x1c}}], 0x108, 0x40840}}], 0x1, 0x800)
writev(r6, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r7, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x2f)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x40000000)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r8, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

1.624317253s ago: executing program 1 (id=7032):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x1, 0x0, @irqchip={0x3, 0x8001}}]})

1.29384632s ago: executing program 2 (id=7033):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

1.251388458s ago: executing program 1 (id=7034):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r3 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000c40)={0xc0002039})
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000340))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r5, 0x8931, &(0x7f00000000c0)={'veth1\x00', @ifru_settings={0x64a, 0x8, @cisco=&(0x7f00000003c0)={0x9, 0x80000000}}})
connect$inet6(r0, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x14020001}, 0x20000000)
r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
keyctl$describe(0x6, r7, &(0x7f0000000140)=""/203, 0xcb)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0)

1.223680438s ago: executing program 4 (id=7035):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0)
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf70, 0x4e0, 0xe4b, 0xa20]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x18001)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = dup(r4)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000180)=0x1000, 0x4)
socket(0x29, 0x3, 0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)

1.132645854s ago: executing program 2 (id=7036):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r2 = eventfd(0x5ef)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r2})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x6f, 0x48014) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64)
read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) (async)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="94010000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b36e5f774f08ddb2b416476ee0185fe85bf5c8294a3e2c80d4168d024eb73be8ef47d444e2ddd70b671156c889407b5a694d6fe63c2b739831bbd976cdfbf8a248922f53585f7f1e3a381a6043575d1b5597302c464eeec2ca827f6208ba80d57550b8e7cd3febb12e119173b705ac296aa94e43af793b437337681ee1281cfe38745559a2cf64b4502c0cdb46e391cf10638a9441a12bf324b1394d"], 0x194}}, 0x20000010) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8201, 0x0, 0x8, 0xffffffffffff8000, 0xfffffe0000000001, 0x200, 0x4}, 0x0)
r8 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e20, @private=0xa010100}], 0x4c)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async, rerun: 32)
write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000f9ffffffffffffffffffffffff81003e00080500001f637c6cfd823d8b35a830f137a4a4a084835539839243bd579cf35214bb4f69a4b68dde4b9836e9c472a8fa899bde3b20a84107239d0372d4b26ccd414aff0b5d0a805d14a6f6129d2de278ce29777584f76a6d1a61469fc980cfa4b8d49232ff56dc146b19d0599dad8b00ac36eccd5dc99f31dc02f2c58ed72fdae4ec4d3fd9f48fdf07d49567c0ce516e106f44c843a0ba4cfb1369f63564f7143f577b"], 0x3a) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f0000000000)) (async)
r12 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r12, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402749377", @ANYRES16=0x0], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000005c0)=@string={0x2}}, {0x11, &(0x7f0000000080)=@string={0x11, 0x3, "afee948e5f715a798280ec6fb0c9ba"}}, {0x0, 0x0}, {0x57, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4001}}]})

930.930427ms ago: executing program 5 (id=7037):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
syz_open_dev$video(&(0x7f0000000100), 0x4000000a, 0x143a00)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x14, 0x25, 0x301, 0x70bd26, 0x25dfdbf9, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r3 = socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x4, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000980)={0x1, 0x0, 0x800008c9, 0x2, 0xfffffffd})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000005c0), 0x10)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x7, 0x0, 0x200, 0x12, 0x4400046, r10})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

472.8844ms ago: executing program 2 (id=7038):
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000"], 0x108}}], 0x1, 0xc040)

399.356471ms ago: executing program 2 (id=7039):
mkdir(&(0x7f00000022c0)='./file0\x00', 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={[&(0x7f0000000140)='\xd3\x05\xdb\"H\xd0\xb3e\xf5\x8f\x89\x1a\x92.\f\x88\\o\xa30\xf3\x00\x06x\xd0\xea3P\xc8\v\xc3\xd5mQ\xcf\xda\x9b^\xc1\x14\x9a\xed&}\xf4Y\xa8\x96u:\x008\xd6Y\x1b\xf3\xb7\'\x90|v\\\x8e4\x11\xf3\xd0\x1e\xe5\xdd\xf5Z\x1b\xe5\xd0mH\x9cSuLV\xcf\x8cG\xff\xe9U\xcb9\xef\x99\xa6\xcbQ1=\x93Q\xe0\xd4\xb1nJ\xcf\xff\x8fW\a,2\xd2\xcf9RA{\xd5\x9d\x99\x88g\xcd\x94\xc3O5}\x16D\x13\xd1g\xa5y\xcc\f,\xcbdd7t\xb2<\x9d\x97\xe6EW\xf9\x89\xaa\x8f\xc3\x9d\xe2Y\xc8']}, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x882c, &(0x7f0000000180)=ANY=[], 0x6, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
close_range(r1, 0xffffffffffffffff, 0x0)

234.939055ms ago: executing program 1 (id=7040):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x88030000, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)

604.649µs ago: executing program 5 (id=7041):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (fail_nth: 6)

0s ago: executing program 1 (id=7042):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x1e, 0x1, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xa5, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x7b}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x248, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x27}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xff, 0x0, 0xffffffff], 'veth1_vlan\x00', 'wlan0\x00', {0xff}, {}, 0x3a, 0x40, 0x1, 0x3}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x8, 0x70, 0xbd, 0x6, 0x1004, 0x1}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x976, 0x7, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x98e}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0x8, 0x6, 0x0, 0x0, "a2fa726d6a0330fa8709f5ab05b14b67fbc4f30f6bebf8bdaa38685ae01ad66b7f2acae528da378ef7907389763c7906a63b95aaeabaedaa62d697a5076a04d6"}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0xff000000, 0xffffffff], [0xff], 'ipvlan1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x0, 0x0, 0x5, 0x50}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x7, 0x4, 0x18, 0x3, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x34}, [0xffffff00, 0x0, 0xff, 0xffffffff], [0x0, 0xff000000, 0x0, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xff], 0x1d0, 0x260}}, @common=@mh={{0x28}, {"b366"}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x1}, {0x2, 0x4, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}]}, 0x30}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

9 while querying for an remote control event.
[ 1735.842315][T31814] CPU: 0 UID: 0 PID: 31814 Comm: syz.1.6735 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1735.842338][T31814] Tainted: [L]=SOFTLOCKUP
[ 1735.842343][T31814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1735.842350][T31814] Call Trace:
[ 1735.842356][T31814]  <TASK>
[ 1735.842361][T31814]  dump_stack_lvl+0xe8/0x150
[ 1735.842382][T31814]  should_fail_ex+0x414/0x560
[ 1735.842404][T31814]  should_failslab+0xa8/0x100
[ 1735.842421][T31814]  kmem_cache_alloc_noprof+0x88/0x710
[ 1735.842438][T31814]  ? __netlink_lookup+0xbd/0x8a0
[ 1735.842455][T31814]  ? skb_clone+0x212/0x3a0
[ 1735.842473][T31814]  skb_clone+0x212/0x3a0
[ 1735.842489][T31814]  __netlink_deliver_tap+0x404/0x850
[ 1735.842512][T31814]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1735.842528][T31814]  netlink_deliver_tap+0x19c/0x1b0
[ 1735.842543][T31814]  netlink_unicast+0x7fa/0x9e0
[ 1735.842562][T31814]  ? __pfx_netlink_unicast+0x10/0x10
[ 1735.842575][T31814]  ? __alloc_skb+0x198/0x3a0
[ 1735.842587][T31814]  ? netlink_sendmsg+0x642/0xb30
[ 1735.842601][T31814]  ? skb_put+0x11b/0x210
[ 1735.842615][T31814]  netlink_sendmsg+0x805/0xb30
[ 1735.842636][T31814]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1735.842653][T31814]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1735.842669][T31814]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1735.842681][T31814]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1735.842697][T31814]  __sock_sendmsg+0x21c/0x270
[ 1735.842716][T31814]  ____sys_sendmsg+0x505/0x820
[ 1735.842734][T31814]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1735.842753][T31814]  ? import_iovec+0x74/0xa0
[ 1735.842770][T31814]  ___sys_sendmsg+0x21f/0x2a0
[ 1735.842786][T31814]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1735.842819][T31814]  ? __fget_files+0x2a/0x420
[ 1735.842834][T31814]  ? __fget_files+0x3a0/0x420
[ 1735.842854][T31814]  __x64_sys_sendmsg+0x19b/0x260
[ 1735.842870][T31814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1735.842890][T31814]  ? __pfx_ksys_write+0x10/0x10
[ 1735.842908][T31814]  do_syscall_64+0xec/0xf80
[ 1735.842923][T31814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1735.842935][T31814]  ? trace_irq_disable+0x37/0x100
[ 1735.842950][T31814]  ? clear_bhb_loop+0x60/0xb0
[ 1735.842964][T31814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1735.842976][T31814] RIP: 0033:0x7fc51fb8f749
[ 1735.842989][T31814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1735.842999][T31814] RSP: 002b:00007fc520a7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1735.843014][T31814] RAX: ffffffffffffffda RBX: 00007fc51fde5fa0 RCX: 00007fc51fb8f749
[ 1735.843023][T31814] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1735.843031][T31814] RBP: 00007fc520a7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1735.843039][T31814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1735.843046][T31814] R13: 00007fc51fde6038 R14: 00007fc51fde5fa0 R15: 00007fc51ff0fa28
[ 1735.843065][T31814]  </TASK>
[ 1735.843093][T31814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6735'.
[ 1736.017320][ T5832] m920x_read = error: -19
[ 1736.187377][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1736.286122][T31819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6737'.
[ 1736.347308][ T5832] m920x_read = error: -19
[ 1736.351850][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1736.449555][ T7671] usb 5-1: new low-speed USB device number 105 using dummy_hcd
[ 1736.537605][ T5832] m920x_read = error: -19
[ 1736.542024][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1736.547159][T31823] FAULT_INJECTION: forcing a failure.
[ 1736.547159][T31823] name failslab, interval 1, probability 0, space 0, times 0
[ 1736.581374][T31823] CPU: 0 UID: 0 PID: 31823 Comm: syz.3.6739 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1736.581409][T31823] Tainted: [L]=SOFTLOCKUP
[ 1736.581417][T31823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1736.581430][T31823] Call Trace:
[ 1736.581439][T31823]  <TASK>
[ 1736.581449][T31823]  dump_stack_lvl+0xe8/0x150
[ 1736.581481][T31823]  should_fail_ex+0x414/0x560
[ 1736.581518][T31823]  should_failslab+0xa8/0x100
[ 1736.581544][T31823]  kmem_cache_alloc_noprof+0x88/0x710
[ 1736.581573][T31823]  ? apparmor_capable+0x137/0x1a0
[ 1736.581605][T31823]  ? skb_clone+0x212/0x3a0
[ 1736.581637][T31823]  skb_clone+0x212/0x3a0
[ 1736.581661][T31823]  ? nfnetlink_rcv+0x4ba/0x2590
[ 1736.581687][T31823]  nfnetlink_rcv+0x4ec/0x2590
[ 1736.581722][T31823]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1736.581743][T31823]  ? __dev_queue_xmit+0x289/0x31c0
[ 1736.581768][T31823]  ? __local_bh_enable_ip+0xd0/0x130
[ 1736.581788][T31823]  ? __dev_queue_xmit+0x289/0x31c0
[ 1736.581823][T31823]  ? __dev_queue_xmit+0x19cb/0x31c0
[ 1736.581848][T31823]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1736.581878][T31823]  ? __dev_queue_xmit+0x289/0x31c0
[ 1736.581910][T31823]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1736.581950][T31823]  ? ref_tracker_free+0x63a/0x7d0
[ 1736.581972][T31823]  ? __asan_memcpy+0x40/0x70
[ 1736.582002][T31823]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1736.582040][T31823]  ? skb_clone+0x246/0x3a0
[ 1736.582068][T31823]  ? __netlink_deliver_tap+0x807/0x850
[ 1736.582093][T31823]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1736.582137][T31823]  netlink_unicast+0x82f/0x9e0
[ 1736.582171][T31823]  ? __pfx_netlink_unicast+0x10/0x10
[ 1736.582193][T31823]  ? __alloc_skb+0x198/0x3a0
[ 1736.582215][T31823]  ? netlink_sendmsg+0x642/0xb30
[ 1736.582237][T31823]  ? skb_put+0x11b/0x210
[ 1736.582263][T31823]  netlink_sendmsg+0x805/0xb30
[ 1736.582299][T31823]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1736.582328][T31823]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1736.582361][T31823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1736.582380][T31823]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1736.582407][T31823]  __sock_sendmsg+0x21c/0x270
[ 1736.582441][T31823]  ____sys_sendmsg+0x505/0x820
[ 1736.582472][T31823]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1736.582505][T31823]  ? import_iovec+0x74/0xa0
[ 1736.582533][T31823]  ___sys_sendmsg+0x21f/0x2a0
[ 1736.582560][T31823]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1736.582622][T31823]  ? __fget_files+0x2a/0x420
[ 1736.582646][T31823]  ? __fget_files+0x3a0/0x420
[ 1736.582682][T31823]  __x64_sys_sendmsg+0x19b/0x260
[ 1736.582710][T31823]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1736.582744][T31823]  ? __pfx_ksys_write+0x10/0x10
[ 1736.582777][T31823]  do_syscall_64+0xec/0xf80
[ 1736.582798][T31823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1736.582827][T31823]  ? trace_irq_disable+0x37/0x100
[ 1736.582852][T31823]  ? clear_bhb_loop+0x60/0xb0
[ 1736.582876][T31823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1736.582896][T31823] RIP: 0033:0x7f6c62d8f749
[ 1736.582915][T31823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1736.582934][T31823] RSP: 002b:00007f6c63c96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1736.582957][T31823] RAX: ffffffffffffffda RBX: 00007f6c62fe5fa0 RCX: 00007f6c62d8f749
[ 1736.582973][T31823] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003
[ 1736.582987][T31823] RBP: 00007f6c63c96090 R08: 0000000000000000 R09: 0000000000000000
[ 1736.583000][T31823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1736.583012][T31823] R13: 00007f6c62fe6038 R14: 00007f6c62fe5fa0 R15: 00007f6c6310fa28
[ 1736.583046][T31823]  </TASK>
[ 1736.937227][ T5832] m920x_read = error: -19
[ 1736.941616][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1737.401261][ T5832] m920x_read = error: -19
[ 1737.405681][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1737.409489][ T7671] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 1737.447550][ T7671] usb 5-1: config 0 has no interface number 0
[ 1737.460959][ T7671] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1737.472064][ T7671] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1737.504375][ T7671] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1737.530324][ T7671] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1737.563175][ T7671] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1737.567596][ T5832] m920x_read = error: -19
[ 1737.596729][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1737.601191][ T7671] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1737.713506][ T7671] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1737.787341][ T7671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1737.847288][ T5832] m920x_read = error: -19
[ 1737.855199][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1737.875409][ T7671] usb 5-1: config 0 descriptor??
[ 1737.924058][T31817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1737.936010][T31817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1737.989319][ T7671] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1738.031391][  T794] m920x_read = error: -19
[ 1738.035846][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1738.057538][ T5832] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1738.193834][  T794] usb 5-1: USB disconnect, device number 105
[ 1738.218242][  T794] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 1738.232294][ T5832] usb 6-1: Using ep0 maxpacket: 32
[ 1738.241759][ T5832] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1738.256267][T31847] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1738.260056][ T5832] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1738.276275][ T5912] m920x_read = error: -19
[ 1738.284144][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1738.306603][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1738.339478][ T5832] usb 6-1: config 0 descriptor??
[ 1738.467281][  T794] m920x_read = error: -19
[ 1738.473249][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1738.694587][  T794] m920x_read = error: -19
[ 1738.703797][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1738.705613][T31836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1738.746541][T31836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1738.809937][T31836] binder: 31835:31836 ioctl 89f1 200000000400 returned -22
[ 1738.819499][T31836] binder: 31835:31836 ioctl c0306201 2000000000c0 returned -11
[ 1738.849099][T31836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1738.874188][T31836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1738.910137][  T794] m920x_read = error: -19
[ 1738.920550][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1739.107206][  T794] m920x_read = error: -19
[ 1739.116544][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1739.241353][ T5832] uclogic 0003:5543:0522.0091: unbalanced collection at end of report description
[ 1739.266563][ T5832] uclogic 0003:5543:0522.0091: parse failed
[ 1739.277776][ T5832] uclogic 0003:5543:0522.0091: probe with driver uclogic failed with error -22
[ 1739.287195][  T794] m920x_read = error: -19
[ 1739.363389][T31835] delete_channel: no stack
[ 1739.369936][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1739.548220][  T794] usb 6-1: USB disconnect, device number 10
[ 1739.597279][ T5832] m920x_read = error: -19
[ 1739.601679][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1739.777231][  T794] m920x_read = error: -19
[ 1739.784216][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1739.977206][  T794] m920x_read = error: -19
[ 1739.981621][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1740.270129][  T794] m920x_read = error: -19
[ 1740.324767][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1740.461403][T31879] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1740.509576][  T794] m920x_read = error: -19
[ 1740.513997][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1740.630858][T31885] FAULT_INJECTION: forcing a failure.
[ 1740.630858][T31885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1740.644395][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1740.717599][ T5832] m920x_read = error: -19
[ 1740.722018][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1740.917796][T31885] CPU: 0 UID: 0 PID: 31885 Comm: syz.3.6760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1740.917832][T31885] Tainted: [L]=SOFTLOCKUP
[ 1740.917839][T31885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1740.917851][T31885] Call Trace:
[ 1740.917860][T31885]  <TASK>
[ 1740.917870][T31885]  dump_stack_lvl+0xe8/0x150
[ 1740.917899][T31885]  should_fail_ex+0x414/0x560
[ 1740.917932][T31885]  _copy_from_iter+0x1cd/0x1630
[ 1740.917966][T31885]  ? __pfx__copy_from_iter+0x10/0x10
[ 1740.917988][T31885]  ? __build_skb_around+0x22d/0x3c0
[ 1740.918012][T31885]  ? __alloc_skb+0x198/0x3a0
[ 1740.918032][T31885]  ? netlink_sendmsg+0x642/0xb30
[ 1740.918055][T31885]  ? skb_put+0x11b/0x210
[ 1740.918081][T31885]  netlink_sendmsg+0x6b2/0xb30
[ 1740.918117][T31885]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1740.918147][T31885]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1740.918176][T31885]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1740.918195][T31885]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1740.918223][T31885]  __sock_sendmsg+0x21c/0x270
[ 1740.918256][T31885]  ____sys_sendmsg+0x505/0x820
[ 1740.918286][T31885]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1740.918326][T31885]  ? import_iovec+0x74/0xa0
[ 1740.918354][T31885]  ___sys_sendmsg+0x21f/0x2a0
[ 1740.918380][T31885]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1740.918441][T31885]  ? __fget_files+0x2a/0x420
[ 1740.918466][T31885]  ? __fget_files+0x3a0/0x420
[ 1740.918501][T31885]  __x64_sys_sendmsg+0x19b/0x260
[ 1740.918528][T31885]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1740.918563][T31885]  ? __pfx_ksys_write+0x10/0x10
[ 1740.918594][T31885]  do_syscall_64+0xec/0xf80
[ 1740.918615][T31885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1740.918635][T31885]  ? trace_irq_disable+0x37/0x100
[ 1740.918661][T31885]  ? clear_bhb_loop+0x60/0xb0
[ 1740.918686][T31885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1740.918706][T31885] RIP: 0033:0x7f6c62d8f749
[ 1740.918726][T31885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1740.918744][T31885] RSP: 002b:00007f6c63c96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1740.918766][T31885] RAX: ffffffffffffffda RBX: 00007f6c62fe5fa0 RCX: 00007f6c62d8f749
[ 1740.918793][T31885] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1740.918805][T31885] RBP: 00007f6c63c96090 R08: 0000000000000000 R09: 0000000000000000
[ 1740.918816][T31885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1740.918828][T31885] R13: 00007f6c62fe6038 R14: 00007f6c62fe5fa0 R15: 00007f6c6310fa28
[ 1740.918860][T31885]  </TASK>
[ 1741.506512][ T5832] m920x_read = error: -19
[ 1741.543568][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1741.733663][ T5832] m920x_read = error: -19
[ 1741.751576][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1741.940094][ T5832] m920x_read = error: -19
[ 1741.944517][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1742.133141][ T5832] m920x_read = error: -19
[ 1742.142748][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1742.386404][T31904] fuse: Bad value for 'fd'
[ 1742.393001][T31904] fuse: Bad value for 'fd'
[ 1742.398603][T31904] x_tables: duplicate underflow at hook 4
[ 1742.409818][ T5832] m920x_read = error: -19
[ 1742.429090][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1742.596146][T31907] fuse: Bad value for 'fd'
[ 1742.603910][T31907] fuse: Bad value for 'fd'
[ 1742.610688][T31907] x_tables: duplicate underflow at hook 4
[ 1742.628003][ T5832] m920x_read = error: -19
[ 1742.632518][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1742.805915][ T5832] m920x_read = error: -19
[ 1742.811442][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1742.987533][ T5832] m920x_read = error: -19
[ 1743.078535][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1743.213773][T31916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1743.247504][ T5832] m920x_read = error: -19
[ 1743.257222][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1743.266939][T31916] syzkaller0: entered promiscuous mode
[ 1743.287443][T31916] syzkaller0: entered allmulticast mode
[ 1743.459118][ T5832] m920x_read = error: -19
[ 1743.463494][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1743.500517][T31920] tipc: Resetting bearer <eth:syzkaller0>
[ 1743.582114][T31914] tipc: Resetting bearer <eth:syzkaller0>
[ 1743.688703][ T5912] m920x_read = error: -19
[ 1743.693106][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1743.720749][T31914] tipc: Disabling bearer <eth:syzkaller0>
[ 1743.887569][ T5912] m920x_read = error: -19
[ 1743.893412][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1744.066317][T31934] binder: BINDER_SET_CONTEXT_MGR already set
[ 1744.066353][T31934] binder: 31933:31934 ioctl 4018620d 200000000180 returned -16
[ 1744.071216][T31934] binder: 31933:31934 ioctl c0306201 200000000640 returned -22
[ 1744.071420][T31936] binder: 31933:31936 ioctl c0306201 200000000640 returned -22
[ 1744.087392][ T5912] m920x_read = error: -19
[ 1744.146986][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1744.308429][ T5832] m920x_read = error: -19
[ 1744.322314][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1744.437529][ T5912] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1744.487305][ T5832] m920x_read = error: -19
[ 1744.497157][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1744.617116][ T5912] usb 5-1: Using ep0 maxpacket: 8
[ 1744.630707][ T5912] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1744.665751][T31963] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1744.666535][T31962] gretap1: entered promiscuous mode
[ 1744.688655][ T5832] m920x_read = error: -19
[ 1744.698959][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1744.708603][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1744.730476][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1744.741336][ T5912] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1744.755011][ T5912] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1744.766978][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.887276][ T5832] m920x_read = error: -19
[ 1744.892643][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1744.980746][ T5912] usb 5-1: GET_CAPABILITIES returned 0
[ 1744.990592][ T5912] usbtmc 5-1:16.0: can't read capabilities
[ 1745.067421][T16826] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[ 1745.067776][ T5912] m920x_read = error: -19
[ 1745.100736][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1745.187928][ T5912] usb 5-1: USB disconnect, device number 106
[ 1745.249188][T16826] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1745.258027][T16826] usb 4-1: not running at top speed; connect to a high speed hub
[ 1745.269317][T16826] usb 4-1: config 17 has an invalid interface number: 8 but max is 1
[ 1745.278526][T16826] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1745.287660][ T7671] usb 3-1: new low-speed USB device number 80 using dummy_hcd
[ 1745.291633][ T5832] m920x_read = error: -19
[ 1745.299163][T16826] usb 4-1: config 17 has no interface number 0
[ 1745.308119][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1745.316241][T16826] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1745.330763][T16826] usb 4-1: config 17 interface 8 has no altsetting 0
[ 1745.358478][T16826] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1745.374773][T16826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1745.383057][T16826] usb 4-1: Product: syz
[ 1745.387342][T16826] usb 4-1: Manufacturer: syz
[ 1745.402123][T16826] usb 4-1: SerialNumber: syz
[ 1745.458036][ T7671] usb 3-1: config 0 has no interfaces?
[ 1745.467884][ T7671] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1745.477432][ T7671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1745.507247][ T5912] m920x_read = error: -19
[ 1745.511970][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1745.522510][ T7671] usb 3-1: config 0 descriptor??
[ 1745.687482][ T5912] m920x_read = error: -19
[ 1745.716960][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1745.887297][ T5912] m920x_read = error: -19
[ 1745.893156][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1746.078185][ T5912] m920x_read = error: -19
[ 1746.082829][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1746.124097][T31988] netlink: 201916 bytes leftover after parsing attributes in process `syz.5.6793'.
[ 1746.149500][ T7671] usb 3-1: USB disconnect, device number 80
[ 1746.274910][ T5912] m920x_read = error: -19
[ 1746.281507][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1746.428213][ T5832] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1746.447586][ T5912] m920x_read = error: -19
[ 1746.452236][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1746.617237][ T5912] m920x_read = error: -19
[ 1746.622220][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1746.675586][ T5832] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1746.687777][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.696408][ T5832] usb 2-1: Product: syz
[ 1746.700777][ T5832] usb 2-1: Manufacturer: syz
[ 1746.705998][ T5832] usb 2-1: SerialNumber: syz
[ 1746.713250][ T5832] usb 2-1: config 0 descriptor??
[ 1746.807187][ T5832] m920x_read = error: -19
[ 1746.812019][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1746.997212][ T5832] m920x_read = error: -19
[ 1747.002697][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1747.267274][ T5832] m920x_read = error: -19
[ 1747.280984][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1747.467597][ T5832] m920x_read = error: -19
[ 1747.472107][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1747.647301][ T5832] m920x_read = error: -19
[ 1747.651797][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1747.907229][ T5832] m920x_read = error: -19
[ 1747.913345][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1747.998882][T32009] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6798'.
[ 1748.097499][ T5832] m920x_read = error: -19
[ 1748.104820][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1748.424320][ T5832] usb 2-1: USB disconnect, device number 92
[ 1748.452070][ T5912] m920x_read = error: -19
[ 1748.458044][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1748.528886][T16826] usb 4-1: selecting invalid altsetting 0
[ 1748.538858][T16826] usb 4-1: 8:6 : no UAC_FORMAT_TYPE desc
[ 1748.570350][T16826] usb 4-1: selecting invalid altsetting 0
[ 1748.617807][ T5912] m920x_read = error: -19
[ 1748.631592][T32012] SET target dimension over the limit!
[ 1748.641375][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1748.674011][T16826] usb 4-1: USB disconnect, device number 90
[ 1748.827918][ T5832] m920x_read = error: -19
[ 1748.842084][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1749.027301][ T5832] m920x_read = error: -19
[ 1749.187179][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1749.267142][T16826] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1749.375071][T32025] loop6: detected capacity change from 0 to 7
[ 1749.375543][ T5832] m920x_read = error: -19
[ 1749.393164][T32025] Dev loop6: unable to read RDB block 7
[ 1749.395070][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1749.418202][T32025]  loop6: AHDI p1 p2 p3
[ 1749.427502][T32025] loop6: partition table partially beyond EOD, truncated
[ 1749.470993][T32025] loop6: p3 start 335544320 is beyond EOD, truncated
[ 1749.494799][T16826] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1749.512197][T16826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1749.533951][T16826] usb 4-1: Product: syz
[ 1749.543941][T16826] usb 4-1: Manufacturer: syz
[ 1749.564274][T16826] usb 4-1: SerialNumber: syz
[ 1749.637858][ T5832] m920x_read = error: -19
[ 1749.642294][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1749.817298][ T5832] m920x_read = error: -19
[ 1749.821931][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1750.008077][ T5912] m920x_read = error: -19
[ 1750.012519][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1750.100160][T16826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1750.122104][T16826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1750.177960][ T5912] m920x_read = error: -19
[ 1750.184060][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1750.348766][ T5912] m920x_read = error: -19
[ 1750.367398][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1750.427150][ T5898] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1750.542578][ T5832] m920x_read = error: -19
[ 1750.546987][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1750.626381][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1750.661938][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1750.672649][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1750.682242][ T5898] usb 3-1: Product: syz
[ 1750.686499][ T5898] usb 3-1: Manufacturer: syz
[ 1750.691254][ T5898] usb 3-1: SerialNumber: syz
[ 1750.698388][ T5898] usb 3-1: config 0 descriptor??
[ 1750.737188][ T5832] m920x_read = error: -19
[ 1750.741703][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1750.807728][T32051] syzkaller1: entered promiscuous mode
[ 1750.822068][T32051] syzkaller1: entered allmulticast mode
[ 1750.907189][ T5832] m920x_read = error: -19
[ 1750.911683][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1751.097210][ T5832] m920x_read = error: -19
[ 1751.101639][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1751.277344][ T5832] m920x_read = error: -19
[ 1751.284151][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1751.457291][ T5832] m920x_read = error: -19
[ 1751.468499][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1751.647226][ T5832] m920x_read = error: -19
[ 1751.651676][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1751.817306][ T5912] m920x_read = error: -19
[ 1751.821808][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1751.999871][T32061] syz.5.6812 (32061): drop_caches: 2
[ 1752.006883][ T5912] m920x_read = error: -19
[ 1752.030426][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1752.038645][ T5832] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1752.178049][ T7671] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1752.202733][ T5832] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1752.212905][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1752.221658][ T5912] m920x_read = error: -19
[ 1752.226111][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1752.235680][ T5832] usb 5-1: Product: syz
[ 1752.252133][ T5832] usb 5-1: Manufacturer: syz
[ 1752.262120][ T5832] usb 5-1: SerialNumber: syz
[ 1752.278218][ T5832] usb 5-1: config 0 descriptor??
[ 1752.337223][ T7671] usb 2-1: Using ep0 maxpacket: 16
[ 1752.345587][ T7671] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config
[ 1752.356726][ T7671] usb 2-1: config 0 has no interfaces?
[ 1752.365567][ T7671] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1752.383708][ T7671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1752.395622][ T7671] usb 2-1: Product: syz
[ 1752.400490][ T5832] m920x_read = error: -19
[ 1752.404994][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1752.438510][ T7671] usb 2-1: Manufacturer: syz
[ 1752.465287][ T7671] usb 2-1: SerialNumber: syz
[ 1752.653793][T32018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6802'.
[ 1752.685511][ T5832] m920x_read = error: -19
[ 1752.696351][ T7671] usb 2-1: config 0 descriptor??
[ 1752.703615][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1752.718906][T32018] bond0: (slave bond_slave_0): Releasing backup interface
[ 1752.745260][T32018] bond0: (slave bond_slave_1): Releasing backup interface
[ 1752.793275][T32018] team0: Port device team_slave_0 removed
[ 1752.818362][T32018] team0: Port device team_slave_1 removed
[ 1752.826070][T32018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1752.835379][T32018] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1752.845466][T32018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1752.855305][T32018] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1752.873653][T32018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1752.900519][ T5832] m920x_read = error: -19
[ 1752.912931][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1752.930432][T16826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO
[ 1752.943327][T16826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[ 1752.961430][T16826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1753.000470][ T7671] usb 2-1: USB disconnect, device number 93
[ 1753.044453][T16826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1753.061860][T16826] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 1753.118233][T24862] m920x_read = error: -19
[ 1753.122362][T16826] usb 4-1: USB disconnect, device number 91
[ 1753.123767][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1753.297236][T24862] m920x_read = error: -19
[ 1753.301645][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1753.353269][T24862] usb 3-1: USB disconnect, device number 81
[ 1753.403007][T32065] netlink: 'syz.5.6814': attribute type 21 has an invalid length.
[ 1753.426209][T32065] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1753.487367][ T5832] m920x_read = error: -19
[ 1753.494560][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1753.659539][T24862] m920x_read = error: -19
[ 1753.676829][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1753.907964][T24862] usb 5-1: USB disconnect, device number 107
[ 1754.059143][ T5832] m920x_read = error: -19
[ 1754.063553][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1754.277769][ T5832] m920x_read = error: -19
[ 1754.286512][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1754.457413][T32094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6824'.
[ 1754.461391][T24862] m920x_read = error: -19
[ 1754.499982][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1754.661883][T32100] tap0: tun_chr_ioctl cmd 1074025675
[ 1754.667465][T32100] tap0: persist disabled
[ 1754.697179][T24862] m920x_read = error: -19
[ 1754.701689][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1754.745588][T32103] binder: BINDER_SET_CONTEXT_MGR already set
[ 1754.751790][T32103] binder: 32097:32103 ioctl 4018620d 200000000040 returned -16
[ 1754.932408][T24862] m920x_read = error: -19
[ 1754.936856][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1755.004856][T32103] syz.5.6826 (32103): drop_caches: 2
[ 1755.130671][T32107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6827'.
[ 1755.162521][T24862] m920x_read = error: -19
[ 1755.166986][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1755.356592][T32111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1755.377209][T24862] m920x_read = error: -19
[ 1755.381952][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1755.559170][T24862] m920x_read = error: -19
[ 1755.563564][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1755.767132][T24862] m920x_read = error: -19
[ 1755.773834][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1755.970876][ T5832] m920x_read = error: -19
[ 1755.985243][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1756.177245][ T5832] m920x_read = error: -19
[ 1756.194209][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1756.397246][T24862] m920x_read = error: -19
[ 1756.408239][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1756.657171][  T794] m920x_read = error: -19
[ 1756.661566][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1756.827171][ T5832] m920x_read = error: -19
[ 1756.831845][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1757.007154][ T5832] m920x_read = error: -19
[ 1757.011663][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1757.190579][  T794] m920x_read = error: -19
[ 1757.201911][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1757.237915][T16826] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1757.387237][  T794] m920x_read = error: -19
[ 1757.399740][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1757.422133][T16826] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1757.457068][T16826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.477934][T16826] usb 6-1: Product: syz
[ 1757.489184][T16826] usb 6-1: Manufacturer: syz
[ 1757.510151][T16826] usb 6-1: SerialNumber: syz
[ 1757.551388][T16826] usb 6-1: config 0 descriptor??
[ 1757.587798][  T794] m920x_read = error: -19
[ 1757.595291][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1757.763764][T16826] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1757.777254][  T794] m920x_read = error: -19
[ 1757.790927][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1757.967205][T24862] m920x_read = error: -19
[ 1757.971664][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1758.047208][  T794] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1758.122330][T32152] AppArmor: change_hat: Invalid input '0'
[ 1758.147169][T24862] m920x_read = error: -19
[ 1758.169028][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1758.222513][  T794] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1758.237193][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1758.246378][  T794] usb 4-1: Product: syz
[ 1758.268019][  T794] usb 4-1: Manufacturer: syz
[ 1758.272673][  T794] usb 4-1: SerialNumber: syz
[ 1758.280140][  T794] usb 4-1: config 0 descriptor??
[ 1758.355233][  T794] m920x_read = error: -19
[ 1758.367665][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1758.538400][  T794] m920x_read = error: -19
[ 1758.542802][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1758.727183][  T794] m920x_read = error: -19
[ 1758.731663][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1758.897217][  T794] m920x_read = error: -19
[ 1758.901686][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1759.067264][  T794] m920x_read = error: -19
[ 1759.087625][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1759.251393][  T794] m920x_read = error: -19
[ 1759.255816][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1759.427213][T24862] m920x_read = error: -19
[ 1759.431721][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1759.607244][T24862] m920x_read = error: -19
[ 1759.611737][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1759.770695][ T7671] usb 4-1: USB disconnect, device number 92
[ 1759.797229][T24862] m920x_read = error: -19
[ 1759.831008][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1760.007184][T24862] m920x_read = error: -19
[ 1760.011594][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1760.187313][T24862] m920x_read = error: -19
[ 1760.408120][T16826] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1760.428941][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1760.438536][T16826] usb 6-1: USB disconnect, device number 11
[ 1760.705170][T24862] m920x_read = error: -19
[ 1760.727300][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1760.937247][T24862] m920x_read = error: -19
[ 1760.945134][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1761.117706][  T794] m920x_read = error: -19
[ 1761.130016][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1761.317757][  T794] m920x_read = error: -19
[ 1761.328354][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1761.498001][  T794] m920x_read = error: -19
[ 1761.503833][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1761.667191][  T794] m920x_read = error: -19
[ 1761.671809][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1761.687197][ T7671] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1761.857249][ T7671] usb 3-1: Using ep0 maxpacket: 32
[ 1761.857310][  T794] m920x_read = error: -19
[ 1761.897565][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1761.902199][ T7671] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1761.939684][ T7671] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1761.950494][ T7671] usb 3-1: can't read configurations, error -71
[ 1762.087197][  T794] m920x_read = error: -19
[ 1762.091633][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1762.290108][  T794] m920x_read = error: -19
[ 1762.297562][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1762.326787][T32194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6850'.
[ 1762.477399][  T794] m920x_read = error: -19
[ 1762.482124][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1762.657271][  T794] m920x_read = error: -19
[ 1762.661907][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1762.671426][T32214] syzkaller0: entered promiscuous mode
[ 1762.677190][T16826] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1762.683674][T32214] syzkaller0: entered allmulticast mode
[ 1762.826675][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6857'.
[ 1762.850955][  T794] m920x_read = error: -19
[ 1762.872441][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1762.944547][T16826] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1762.959143][T16826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1762.984052][T16826] usb 2-1: Product: syz
[ 1763.007071][T16826] usb 2-1: Manufacturer: syz
[ 1763.027076][T16826] usb 2-1: SerialNumber: syz
[ 1763.043412][T16826] usb 2-1: config 0 descriptor??
[ 1763.078061][  T794] m920x_read = error: -19
[ 1763.087188][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1763.200951][T16372] Bluetooth: hci5: command 0x0406 tx timeout
[ 1763.257772][  T794] m920x_read = error: -19
[ 1763.277884][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1763.467494][  T794] m920x_read = error: -19
[ 1763.472070][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1763.637212][  T794] m920x_read = error: -19
[ 1763.641756][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1763.687228][T16826] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1763.817145][  T794] m920x_read = error: -19
[ 1763.824462][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1763.857561][T16826] usb 5-1: Using ep0 maxpacket: 32
[ 1763.871365][T16826] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1763.886259][T32231] netlink: 'syz.2.6861': attribute type 1 has an invalid length.
[ 1763.899516][T32231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'.
[ 1763.909771][T32231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6861'.
[ 1763.924642][T16826] usb 5-1: config 0 has no interface number 0
[ 1763.946040][T16826] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1763.965758][T16826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.982160][T16826] usb 5-1: Product: syz
[ 1764.000445][  T794] m920x_read = error: -19
[ 1764.002709][T16826] usb 5-1: Manufacturer: syz
[ 1764.005760][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1764.018277][T16826] usb 5-1: SerialNumber: syz
[ 1764.041799][T16826] usb 5-1: config 0 descriptor??
[ 1764.055007][T32235] pim6reg: entered allmulticast mode
[ 1764.058543][T16826] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1764.069643][T16826] usb 5-1: selecting invalid altsetting 1
[ 1764.075446][T16826] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1764.096188][T16826] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1764.136922][T16826] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1764.148586][T16826] usb 5-1: media controller created
[ 1764.169430][T16826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1764.177224][T24862] m920x_read = error: -19
[ 1764.182235][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1764.256695][T16826] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1764.256846][T16826] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1764.257137][  T794] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1764.257552][T16826] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1764.328162][T16826] usb 5-1: USB disconnect, device number 108
[ 1764.357591][T24862] m920x_read = error: -19
[ 1764.363251][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1764.402279][T32242] FAULT_INJECTION: forcing a failure.
[ 1764.402279][T32242] name failslab, interval 1, probability 0, space 0, times 0
[ 1764.415529][T32242] CPU: 0 UID: 0 PID: 32242 Comm: syz.5.6866 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1764.415563][T32242] Tainted: [L]=SOFTLOCKUP
[ 1764.415571][T32242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1764.415583][T32242] Call Trace:
[ 1764.415591][T32242]  <TASK>
[ 1764.415599][T32242]  dump_stack_lvl+0xe8/0x150
[ 1764.415665][T32242]  should_fail_ex+0x414/0x560
[ 1764.415701][T32242]  should_failslab+0xa8/0x100
[ 1764.415727][T32242]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1764.415755][T32242]  ? __alloc_skb+0x198/0x3a0
[ 1764.415776][T32242]  ? __alloc_skb+0x1dc/0x3a0
[ 1764.415793][T32242]  ? __local_bh_enable_ip+0xd0/0x130
[ 1764.415814][T32242]  ? __alloc_skb+0x198/0x3a0
[ 1764.415835][T32242]  __alloc_skb+0x1dc/0x3a0
[ 1764.415860][T32242]  netlink_ack+0x146/0xa50
[ 1764.415889][T32242]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1764.415909][T32242]  ? nfnetlink_rcv+0xff5/0x2590
[ 1764.415929][T32242]  ? skb_pull+0xc1/0x1d0
[ 1764.415958][T32242]  nfnetlink_rcv+0x2309/0x2590
[ 1764.416014][T32242]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1764.416053][T32242]  ? ref_tracker_free+0x63a/0x7d0
[ 1764.416101][T32242]  ? __netlink_deliver_tap+0x807/0x850
[ 1764.416126][T32242]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1764.416167][T32242]  netlink_unicast+0x82f/0x9e0
[ 1764.416200][T32242]  ? __pfx_netlink_unicast+0x10/0x10
[ 1764.416223][T32242]  ? __alloc_skb+0x198/0x3a0
[ 1764.416244][T32242]  ? netlink_sendmsg+0x642/0xb30
[ 1764.416267][T32242]  ? skb_put+0x11b/0x210
[ 1764.416291][T32242]  netlink_sendmsg+0x805/0xb30
[ 1764.416325][T32242]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1764.416353][T32242]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1764.416382][T32242]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1764.416401][T32242]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1764.416429][T32242]  __sock_sendmsg+0x21c/0x270
[ 1764.416462][T32242]  ____sys_sendmsg+0x505/0x820
[ 1764.416491][T32242]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1764.416523][T32242]  ? import_iovec+0x74/0xa0
[ 1764.416551][T32242]  ___sys_sendmsg+0x21f/0x2a0
[ 1764.416577][T32242]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1764.416645][T32242]  ? __fget_files+0x2a/0x420
[ 1764.416670][T32242]  ? __fget_files+0x3a0/0x420
[ 1764.416706][T32242]  __x64_sys_sendmsg+0x19b/0x260
[ 1764.416733][T32242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1764.416766][T32242]  ? __pfx_ksys_write+0x10/0x10
[ 1764.416799][T32242]  do_syscall_64+0xec/0xf80
[ 1764.416821][T32242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1764.416841][T32242]  ? trace_irq_disable+0x37/0x100
[ 1764.416867][T32242]  ? clear_bhb_loop+0x60/0xb0
[ 1764.416890][T32242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1764.416909][T32242] RIP: 0033:0x7f72da38f749
[ 1764.416930][T32242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1764.416948][T32242] RSP: 002b:00007f72db2d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1764.416970][T32242] RAX: ffffffffffffffda RBX: 00007f72da5e5fa0 RCX: 00007f72da38f749
[ 1764.416986][T32242] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1764.417005][T32242] RBP: 00007f72db2d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1764.417017][T32242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1764.417029][T32242] R13: 00007f72da5e6038 R14: 00007f72da5e5fa0 R15: 00007f72da70fa28
[ 1764.417060][T32242]  </TASK>
[ 1764.527206][T24862] m920x_read = error: -19
[ 1764.750567][  T794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1764.766280][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1764.774468][  T794] usb 3-1: Product: syz
[ 1764.778738][  T794] usb 3-1: Manufacturer: syz
[ 1764.783372][  T794] usb 3-1: SerialNumber: syz
[ 1764.796574][  T794] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1764.848750][ T5832] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1764.886193][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1765.080077][T24862] usb 2-1: USB disconnect, device number 94
[ 1765.137988][  T794] m920x_read = error: -19
[ 1765.142469][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1765.250509][T32251] FAULT_INJECTION: forcing a failure.
[ 1765.250509][T32251] name failslab, interval 1, probability 0, space 0, times 0
[ 1765.264333][T32251] CPU: 1 UID: 0 PID: 32251 Comm: syz.4.6870 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1765.264367][T32251] Tainted: [L]=SOFTLOCKUP
[ 1765.264375][T32251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1765.264387][T32251] Call Trace:
[ 1765.264395][T32251]  <TASK>
[ 1765.264405][T32251]  dump_stack_lvl+0xe8/0x150
[ 1765.264443][T32251]  should_fail_ex+0x414/0x560
[ 1765.264481][T32251]  should_failslab+0xa8/0x100
[ 1765.264508][T32251]  kmem_cache_alloc_noprof+0x88/0x710
[ 1765.264540][T32251]  ? skb_clone+0x212/0x3a0
[ 1765.264573][T32251]  skb_clone+0x212/0x3a0
[ 1765.264602][T32251]  __netlink_deliver_tap+0x404/0x850
[ 1765.264643][T32251]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1765.264679][T32251]  netlink_deliver_tap+0x19c/0x1b0
[ 1765.264706][T32251]  netlink_sendskb+0x68/0x140
[ 1765.264732][T32251]  netlink_unicast+0x397/0x9e0
[ 1765.264754][T32251]  ? __asan_memcpy+0x40/0x70
[ 1765.264793][T32251]  ? __pfx_netlink_unicast+0x10/0x10
[ 1765.264829][T32251]  nfnetlink_rcv+0x2309/0x2590
[ 1765.264891][T32251]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1765.264931][T32251]  ? ref_tracker_free+0x63a/0x7d0
[ 1765.264984][T32251]  ? __netlink_deliver_tap+0x807/0x850
[ 1765.265010][T32251]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1765.265052][T32251]  netlink_unicast+0x82f/0x9e0
[ 1765.265087][T32251]  ? __pfx_netlink_unicast+0x10/0x10
[ 1765.265109][T32251]  ? __alloc_skb+0x198/0x3a0
[ 1765.265130][T32251]  ? netlink_sendmsg+0x642/0xb30
[ 1765.265154][T32251]  ? skb_put+0x11b/0x210
[ 1765.265180][T32251]  netlink_sendmsg+0x805/0xb30
[ 1765.265217][T32251]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1765.265247][T32251]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1765.265276][T32251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1765.265296][T32251]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1765.265323][T32251]  __sock_sendmsg+0x21c/0x270
[ 1765.265357][T32251]  ____sys_sendmsg+0x505/0x820
[ 1765.265388][T32251]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1765.265423][T32251]  ? import_iovec+0x74/0xa0
[ 1765.265452][T32251]  ___sys_sendmsg+0x21f/0x2a0
[ 1765.265481][T32251]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1765.265545][T32251]  ? __fget_files+0x2a/0x420
[ 1765.265571][T32251]  ? __fget_files+0x3a0/0x420
[ 1765.265608][T32251]  __x64_sys_sendmsg+0x19b/0x260
[ 1765.265636][T32251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1765.265679][T32251]  ? __pfx_ksys_write+0x10/0x10
[ 1765.265699][T32251]  ? handle_softirqs+0x692/0x7c0
[ 1765.265731][T32251]  do_syscall_64+0xec/0xf80
[ 1765.265753][T32251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.265774][T32251]  ? clear_bhb_loop+0x60/0xb0
[ 1765.265800][T32251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.265820][T32251] RIP: 0033:0x7fa986b8f749
[ 1765.265840][T32251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1765.265859][T32251] RSP: 002b:00007fa987aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1765.265883][T32251] RAX: ffffffffffffffda RBX: 00007fa986de5fa0 RCX: 00007fa986b8f749
[ 1765.265899][T32251] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1765.265912][T32251] RBP: 00007fa987aa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1765.265924][T32251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1765.265937][T32251] R13: 00007fa986de6038 R14: 00007fa986de5fa0 R15: 00007fa986f0fa28
[ 1765.265972][T32251]  </TASK>
[ 1765.278787][T16826] usb 3-1: USB disconnect, device number 84
[ 1765.327809][T24862] m920x_read = error: -19
[ 1765.699198][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1765.716070][T32255] FAULT_INJECTION: forcing a failure.
[ 1765.716070][T32255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1765.730098][T32255] CPU: 1 UID: 0 PID: 32255 Comm: syz.4.6871 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1765.730131][T32255] Tainted: [L]=SOFTLOCKUP
[ 1765.730139][T32255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1765.730152][T32255] Call Trace:
[ 1765.730160][T32255]  <TASK>
[ 1765.730170][T32255]  dump_stack_lvl+0xe8/0x150
[ 1765.730202][T32255]  should_fail_ex+0x414/0x560
[ 1765.730239][T32255]  _copy_to_user+0x31/0xb0
[ 1765.730267][T32255]  video_usercopy+0xd93/0x13f0
[ 1765.730299][T32255]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1765.730319][T32255]  ? __pfx_video_usercopy+0x10/0x10
[ 1765.730350][T32255]  ? __fget_files+0x2a/0x420
[ 1765.730378][T32255]  ? __fget_files+0x2a/0x420
[ 1765.730401][T32255]  ? __fget_files+0x3a0/0x420
[ 1765.730430][T32255]  v4l2_ioctl+0x18d/0x1e0
[ 1765.730462][T32255]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1765.730492][T32255]  __se_sys_ioctl+0xfc/0x170
[ 1765.730525][T32255]  do_syscall_64+0xec/0xf80
[ 1765.730547][T32255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.730566][T32255]  ? trace_irq_disable+0x37/0x100
[ 1765.730592][T32255]  ? clear_bhb_loop+0x60/0xb0
[ 1765.730616][T32255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.730646][T32255] RIP: 0033:0x7fa986b8f749
[ 1765.730666][T32255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1765.730684][T32255] RSP: 002b:00007fa987aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1765.730706][T32255] RAX: ffffffffffffffda RBX: 00007fa986de5fa0 RCX: 00007fa986b8f749
[ 1765.730721][T32255] RDX: 00002000000001c0 RSI: 00000000c0845658 RDI: 0000000000000003
[ 1765.730734][T32255] RBP: 00007fa987aa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1765.730747][T32255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1765.730760][T32255] R13: 00007fa986de6038 R14: 00007fa986de5fa0 R15: 00007fa986f0fa28
[ 1765.730793][T32255]  </TASK>
[ 1765.928746][  T794] m920x_read = error: -19
[ 1765.933138][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1766.026171][ T5832] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1766.033327][ T5832] ath9k_htc: Failed to initialize the device
[ 1766.042107][T16826] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1766.097200][T24862] m920x_read = error: -19
[ 1766.101622][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1766.267619][T24862] m920x_read = error: -19
[ 1766.298971][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1766.371844][T32267] binder_alloc: 32266: binder_alloc_buf, no vma
[ 1766.457155][T24862] m920x_read = error: -19
[ 1766.478287][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1766.637522][T24862] m920x_read = error: -19
[ 1766.642145][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1766.827501][T24862] m920x_read = error: -19
[ 1766.831936][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1766.907569][ T5898] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1767.012758][T24862] m920x_read = error: -19
[ 1767.019696][   T30] kauditd_printk_skb: 48 callbacks suppressed
[ 1767.019715][   T30] audit: type=1326 audit(1767903207.075:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.053842][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1767.066197][   T30] audit: type=1326 audit(1767903207.075:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.088922][   T30] audit: type=1326 audit(1767903207.075:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.101540][ T5898] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1767.125589][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1767.133972][   T30] audit: type=1326 audit(1767903207.075:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.134058][ T5898] usb 4-1: Product: syz
[ 1767.170415][ T5898] usb 4-1: Manufacturer: syz
[ 1767.175272][ T5898] usb 4-1: SerialNumber: syz
[ 1767.185429][   T30] audit: type=1326 audit(1767903207.075:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.227323][T32294] binder: BINDER_SET_CONTEXT_MGR already set
[ 1767.235851][T32294] binder: 32289:32294 ioctl 4018620d 200000000040 returned -16
[ 1767.264007][T32294] syz.5.6885 (32294): drop_caches: 2
[ 1767.271751][ T5898] usb 4-1: config 0 descriptor??
[ 1767.301824][  T794] m920x_read = error: -19
[ 1767.306238][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1767.314758][   T30] audit: type=1326 audit(1767903207.075:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.357146][T24862] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1767.365196][   T30] audit: type=1326 audit(1767903207.075:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.421373][   T30] audit: type=1326 audit(1767903207.075:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.467203][ T5832] m920x_read = error: -19
[ 1767.471848][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1767.491680][   T30] audit: type=1326 audit(1767903207.075:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1767.562077][T24862] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1767.587702][T24862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1767.623112][T24862] usb 2-1: config 0 descriptor??
[ 1767.647168][ T5832] m920x_read = error: -19
[ 1767.700905][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1767.704263][ T5898] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[ 1767.723092][ T5898] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1767.731679][ T5898] usb 4-1: Please update to version 0.2 or newer
[ 1767.767107][T24862] cp210x 2-1:0.0: cp210x converter detected
[ 1767.775570][   T30] audit: type=1326 audit(1767903207.075:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32288 comm="syz.1.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51fb8f749 code=0x7ffc0000
[ 1768.016088][ T5912] m920x_read = error: -19
[ 1768.020600][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1768.172141][ T5898] usb 4-1: USB disconnect, device number 93
[ 1768.217557][  T794] m920x_read = error: -19
[ 1768.222023][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1768.397487][  T794] m920x_read = error: -19
[ 1768.403326][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1768.520460][T24862] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121
[ 1768.528587][T24862] cp210x 2-1:0.0: GPIO initialisation failed: -121
[ 1768.562171][T24862] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1768.597286][  T794] m920x_read = error: -19
[ 1768.601668][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1768.738723][  T794] usb 2-1: USB disconnect, device number 95
[ 1768.756945][  T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1768.773958][  T794] cp210x 2-1:0.0: device disconnected
[ 1768.807295][ T5912] m920x_read = error: -19
[ 1768.811750][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1769.019874][T16826] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1769.040354][  T794] m920x_read = error: -19
[ 1769.040387][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1769.203295][ T5912] m920x_read = error: -19
[ 1769.218084][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1769.230866][T16826] usb 3-1: device descriptor read/64, error -71
[ 1769.407289][ T5912] m920x_read = error: -19
[ 1769.411724][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1769.477785][T16826] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1769.618907][ T5912] m920x_read = error: -19
[ 1769.662415][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1769.727257][ T5898] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1769.744299][T16826] usb 3-1: device descriptor read/64, error -71
[ 1769.887438][ T5912] m920x_read = error: -19
[ 1769.897558][T16826] usb usb3-port1: attempt power cycle
[ 1769.905904][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1770.017939][ T5898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1770.057153][ T5898] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1770.077589][ T5912] m920x_read = error: -19
[ 1770.087415][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1770.095508][ T5898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1770.135982][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1770.161353][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1770.195399][ T5898] usb 2-1: invalid MIDI out EP 0
[ 1770.257177][T16826] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1770.297262][  T794] m920x_read = error: -19
[ 1770.297284][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1770.307972][T16826] usb 3-1: device descriptor read/8, error -71
[ 1770.412135][ T5898] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1770.422600][ T5898] usb 2-1: USB disconnect, device number 96
[ 1770.457247][  T794] m920x_read = error: -19
[ 1770.457281][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1770.522267][T32333] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1770.558147][T16826] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1770.573622][T32323] TCP: TCP_TX_DELAY enabled
[ 1770.607348][T16826] usb 3-1: device descriptor read/8, error -71
[ 1770.617331][ T5912] m920x_read = error: -19
[ 1770.621739][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1770.721369][T16826] usb usb3-port1: unable to enumerate USB device
[ 1770.787340][ T5912] m920x_read = error: -19
[ 1770.791822][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1771.050196][ T5912] m920x_read = error: -19
[ 1771.050232][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1771.275216][ T5832] m920x_read = error: -19
[ 1771.275252][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1771.427189][ T5832] m920x_read = error: -19
[ 1771.431602][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1771.819556][ T5832] m920x_read = error: -19
[ 1771.827374][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1772.000308][ T5832] m920x_read = error: -19
[ 1772.025826][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1772.152975][T32363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'.
[ 1772.217219][ T5832] m920x_read = error: -19
[ 1772.221714][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1772.251312][T32357] nvme_fabrics: missing parameter 'transport=%s'
[ 1772.261335][T32357] nvme_fabrics: missing parameter 'nqn=%s'
[ 1772.348587][ T6419] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1772.483069][ T5832] m920x_read = error: -19
[ 1772.517819][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1772.557455][ T6419] usb 3-1: Using ep0 maxpacket: 8
[ 1772.566934][ T6419] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1772.578455][ T6419] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1772.579143][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6908'.
[ 1772.614637][ T6419] usb 3-1: string descriptor 0 read error: -22
[ 1772.620026][T32370] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1772.631583][ T6419] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1772.670148][ T6419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.677248][ T5832] m920x_read = error: -19
[ 1772.683026][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1772.776178][ T6419] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1772.830915][ T6419] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1772.871785][ T5832] m920x_read = error: -19
[ 1772.872192][ T6419] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1772.897767][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1772.916897][ T6419] usb 3-1: media controller created
[ 1772.956740][T32378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6913'.
[ 1773.016363][ T6419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1773.077293][ T5832] m920x_read = error: -19
[ 1773.085819][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1773.377168][ T5912] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1773.447236][ T5832] m920x_read = error: -19
[ 1773.451700][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1773.567480][ T5912] usb 4-1: Using ep0 maxpacket: 16
[ 1773.587437][  T794] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1773.667427][ T5832] m920x_read = error: -19
[ 1773.673532][ T5912] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[ 1773.685664][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1773.707481][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1773.715556][ T5912] usb 4-1: Product: syz
[ 1773.730912][ T5912] usb 4-1: Manufacturer: syz
[ 1773.737120][  T794] usb 5-1: Using ep0 maxpacket: 8
[ 1773.742448][ T5912] usb 4-1: SerialNumber: syz
[ 1773.773245][  T794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1773.785180][ T5912] usb 4-1: config 0 descriptor??
[ 1773.791362][  T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1773.802923][  T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1773.814617][  T794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1773.830377][T32394] syzkaller0: entered promiscuous mode
[ 1773.835903][T32394] syzkaller0: entered allmulticast mode
[ 1773.867269][ T5912] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1773.877318][T24862] m920x_read = error: -19
[ 1773.881705][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1773.894296][  T794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1773.918042][ T5912] usb 4-1: Detected FT232B
[ 1773.947862][  T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1774.097330][T24862] m920x_read = error: -19
[ 1774.116581][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1774.146059][   T30] kauditd_printk_skb: 169 callbacks suppressed
[ 1774.146080][   T30] audit: type=1326 audit(1767903214.195:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.176798][   T30] audit: type=1326 audit(1767903214.195:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.242239][T24862] usb 3-1: USB disconnect, device number 89
[ 1774.257340][  T794] usb 5-1: GET_CAPABILITIES returned 0
[ 1774.265369][   T30] audit: type=1326 audit(1767903214.315:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.273699][  T794] usbtmc 5-1:16.0: can't read capabilities
[ 1774.303967][ T5832] m920x_read = error: -19
[ 1774.317924][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1774.330241][T32401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6921'.
[ 1774.450948][ T5832] usb 5-1: USB disconnect, device number 109
[ 1774.497242][T24862] m920x_read = error: -19
[ 1774.502067][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1774.513323][   T30] audit: type=1326 audit(1767903214.365:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.631687][   T30] audit: type=1326 audit(1767903214.365:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.679348][ T5832] m920x_read = error: -19
[ 1774.683804][   T30] audit: type=1326 audit(1767903214.365:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.691813][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1774.729632][   T30] audit: type=1326 audit(1767903214.365:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.777243][  T794] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1774.851039][   T30] audit: type=1326 audit(1767903214.405:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.883641][T24862] m920x_read = error: -19
[ 1774.888849][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1774.925318][   T30] audit: type=1326 audit(1767903214.405:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1774.967517][  T794] usb 6-1: device descriptor read/64, error -71
[ 1775.003255][   T30] audit: type=1326 audit(1767903214.405:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32397 comm="syz.5.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1775.074201][T32412] AppArmor: change_hat: Invalid input '0'
[ 1775.078603][T24862] m920x_read = error: -19
[ 1775.106639][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1775.207609][  T794] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1775.267440][ T5832] m920x_read = error: -19
[ 1775.271915][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1775.359576][  T794] usb 6-1: device descriptor read/64, error -71
[ 1775.417170][T24862] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1775.447505][ T5832] m920x_read = error: -19
[ 1775.452886][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1775.490896][  T794] usb usb6-port1: attempt power cycle
[ 1775.567118][T24862] usb 2-1: Using ep0 maxpacket: 16
[ 1775.576873][T24862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1775.595793][T24862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1775.617184][T30051] m920x_read = error: -19
[ 1775.621711][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1775.630135][T24862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1775.639655][T24862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1775.647960][T24862] usb 2-1: Product: syz
[ 1775.652279][T24862] usb 2-1: Manufacturer: syz
[ 1775.657495][T24862] usb 2-1: SerialNumber: syz
[ 1775.797509][T30051] m920x_read = error: -19
[ 1775.803028][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1775.847339][  T794] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1775.868129][  T794] usb 6-1: device descriptor read/8, error -71
[ 1775.892438][T32414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1775.905561][T32414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1775.963034][ T5912] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1775.984002][T30051] m920x_read = error: -19
[ 1775.991715][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1776.004573][ T5912] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1776.027345][ T5912] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1776.051749][ T5912] usb 4-1: USB disconnect, device number 94
[ 1776.068209][ T5912] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1776.093309][ T5912] ftdi_sio 4-1:0.0: device disconnected
[ 1776.127236][  T794] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1776.139835][T32425] netlink: 'syz.3.6930': attribute type 27 has an invalid length.
[ 1776.163214][T24862] usb 2-1: 0:2 : does not exist
[ 1776.172612][  T794] usb 6-1: device descriptor read/8, error -71
[ 1776.180444][T30051] m920x_read = error: -19
[ 1776.188324][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1776.200110][T24862] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1776.259450][T24862] usb 2-1: USB disconnect, device number 97
[ 1776.297536][  T794] usb usb6-port1: unable to enumerate USB device
[ 1776.359466][  T794] m920x_read = error: -19
[ 1776.364542][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1776.477645][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1776.488922][T32426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6930'.
[ 1776.537346][T24862] m920x_read = error: -19
[ 1776.544979][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1776.796491][ T5912] m920x_read = error: -19
[ 1776.801289][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1776.851927][T24862] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1776.972959][T32425] ip6gre1: left promiscuous mode
[ 1776.978775][T32425] ip6gre1: left allmulticast mode
[ 1777.014899][ T5912] m920x_read = error: -19
[ 1777.019553][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1777.027562][T24862] usb 4-1: Using ep0 maxpacket: 16
[ 1777.035129][T24862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1777.047401][T24862] usb 4-1: config 0 has no interface number 0
[ 1777.086175][T32425] tipc: Resetting bearer <eth:syzkaller0>
[ 1777.101047][T24862] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1777.110971][T24862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1777.129652][T32425] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode
[ 1777.131131][T24862] usb 4-1: Product: syz
[ 1777.142934][T32437] SET target dimension over the limit!
[ 1777.162166][T32425] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode
[ 1777.178048][T32425] bond2: left promiscuous mode
[ 1777.199133][T32425] bond2: left allmulticast mode
[ 1777.205446][T24862] usb 4-1: Manufacturer: syz
[ 1777.227837][T24862] usb 4-1: SerialNumber: syz
[ 1777.265528][T24862] usb 4-1: config 0 descriptor??
[ 1777.271420][  T794] m920x_read = error: -19
[ 1777.273246][ T3652] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.372458][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1777.406652][T24862] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1777.491444][ T3652] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.557228][ T5912] m920x_read = error: -19
[ 1777.557318][ T3652] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.567065][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1777.599343][ T3652] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.847873][ T5912] m920x_read = error: -19
[ 1777.853966][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1777.947448][T24862] gspca_spca1528: reg_w err -110
[ 1777.967417][T24862] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[ 1777.987123][ T5832] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1778.019323][T24862] m920x_read = error: -19
[ 1778.031063][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1778.044165][T32449] AppArmor: change_hat: Invalid input '0'
[ 1778.151400][ T5832] usb 6-1: Using ep0 maxpacket: 32
[ 1778.188585][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1778.199844][T24862] m920x_read = error: -19
[ 1778.204360][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1778.214271][T32451] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[ 1778.220829][T32451] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1778.229068][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1778.247349][ T5832] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1778.257535][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.259855][T32451] vhci_hcd vhci_hcd.0: Device attached
[ 1778.269861][ T5832] usb 6-1: config 0 descriptor??
[ 1778.387347][T24862] m920x_read = error: -19
[ 1778.392943][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1778.537179][T24862] usb 38-1: SetAddress Request (2) to port 0
[ 1778.548075][T24862] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1778.572146][ T5912] m920x_read = error: -19
[ 1778.576652][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1778.654779][T32452] vhci_hcd: connection reset by peer
[ 1778.663796][   T38] vhci_hcd vhci_hcd.2: stop threads
[ 1778.672642][   T38] vhci_hcd vhci_hcd.2: release socket
[ 1778.688900][   T38] vhci_hcd vhci_hcd.2: disconnect device
[ 1778.709549][ T5832] ft260 0003:0403:6030.0092: unknown main item tag 0x0
[ 1778.717498][ T5832] ft260 0003:0403:6030.0092: unknown main item tag 0x0
[ 1778.747417][ T5912] m920x_read = error: -19
[ 1778.752945][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1778.801820][ T6420] syzkaller0: tun_net_xmit 76
[ 1778.803563][T32465] syzkaller0: create flow: hash 3795708524 index 1
[ 1778.807406][ T6420] syzkaller0: tun_net_xmit 48
[ 1778.837417][ T5912] syzkaller0: tun_net_xmit 76
[ 1778.867280][T19386] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1778.876901][T32464] syzkaller0: delete flow: hash 3795708524 index 1
[ 1778.924680][ T5832] ft260 0003:0403:6030.0092: chip code: 6403 0000
[ 1778.932839][ T5912] m920x_read = error: -19
[ 1778.937535][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1779.041452][T19386] usb 5-1: Using ep0 maxpacket: 32
[ 1779.058866][ T7671] usb 4-1: USB disconnect, device number 95
[ 1779.064996][T19386] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1779.075470][T19386] usb 5-1: config 0 has no interface number 0
[ 1779.092870][T19386] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1779.108240][ T5912] m920x_read = error: -19
[ 1779.119811][T19386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1779.123665][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1779.132393][T19386] usb 5-1: Product: syz
[ 1779.141408][ T5832] ft260 0003:0403:6030.0092: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[ 1779.162825][T19386] usb 5-1: Manufacturer: syz
[ 1779.167987][T19386] usb 5-1: SerialNumber: syz
[ 1779.203994][T19386] usb 5-1: config 0 descriptor??
[ 1779.212420][T19386] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1779.317375][ T5912] m920x_read = error: -19
[ 1779.322072][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1779.352916][ T5832] ft260 0003:0403:6030.0092: failed to retrieve status: -32, no wakeup
[ 1779.397938][T32472] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20002
[ 1779.523792][ T5912] m920x_read = error: -19
[ 1779.533632][ T5912] dvb-usb: error -19 while querying for an remote control event.
[ 1779.574995][T19386] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1779.684696][T19386] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1779.717681][  T794] m920x_read = error: -19
[ 1779.722337][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1779.797698][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[ 1779.910984][  T794] m920x_read = error: -19
[ 1779.923156][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1780.137644][  T794] m920x_read = error: -19
[ 1780.142162][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1780.317674][  T794] m920x_read = error: -19
[ 1780.317709][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1780.482713][  T794] m920x_read = error: -19
[ 1780.487462][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1780.657539][  T794] m920x_read = error: -19
[ 1780.662515][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1780.988193][  T794] m920x_read = error: -19
[ 1781.008434][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1781.187404][  T794] m920x_read = error: -19
[ 1781.192117][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1781.368776][  T794] m920x_read = error: -19
[ 1781.373305][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1781.588725][  T794] m920x_read = error: -19
[ 1781.593501][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1781.786429][  T794] m920x_read = error: -19
[ 1781.792086][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1781.890724][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1781.899384][ T7671] usb 5-1: USB disconnect, device number 110
[ 1781.937484][ T7671] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1781.970867][  T794] m920x_read = error: -19
[ 1781.975399][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1782.039857][ T7671] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1782.089290][ T7671] quatech2 5-1:0.51: device disconnected
[ 1782.157244][  T794] m920x_read = error: -19
[ 1782.180700][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1782.379360][  T794] m920x_read = error: -19
[ 1782.406814][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1782.617397][  T794] m920x_read = error: -19
[ 1782.629110][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1782.716703][T32490] AppArmor: change_hat: Invalid input '0'
[ 1782.798464][ T5832] ft260 0003:0403:6030.0092: failed to retrieve status: -71
[ 1782.836870][ T5832] ft260 0003:0403:6030.0092: failed to reset I2C controller: -71
[ 1782.873525][ T5832] usb 6-1: USB disconnect, device number 16
[ 1782.901999][  T794] m920x_read = error: -19
[ 1782.906906][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1783.081643][  T794] m920x_read = error: -19
[ 1783.086337][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1783.217039][T32501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6952'.
[ 1783.295003][  T794] m920x_read = error: -19
[ 1783.297617][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6953'.
[ 1783.310311][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1783.507992][  T794] m920x_read = error: -19
[ 1783.512991][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1783.607272][T24862] usb 38-1: device descriptor read/8, error -110
[ 1783.697601][  T794] m920x_read = error: -19
[ 1783.759150][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1783.937216][  T794] m920x_read = error: -19
[ 1783.954397][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1784.048675][T24862] usb usb38-port1: attempt power cycle
[ 1784.137927][  T794] m920x_read = error: -19
[ 1784.142602][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1784.324753][  T794] m920x_read = error: -19
[ 1784.331911][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1784.498832][ T5832] m920x_read = error: -19
[ 1784.503252][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1784.613299][T24862] usb usb38-port1: unable to enumerate USB device
[ 1784.678586][T24862] m920x_read = error: -19
[ 1784.683348][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1784.855247][T24862] m920x_read = error: -19
[ 1784.860339][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1785.030618][T24862] m920x_read = error: -19
[ 1785.035065][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1785.214192][T24862] m920x_read = error: -19
[ 1785.218887][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1785.387308][T24862] m920x_read = error: -19
[ 1785.391937][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1785.567368][T24862] m920x_read = error: -19
[ 1785.571867][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1785.739473][T24862] m920x_read = error: -19
[ 1785.744155][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1785.920812][T24862] m920x_read = error: -19
[ 1785.925291][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1786.097133][T24862] m920x_read = error: -19
[ 1786.101648][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1786.287400][T24862] m920x_read = error: -19
[ 1786.292013][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1786.458036][T24862] m920x_read = error: -19
[ 1786.462450][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1786.637324][T24862] m920x_read = error: -19
[ 1786.641764][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1786.807238][T24862] m920x_read = error: -19
[ 1786.811833][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1786.920915][T32517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6956'.
[ 1786.941174][T32517] fuse: Unknown parameter '184467440737095516150xffffffffffffffff'
[ 1787.007354][T24862] m920x_read = error: -19
[ 1787.022384][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1787.137088][T32523] binder: BINDER_SET_CONTEXT_MGR already set
[ 1787.143305][T32523] binder: 32516:32523 ioctl 4018620d 200000000040 returned -16
[ 1787.233367][T32523] syz.3.6957 (32523): drop_caches: 2
[ 1787.247401][T24862] m920x_read = error: -19
[ 1787.263361][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1787.428821][ T6419] usb 3-1: new low-speed USB device number 90 using dummy_hcd
[ 1787.460451][T24862] m920x_read = error: -19
[ 1787.464918][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1787.508755][T32512] xt_NFQUEUE: number of total queues is 0
[ 1787.617692][ T6419] usb 3-1: config 0 has no interfaces?
[ 1787.633989][ T6419] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1787.640288][T24862] m920x_read = error: -19
[ 1787.677634][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1787.691843][ T6419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.727997][ T6419] usb 3-1: config 0 descriptor??
[ 1787.897433][T24862] m920x_read = error: -19
[ 1787.903738][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1788.087333][T24862] m920x_read = error: -19
[ 1788.096062][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1788.221311][T24862] usb 3-1: USB disconnect, device number 90
[ 1788.308037][ T5832] m920x_read = error: -19
[ 1788.312455][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1788.398061][T32547] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6966'.
[ 1788.413291][T32549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6967'.
[ 1788.487148][ T6419] usb 2-1: new low-speed USB device number 98 using dummy_hcd
[ 1788.497246][T24862] m920x_read = error: -19
[ 1788.502061][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1788.660455][ T6419] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1788.667199][T24862] m920x_read = error: -19
[ 1788.669487][ T6419] usb 2-1: config 0 has no interface number 0
[ 1788.673088][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1788.680695][ T6419] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1788.700334][ T5898] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1788.708235][ T6419] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1788.721526][ T6419] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1788.733600][ T6419] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1788.745549][ T6419] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1788.757597][ T6419] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1788.774000][ T6419] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1788.784881][ T6419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.808037][ T6419] usb 2-1: config 0 descriptor??
[ 1788.814220][T32545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1788.828437][T32545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1788.855380][ T6419] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1788.857180][T24862] m920x_read = error: -19
[ 1788.881623][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1788.895452][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1788.927210][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1788.958226][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1789.008926][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1789.010856][T32549] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1789.060524][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1789.094227][T24862] usb 2-1: USB disconnect, device number 98
[ 1789.109759][T24862] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1789.197239][ T5832] m920x_read = error: -19
[ 1789.201825][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1789.442756][T24862] m920x_read = error: -19
[ 1789.445591][ T5898] usb 4-1: USB disconnect, device number 96
[ 1789.458080][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1789.708380][T24862] m920x_read = error: -19
[ 1789.712815][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1789.776708][T32549] could not allocate digest TFM handle sha1_mb
[ 1789.887141][ T5832] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1789.927169][T24862] m920x_read = error: -19
[ 1789.931551][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1789.983556][T32580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6976'.
[ 1790.030137][T32580] netlink: 'syz.2.6976': attribute type 49 has an invalid length.
[ 1790.067130][ T5832] usb 6-1: Using ep0 maxpacket: 16
[ 1790.118723][T24862] m920x_read = error: -19
[ 1790.123415][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1790.213862][ T5832] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1790.222353][ T5832] usb 6-1: config 0 has no interface number 0
[ 1790.230348][ T5832] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1790.255979][ T5832] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1790.279806][ T5832] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1790.324711][ T5832] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1790.334204][T24862] m920x_read = error: -19
[ 1790.334658][T32582] tipc: Enabled bearer <eth:macvlan0>, priority 10
[ 1790.338843][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1790.355221][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.366438][ T5832] usb 6-1: Product: syz
[ 1790.400320][ T5832] usb 6-1: Manufacturer: syz
[ 1790.405959][ T5832] usb 6-1: SerialNumber: syz
[ 1790.510262][T24862] m920x_read = error: -19
[ 1790.515878][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1790.535639][ T5832] usb 6-1: config 0 descriptor??
[ 1790.574704][T32570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1790.582464][T32570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1790.697203][T24862] m920x_read = error: -19
[ 1790.701721][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1790.838272][T32555] delete_channel: no stack
[ 1790.877396][T24862] m920x_read = error: -19
[ 1790.882516][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1791.061361][T30051] m920x_read = error: -19
[ 1791.066171][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1791.247757][T30051] m920x_read = error: -19
[ 1791.252339][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1791.266630][T32600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6983'.
[ 1791.306323][T32600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6983'.
[ 1791.330790][T32596] netlink: 'syz.4.6982': attribute type 39 has an invalid length.
[ 1791.472991][T24862] m920x_read = error: -19
[ 1791.486144][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1791.808845][T30051] m920x_read = error: -19
[ 1791.813480][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1791.907896][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.915751][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.984482][T32596] syz_tun (unregistering): left allmulticast mode
[ 1792.037370][  T794] m920x_read = error: -19
[ 1792.042030][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1792.247220][  T794] m920x_read = error: -19
[ 1792.254893][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1792.365127][ T6419] tipc: Node number set to 843471187
[ 1792.418723][T24862] m920x_read = error: -19
[ 1792.426399][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1792.897416][T24862] m920x_read = error: -19
[ 1792.909550][ T5832] dm9601 6-1:0.41: probe with driver dm9601 failed with error -71
[ 1792.967605][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1793.007670][ T5832] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71
[ 1793.078737][ T5832] usb 6-1: USB disconnect, device number 17
[ 1793.114747][T32617] Cannot find map_set index 135 as target
[ 1793.156419][   T30] kauditd_printk_skb: 33 callbacks suppressed
[ 1793.156439][   T30] audit: type=1326 audit(1767903233.195:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.196875][T24862] m920x_read = error: -19
[ 1793.202358][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1793.264267][T32617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6987'.
[ 1793.292847][   T30] audit: type=1326 audit(1767903233.195:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.320368][   T30] audit: type=1326 audit(1767903233.195:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.353659][   T30] audit: type=1326 audit(1767903233.195:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.407233][ T5832] m920x_read = error: -19
[ 1793.413484][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1793.455074][   T30] audit: type=1326 audit(1767903233.195:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.510896][T32626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1793.530149][T32626] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[ 1793.538853][   T30] audit: type=1326 audit(1767903233.195:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.575964][T32626] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[ 1793.595673][   T30] audit: type=1326 audit(1767903233.195:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.619319][ T5832] m920x_read = error: -19
[ 1793.623666][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1793.661119][   T30] audit: type=1326 audit(1767903233.205:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.695371][   T30] audit: type=1326 audit(1767903233.205:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.740825][   T30] audit: type=1326 audit(1767903233.205:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.5.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72da38f749 code=0x7ffc0000
[ 1793.832153][ T5832] m920x_read = error: -19
[ 1793.838364][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1793.965564][T32635] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6992'.
[ 1794.026203][ T5832] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1794.159788][T24862] m920x_read = error: -19
[ 1794.164455][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1794.317258][ T5832] usb 4-1: Using ep0 maxpacket: 16
[ 1794.327450][  T794] m920x_read = error: -19
[ 1794.341370][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1794.363384][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1794.392391][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1794.443427][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1794.480008][ T5832] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1794.517191][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1794.549462][  T794] m920x_read = error: -19
[ 1794.565532][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1794.585588][ T5832] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1794.595282][ T5832] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1794.616916][ T5832] usb 4-1: Manufacturer: syz
[ 1794.631868][ T5832] usb 4-1: config 0 descriptor??
[ 1794.835726][  T794] m920x_read = error: -19
[ 1794.842899][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1795.007248][  T794] m920x_read = error: -19
[ 1795.028702][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1795.181246][ T5832] rc_core: IR keymap rc-hauppauge not found
[ 1795.222394][ T5832] Registered IR keymap rc-empty
[ 1795.272673][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1795.307275][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1795.407179][  T794] m920x_read = error: -19
[ 1795.412234][ T5832] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1
[ 1795.427111][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1795.929717][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input142
[ 1795.995357][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.070533][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.078105][  T794] m920x_read = error: -19
[ 1796.082652][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1796.343988][T32663] fuse: Bad value for 'fd'
[ 1796.367362][  T794] m920x_read = error: -19
[ 1796.372431][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1796.387270][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.405782][T32663] fuse: Bad value for 'fd'
[ 1796.410455][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.437214][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.497486][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.523074][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.686457][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.776042][T30051] m920x_read = error: -19
[ 1796.830275][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1796.867455][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1796.958548][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1797.057220][T30051] m920x_read = error: -19
[ 1797.062829][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1797.184352][ T5832] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1797.204925][ T5832] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1797.264023][ T5832] usb 4-1: USB disconnect, device number 97
[ 1797.357787][T30051] m920x_read = error: -19
[ 1797.362323][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1797.458033][ T5898] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1797.547201][T30051] m920x_read = error: -19
[ 1797.551717][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1797.622825][ T5898] usb 5-1: device descriptor read/64, error -71
[ 1797.767163][T30051] m920x_read = error: -19
[ 1797.776115][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1797.932709][ T5898] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1797.967177][ T5832] m920x_read = error: -19
[ 1797.973217][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1798.087205][ T5898] usb 5-1: device descriptor read/64, error -71
[ 1798.197886][ T5898] usb usb5-port1: attempt power cycle
[ 1798.247675][ T5832] m920x_read = error: -19
[ 1798.252275][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1798.457777][T30051] m920x_read = error: -19
[ 1798.462497][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1798.547116][ T5898] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1798.567822][ T5898] usb 5-1: device descriptor read/8, error -71
[ 1798.647261][T30051] m920x_read = error: -19
[ 1798.651674][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1798.839649][ T5898] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1798.847492][T30051] m920x_read = error: -19
[ 1798.847524][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1798.893288][ T5898] usb 5-1: device descriptor read/8, error -71
[ 1799.007212][T30051] m920x_read = error: -19
[ 1799.011796][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1799.022184][ T5898] usb usb5-port1: unable to enumerate USB device
[ 1799.217272][T30051] m920x_read = error: -19
[ 1799.227170][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1799.342182][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7013'.
[ 1799.387384][T32714] 8021q: VLANs not supported on vcan0
[ 1799.437227][T30051] m920x_read = error: -19
[ 1799.443966][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1799.627502][ T5832] m920x_read = error: -19
[ 1799.648582][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1799.867620][T30051] m920x_read = error: -19
[ 1799.973174][T32721] tipc: Resetting bearer <eth:syzkaller0>
[ 1800.001660][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1800.177787][ T5832] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1800.186115][T32730] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1800.238695][T30051] m920x_read = error: -19
[ 1800.245707][T30051] dvb-usb: error -19 while querying for an remote control event.
[ 1800.258320][T32730] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1800.287598][ T6419] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1800.327148][ T5832] usb 3-1: device descriptor read/64, error -71
[ 1800.348206][T32732] FAULT_INJECTION: forcing a failure.
[ 1800.348206][T32732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1800.357257][T19386] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1800.371357][T32732] CPU: 1 UID: 0 PID: 32732 Comm: syz.4.7018 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1800.371392][T32732] Tainted: [L]=SOFTLOCKUP
[ 1800.371400][T32732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1800.371412][T32732] Call Trace:
[ 1800.371421][T32732]  <TASK>
[ 1800.371430][T32732]  dump_stack_lvl+0xe8/0x150
[ 1800.371473][T32732]  should_fail_ex+0x414/0x560
[ 1800.371511][T32732]  _copy_to_user+0x31/0xb0
[ 1800.371540][T32732]  simple_read_from_buffer+0xe1/0x170
[ 1800.371570][T32732]  proc_fail_nth_read+0x1b3/0x220
[ 1800.371595][T32732]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1800.371622][T32732]  ? rw_verify_area+0x2a6/0x4d0
[ 1800.371652][T32732]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1800.371676][T32732]  vfs_read+0x200/0xa30
[ 1800.371694][T32732]  ? fdget_pos+0x247/0x320
[ 1800.371722][T32732]  ? __pfx___mutex_lock+0x10/0x10
[ 1800.371745][T32732]  ? __pfx_vfs_read+0x10/0x10
[ 1800.371766][T32732]  ? __fget_files+0x2a/0x420
[ 1800.371797][T32732]  ? __fget_files+0x3a0/0x420
[ 1800.371819][T32732]  ? __fget_files+0x2a/0x420
[ 1800.371853][T32732]  ksys_read+0x145/0x250
[ 1800.371876][T32732]  ? __pfx_ksys_read+0x10/0x10
[ 1800.371909][T32732]  do_syscall_64+0xec/0xf80
[ 1800.371930][T32732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1800.371950][T32732]  ? trace_irq_disable+0x37/0x100
[ 1800.371976][T32732]  ? clear_bhb_loop+0x60/0xb0
[ 1800.372000][T32732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1800.372021][T32732] RIP: 0033:0x7fa986b8e15c
[ 1800.372040][T32732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1800.372058][T32732] RSP: 002b:00007fa987aa6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1800.372087][T32732] RAX: ffffffffffffffda RBX: 00007fa986de5fa0 RCX: 00007fa986b8e15c
[ 1800.372103][T32732] RDX: 000000000000000f RSI: 00007fa987aa60a0 RDI: 0000000000000004
[ 1800.372116][T32732] RBP: 00007fa987aa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1800.372129][T32732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1800.372142][T32732] R13: 00007fa986de6038 R14: 00007fa986de5fa0 R15: 00007fa986f0fa28
[ 1800.372177][T32732]  </TASK>
[ 1800.447358][ T6419] usb 2-1: Using ep0 maxpacket: 8
[ 1800.522670][  T794] m920x_read = error: -19
[ 1800.627074][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1800.703213][T19386] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1800.715688][T19386] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1800.731646][T19386] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1800.744102][ T6419] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1800.757170][ T5832] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1800.766959][ T6419] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1800.780186][ T6419] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1800.791781][ T6419] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1800.808728][T19386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1800.809799][  T794] m920x_read = error: -19
[ 1800.822164][T19386] usb 6-1: config 0 descriptor??
[ 1800.833548][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1800.834039][ T6419] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1800.865706][T19386] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1800.918729][ T6419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1800.947213][ T5832] usb 3-1: device descriptor read/64, error -71
[ 1801.058151][ T5832] usb usb3-port1: attempt power cycle
[ 1801.098567][  T794] m920x_read = error: -19
[ 1801.107507][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1801.227368][ T6419] usb 2-1: GET_CAPABILITIES returned 0
[ 1801.275634][ T6419] usbtmc 2-1:16.0: can't read capabilities
[ 1801.295341][  T794] m920x_read = error: -19
[ 1801.302597][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1801.398861][ T5832] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1801.479743][  T794] m920x_read = error: -19
[ 1801.485469][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1801.494090][ T5832] usb 3-1: device descriptor read/8, error -71
[ 1801.526408][  T794] usb 2-1: USB disconnect, device number 99
[ 1801.657718][T24862] m920x_read = error: -19
[ 1801.662149][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1801.737169][ T5832] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1801.757868][ T5832] usb 3-1: device descriptor read/8, error -71
[ 1801.830243][T24862] m920x_read = error: -19
[ 1801.834942][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1801.867898][  T794] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1801.876584][ T5832] usb usb3-port1: unable to enumerate USB device
[ 1801.997260][ T5832] m920x_read = error: -19
[ 1802.002444][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1802.029556][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9
[ 1802.040944][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024
[ 1802.052876][  T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1802.066209][  T794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1802.075444][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1802.092028][  T794] usb 4-1: config 0 descriptor??
[ 1802.113368][T32746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1802.167243][ T5832] m920x_read = error: -19
[ 1802.171781][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1802.338159][ T5832] m920x_read = error: -19
[ 1802.342984][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1802.507686][ T5832] m920x_read = error: -19
[ 1802.512180][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1802.652889][  T794] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1802.677750][T19386] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1802.685795][ T5832] m920x_read = error: -19
[ 1802.714743][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1802.837279][T19386] usb 2-1: Using ep0 maxpacket: 16
[ 1802.875927][T19386] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 1802.907982][ T5832] usb 6-1: USB disconnect, device number 18
[ 1802.936507][T19386] usb 2-1: config 0 has no interface number 0
[ 1802.972018][T19386] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1802.981358][  T794] m920x_read = error: -19
[ 1803.003437][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1803.035326][T19386] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1803.053506][T19386] usb 2-1: config 0 interface 41 has no altsetting 0
[ 1803.127726][T32767] netlink: 'syz.4.7025': attribute type 10 has an invalid length.
[ 1803.147157][T32767] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1803.173580][T32767] team0: Port device bond0 added
[ 1803.189004][ T5832] m920x_read = error: -19
[ 1803.193419][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1803.380392][T19386] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1803.404358][T19386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1803.438293][T32767] team0: Port device bond0 removed
[ 1803.444052][T19386] usb 2-1: Product: syz
[ 1803.448570][T19386] usb 2-1: Manufacturer: syz
[ 1803.453170][T19386] usb 2-1: SerialNumber: syz
[ 1803.459864][T19386] usb 2-1: config 0 descriptor??
[ 1803.489685][T32754] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1803.517425][ T5832] m920x_read = error: -19
[ 1803.521974][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1803.543834][T32767] bridge_slave_0: left allmulticast mode
[ 1803.555062][T32754] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1803.601296][T32767] bridge_slave_0: left promiscuous mode
[ 1803.624710][T32767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1803.706948][  T794] m920x_read = error: -19
[ 1803.712977][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1803.984515][  T794] m920x_read = error: -19
[ 1804.006934][  T794] dvb-usb: error -19 while querying for an remote control event.
[ 1804.023628][T32767] bridge_slave_1: left allmulticast mode
[ 1804.029695][T32767] bridge_slave_1: left promiscuous mode
[ 1804.044930][T32767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1804.067266][ T6419] usb 4-1: reset high-speed USB device number 98 using dummy_hcd
[ 1804.196811][T32767] bond0: (slave bond_slave_0): Releasing backup interface
[ 1804.218971][T24862] m920x_read = error: -19
[ 1804.229770][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1804.389869][T32767] bond0: (slave bond_slave_1): Releasing backup interface
[ 1804.430294][T24862] m920x_read = error: -19
[ 1804.441576][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1804.548062][T32767] team0: Port device team_slave_0 removed
[ 1804.637404][T24862] m920x_read = error: -19
[ 1804.642353][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1804.716561][T32767] team0: Port device team_slave_1 removed
[ 1804.739958][T16827] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x4
[ 1804.768008][T16827] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x2
[ 1804.780772][T16827] hid-generic 0000:3000000:0000.0094: unknown main item tag 0x3
[ 1804.827407][T24862] m920x_read = error: -19
[ 1804.831919][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1804.890191][T32767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1805.066249][T32767] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1805.143369][T16827] hid-generic 0000:3000000:0000.0094: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1805.207171][T24862] m920x_read = error: -19
[ 1805.212261][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1805.253295][T32767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1805.406794][T16826] usb 4-1: USB disconnect, device number 98
[ 1805.427174][T24862] m920x_read = error: -19
[ 1805.433816][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1805.531520][  T320] fido_id[320]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1805.573932][T32767] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1805.599205][T19386] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71
[ 1805.610894][T24862] m920x_read = error: -19
[ 1805.629762][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1805.659789][T19386] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71
[ 1805.716933][T32767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1805.748825][T19386] usb 2-1: USB disconnect, device number 100
[ 1805.858271][ T5832] m920x_read = error: -19
[ 1805.862745][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1806.067155][ T5832] m920x_read = error: -19
[ 1806.084837][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1806.297292][T24862] m920x_read = error: -19
[ 1806.304710][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1806.506920][ T5832] m920x_read = error: -19
[ 1806.514701][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1806.688039][ T5832] m920x_read = error: -19
[ 1806.693342][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1806.762725][  T347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7037'.
[ 1806.871071][  T349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1806.878392][  T349] IPv6: NLM_F_CREATE should be set when creating new route
[ 1806.932283][ T5832] m920x_read = error: -19
[ 1806.936756][ T5832] dvb-usb: error -19 while querying for an remote control event.
[ 1807.117320][T24862] m920x_read = error: -19
[ 1807.121784][ T5832] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1807.131103][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1807.177455][  T353] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1'
[ 1807.293700][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1807.304323][T24862] m920x_read = error: -19
[ 1807.326007][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1807.336175][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1807.377544][ T5832] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1807.404541][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1807.485074][ T5832] usb 5-1: config 0 descriptor??
[ 1807.527309][T24862] m920x_read = error: -19
[ 1807.531713][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1807.543833][ T5832] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1807.563451][  T357] netlink: 'syz.5.7041': attribute type 1 has an invalid length.
[ 1807.582961][  T357] FAULT_INJECTION: forcing a failure.
[ 1807.582961][  T357] name failslab, interval 1, probability 0, space 0, times 0
[ 1807.599779][  T357] CPU: 0 UID: 0 PID: 357 Comm: syz.5.7041 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1807.599816][  T357] Tainted: [L]=SOFTLOCKUP
[ 1807.599824][  T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1807.599836][  T357] Call Trace:
[ 1807.599843][  T357]  <TASK>
[ 1807.599852][  T357]  dump_stack_lvl+0xe8/0x150
[ 1807.599882][  T357]  should_fail_ex+0x414/0x560
[ 1807.599920][  T357]  should_failslab+0xa8/0x100
[ 1807.599946][  T357]  __kmalloc_cache_noprof+0x84/0x700
[ 1807.599970][  T357]  ? qfq_change_class+0x9ea/0xea0
[ 1807.599990][  T357]  ? __local_bh_enable_ip+0xd0/0x130
[ 1807.600016][  T357]  qfq_change_class+0x9ea/0xea0
[ 1807.600047][  T357]  ? __pfx_qfq_change_class+0x10/0x10
[ 1807.600075][  T357]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1807.600100][  T357]  ? qdisc_lookup+0x179/0x6d0
[ 1807.600129][  T357]  tc_ctl_tclass+0xaa0/0x1500
[ 1807.600172][  T357]  ? __pfx_tc_ctl_tclass+0x10/0x10
[ 1807.600196][  T357]  ? rcu_is_watching+0x15/0xb0
[ 1807.600221][  T357]  ? trace_contention_end+0x39/0x100
[ 1807.600246][  T357]  ? __mutex_lock+0x335/0x1350
[ 1807.600275][  T357]  ? __local_bh_enable_ip+0xd0/0x130
[ 1807.600294][  T357]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1807.600313][  T357]  ? __dev_queue_xmit+0x289/0x31c0
[ 1807.600363][  T357]  ? __pfx_tc_ctl_tclass+0x10/0x10
[ 1807.600391][  T357]  rtnetlink_rcv_msg+0x77c/0xb70
[ 1807.600416][  T357]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1807.600436][  T357]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1807.600454][  T357]  ? ref_tracker_free+0x63a/0x7d0
[ 1807.600474][  T357]  ? __asan_memcpy+0x40/0x70
[ 1807.600502][  T357]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1807.600528][  T357]  netlink_rcv_skb+0x208/0x470
[ 1807.600553][  T357]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1807.600575][  T357]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1807.600610][  T357]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1807.600649][  T357]  netlink_unicast+0x82f/0x9e0
[ 1807.600689][  T357]  ? __pfx_netlink_unicast+0x10/0x10
[ 1807.600710][  T357]  ? __alloc_skb+0x198/0x3a0
[ 1807.600730][  T357]  ? netlink_sendmsg+0x642/0xb30
[ 1807.600754][  T357]  ? skb_put+0x11b/0x210
[ 1807.600777][  T357]  netlink_sendmsg+0x805/0xb30
[ 1807.600812][  T357]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1807.600842][  T357]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1807.600870][  T357]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1807.600889][  T357]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1807.600915][  T357]  __sock_sendmsg+0x21c/0x270
[ 1807.600946][  T357]  ____sys_sendmsg+0x505/0x820
[ 1807.600977][  T357]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1807.601009][  T357]  ? import_iovec+0x74/0xa0
[ 1807.601040][  T357]  ___sys_sendmsg+0x21f/0x2a0
[ 1807.601067][  T357]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1807.601126][  T357]  ? __fget_files+0x2a/0x420
[ 1807.601150][  T357]  ? __fget_files+0x3a0/0x420
[ 1807.601184][  T357]  __x64_sys_sendmsg+0x19b/0x260
[ 1807.601210][  T357]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1807.601246][  T357]  ? __pfx_ksys_write+0x10/0x10
[ 1807.601278][  T357]  do_syscall_64+0xec/0xf80
[ 1807.601299][  T357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1807.601318][  T357]  ? trace_irq_disable+0x37/0x100
[ 1807.601342][  T357]  ? clear_bhb_loop+0x60/0xb0
[ 1807.601365][  T357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1807.601383][  T357] RIP: 0033:0x7f72da38f749
[ 1807.601402][  T357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1807.601419][  T357] RSP: 002b:00007f72db2d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1807.601442][  T357] RAX: ffffffffffffffda RBX: 00007f72da5e5fa0 RCX: 00007f72da38f749
[ 1807.601457][  T357] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004
[ 1807.601470][  T357] RBP: 00007f72db2d1090 R08: 0000000000000000 R09: 0000000000000000
[ 1807.601482][  T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1807.601493][  T357] R13: 00007f72da5e6038 R14: 00007f72da5e5fa0 R15: 00007f72da70fa28
[ 1807.601525][  T357]  </TASK>
[ 1807.604468][  T359] x_tables: duplicate underflow at hook 2
[ 1807.790632][T24862] m920x_read = error: -19
[ 1808.077401][  T356] ==================================================================
[ 1808.085552][  T356] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0xf9/0x240
[ 1808.093245][  T356] Read of size 8 at addr ffff88802a5a8050 by task syz.5.7041/356
[ 1808.101067][  T356] 
[ 1808.103413][  T356] CPU: 1 UID: 0 PID: 356 Comm: syz.5.7041 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1808.103437][  T356] Tainted: [L]=SOFTLOCKUP
[ 1808.103443][  T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1808.103453][  T356] Call Trace:
[ 1808.103461][  T356]  <TASK>
[ 1808.103468][  T356]  dump_stack_lvl+0xe8/0x150
[ 1808.103492][  T356]  print_report+0xca/0x240
[ 1808.103508][  T356]  ? qfq_reset_qdisc+0xf9/0x240
[ 1808.103524][  T356]  kasan_report+0x118/0x150
[ 1808.103544][  T356]  ? qfq_reset_qdisc+0xf9/0x240
[ 1808.103562][  T356]  qfq_reset_qdisc+0xf9/0x240
[ 1808.103579][  T356]  ? __pfx_qfq_reset_qdisc+0x10/0x10
[ 1808.103595][  T356]  qdisc_reset+0xff/0x560
[ 1808.103615][  T356]  __qdisc_destroy+0x120/0x400
[ 1808.103633][  T356]  dev_shutdown+0x34c/0x440
[ 1808.103654][  T356]  unregister_netdevice_many_notify+0x11b3/0x2340
[ 1808.103682][  T356]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1808.103708][  T356]  ? __queue_work+0x1a2/0xf90
[ 1808.103728][  T356]  unregister_netdevice_queue+0x317/0x350
[ 1808.103750][  T356]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1808.103770][  T356]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1808.103786][  T356]  ? queue_delayed_work_on+0x171/0x1d0
[ 1808.103805][  T356]  __tun_detach+0x6d9/0x15d0
[ 1808.103831][  T356]  ? __pfx_tun_chr_close+0x10/0x10
[ 1808.103849][  T356]  tun_chr_close+0x10a/0x1c0
[ 1808.103868][  T356]  __fput+0x44c/0xa70
[ 1808.103890][  T356]  task_work_run+0x1d4/0x260
[ 1808.103912][  T356]  ? __pfx_task_work_run+0x10/0x10
[ 1808.103936][  T356]  exit_to_user_mode_loop+0xef/0x4e0
[ 1808.103953][  T356]  ? rcu_is_watching+0x15/0xb0
[ 1808.103973][  T356]  do_syscall_64+0x2c1/0xf80
[ 1808.103988][  T356]  ? rcu_is_watching+0x15/0xb0
[ 1808.104005][  T356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.104022][  T356]  ? clear_bhb_loop+0x60/0xb0
[ 1808.104038][  T356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.104053][  T356] RIP: 0033:0x7f72da38f749
[ 1808.104068][  T356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1808.104083][  T356] RSP: 002b:00007f72da70fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1808.104100][  T356] RAX: 0000000000000000 RBX: 00007f72da5e7da0 RCX: 00007f72da38f749
[ 1808.104112][  T356] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1808.104122][  T356] RBP: 00007f72da5e7da0 R08: 0000000000000000 R09: 00000010da70fe7f
[ 1808.104133][  T356] R10: 000000000003fd60 R11: 0000000000000246 R12: 00000000001b978d
[ 1808.104143][  T356] R13: 00007f72da70fc80 R14: ffffffffffffffff R15: 00007f72da70fca0
[ 1808.104161][  T356]  </TASK>
[ 1808.104166][  T356] 
[ 1808.364031][  T356] Allocated by task 357:
[ 1808.368278][  T356]  kasan_save_track+0x3e/0x80
[ 1808.372988][  T356]  __kasan_kmalloc+0x93/0xb0
[ 1808.377582][  T356]  __kmalloc_cache_noprof+0x3e2/0x700
[ 1808.382954][  T356]  qfq_change_class+0x5c4/0xea0
[ 1808.387807][  T356]  tc_ctl_tclass+0xaa0/0x1500
[ 1808.392529][  T356]  rtnetlink_rcv_msg+0x77c/0xb70
[ 1808.397478][  T356]  netlink_rcv_skb+0x208/0x470
[ 1808.402245][  T356]  netlink_unicast+0x82f/0x9e0
[ 1808.407010][  T356]  netlink_sendmsg+0x805/0xb30
[ 1808.411880][  T356]  __sock_sendmsg+0x21c/0x270
[ 1808.416580][  T356]  ____sys_sendmsg+0x505/0x820
[ 1808.421346][  T356]  ___sys_sendmsg+0x21f/0x2a0
[ 1808.426033][  T356]  __x64_sys_sendmsg+0x19b/0x260
[ 1808.430974][  T356]  do_syscall_64+0xec/0xf80
[ 1808.435479][  T356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.441376][  T356] 
[ 1808.443702][  T356] Freed by task 357:
[ 1808.447592][  T356]  kasan_save_track+0x3e/0x80
[ 1808.452268][  T356]  kasan_save_free_info+0x46/0x50
[ 1808.457299][  T356]  __kasan_slab_free+0x5c/0x80
[ 1808.462065][  T356]  kfree+0x1c0/0x660
[ 1808.465975][  T356]  qfq_change_class+0xb0c/0xea0
[ 1808.470826][  T356]  tc_ctl_tclass+0xaa0/0x1500
[ 1808.475574][  T356]  rtnetlink_rcv_msg+0x77c/0xb70
[ 1808.480562][  T356]  netlink_rcv_skb+0x208/0x470
[ 1808.485352][  T356]  netlink_unicast+0x82f/0x9e0
[ 1808.490124][  T356]  netlink_sendmsg+0x805/0xb30
[ 1808.494898][  T356]  __sock_sendmsg+0x21c/0x270
[ 1808.499583][  T356]  ____sys_sendmsg+0x505/0x820
[ 1808.504444][  T356]  ___sys_sendmsg+0x21f/0x2a0
[ 1808.509125][  T356]  __x64_sys_sendmsg+0x19b/0x260
[ 1808.514068][  T356]  do_syscall_64+0xec/0xf80
[ 1808.518577][  T356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.524476][  T356] 
[ 1808.526797][  T356] The buggy address belongs to the object at ffff88802a5a8000
[ 1808.526797][  T356]  which belongs to the cache kmalloc-128 of size 128
[ 1808.541043][  T356] The buggy address is located 80 bytes inside of
[ 1808.541043][  T356]  freed 128-byte region [ffff88802a5a8000, ffff88802a5a8080)
[ 1808.554782][  T356] 
[ 1808.557124][  T356] The buggy address belongs to the physical page:
[ 1808.563541][  T356] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a5a8
[ 1808.572391][  T356] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1808.579503][  T356] page_type: f5(slab)
[ 1808.583486][  T356] raw: 00fff00000000000 ffff88813ffa6a00 ffffea0001db11c0 dead000000000002
[ 1808.592070][  T356] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1808.600654][  T356] page dumped because: kasan: bad access detected
[ 1808.607062][  T356] page_owner tracks the page as allocated
[ 1808.612772][  T356] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 19406, tgid 19406 (syz-executor), ts 868836010828, free_ts 868619440158
[ 1808.633963][  T356]  post_alloc_hook+0x234/0x290
[ 1808.638734][  T356]  get_page_from_freelist+0x24e0/0x2580
[ 1808.644282][  T356]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1808.650088][  T356]  allocate_slab+0x7a/0x3b0
[ 1808.654595][  T356]  ___slab_alloc+0xe53/0x1820
[ 1808.659278][  T356]  __slab_alloc+0x65/0x100
[ 1808.663705][  T356]  __kmalloc_node_noprof+0x5d9/0x820
[ 1808.669014][  T356]  alloc_slab_obj_exts+0x3e/0x100
[ 1808.674074][  T356]  allocate_slab+0x1cc/0x3b0
[ 1808.678696][  T356]  ___slab_alloc+0xe53/0x1820
[ 1808.683408][  T356]  __slab_alloc+0x65/0x100
[ 1808.687868][  T356]  kmem_cache_alloc_noprof+0x40f/0x710
[ 1808.693338][  T356]  sk_prot_alloc+0x57/0x220
[ 1808.697851][  T356]  sk_alloc+0x3a/0x390
[ 1808.701924][  T356]  unix_create1+0xb0/0x7d0
[ 1808.706354][  T356]  unix_create+0x16b/0x210
[ 1808.710883][  T356] page last free pid 15 tgid 15 stack trace:
[ 1808.716869][  T356]  __free_frozen_pages+0xbc8/0xd30
[ 1808.721992][  T356]  rcu_core+0xc8e/0x1720
[ 1808.726260][  T356]  handle_softirqs+0x22b/0x7c0
[ 1808.731024][  T356]  run_ksoftirqd+0x36/0x60
[ 1808.735639][  T356]  smpboot_thread_fn+0x542/0xa60
[ 1808.740605][  T356]  kthread+0x711/0x8a0
[ 1808.744696][  T356]  ret_from_fork+0x510/0xa50
[ 1808.749290][  T356]  ret_from_fork_asm+0x1a/0x30
[ 1808.754062][  T356] 
[ 1808.756393][  T356] Memory state around the buggy address:
[ 1808.762026][  T356]  ffff88802a5a7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1808.770087][  T356]  ffff88802a5a7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1808.778158][  T356] >ffff88802a5a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1808.786318][  T356]                                                  ^
[ 1808.793015][  T356]  ffff88802a5a8080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1808.801089][  T356]  ffff88802a5a8100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1808.809156][  T356] ==================================================================
[ 1808.831735][T24862] dvb-usb: error -19 while querying for an remote control event.
[ 1808.885800][  T356] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1808.893146][  T356] CPU: 1 UID: 0 PID: 356 Comm: syz.5.7041 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1808.903904][  T356] Tainted: [L]=SOFTLOCKUP
[ 1808.908232][  T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1808.918364][  T356] Call Trace:
[ 1808.921644][  T356]  <TASK>
[ 1808.924590][  T356]  vpanic+0x1e0/0x670
[ 1808.928571][  T356]  panic+0xb9/0xc0
[ 1808.932289][  T356]  ? __pfx_panic+0x10/0x10
[ 1808.936698][  T356]  ? preempt_schedule_thunk+0x16/0x30
[ 1808.942060][  T356]  ? qfq_reset_qdisc+0xf9/0x240
[ 1808.946903][  T356]  ? preempt_schedule_thunk+0x16/0x30
[ 1808.953145][  T356]  ? qfq_reset_qdisc+0xf9/0x240
[ 1808.957994][  T356]  check_panic_on_warn+0x89/0xb0
[ 1808.962968][  T356]  ? qfq_reset_qdisc+0xf9/0x240
[ 1808.967831][  T356]  end_report+0x6f/0x140
[ 1808.972078][  T356]  kasan_report+0x129/0x150
[ 1808.976590][  T356]  ? qfq_reset_qdisc+0xf9/0x240
[ 1808.981473][  T356]  qfq_reset_qdisc+0xf9/0x240
[ 1808.986191][  T356]  ? __pfx_qfq_reset_qdisc+0x10/0x10
[ 1808.991525][  T356]  qdisc_reset+0xff/0x560
[ 1808.995894][  T356]  __qdisc_destroy+0x120/0x400
[ 1809.000709][  T356]  dev_shutdown+0x34c/0x440
[ 1809.005257][  T356]  unregister_netdevice_many_notify+0x11b3/0x2340
[ 1809.011734][  T356]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1809.018572][  T356]  ? __queue_work+0x1a2/0xf90
[ 1809.023278][  T356]  unregister_netdevice_queue+0x317/0x350
[ 1809.029011][  T356]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1809.035426][  T356]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1809.040634][  T356]  ? queue_delayed_work_on+0x171/0x1d0
[ 1809.046110][  T356]  __tun_detach+0x6d9/0x15d0
[ 1809.050724][  T356]  ? __pfx_tun_chr_close+0x10/0x10
[ 1809.055852][  T356]  tun_chr_close+0x10a/0x1c0
[ 1809.060539][  T356]  __fput+0x44c/0xa70
[ 1809.064534][  T356]  task_work_run+0x1d4/0x260
[ 1809.069134][  T356]  ? __pfx_task_work_run+0x10/0x10
[ 1809.074496][  T356]  exit_to_user_mode_loop+0xef/0x4e0
[ 1809.079798][  T356]  ? rcu_is_watching+0x15/0xb0
[ 1809.084572][  T356]  do_syscall_64+0x2c1/0xf80
[ 1809.089168][  T356]  ? rcu_is_watching+0x15/0xb0
[ 1809.094023][  T356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.100096][  T356]  ? clear_bhb_loop+0x60/0xb0
[ 1809.104781][  T356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.110677][  T356] RIP: 0033:0x7f72da38f749
[ 1809.115113][  T356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1809.134906][  T356] RSP: 002b:00007f72da70fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1809.143332][  T356] RAX: 0000000000000000 RBX: 00007f72da5e7da0 RCX: 00007f72da38f749
[ 1809.151317][  T356] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1809.159298][  T356] RBP: 00007f72da5e7da0 R08: 0000000000000000 R09: 00000010da70fe7f
[ 1809.167276][  T356] R10: 000000000003fd60 R11: 0000000000000246 R12: 00000000001b978d
[ 1809.175358][  T356] R13: 00007f72da70fc80 R14: ffffffffffffffff R15: 00007f72da70fca0
[ 1809.183545][  T356]  </TASK>
[ 1809.187024][  T356] Kernel Offset: disabled
[ 1809.191440][  T356] Rebooting in 86400 seconds..